{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:MTWPF2AJTQ4CMIELJFB4GLLCYP","short_pith_number":"pith:MTWPF2AJ","canonical_record":{"source":{"id":"2412.03908","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-12-05T06:27:14Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"629609c8660e5c0a62cfb39c966a0e551ab2d6c5661282b608a19e5fdef082b1","abstract_canon_sha256":"4d3534941b019652402871d6a79d78322d0079f865fa7a1c89a56dc7ce8367c0"},"schema_version":"1.0"},"canonical_sha256":"64ecf2e8099c3826208b4943c32d62c3de28a979ccc4fa2fe17f22dde6c4b6bd","source":{"kind":"arxiv","id":"2412.03908","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.03908","created_at":"2026-07-05T11:43:29Z"},{"alias_kind":"arxiv_version","alias_value":"2412.03908v2","created_at":"2026-07-05T11:43:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.03908","created_at":"2026-07-05T11:43:29Z"},{"alias_kind":"pith_short_12","alias_value":"MTWPF2AJTQ4C","created_at":"2026-07-05T11:43:29Z"},{"alias_kind":"pith_short_16","alias_value":"MTWPF2AJTQ4CMIEL","created_at":"2026-07-05T11:43:29Z"},{"alias_kind":"pith_short_8","alias_value":"MTWPF2AJ","created_at":"2026-07-05T11:43:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:MTWPF2AJTQ4CMIELJFB4GLLCYP","target":"record","payload":{"canonical_record":{"source":{"id":"2412.03908","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-12-05T06:27:14Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"629609c8660e5c0a62cfb39c966a0e551ab2d6c5661282b608a19e5fdef082b1","abstract_canon_sha256":"4d3534941b019652402871d6a79d78322d0079f865fa7a1c89a56dc7ce8367c0"},"schema_version":"1.0"},"canonical_sha256":"64ecf2e8099c3826208b4943c32d62c3de28a979ccc4fa2fe17f22dde6c4b6bd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:43:29.851896Z","signature_b64":"46Bfgvc1JNnueahAvfaWWrtUMeh+fWgIvqvwPf7w8ziZQ1v1pn+7VokpZbfLkTri7KIP/NohxrRoIrbk3sZECQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"64ecf2e8099c3826208b4943c32d62c3de28a979ccc4fa2fe17f22dde6c4b6bd","last_reissued_at":"2026-07-05T11:43:29.851168Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:43:29.851168Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.03908","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:43:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3oDs3GvND800upBD9sJXG1eygXKDSDMF0dDQzBwqP1L3rrizLncYqhV6VHLCernSXyoOJ2ISThjBnoBmMwJKDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T23:47:47.600103Z"},"content_sha256":"f4bacb0276e3da05c337d4db0f53cce88f9d22c68d800385cf530d11c927759a","schema_version":"1.0","event_id":"sha256:f4bacb0276e3da05c337d4db0f53cce88f9d22c68d800385cf530d11c927759a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:MTWPF2AJTQ4CMIELJFB4GLLCYP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Generalizable Targeted Data Poisoning against Varying Physical Objects","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Chao Shen, Chenhao Lin, Subrat Kishore Dutta, Xiao Zhang, Zhengyu Zhao, Zhizhen Chen","submitted_at":"2024-12-05T06:27:14Z","abstract_excerpt":"Targeted data poisoning (TDP) aims to compromise the model's prediction on a specific (test) target by perturbing a small subset of training data. Existing work on TDP has focused on an overly ideal threat model in which the same image sample of the target is used during both poisoning and inference stages. However, in the real world, a target object often appears in complex variations due to changes of physical settings such as viewpoint, background, and lighting conditions. In this work, we take the first step toward understanding the real-world threats of TDP by studying its generalizabilit"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.03908","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.03908/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:43:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vFDQohL0/XXZKc9kc6hVVkVxK+t1irw8kbehptMlLNW3cIWv2AlBQ5+vNiY4nALFZqGuUavp6OVQWtUTkypjAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T23:47:47.600607Z"},"content_sha256":"6bcc6875fb846b7fc04ec7aed0f464cb2e577683d30fa634b693628587ddc182","schema_version":"1.0","event_id":"sha256:6bcc6875fb846b7fc04ec7aed0f464cb2e577683d30fa634b693628587ddc182"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MTWPF2AJTQ4CMIELJFB4GLLCYP/bundle.json","state_url":"https://pith.science/pith/MTWPF2AJTQ4CMIELJFB4GLLCYP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MTWPF2AJTQ4CMIELJFB4GLLCYP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T23:47:47Z","links":{"resolver":"https://pith.science/pith/MTWPF2AJTQ4CMIELJFB4GLLCYP","bundle":"https://pith.science/pith/MTWPF2AJTQ4CMIELJFB4GLLCYP/bundle.json","state":"https://pith.science/pith/MTWPF2AJTQ4CMIELJFB4GLLCYP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MTWPF2AJTQ4CMIELJFB4GLLCYP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:MTWPF2AJTQ4CMIELJFB4GLLCYP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4d3534941b019652402871d6a79d78322d0079f865fa7a1c89a56dc7ce8367c0","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-12-05T06:27:14Z","title_canon_sha256":"629609c8660e5c0a62cfb39c966a0e551ab2d6c5661282b608a19e5fdef082b1"},"schema_version":"1.0","source":{"id":"2412.03908","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.03908","created_at":"2026-07-05T11:43:29Z"},{"alias_kind":"arxiv_version","alias_value":"2412.03908v2","created_at":"2026-07-05T11:43:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.03908","created_at":"2026-07-05T11:43:29Z"},{"alias_kind":"pith_short_12","alias_value":"MTWPF2AJTQ4C","created_at":"2026-07-05T11:43:29Z"},{"alias_kind":"pith_short_16","alias_value":"MTWPF2AJTQ4CMIEL","created_at":"2026-07-05T11:43:29Z"},{"alias_kind":"pith_short_8","alias_value":"MTWPF2AJ","created_at":"2026-07-05T11:43:29Z"}],"graph_snapshots":[{"event_id":"sha256:6bcc6875fb846b7fc04ec7aed0f464cb2e577683d30fa634b693628587ddc182","target":"graph","created_at":"2026-07-05T11:43:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.03908/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Targeted data poisoning (TDP) aims to compromise the model's prediction on a specific (test) target by perturbing a small subset of training data. Existing work on TDP has focused on an overly ideal threat model in which the same image sample of the target is used during both poisoning and inference stages. However, in the real world, a target object often appears in complex variations due to changes of physical settings such as viewpoint, background, and lighting conditions. In this work, we take the first step toward understanding the real-world threats of TDP by studying its generalizabilit","authors_text":"Chao Shen, Chenhao Lin, Subrat Kishore Dutta, Xiao Zhang, Zhengyu Zhao, Zhizhen Chen","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-12-05T06:27:14Z","title":"Generalizable Targeted Data Poisoning against Varying Physical Objects"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.03908","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f4bacb0276e3da05c337d4db0f53cce88f9d22c68d800385cf530d11c927759a","target":"record","created_at":"2026-07-05T11:43:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4d3534941b019652402871d6a79d78322d0079f865fa7a1c89a56dc7ce8367c0","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-12-05T06:27:14Z","title_canon_sha256":"629609c8660e5c0a62cfb39c966a0e551ab2d6c5661282b608a19e5fdef082b1"},"schema_version":"1.0","source":{"id":"2412.03908","kind":"arxiv","version":2}},"canonical_sha256":"64ecf2e8099c3826208b4943c32d62c3de28a979ccc4fa2fe17f22dde6c4b6bd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"64ecf2e8099c3826208b4943c32d62c3de28a979ccc4fa2fe17f22dde6c4b6bd","first_computed_at":"2026-07-05T11:43:29.851168Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:43:29.851168Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"46Bfgvc1JNnueahAvfaWWrtUMeh+fWgIvqvwPf7w8ziZQ1v1pn+7VokpZbfLkTri7KIP/NohxrRoIrbk3sZECQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:43:29.851896Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.03908","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f4bacb0276e3da05c337d4db0f53cce88f9d22c68d800385cf530d11c927759a","sha256:6bcc6875fb846b7fc04ec7aed0f464cb2e577683d30fa634b693628587ddc182"],"state_sha256":"eab3deaf68da1521406c964bdc9a0e738e0445d6a78bb9b8d45fd663efd938a6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jcrxzGXYMe8hbU+qVXIsjiE1cSaJ004meEhPw9d/1a9T6bH6NJrzPpkPrUmm0z4iYodRo6Tps9RLvnLdk+DiAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T23:47:47.604188Z","bundle_sha256":"288d75ddb3b617b0425aafdb4c45c427656ec3b68a8d55d78a5752ac0f8641da"}}