{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:MIONSBS7Y34N3GITMJ6YTBU2QW","short_pith_number":"pith:MIONSBS7","canonical_record":{"source":{"id":"2110.02700","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-10-06T12:37:58Z","cross_cats_sorted":[],"title_canon_sha256":"8c3ae608d7855bb29f4c68a672c38c5dee89d9b884f3304cebbd854912a8f0c8","abstract_canon_sha256":"e479b19c8eaebefc8eecee535e85b7f5b542f147fa9c56f5df8e8c40e4896b11"},"schema_version":"1.0"},"canonical_sha256":"621cd9065fc6f8dd9913627d89869a858f7fdfc65c9ad85e8319131063a504bc","source":{"kind":"arxiv","id":"2110.02700","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.02700","created_at":"2026-07-05T05:29:24Z"},{"alias_kind":"arxiv_version","alias_value":"2110.02700v3","created_at":"2026-07-05T05:29:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.02700","created_at":"2026-07-05T05:29:24Z"},{"alias_kind":"pith_short_12","alias_value":"MIONSBS7Y34N","created_at":"2026-07-05T05:29:24Z"},{"alias_kind":"pith_short_16","alias_value":"MIONSBS7Y34N3GIT","created_at":"2026-07-05T05:29:24Z"},{"alias_kind":"pith_short_8","alias_value":"MIONSBS7","created_at":"2026-07-05T05:29:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:MIONSBS7Y34N3GITMJ6YTBU2QW","target":"record","payload":{"canonical_record":{"source":{"id":"2110.02700","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-10-06T12:37:58Z","cross_cats_sorted":[],"title_canon_sha256":"8c3ae608d7855bb29f4c68a672c38c5dee89d9b884f3304cebbd854912a8f0c8","abstract_canon_sha256":"e479b19c8eaebefc8eecee535e85b7f5b542f147fa9c56f5df8e8c40e4896b11"},"schema_version":"1.0"},"canonical_sha256":"621cd9065fc6f8dd9913627d89869a858f7fdfc65c9ad85e8319131063a504bc","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:29:24.898204Z","signature_b64":"LFmhgSU+6aMDBN91J4gi2cgycMtr2iB3pRAYi+ivZ4iqRGWm1XHUMyuzaOHoaPS42irupv9E4FIvBb2gvFUxDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"621cd9065fc6f8dd9913627d89869a858f7fdfc65c9ad85e8319131063a504bc","last_reissued_at":"2026-07-05T05:29:24.897745Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:29:24.897745Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2110.02700","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:29:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1PnT5K3nsCxOxF1CnqTFyT2B3C9JOGOIaQBz85G1PxIhKAXZKURT0kHutDJSJhB+53PMuzMyNN5Kkm+CWYxLBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T21:01:40.201859Z"},"content_sha256":"cbb5bbdf298f9a23272f3960577b01ca058159cde85aef22e94b40a8c16fece8","schema_version":"1.0","event_id":"sha256:cbb5bbdf298f9a23272f3960577b01ca058159cde85aef22e94b40a8c16fece8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:MIONSBS7Y34N3GITMJ6YTBU2QW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Reversible Attack based on Local Visual Adversarial Perturbation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Li Chen, Shaowei Zhu, Zhaoxia Yin","submitted_at":"2021-10-06T12:37:58Z","abstract_excerpt":"Adding perturbations to images can mislead classification models to produce incorrect results. Recently, researchers exploited adversarial perturbations to protect image privacy from retrieval by intelligent models. However, adding adversarial perturbations to images destroys the original data, making images useless in digital forensics and other fields. To prevent illegal or unauthorized access to sensitive image data such as human faces without impeding legitimate users, the use of reversible adversarial attack techniques is increasing. The original image can be recovered from its reversible"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.02700","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2110.02700/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:29:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zR7aoWC975d5Vc7fgeNl3cJ66a9/sF/CQxJZ8lWDreHAZ0157erI27c2PUaD/xl6+2sHxHyTbk3M4d1sSx1pAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T21:01:40.202577Z"},"content_sha256":"cb9d6fe003e3ad5ee281badfb9daa5696ce54648973e84f49373148e44677f55","schema_version":"1.0","event_id":"sha256:cb9d6fe003e3ad5ee281badfb9daa5696ce54648973e84f49373148e44677f55"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MIONSBS7Y34N3GITMJ6YTBU2QW/bundle.json","state_url":"https://pith.science/pith/MIONSBS7Y34N3GITMJ6YTBU2QW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MIONSBS7Y34N3GITMJ6YTBU2QW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T21:01:40Z","links":{"resolver":"https://pith.science/pith/MIONSBS7Y34N3GITMJ6YTBU2QW","bundle":"https://pith.science/pith/MIONSBS7Y34N3GITMJ6YTBU2QW/bundle.json","state":"https://pith.science/pith/MIONSBS7Y34N3GITMJ6YTBU2QW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MIONSBS7Y34N3GITMJ6YTBU2QW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:MIONSBS7Y34N3GITMJ6YTBU2QW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e479b19c8eaebefc8eecee535e85b7f5b542f147fa9c56f5df8e8c40e4896b11","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-10-06T12:37:58Z","title_canon_sha256":"8c3ae608d7855bb29f4c68a672c38c5dee89d9b884f3304cebbd854912a8f0c8"},"schema_version":"1.0","source":{"id":"2110.02700","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.02700","created_at":"2026-07-05T05:29:24Z"},{"alias_kind":"arxiv_version","alias_value":"2110.02700v3","created_at":"2026-07-05T05:29:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.02700","created_at":"2026-07-05T05:29:24Z"},{"alias_kind":"pith_short_12","alias_value":"MIONSBS7Y34N","created_at":"2026-07-05T05:29:24Z"},{"alias_kind":"pith_short_16","alias_value":"MIONSBS7Y34N3GIT","created_at":"2026-07-05T05:29:24Z"},{"alias_kind":"pith_short_8","alias_value":"MIONSBS7","created_at":"2026-07-05T05:29:24Z"}],"graph_snapshots":[{"event_id":"sha256:cb9d6fe003e3ad5ee281badfb9daa5696ce54648973e84f49373148e44677f55","target":"graph","created_at":"2026-07-05T05:29:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2110.02700/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adding perturbations to images can mislead classification models to produce incorrect results. Recently, researchers exploited adversarial perturbations to protect image privacy from retrieval by intelligent models. However, adding adversarial perturbations to images destroys the original data, making images useless in digital forensics and other fields. To prevent illegal or unauthorized access to sensitive image data such as human faces without impeding legitimate users, the use of reversible adversarial attack techniques is increasing. The original image can be recovered from its reversible","authors_text":"Li Chen, Shaowei Zhu, Zhaoxia Yin","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-10-06T12:37:58Z","title":"Reversible Attack based on Local Visual Adversarial Perturbation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.02700","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cbb5bbdf298f9a23272f3960577b01ca058159cde85aef22e94b40a8c16fece8","target":"record","created_at":"2026-07-05T05:29:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e479b19c8eaebefc8eecee535e85b7f5b542f147fa9c56f5df8e8c40e4896b11","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-10-06T12:37:58Z","title_canon_sha256":"8c3ae608d7855bb29f4c68a672c38c5dee89d9b884f3304cebbd854912a8f0c8"},"schema_version":"1.0","source":{"id":"2110.02700","kind":"arxiv","version":3}},"canonical_sha256":"621cd9065fc6f8dd9913627d89869a858f7fdfc65c9ad85e8319131063a504bc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"621cd9065fc6f8dd9913627d89869a858f7fdfc65c9ad85e8319131063a504bc","first_computed_at":"2026-07-05T05:29:24.897745Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:29:24.897745Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LFmhgSU+6aMDBN91J4gi2cgycMtr2iB3pRAYi+ivZ4iqRGWm1XHUMyuzaOHoaPS42irupv9E4FIvBb2gvFUxDA==","signature_status":"signed_v1","signed_at":"2026-07-05T05:29:24.898204Z","signed_message":"canonical_sha256_bytes"},"source_id":"2110.02700","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cbb5bbdf298f9a23272f3960577b01ca058159cde85aef22e94b40a8c16fece8","sha256:cb9d6fe003e3ad5ee281badfb9daa5696ce54648973e84f49373148e44677f55"],"state_sha256":"4db05616743e0de817d76bad58fdb88ada37b99b38fe3824f34eedc88798b7de"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lWwa0GufzVZkBA+iGT1ef9qzT0L5HbUnEPiW6GrjRi8QTwbN5GHEtKwB+Ik0DhIDvrk/Px9Lutksx6PSubDuDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T21:01:40.208259Z","bundle_sha256":"ea240221dbd630fa0fc9069bd26abf97629a72e5a51571e557470ccfe3c06c0a"}}