{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:LTKNICCFP2T7EPUDH7B7KBAEYV","short_pith_number":"pith:LTKNICCF","canonical_record":{"source":{"id":"2004.14861","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-04-29T16:00:13Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"8a5256ab4496c2d9e0c52d715d925213de948d4093fa9942ca6d3370fc753617","abstract_canon_sha256":"63fb8c2b0c23252b178d4d0eddff6c71a6b0234ebc4b215c7cce596a1f5f560c"},"schema_version":"1.0"},"canonical_sha256":"5cd4d408457ea7f23e833fc3f50404c541f752ca25bf1262c38029492627fdf3","source":{"kind":"arxiv","id":"2004.14861","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2004.14861","created_at":"2026-07-05T00:59:30Z"},{"alias_kind":"arxiv_version","alias_value":"2004.14861v1","created_at":"2026-07-05T00:59:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2004.14861","created_at":"2026-07-05T00:59:30Z"},{"alias_kind":"pith_short_12","alias_value":"LTKNICCFP2T7","created_at":"2026-07-05T00:59:30Z"},{"alias_kind":"pith_short_16","alias_value":"LTKNICCFP2T7EPUD","created_at":"2026-07-05T00:59:30Z"},{"alias_kind":"pith_short_8","alias_value":"LTKNICCF","created_at":"2026-07-05T00:59:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:LTKNICCFP2T7EPUDH7B7KBAEYV","target":"record","payload":{"canonical_record":{"source":{"id":"2004.14861","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-04-29T16:00:13Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"8a5256ab4496c2d9e0c52d715d925213de948d4093fa9942ca6d3370fc753617","abstract_canon_sha256":"63fb8c2b0c23252b178d4d0eddff6c71a6b0234ebc4b215c7cce596a1f5f560c"},"schema_version":"1.0"},"canonical_sha256":"5cd4d408457ea7f23e833fc3f50404c541f752ca25bf1262c38029492627fdf3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:59:30.607511Z","signature_b64":"pK69NAZ5U4YNOyLxj1/nM8jE0DjFJHt18LuVEp0AM+XfdAaw7kngryyGWZl4FQd3RRDsPvhA+8q65f4qKGn/CQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5cd4d408457ea7f23e833fc3f50404c541f752ca25bf1262c38029492627fdf3","last_reissued_at":"2026-07-05T00:59:30.607086Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:59:30.607086Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2004.14861","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:59:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GVgg4DfL6vwCkQijjgShXhcMVQy3VNE1uAe4fBY5ff5aoRsePle9wXDdKqisyZvRptLsuSQTycmsgkiYu+KpBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-13T03:28:23.530963Z"},"content_sha256":"5bb14b175e3f284e33fa13444d1d033062e706a9a425a97ba4d11f63d1e01747","schema_version":"1.0","event_id":"sha256:5bb14b175e3f284e33fa13444d1d033062e706a9a425a97ba4d11f63d1e01747"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:LTKNICCFP2T7EPUDH7B7KBAEYV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Perturbing Across the Feature Hierarchy to Improve Standard and Strict Blackbox Attack Transferability","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","stat.ML"],"primary_cat":"cs.CR","authors_text":"Binghui Wang, Kevin J Liang, Lawrence Carin, Matthew Inkawhich, Nathan Inkawhich, Yiran Chen","submitted_at":"2020-04-29T16:00:13Z","abstract_excerpt":"We consider the blackbox transfer-based targeted adversarial attack threat model in the realm of deep neural network (DNN) image classifiers. Rather than focusing on crossing decision boundaries at the output layer of the source model, our method perturbs representations throughout the extracted feature hierarchy to resemble other classes. We design a flexible attack framework that allows for multi-layer perturbations and demonstrates state-of-the-art targeted transfer performance between ImageNet DNNs. We also show the superiority of our feature space methods under a relaxation of the common "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2004.14861","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2004.14861/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:59:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yyHgO+gQqbnxNvsJUxV+AKaWWQ4SBZ0LdI1xx8f1hShnYe7o/+wBULxsALS3uZPEwe4IKxe41LLIfPrzQR3GDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-13T03:28:23.531628Z"},"content_sha256":"f1b2b8c582288c1d32fe8808b7e0f9d89f393fcee50c9836ae75b62a29ddba28","schema_version":"1.0","event_id":"sha256:f1b2b8c582288c1d32fe8808b7e0f9d89f393fcee50c9836ae75b62a29ddba28"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LTKNICCFP2T7EPUDH7B7KBAEYV/bundle.json","state_url":"https://pith.science/pith/LTKNICCFP2T7EPUDH7B7KBAEYV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LTKNICCFP2T7EPUDH7B7KBAEYV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-13T03:28:23Z","links":{"resolver":"https://pith.science/pith/LTKNICCFP2T7EPUDH7B7KBAEYV","bundle":"https://pith.science/pith/LTKNICCFP2T7EPUDH7B7KBAEYV/bundle.json","state":"https://pith.science/pith/LTKNICCFP2T7EPUDH7B7KBAEYV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LTKNICCFP2T7EPUDH7B7KBAEYV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:LTKNICCFP2T7EPUDH7B7KBAEYV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"63fb8c2b0c23252b178d4d0eddff6c71a6b0234ebc4b215c7cce596a1f5f560c","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-04-29T16:00:13Z","title_canon_sha256":"8a5256ab4496c2d9e0c52d715d925213de948d4093fa9942ca6d3370fc753617"},"schema_version":"1.0","source":{"id":"2004.14861","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2004.14861","created_at":"2026-07-05T00:59:30Z"},{"alias_kind":"arxiv_version","alias_value":"2004.14861v1","created_at":"2026-07-05T00:59:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2004.14861","created_at":"2026-07-05T00:59:30Z"},{"alias_kind":"pith_short_12","alias_value":"LTKNICCFP2T7","created_at":"2026-07-05T00:59:30Z"},{"alias_kind":"pith_short_16","alias_value":"LTKNICCFP2T7EPUD","created_at":"2026-07-05T00:59:30Z"},{"alias_kind":"pith_short_8","alias_value":"LTKNICCF","created_at":"2026-07-05T00:59:30Z"}],"graph_snapshots":[{"event_id":"sha256:f1b2b8c582288c1d32fe8808b7e0f9d89f393fcee50c9836ae75b62a29ddba28","target":"graph","created_at":"2026-07-05T00:59:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2004.14861/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We consider the blackbox transfer-based targeted adversarial attack threat model in the realm of deep neural network (DNN) image classifiers. Rather than focusing on crossing decision boundaries at the output layer of the source model, our method perturbs representations throughout the extracted feature hierarchy to resemble other classes. We design a flexible attack framework that allows for multi-layer perturbations and demonstrates state-of-the-art targeted transfer performance between ImageNet DNNs. We also show the superiority of our feature space methods under a relaxation of the common ","authors_text":"Binghui Wang, Kevin J Liang, Lawrence Carin, Matthew Inkawhich, Nathan Inkawhich, Yiran Chen","cross_cats":["cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-04-29T16:00:13Z","title":"Perturbing Across the Feature Hierarchy to Improve Standard and Strict Blackbox Attack Transferability"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2004.14861","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5bb14b175e3f284e33fa13444d1d033062e706a9a425a97ba4d11f63d1e01747","target":"record","created_at":"2026-07-05T00:59:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"63fb8c2b0c23252b178d4d0eddff6c71a6b0234ebc4b215c7cce596a1f5f560c","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-04-29T16:00:13Z","title_canon_sha256":"8a5256ab4496c2d9e0c52d715d925213de948d4093fa9942ca6d3370fc753617"},"schema_version":"1.0","source":{"id":"2004.14861","kind":"arxiv","version":1}},"canonical_sha256":"5cd4d408457ea7f23e833fc3f50404c541f752ca25bf1262c38029492627fdf3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5cd4d408457ea7f23e833fc3f50404c541f752ca25bf1262c38029492627fdf3","first_computed_at":"2026-07-05T00:59:30.607086Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:59:30.607086Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"pK69NAZ5U4YNOyLxj1/nM8jE0DjFJHt18LuVEp0AM+XfdAaw7kngryyGWZl4FQd3RRDsPvhA+8q65f4qKGn/CQ==","signature_status":"signed_v1","signed_at":"2026-07-05T00:59:30.607511Z","signed_message":"canonical_sha256_bytes"},"source_id":"2004.14861","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5bb14b175e3f284e33fa13444d1d033062e706a9a425a97ba4d11f63d1e01747","sha256:f1b2b8c582288c1d32fe8808b7e0f9d89f393fcee50c9836ae75b62a29ddba28"],"state_sha256":"31340cc63c22c459504c4369f65ca966af8f20fdf504ee349b728a7f8b5fc4fb"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"W+8KX9/WFvHuKFrugAZnG8I+u6VV5ILqB7NrhTSRGTyChtM2UrrRPJcQlJhuDMFq8mWV5Ryv93OXiswnKtLQBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-13T03:28:23.534973Z","bundle_sha256":"ef2b16b09bd457b9f13a6e67a9365083046fae4fb220639fb55a695c7513c831"}}