{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:P7XMRZWVJN3GOQSTDUZARLW25N","short_pith_number":"pith:P7XMRZWV","canonical_record":{"source":{"id":"2204.09397","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-04-20T11:42:24Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"cb916961114a8444ecc07f11c4b145be912bf44f73d26250744af9e67f7b3656","abstract_canon_sha256":"1d09abad79b91648c4d5d69c5f221c0463565b606f3c786f3fa1f5540ae1bf9f"},"schema_version":"1.0"},"canonical_sha256":"7feec8e6d54b766742531d3208aedaeb518909fb99dc602686302c85ecf7cd83","source":{"kind":"arxiv","id":"2204.09397","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2204.09397","created_at":"2026-07-05T06:11:15Z"},{"alias_kind":"arxiv_version","alias_value":"2204.09397v3","created_at":"2026-07-05T06:11:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.09397","created_at":"2026-07-05T06:11:15Z"},{"alias_kind":"pith_short_12","alias_value":"P7XMRZWVJN3G","created_at":"2026-07-05T06:11:15Z"},{"alias_kind":"pith_short_16","alias_value":"P7XMRZWVJN3GOQST","created_at":"2026-07-05T06:11:15Z"},{"alias_kind":"pith_short_8","alias_value":"P7XMRZWV","created_at":"2026-07-05T06:11:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:P7XMRZWVJN3GOQSTDUZARLW25N","target":"record","payload":{"canonical_record":{"source":{"id":"2204.09397","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-04-20T11:42:24Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"cb916961114a8444ecc07f11c4b145be912bf44f73d26250744af9e67f7b3656","abstract_canon_sha256":"1d09abad79b91648c4d5d69c5f221c0463565b606f3c786f3fa1f5540ae1bf9f"},"schema_version":"1.0"},"canonical_sha256":"7feec8e6d54b766742531d3208aedaeb518909fb99dc602686302c85ecf7cd83","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:11:15.779093Z","signature_b64":"LFtxV4EEm7zzwhMhtwyBSxSwlx97iyGKmp/h5qzLnNtWuCy40R4fWsA1VvqdF/TGXnx48QafO7l7Px9ph80HCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7feec8e6d54b766742531d3208aedaeb518909fb99dc602686302c85ecf7cd83","last_reissued_at":"2026-07-05T06:11:15.778636Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:11:15.778636Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2204.09397","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:11:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vDGvgqcXoO4Ni760DcdSJAVAdzG6D4HtmJYwUlCrHqjziTD8weNLBSlZNnBkJn3B6pA9svte57AVuduesz8xAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T02:25:50.227312Z"},"content_sha256":"f0c8bb8a9b5c79131e69a55e015e8b7e27bdc56577c645d651abe4ac4d8fb81a","schema_version":"1.0","event_id":"sha256:f0c8bb8a9b5c79131e69a55e015e8b7e27bdc56577c645d651abe4ac4d8fb81a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:P7XMRZWVJN3GOQSTDUZARLW25N","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Scratches: Deployable Attacks to CNN Classifiers","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Briland Hitaj, Farinaz Koushanfar, Gabriela Ciocarlie, Giacomo Boracchi, Loris Giulivi, Loris Rossi, Malhar Jere","submitted_at":"2022-04-20T11:42:24Z","abstract_excerpt":"A growing body of work has shown that deep neural networks are susceptible to adversarial examples. These take the form of small perturbations applied to the model's input which lead to incorrect predictions. Unfortunately, most literature focuses on visually imperceivable perturbations to be applied to digital images that often are, by design, impossible to be deployed to physical targets. We present Adversarial Scratches: a novel L0 black-box attack, which takes the form of scratches in images, and which possesses much greater deployability than other state-of-the-art attacks. Adversarial Sc"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.09397","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2204.09397/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:11:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rT8OH1hi+Akg9vqUt8wMGV4GJ8oK5525XDOTFAbaGeOUXQEKvzrrpEx6Lb1ZiYXu8Z51RkgtT8IR+lekc/xcAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T02:25:50.227927Z"},"content_sha256":"10738870d47a517359474357e5c20c902344ab013a3542da9995238eabf51e68","schema_version":"1.0","event_id":"sha256:10738870d47a517359474357e5c20c902344ab013a3542da9995238eabf51e68"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/P7XMRZWVJN3GOQSTDUZARLW25N/bundle.json","state_url":"https://pith.science/pith/P7XMRZWVJN3GOQSTDUZARLW25N/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/P7XMRZWVJN3GOQSTDUZARLW25N/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T02:25:50Z","links":{"resolver":"https://pith.science/pith/P7XMRZWVJN3GOQSTDUZARLW25N","bundle":"https://pith.science/pith/P7XMRZWVJN3GOQSTDUZARLW25N/bundle.json","state":"https://pith.science/pith/P7XMRZWVJN3GOQSTDUZARLW25N/state.json","well_known_bundle":"https://pith.science/.well-known/pith/P7XMRZWVJN3GOQSTDUZARLW25N/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:P7XMRZWVJN3GOQSTDUZARLW25N","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1d09abad79b91648c4d5d69c5f221c0463565b606f3c786f3fa1f5540ae1bf9f","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-04-20T11:42:24Z","title_canon_sha256":"cb916961114a8444ecc07f11c4b145be912bf44f73d26250744af9e67f7b3656"},"schema_version":"1.0","source":{"id":"2204.09397","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2204.09397","created_at":"2026-07-05T06:11:15Z"},{"alias_kind":"arxiv_version","alias_value":"2204.09397v3","created_at":"2026-07-05T06:11:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.09397","created_at":"2026-07-05T06:11:15Z"},{"alias_kind":"pith_short_12","alias_value":"P7XMRZWVJN3G","created_at":"2026-07-05T06:11:15Z"},{"alias_kind":"pith_short_16","alias_value":"P7XMRZWVJN3GOQST","created_at":"2026-07-05T06:11:15Z"},{"alias_kind":"pith_short_8","alias_value":"P7XMRZWV","created_at":"2026-07-05T06:11:15Z"}],"graph_snapshots":[{"event_id":"sha256:10738870d47a517359474357e5c20c902344ab013a3542da9995238eabf51e68","target":"graph","created_at":"2026-07-05T06:11:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2204.09397/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"A growing body of work has shown that deep neural networks are susceptible to adversarial examples. These take the form of small perturbations applied to the model's input which lead to incorrect predictions. Unfortunately, most literature focuses on visually imperceivable perturbations to be applied to digital images that often are, by design, impossible to be deployed to physical targets. We present Adversarial Scratches: a novel L0 black-box attack, which takes the form of scratches in images, and which possesses much greater deployability than other state-of-the-art attacks. Adversarial Sc","authors_text":"Briland Hitaj, Farinaz Koushanfar, Gabriela Ciocarlie, Giacomo Boracchi, Loris Giulivi, Loris Rossi, Malhar Jere","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-04-20T11:42:24Z","title":"Adversarial Scratches: Deployable Attacks to CNN Classifiers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.09397","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f0c8bb8a9b5c79131e69a55e015e8b7e27bdc56577c645d651abe4ac4d8fb81a","target":"record","created_at":"2026-07-05T06:11:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1d09abad79b91648c4d5d69c5f221c0463565b606f3c786f3fa1f5540ae1bf9f","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-04-20T11:42:24Z","title_canon_sha256":"cb916961114a8444ecc07f11c4b145be912bf44f73d26250744af9e67f7b3656"},"schema_version":"1.0","source":{"id":"2204.09397","kind":"arxiv","version":3}},"canonical_sha256":"7feec8e6d54b766742531d3208aedaeb518909fb99dc602686302c85ecf7cd83","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7feec8e6d54b766742531d3208aedaeb518909fb99dc602686302c85ecf7cd83","first_computed_at":"2026-07-05T06:11:15.778636Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:11:15.778636Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LFtxV4EEm7zzwhMhtwyBSxSwlx97iyGKmp/h5qzLnNtWuCy40R4fWsA1VvqdF/TGXnx48QafO7l7Px9ph80HCw==","signature_status":"signed_v1","signed_at":"2026-07-05T06:11:15.779093Z","signed_message":"canonical_sha256_bytes"},"source_id":"2204.09397","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f0c8bb8a9b5c79131e69a55e015e8b7e27bdc56577c645d651abe4ac4d8fb81a","sha256:10738870d47a517359474357e5c20c902344ab013a3542da9995238eabf51e68"],"state_sha256":"ebe9e83e7a7dd1a47bbb9bb6b07efcc9e6964609677731c48db243c391cc0087"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"frPrXOgXGXg1E5CD0foFlDh+iglAIzH9IYGsf/TvWAVKkVki+Pod40xSFrMAZN9J95ReixT1oR4GWBJRBeRJAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T02:25:50.230947Z","bundle_sha256":"7f36059eef98b3dbb47799e79de3f0102c9199dec8179d682722156b640e8002"}}