{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:ODIN3SIQMD5OV6X3LBM22EA7A6","short_pith_number":"pith:ODIN3SIQ","canonical_record":{"source":{"id":"2204.01321","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2022-04-04T08:50:52Z","cross_cats_sorted":[],"title_canon_sha256":"dd3f3bacaf4d5aae18e3f69aa7f732b007aa9843547fbde98868f97d32ed390c","abstract_canon_sha256":"730888dfbf70f997243d7a6b8c9359e2e3dff8a40983edd4ede794b2b852384e"},"schema_version":"1.0"},"canonical_sha256":"70d0ddc91060faeafafb5859ad101f07aa16ad40e3044c08dbe8862cec63aea6","source":{"kind":"arxiv","id":"2204.01321","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2204.01321","created_at":"2026-07-05T04:30:08Z"},{"alias_kind":"arxiv_version","alias_value":"2204.01321v3","created_at":"2026-07-05T04:30:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.01321","created_at":"2026-07-05T04:30:08Z"},{"alias_kind":"pith_short_12","alias_value":"ODIN3SIQMD5O","created_at":"2026-07-05T04:30:08Z"},{"alias_kind":"pith_short_16","alias_value":"ODIN3SIQMD5OV6X3","created_at":"2026-07-05T04:30:08Z"},{"alias_kind":"pith_short_8","alias_value":"ODIN3SIQ","created_at":"2026-07-05T04:30:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:ODIN3SIQMD5OV6X3LBM22EA7A6","target":"record","payload":{"canonical_record":{"source":{"id":"2204.01321","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2022-04-04T08:50:52Z","cross_cats_sorted":[],"title_canon_sha256":"dd3f3bacaf4d5aae18e3f69aa7f732b007aa9843547fbde98868f97d32ed390c","abstract_canon_sha256":"730888dfbf70f997243d7a6b8c9359e2e3dff8a40983edd4ede794b2b852384e"},"schema_version":"1.0"},"canonical_sha256":"70d0ddc91060faeafafb5859ad101f07aa16ad40e3044c08dbe8862cec63aea6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:30:08.306064Z","signature_b64":"rtUHpBoTCBcb2ZT0hqBn9ew6fVcsVpdaaTDd/1vivQp52LCeiUIBhWf+oqkbUTyAOl8UMwQGxWqiDkAZbgvNDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"70d0ddc91060faeafafb5859ad101f07aa16ad40e3044c08dbe8862cec63aea6","last_reissued_at":"2026-07-05T04:30:08.305464Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:30:08.305464Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2204.01321","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:30:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ydmn4Yw60ezDtOjqfelHbjon1YWwWmTRdyPtVp5ykmdBdExDroBi4pXws9SslQZyLQuoxGeuKBrrKkrjlBVOBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T03:23:44.547530Z"},"content_sha256":"82c28cbf5dd7c7851fbb256491a7287eece7b56fb5c3a32ccc0640a0cc044632","schema_version":"1.0","event_id":"sha256:82c28cbf5dd7c7851fbb256491a7287eece7b56fb5c3a32ccc0640a0cc044632"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:ODIN3SIQMD5OV6X3LBM22EA7A6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PRADA: Practical Black-Box Adversarial Attacks against Neural Ranking Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.IR","authors_text":"Chen Wu, Jiafeng Guo, Maarten de Rijke, Ruqing Zhang, Xueqi Cheng, Yixing Fan","submitted_at":"2022-04-04T08:50:52Z","abstract_excerpt":"Neural ranking models (NRMs) have shown remarkable success in recent years, especially with pre-trained language models. However, deep neural models are notorious for their vulnerability to adversarial examples. Adversarial attacks may become a new type of web spamming technique given our increased reliance on neural information retrieval models. Therefore, it is important to study potential adversarial attacks to identify vulnerabilities of NRMs before they are deployed. In this paper, we introduce the Word Substitution Ranking Attack (WSRA) task against NRMs, which aims to promote a target d"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.01321","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2204.01321/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:30:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3YnApT2mfNdBT4udxC1BVz3V8H17A+s7ucFcobvjdr9f6j7goEVchmv3vrRPQRr8pv3hh0SmzSGVVFwJRFlxAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T03:23:44.548131Z"},"content_sha256":"2231a6bed34278a3aee3a29968e8aae0d3d989f83c66da66f78f2c083afce4ca","schema_version":"1.0","event_id":"sha256:2231a6bed34278a3aee3a29968e8aae0d3d989f83c66da66f78f2c083afce4ca"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ODIN3SIQMD5OV6X3LBM22EA7A6/bundle.json","state_url":"https://pith.science/pith/ODIN3SIQMD5OV6X3LBM22EA7A6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ODIN3SIQMD5OV6X3LBM22EA7A6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T03:23:44Z","links":{"resolver":"https://pith.science/pith/ODIN3SIQMD5OV6X3LBM22EA7A6","bundle":"https://pith.science/pith/ODIN3SIQMD5OV6X3LBM22EA7A6/bundle.json","state":"https://pith.science/pith/ODIN3SIQMD5OV6X3LBM22EA7A6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ODIN3SIQMD5OV6X3LBM22EA7A6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:ODIN3SIQMD5OV6X3LBM22EA7A6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"730888dfbf70f997243d7a6b8c9359e2e3dff8a40983edd4ede794b2b852384e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2022-04-04T08:50:52Z","title_canon_sha256":"dd3f3bacaf4d5aae18e3f69aa7f732b007aa9843547fbde98868f97d32ed390c"},"schema_version":"1.0","source":{"id":"2204.01321","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2204.01321","created_at":"2026-07-05T04:30:08Z"},{"alias_kind":"arxiv_version","alias_value":"2204.01321v3","created_at":"2026-07-05T04:30:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.01321","created_at":"2026-07-05T04:30:08Z"},{"alias_kind":"pith_short_12","alias_value":"ODIN3SIQMD5O","created_at":"2026-07-05T04:30:08Z"},{"alias_kind":"pith_short_16","alias_value":"ODIN3SIQMD5OV6X3","created_at":"2026-07-05T04:30:08Z"},{"alias_kind":"pith_short_8","alias_value":"ODIN3SIQ","created_at":"2026-07-05T04:30:08Z"}],"graph_snapshots":[{"event_id":"sha256:2231a6bed34278a3aee3a29968e8aae0d3d989f83c66da66f78f2c083afce4ca","target":"graph","created_at":"2026-07-05T04:30:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2204.01321/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Neural ranking models (NRMs) have shown remarkable success in recent years, especially with pre-trained language models. However, deep neural models are notorious for their vulnerability to adversarial examples. Adversarial attacks may become a new type of web spamming technique given our increased reliance on neural information retrieval models. Therefore, it is important to study potential adversarial attacks to identify vulnerabilities of NRMs before they are deployed. In this paper, we introduce the Word Substitution Ranking Attack (WSRA) task against NRMs, which aims to promote a target d","authors_text":"Chen Wu, Jiafeng Guo, Maarten de Rijke, Ruqing Zhang, Xueqi Cheng, Yixing Fan","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2022-04-04T08:50:52Z","title":"PRADA: Practical Black-Box Adversarial Attacks against Neural Ranking Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.01321","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:82c28cbf5dd7c7851fbb256491a7287eece7b56fb5c3a32ccc0640a0cc044632","target":"record","created_at":"2026-07-05T04:30:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"730888dfbf70f997243d7a6b8c9359e2e3dff8a40983edd4ede794b2b852384e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2022-04-04T08:50:52Z","title_canon_sha256":"dd3f3bacaf4d5aae18e3f69aa7f732b007aa9843547fbde98868f97d32ed390c"},"schema_version":"1.0","source":{"id":"2204.01321","kind":"arxiv","version":3}},"canonical_sha256":"70d0ddc91060faeafafb5859ad101f07aa16ad40e3044c08dbe8862cec63aea6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"70d0ddc91060faeafafb5859ad101f07aa16ad40e3044c08dbe8862cec63aea6","first_computed_at":"2026-07-05T04:30:08.305464Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:30:08.305464Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"rtUHpBoTCBcb2ZT0hqBn9ew6fVcsVpdaaTDd/1vivQp52LCeiUIBhWf+oqkbUTyAOl8UMwQGxWqiDkAZbgvNDw==","signature_status":"signed_v1","signed_at":"2026-07-05T04:30:08.306064Z","signed_message":"canonical_sha256_bytes"},"source_id":"2204.01321","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:82c28cbf5dd7c7851fbb256491a7287eece7b56fb5c3a32ccc0640a0cc044632","sha256:2231a6bed34278a3aee3a29968e8aae0d3d989f83c66da66f78f2c083afce4ca"],"state_sha256":"1cdd5d5ebc7c9877d89072cc8e8de50f39d081bbb47609b3e46f42925892a1ec"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"C0GYFDdufzc/26u947jpDxR2daka/MuCwUls451YGOmQJn4AO4JaXKS7z7Z+G1C6ph+VUMVEg9uG/M35lWDSCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T03:23:44.552910Z","bundle_sha256":"d3ae407fe1788c1dc22d0e64d866d1d47e82f55129ffdb9e97ceeaf91d72f004"}}