{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:OAWMGA6DIQKHSHJSXKM75EMAGB","short_pith_number":"pith:OAWMGA6D","canonical_record":{"source":{"id":"1911.05268","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-13T03:09:40Z","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"title_canon_sha256":"35a4aea04b0994069ebd0d2c3159a308cd6027870924aa19c311fc6d287eb4a9","abstract_canon_sha256":"10c7bf38c7321758a699202fc621e6c7868eb30f36d3a3891d2768710846340d"},"schema_version":"1.0"},"canonical_sha256":"702cc303c34414791d32ba99fe918030459c5393c3ca72af55768b5484edad12","source":{"kind":"arxiv","id":"1911.05268","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.05268","created_at":"2026-07-05T00:19:39Z"},{"alias_kind":"arxiv_version","alias_value":"1911.05268v2","created_at":"2026-07-05T00:19:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.05268","created_at":"2026-07-05T00:19:39Z"},{"alias_kind":"pith_short_12","alias_value":"OAWMGA6DIQKH","created_at":"2026-07-05T00:19:39Z"},{"alias_kind":"pith_short_16","alias_value":"OAWMGA6DIQKHSHJS","created_at":"2026-07-05T00:19:39Z"},{"alias_kind":"pith_short_8","alias_value":"OAWMGA6D","created_at":"2026-07-05T00:19:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:OAWMGA6DIQKHSHJSXKM75EMAGB","target":"record","payload":{"canonical_record":{"source":{"id":"1911.05268","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-13T03:09:40Z","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"title_canon_sha256":"35a4aea04b0994069ebd0d2c3159a308cd6027870924aa19c311fc6d287eb4a9","abstract_canon_sha256":"10c7bf38c7321758a699202fc621e6c7868eb30f36d3a3891d2768710846340d"},"schema_version":"1.0"},"canonical_sha256":"702cc303c34414791d32ba99fe918030459c5393c3ca72af55768b5484edad12","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:19:39.126480Z","signature_b64":"wRDGpqCrlEF1qeyWHAzn7jBDzXSH7v+gVJfbuq6GIfwDudOjej82eB17R/ykecO3QXinB8eIuCOPRw7kCwW5CA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"702cc303c34414791d32ba99fe918030459c5393c3ca72af55768b5484edad12","last_reissued_at":"2026-07-05T00:19:39.126104Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:19:39.126104Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1911.05268","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:19:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TUP+jzuAe8XmNTCNdaDCbYZQqT2ksvPamLrJiPTpDYctayiPgonI7pk3o7LJq2ZZMstfQrCuKFlfc8M3EFyzCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T13:56:19.724540Z"},"content_sha256":"010798359ee5a0bd3f860ce2a603d2b635d8e71597da191c8f6336b3c12268d0","schema_version":"1.0","event_id":"sha256:010798359ee5a0bd3f860ce2a603d2b635d8e71597da191c8f6336b3c12268d0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:OAWMGA6DIQKHSHJSXKM75EMAGB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Examples in Modern Machine Learning: A Review","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Anqi Xu, Archy de Berker, Ousmane Dia, Rey Reza Wiyatno","submitted_at":"2019-11-13T03:09:40Z","abstract_excerpt":"Recent research has found that many families of machine learning models are vulnerable to adversarial examples: inputs that are specifically designed to cause the target model to produce erroneous outputs. In this survey, we focus on machine learning models in the visual domain, where methods for generating and detecting such examples have been most extensively studied. We explore a variety of adversarial attack methods that apply to image-space content, real world adversarial attacks, adversarial defenses, and the transferability property of adversarial examples. We also discuss strengths and"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.05268","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1911.05268/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:19:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ijp0hIzG17icf3ERCnq7vpZOVpb1Apk3Y7y6o++YKQlXKFtBbjFSFZZa8g3l5iSDn0Gm+z55kGUlKJ8Jxi2sAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T13:56:19.725073Z"},"content_sha256":"f7a1daec2da4c31d0de8c5d52e255bf7be769141fac0e8f59900a0ef79b73ee5","schema_version":"1.0","event_id":"sha256:f7a1daec2da4c31d0de8c5d52e255bf7be769141fac0e8f59900a0ef79b73ee5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OAWMGA6DIQKHSHJSXKM75EMAGB/bundle.json","state_url":"https://pith.science/pith/OAWMGA6DIQKHSHJSXKM75EMAGB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OAWMGA6DIQKHSHJSXKM75EMAGB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T13:56:19Z","links":{"resolver":"https://pith.science/pith/OAWMGA6DIQKHSHJSXKM75EMAGB","bundle":"https://pith.science/pith/OAWMGA6DIQKHSHJSXKM75EMAGB/bundle.json","state":"https://pith.science/pith/OAWMGA6DIQKHSHJSXKM75EMAGB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OAWMGA6DIQKHSHJSXKM75EMAGB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:OAWMGA6DIQKHSHJSXKM75EMAGB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"10c7bf38c7321758a699202fc621e6c7868eb30f36d3a3891d2768710846340d","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-13T03:09:40Z","title_canon_sha256":"35a4aea04b0994069ebd0d2c3159a308cd6027870924aa19c311fc6d287eb4a9"},"schema_version":"1.0","source":{"id":"1911.05268","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.05268","created_at":"2026-07-05T00:19:39Z"},{"alias_kind":"arxiv_version","alias_value":"1911.05268v2","created_at":"2026-07-05T00:19:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.05268","created_at":"2026-07-05T00:19:39Z"},{"alias_kind":"pith_short_12","alias_value":"OAWMGA6DIQKH","created_at":"2026-07-05T00:19:39Z"},{"alias_kind":"pith_short_16","alias_value":"OAWMGA6DIQKHSHJS","created_at":"2026-07-05T00:19:39Z"},{"alias_kind":"pith_short_8","alias_value":"OAWMGA6D","created_at":"2026-07-05T00:19:39Z"}],"graph_snapshots":[{"event_id":"sha256:f7a1daec2da4c31d0de8c5d52e255bf7be769141fac0e8f59900a0ef79b73ee5","target":"graph","created_at":"2026-07-05T00:19:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1911.05268/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent research has found that many families of machine learning models are vulnerable to adversarial examples: inputs that are specifically designed to cause the target model to produce erroneous outputs. In this survey, we focus on machine learning models in the visual domain, where methods for generating and detecting such examples have been most extensively studied. We explore a variety of adversarial attack methods that apply to image-space content, real world adversarial attacks, adversarial defenses, and the transferability property of adversarial examples. We also discuss strengths and","authors_text":"Anqi Xu, Archy de Berker, Ousmane Dia, Rey Reza Wiyatno","cross_cats":["cs.AI","cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-13T03:09:40Z","title":"Adversarial Examples in Modern Machine Learning: A Review"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.05268","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:010798359ee5a0bd3f860ce2a603d2b635d8e71597da191c8f6336b3c12268d0","target":"record","created_at":"2026-07-05T00:19:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"10c7bf38c7321758a699202fc621e6c7868eb30f36d3a3891d2768710846340d","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-13T03:09:40Z","title_canon_sha256":"35a4aea04b0994069ebd0d2c3159a308cd6027870924aa19c311fc6d287eb4a9"},"schema_version":"1.0","source":{"id":"1911.05268","kind":"arxiv","version":2}},"canonical_sha256":"702cc303c34414791d32ba99fe918030459c5393c3ca72af55768b5484edad12","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"702cc303c34414791d32ba99fe918030459c5393c3ca72af55768b5484edad12","first_computed_at":"2026-07-05T00:19:39.126104Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:19:39.126104Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"wRDGpqCrlEF1qeyWHAzn7jBDzXSH7v+gVJfbuq6GIfwDudOjej82eB17R/ykecO3QXinB8eIuCOPRw7kCwW5CA==","signature_status":"signed_v1","signed_at":"2026-07-05T00:19:39.126480Z","signed_message":"canonical_sha256_bytes"},"source_id":"1911.05268","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:010798359ee5a0bd3f860ce2a603d2b635d8e71597da191c8f6336b3c12268d0","sha256:f7a1daec2da4c31d0de8c5d52e255bf7be769141fac0e8f59900a0ef79b73ee5"],"state_sha256":"56311f1bbe912648f41c71014f3af3f343e4eecbe2b26c45b5fd1be3b7192f42"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RLveCvevegQTnr05zjQUypfi4zlTgsk9gSFwxHKbJY/ns1n7TxQyXvm0fXJLmC1WHF23cAHjz8/6wJzaAJUsDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T13:56:19.730153Z","bundle_sha256":"630c31558803d5e4af001e4813f59aa1538bdd4ff8a3c1a401c0da281368304c"}}