{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:MDHOON773KW5JRQTYBK7KXVO7K","short_pith_number":"pith:MDHOON77","canonical_record":{"source":{"id":"1811.02248","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-11-06T09:30:34Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"01b0b16e416aa8979f7d17ebd411789321d433dee04e73fed18dd8a3615c1372","abstract_canon_sha256":"6598150139eaecd12b1e371fa59797e030c7fcb08ab3bacf119368fddbdc3528"},"schema_version":"1.0"},"canonical_sha256":"60cee737ffdaadd4c613c055f55eaefaa632c2f3ac8fcdef11af5967b4c694dd","source":{"kind":"arxiv","id":"1811.02248","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1811.02248","created_at":"2026-05-17T23:45:04Z"},{"alias_kind":"arxiv_version","alias_value":"1811.02248v4","created_at":"2026-05-17T23:45:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1811.02248","created_at":"2026-05-17T23:45:04Z"},{"alias_kind":"pith_short_12","alias_value":"MDHOON773KW5","created_at":"2026-05-18T12:32:37Z"},{"alias_kind":"pith_short_16","alias_value":"MDHOON773KW5JRQT","created_at":"2026-05-18T12:32:37Z"},{"alias_kind":"pith_short_8","alias_value":"MDHOON77","created_at":"2026-05-18T12:32:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:MDHOON773KW5JRQTYBK7KXVO7K","target":"record","payload":{"canonical_record":{"source":{"id":"1811.02248","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-11-06T09:30:34Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"01b0b16e416aa8979f7d17ebd411789321d433dee04e73fed18dd8a3615c1372","abstract_canon_sha256":"6598150139eaecd12b1e371fa59797e030c7fcb08ab3bacf119368fddbdc3528"},"schema_version":"1.0"},"canonical_sha256":"60cee737ffdaadd4c613c055f55eaefaa632c2f3ac8fcdef11af5967b4c694dd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:45:04.308173Z","signature_b64":"lXg6GY076iyEzlfeT6P+tqY4IxFhOK0mtTD505UpGS+9yduCQH4cspO1RDzOtGIpGk9W9J4f5ryhPa70/Wj4Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"60cee737ffdaadd4c613c055f55eaefaa632c2f3ac8fcdef11af5967b4c694dd","last_reissued_at":"2026-05-17T23:45:04.307591Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:45:04.307591Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1811.02248","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:45:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"T29H6cAPfGzUVYTw4FU+Ua/KVY85cvvgw5BOb9oOUbudn7oIuNTBN8Ra8OqTG1WMt1Jy3Ir67anO447J/5VvBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T20:20:46.579941Z"},"content_sha256":"fa4cdea35e0891b27680f2a9f282689a01b837e17d74c947f81e6f887a4008a4","schema_version":"1.0","event_id":"sha256:fa4cdea35e0891b27680f2a9f282689a01b837e17d74c947f81e6f887a4008a4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:MDHOON773KW5JRQTYBK7KXVO7K","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SparseFool: a few pixels make a big difference","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Apostolos Modas, Pascal Frossard, Seyed-Mohsen Moosavi-Dezfooli","submitted_at":"2018-11-06T09:30:34Z","abstract_excerpt":"Deep Neural Networks have achieved extraordinary results on image classification tasks, but have been shown to be vulnerable to attacks with carefully crafted perturbations of the input data. Although most attacks usually change values of many image's pixels, it has been shown that deep networks are also vulnerable to sparse alterations of the input. However, no computationally efficient method has been proposed to compute sparse perturbations. In this paper, we exploit the low mean curvature of the decision boundary, and propose SparseFool, a geometry inspired sparse attack that controls the "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1811.02248","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:45:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5lqXr7WNJyV8F91Z7WX0QJOLp+6E165wjLRmPleARqtJHtruMTc3oYYLABF3LSoy67p+Q3eJ8sXIzHRKlZyaCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T20:20:46.580420Z"},"content_sha256":"748eb87af3c91c2e7d5656b6a109e54814841246912e034e73647b16ea88386d","schema_version":"1.0","event_id":"sha256:748eb87af3c91c2e7d5656b6a109e54814841246912e034e73647b16ea88386d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MDHOON773KW5JRQTYBK7KXVO7K/bundle.json","state_url":"https://pith.science/pith/MDHOON773KW5JRQTYBK7KXVO7K/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MDHOON773KW5JRQTYBK7KXVO7K/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T20:20:46Z","links":{"resolver":"https://pith.science/pith/MDHOON773KW5JRQTYBK7KXVO7K","bundle":"https://pith.science/pith/MDHOON773KW5JRQTYBK7KXVO7K/bundle.json","state":"https://pith.science/pith/MDHOON773KW5JRQTYBK7KXVO7K/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MDHOON773KW5JRQTYBK7KXVO7K/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:MDHOON773KW5JRQTYBK7KXVO7K","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6598150139eaecd12b1e371fa59797e030c7fcb08ab3bacf119368fddbdc3528","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-11-06T09:30:34Z","title_canon_sha256":"01b0b16e416aa8979f7d17ebd411789321d433dee04e73fed18dd8a3615c1372"},"schema_version":"1.0","source":{"id":"1811.02248","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1811.02248","created_at":"2026-05-17T23:45:04Z"},{"alias_kind":"arxiv_version","alias_value":"1811.02248v4","created_at":"2026-05-17T23:45:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1811.02248","created_at":"2026-05-17T23:45:04Z"},{"alias_kind":"pith_short_12","alias_value":"MDHOON773KW5","created_at":"2026-05-18T12:32:37Z"},{"alias_kind":"pith_short_16","alias_value":"MDHOON773KW5JRQT","created_at":"2026-05-18T12:32:37Z"},{"alias_kind":"pith_short_8","alias_value":"MDHOON77","created_at":"2026-05-18T12:32:37Z"}],"graph_snapshots":[{"event_id":"sha256:748eb87af3c91c2e7d5656b6a109e54814841246912e034e73647b16ea88386d","target":"graph","created_at":"2026-05-17T23:45:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Deep Neural Networks have achieved extraordinary results on image classification tasks, but have been shown to be vulnerable to attacks with carefully crafted perturbations of the input data. Although most attacks usually change values of many image's pixels, it has been shown that deep networks are also vulnerable to sparse alterations of the input. However, no computationally efficient method has been proposed to compute sparse perturbations. In this paper, we exploit the low mean curvature of the decision boundary, and propose SparseFool, a geometry inspired sparse attack that controls the ","authors_text":"Apostolos Modas, Pascal Frossard, Seyed-Mohsen Moosavi-Dezfooli","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-11-06T09:30:34Z","title":"SparseFool: a few pixels make a big difference"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1811.02248","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fa4cdea35e0891b27680f2a9f282689a01b837e17d74c947f81e6f887a4008a4","target":"record","created_at":"2026-05-17T23:45:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6598150139eaecd12b1e371fa59797e030c7fcb08ab3bacf119368fddbdc3528","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-11-06T09:30:34Z","title_canon_sha256":"01b0b16e416aa8979f7d17ebd411789321d433dee04e73fed18dd8a3615c1372"},"schema_version":"1.0","source":{"id":"1811.02248","kind":"arxiv","version":4}},"canonical_sha256":"60cee737ffdaadd4c613c055f55eaefaa632c2f3ac8fcdef11af5967b4c694dd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"60cee737ffdaadd4c613c055f55eaefaa632c2f3ac8fcdef11af5967b4c694dd","first_computed_at":"2026-05-17T23:45:04.307591Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:45:04.307591Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lXg6GY076iyEzlfeT6P+tqY4IxFhOK0mtTD505UpGS+9yduCQH4cspO1RDzOtGIpGk9W9J4f5ryhPa70/Wj4Bw==","signature_status":"signed_v1","signed_at":"2026-05-17T23:45:04.308173Z","signed_message":"canonical_sha256_bytes"},"source_id":"1811.02248","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fa4cdea35e0891b27680f2a9f282689a01b837e17d74c947f81e6f887a4008a4","sha256:748eb87af3c91c2e7d5656b6a109e54814841246912e034e73647b16ea88386d"],"state_sha256":"d32ac020e08779d2f2111ca55d624984b211aaf419fa4016b6966b518038330d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/VzwezIwVosbcEoVInxNXkmm5EANJoafNFg3kKeh/aYg0eA6GFDouNY0vUpyJnGT1vzC4tJ1lK51Q39HCngeCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T20:20:46.584776Z","bundle_sha256":"a459b676c7adc05148b1221d31b8b1b8155ea016ea2123ca89341f96157402bc"}}