{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:M5HWWKEG2UIWYFN6QSS6L66SVF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"00c261f3c1d14ddfc2a12a6e9bb41de76d7ee48ae5ffd4e810232596662df85d","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-10-24T16:02:19Z","title_canon_sha256":"dc27357144dbb0226312fe99817cc9064511a0a56ff88beb96106ffee02750f7"},"schema_version":"1.0","source":{"id":"1710.08864","kind":"arxiv","version":7}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1710.08864","created_at":"2026-07-05T00:12:49Z"},{"alias_kind":"arxiv_version","alias_value":"1710.08864v7","created_at":"2026-07-05T00:12:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1710.08864","created_at":"2026-07-05T00:12:49Z"},{"alias_kind":"pith_short_12","alias_value":"M5HWWKEG2UIW","created_at":"2026-07-05T00:12:49Z"},{"alias_kind":"pith_short_16","alias_value":"M5HWWKEG2UIWYFN6","created_at":"2026-07-05T00:12:49Z"},{"alias_kind":"pith_short_8","alias_value":"M5HWWKEG","created_at":"2026-07-05T00:12:49Z"}],"graph_snapshots":[{"event_id":"sha256:a2708ecfef40532f84d9477f34b4966bff459b3551ad811f76df3cfb9fc93806","target":"graph","created_at":"2026-07-05T00:12:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1710.08864/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent research has revealed that the output of Deep Neural Networks (DNN) can be easily altered by adding relatively small perturbations to the input vector. In this paper, we analyze an attack in an extremely limited scenario where only one pixel can be modified. For that we propose a novel method for generating one-pixel adversarial perturbations based on differential evolution (DE). It requires less adversarial information (a black-box attack) and can fool more types of networks due to the inherent features of DE. The results show that 67.97% of the natural images in Kaggle CIFAR-10 test d","authors_text":"Danilo Vasconcellos Vargas, Jiawei Su, Sakurai Kouichi","cross_cats":["cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-10-24T16:02:19Z","title":"One pixel attack for fooling deep neural networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1710.08864","kind":"arxiv","version":7},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:12fe46c0daa5443a2d950e1025abbdfb34e4b808ca5e57210cc777b48e7b5764","target":"record","created_at":"2026-07-05T00:12:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"00c261f3c1d14ddfc2a12a6e9bb41de76d7ee48ae5ffd4e810232596662df85d","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-10-24T16:02:19Z","title_canon_sha256":"dc27357144dbb0226312fe99817cc9064511a0a56ff88beb96106ffee02750f7"},"schema_version":"1.0","source":{"id":"1710.08864","kind":"arxiv","version":7}},"canonical_sha256":"674f6b2886d5116c15be84a5e5fbd2a96b3c3035e2bc9eebd434bd5a902d40e9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"674f6b2886d5116c15be84a5e5fbd2a96b3c3035e2bc9eebd434bd5a902d40e9","first_computed_at":"2026-07-05T00:12:49.595242Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:12:49.595242Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"O94i7sxg7QpujGIJ9OrLuUBKXyfGyryc53eJjV00ZXUzp4x5A5tiHaZ1JnOEVAaS4/esjZ5xw1814ML1lsNBAA==","signature_status":"signed_v1","signed_at":"2026-07-05T00:12:49.595709Z","signed_message":"canonical_sha256_bytes"},"source_id":"1710.08864","source_kind":"arxiv","source_version":7}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:12fe46c0daa5443a2d950e1025abbdfb34e4b808ca5e57210cc777b48e7b5764","sha256:a2708ecfef40532f84d9477f34b4966bff459b3551ad811f76df3cfb9fc93806"],"state_sha256":"237451d743f606773409bce467f5af0e9986cf3d1169a0d2ab73f22b70a95ea3"}