{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:MMW2H5WFGOICA5WZ5HFIGB2ZPW","short_pith_number":"pith:MMW2H5WF","canonical_record":{"source":{"id":"2009.09192","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2020-09-19T09:12:24Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"59c393d6af1d361a60a2efe752d479af9ad43f972aac378d6233b721b36b114e","abstract_canon_sha256":"070f8826345795e1d58485630e5321c8c3229d3399ea86f6da930bc7be18b3ec"},"schema_version":"1.0"},"canonical_sha256":"632da3f6c533902076d9e9ca8307597da22ac55bb462038968cf18df2e171130","source":{"kind":"arxiv","id":"2009.09192","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.09192","created_at":"2026-07-05T01:36:35Z"},{"alias_kind":"arxiv_version","alias_value":"2009.09192v1","created_at":"2026-07-05T01:36:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.09192","created_at":"2026-07-05T01:36:35Z"},{"alias_kind":"pith_short_12","alias_value":"MMW2H5WFGOIC","created_at":"2026-07-05T01:36:35Z"},{"alias_kind":"pith_short_16","alias_value":"MMW2H5WFGOICA5WZ","created_at":"2026-07-05T01:36:35Z"},{"alias_kind":"pith_short_8","alias_value":"MMW2H5WF","created_at":"2026-07-05T01:36:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:MMW2H5WFGOICA5WZ5HFIGB2ZPW","target":"record","payload":{"canonical_record":{"source":{"id":"2009.09192","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2020-09-19T09:12:24Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"59c393d6af1d361a60a2efe752d479af9ad43f972aac378d6233b721b36b114e","abstract_canon_sha256":"070f8826345795e1d58485630e5321c8c3229d3399ea86f6da930bc7be18b3ec"},"schema_version":"1.0"},"canonical_sha256":"632da3f6c533902076d9e9ca8307597da22ac55bb462038968cf18df2e171130","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:36:35.159947Z","signature_b64":"3tA9RRBofu9hdtdJoUdKfYkmHef9JSFhA8Il2EeHYb9AMTDcF8KV5w+5+64vWwGmLva6hkQclzuzuM65TgTcCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"632da3f6c533902076d9e9ca8307597da22ac55bb462038968cf18df2e171130","last_reissued_at":"2026-07-05T01:36:35.159457Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:36:35.159457Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2009.09192","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:36:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LEzhJvc82JwE8VCYSzxxu76Yp/U3Hi7W3P0wMy5jnfGww5AQGdb3gH+yYv8dpZfnsMSAJVusB87aoxweHc0WAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-24T02:09:29.238960Z"},"content_sha256":"3cce10633195a2fe0d1f1d4fa67c727b65edf63a0cee605ee0c183817cd5d330","schema_version":"1.0","event_id":"sha256:3cce10633195a2fe0d1f1d4fa67c727b65edf63a0cee605ee0c183817cd5d330"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:MMW2H5WFGOICA5WZ5HFIGB2ZPW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Learning to Attack: Towards Textual Adversarial Attacking in Real-world Situations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.CL","authors_text":"Bairu Hou, Fanchao Qi, Maosong Sun, Xiaojun Meng, Yuan Zang, Zhiyuan Liu","submitted_at":"2020-09-19T09:12:24Z","abstract_excerpt":"Adversarial attacking aims to fool deep neural networks with adversarial examples. In the field of natural language processing, various textual adversarial attack models have been proposed, varying in the accessibility to the victim model. Among them, the attack models that only require the output of the victim model are more fit for real-world situations of adversarial attacking. However, to achieve high attack performance, these models usually need to query the victim model too many times, which is neither efficient nor viable in practice. To tackle this problem, we propose a reinforcement l"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.09192","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2009.09192/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:36:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8FL5x19zPs+5btoGx0KCIvTAvfbk/5hi+KnmvXnszjz8mKGWmmMTSv3FPhLf+sUuuNoycVEgPOJYrHWXVV9gBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-24T02:09:29.239741Z"},"content_sha256":"056603dcd4427edd40fb12c131758cb15e3fcc2a9b9ba2935b20e7ba1bb5474f","schema_version":"1.0","event_id":"sha256:056603dcd4427edd40fb12c131758cb15e3fcc2a9b9ba2935b20e7ba1bb5474f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MMW2H5WFGOICA5WZ5HFIGB2ZPW/bundle.json","state_url":"https://pith.science/pith/MMW2H5WFGOICA5WZ5HFIGB2ZPW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MMW2H5WFGOICA5WZ5HFIGB2ZPW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-24T02:09:29Z","links":{"resolver":"https://pith.science/pith/MMW2H5WFGOICA5WZ5HFIGB2ZPW","bundle":"https://pith.science/pith/MMW2H5WFGOICA5WZ5HFIGB2ZPW/bundle.json","state":"https://pith.science/pith/MMW2H5WFGOICA5WZ5HFIGB2ZPW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MMW2H5WFGOICA5WZ5HFIGB2ZPW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:MMW2H5WFGOICA5WZ5HFIGB2ZPW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"070f8826345795e1d58485630e5321c8c3229d3399ea86f6da930bc7be18b3ec","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2020-09-19T09:12:24Z","title_canon_sha256":"59c393d6af1d361a60a2efe752d479af9ad43f972aac378d6233b721b36b114e"},"schema_version":"1.0","source":{"id":"2009.09192","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.09192","created_at":"2026-07-05T01:36:35Z"},{"alias_kind":"arxiv_version","alias_value":"2009.09192v1","created_at":"2026-07-05T01:36:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.09192","created_at":"2026-07-05T01:36:35Z"},{"alias_kind":"pith_short_12","alias_value":"MMW2H5WFGOIC","created_at":"2026-07-05T01:36:35Z"},{"alias_kind":"pith_short_16","alias_value":"MMW2H5WFGOICA5WZ","created_at":"2026-07-05T01:36:35Z"},{"alias_kind":"pith_short_8","alias_value":"MMW2H5WF","created_at":"2026-07-05T01:36:35Z"}],"graph_snapshots":[{"event_id":"sha256:056603dcd4427edd40fb12c131758cb15e3fcc2a9b9ba2935b20e7ba1bb5474f","target":"graph","created_at":"2026-07-05T01:36:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2009.09192/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial attacking aims to fool deep neural networks with adversarial examples. In the field of natural language processing, various textual adversarial attack models have been proposed, varying in the accessibility to the victim model. Among them, the attack models that only require the output of the victim model are more fit for real-world situations of adversarial attacking. However, to achieve high attack performance, these models usually need to query the victim model too many times, which is neither efficient nor viable in practice. To tackle this problem, we propose a reinforcement l","authors_text":"Bairu Hou, Fanchao Qi, Maosong Sun, Xiaojun Meng, Yuan Zang, Zhiyuan Liu","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2020-09-19T09:12:24Z","title":"Learning to Attack: Towards Textual Adversarial Attacking in Real-world Situations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.09192","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3cce10633195a2fe0d1f1d4fa67c727b65edf63a0cee605ee0c183817cd5d330","target":"record","created_at":"2026-07-05T01:36:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"070f8826345795e1d58485630e5321c8c3229d3399ea86f6da930bc7be18b3ec","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2020-09-19T09:12:24Z","title_canon_sha256":"59c393d6af1d361a60a2efe752d479af9ad43f972aac378d6233b721b36b114e"},"schema_version":"1.0","source":{"id":"2009.09192","kind":"arxiv","version":1}},"canonical_sha256":"632da3f6c533902076d9e9ca8307597da22ac55bb462038968cf18df2e171130","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"632da3f6c533902076d9e9ca8307597da22ac55bb462038968cf18df2e171130","first_computed_at":"2026-07-05T01:36:35.159457Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:36:35.159457Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"3tA9RRBofu9hdtdJoUdKfYkmHef9JSFhA8Il2EeHYb9AMTDcF8KV5w+5+64vWwGmLva6hkQclzuzuM65TgTcCA==","signature_status":"signed_v1","signed_at":"2026-07-05T01:36:35.159947Z","signed_message":"canonical_sha256_bytes"},"source_id":"2009.09192","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3cce10633195a2fe0d1f1d4fa67c727b65edf63a0cee605ee0c183817cd5d330","sha256:056603dcd4427edd40fb12c131758cb15e3fcc2a9b9ba2935b20e7ba1bb5474f"],"state_sha256":"3307da685cf300a47810a31684d1002a9b93eaea63a98ef65658402eb509a2e0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oqFtt2icUv9bxiX2sEM/rlQGjhs4OQxfdX3ikOZxSoIycJZplKTjVUNbCteQORz3E60DDd58uCdogQJ+6Xj2DQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-24T02:09:29.245289Z","bundle_sha256":"f557ba5ceaf20b7eed4087437a39918ae91cae38f7c475b08a72fcbd53043139"}}