{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:PB63IN4D72Y3VBV2QCYV5Q7PCF","short_pith_number":"pith:PB63IN4D","canonical_record":{"source":{"id":"1906.03397","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-08T06:22:25Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"482ee2bd8c7a5c79a449dc059241b9eb027c64c5402bcbc91c13dc221cf53f40","abstract_canon_sha256":"16dd0c7926bae199dab07a6016ad45ba1dd004093aac156a65c0bf22a93d1b9f"},"schema_version":"1.0"},"canonical_sha256":"787db43783feb1ba86ba80b15ec3ef117fe75b7b26733fc4d99e0155d383e08e","source":{"kind":"arxiv","id":"1906.03397","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1906.03397","created_at":"2026-07-05T01:45:01Z"},{"alias_kind":"arxiv_version","alias_value":"1906.03397v1","created_at":"2026-07-05T01:45:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1906.03397","created_at":"2026-07-05T01:45:01Z"},{"alias_kind":"pith_short_12","alias_value":"PB63IN4D72Y3","created_at":"2026-07-05T01:45:01Z"},{"alias_kind":"pith_short_16","alias_value":"PB63IN4D72Y3VBV2","created_at":"2026-07-05T01:45:01Z"},{"alias_kind":"pith_short_8","alias_value":"PB63IN4D","created_at":"2026-07-05T01:45:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:PB63IN4D72Y3VBV2QCYV5Q7PCF","target":"record","payload":{"canonical_record":{"source":{"id":"1906.03397","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-08T06:22:25Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"482ee2bd8c7a5c79a449dc059241b9eb027c64c5402bcbc91c13dc221cf53f40","abstract_canon_sha256":"16dd0c7926bae199dab07a6016ad45ba1dd004093aac156a65c0bf22a93d1b9f"},"schema_version":"1.0"},"canonical_sha256":"787db43783feb1ba86ba80b15ec3ef117fe75b7b26733fc4d99e0155d383e08e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:45:01.425804Z","signature_b64":"8SQxdFFgZAVRP02US2CGVOs4YXU9sU2io7dkoZ7OU6rjQAxM4BRdO+toMYx4+VUw5vo0dU6njEwI2DnAQMXABw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"787db43783feb1ba86ba80b15ec3ef117fe75b7b26733fc4d99e0155d383e08e","last_reissued_at":"2026-07-05T01:45:01.425369Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:45:01.425369Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1906.03397","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:45:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Wvi3uXcfwqvi2Y2FADpRGm0sm2rvRLhTJEY4MnS7ymTiUFBZ/Aohiq8C9RjiAKYsvcEJ9TnL27JFxpKU1gElBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T02:16:08.739947Z"},"content_sha256":"72be66442d39a2b26f15df8b31807e26fd97db94fd076c2497fd4ee4c97ccf54","schema_version":"1.0","event_id":"sha256:72be66442d39a2b26f15df8b31807e26fd97db94fd076c2497fd4ee4c97ccf54"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:PB63IN4D72Y3VBV2QCYV5Q7PCF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Making targeted black-box evasion attacks effective and efficient","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Buse Gul Atli, Mika Juuti, N. Asokan","submitted_at":"2019-06-08T06:22:25Z","abstract_excerpt":"We investigate how an adversary can optimally use its query budget for targeted evasion attacks against deep neural networks in a black-box setting. We formalize the problem setting and systematically evaluate what benefits the adversary can gain by using substitute models. We show that there is an exploration-exploitation tradeoff in that query efficiency comes at the cost of effectiveness. We present two new attack strategies for using substitute models and show that they are as effective as previous query-only techniques but require significantly fewer queries, by up to three orders of magn"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1906.03397","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1906.03397/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:45:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mHIsPu/41Kgd/YQ8Wy/tjJa3A5bm8Iym17rJaCAE6d0dW382gZCPGx3JuZtT2H0CtYA7Wz9VdrmCvPyTIBU4Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T02:16:08.740849Z"},"content_sha256":"6111d40cd84e5359b640399b709cfb4e0cd08265c54f57249e3de71b151ee0a3","schema_version":"1.0","event_id":"sha256:6111d40cd84e5359b640399b709cfb4e0cd08265c54f57249e3de71b151ee0a3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PB63IN4D72Y3VBV2QCYV5Q7PCF/bundle.json","state_url":"https://pith.science/pith/PB63IN4D72Y3VBV2QCYV5Q7PCF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PB63IN4D72Y3VBV2QCYV5Q7PCF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T02:16:08Z","links":{"resolver":"https://pith.science/pith/PB63IN4D72Y3VBV2QCYV5Q7PCF","bundle":"https://pith.science/pith/PB63IN4D72Y3VBV2QCYV5Q7PCF/bundle.json","state":"https://pith.science/pith/PB63IN4D72Y3VBV2QCYV5Q7PCF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PB63IN4D72Y3VBV2QCYV5Q7PCF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:PB63IN4D72Y3VBV2QCYV5Q7PCF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"16dd0c7926bae199dab07a6016ad45ba1dd004093aac156a65c0bf22a93d1b9f","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-08T06:22:25Z","title_canon_sha256":"482ee2bd8c7a5c79a449dc059241b9eb027c64c5402bcbc91c13dc221cf53f40"},"schema_version":"1.0","source":{"id":"1906.03397","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1906.03397","created_at":"2026-07-05T01:45:01Z"},{"alias_kind":"arxiv_version","alias_value":"1906.03397v1","created_at":"2026-07-05T01:45:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1906.03397","created_at":"2026-07-05T01:45:01Z"},{"alias_kind":"pith_short_12","alias_value":"PB63IN4D72Y3","created_at":"2026-07-05T01:45:01Z"},{"alias_kind":"pith_short_16","alias_value":"PB63IN4D72Y3VBV2","created_at":"2026-07-05T01:45:01Z"},{"alias_kind":"pith_short_8","alias_value":"PB63IN4D","created_at":"2026-07-05T01:45:01Z"}],"graph_snapshots":[{"event_id":"sha256:6111d40cd84e5359b640399b709cfb4e0cd08265c54f57249e3de71b151ee0a3","target":"graph","created_at":"2026-07-05T01:45:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1906.03397/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We investigate how an adversary can optimally use its query budget for targeted evasion attacks against deep neural networks in a black-box setting. We formalize the problem setting and systematically evaluate what benefits the adversary can gain by using substitute models. We show that there is an exploration-exploitation tradeoff in that query efficiency comes at the cost of effectiveness. We present two new attack strategies for using substitute models and show that they are as effective as previous query-only techniques but require significantly fewer queries, by up to three orders of magn","authors_text":"Buse Gul Atli, Mika Juuti, N. Asokan","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-08T06:22:25Z","title":"Making targeted black-box evasion attacks effective and efficient"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1906.03397","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:72be66442d39a2b26f15df8b31807e26fd97db94fd076c2497fd4ee4c97ccf54","target":"record","created_at":"2026-07-05T01:45:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"16dd0c7926bae199dab07a6016ad45ba1dd004093aac156a65c0bf22a93d1b9f","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-08T06:22:25Z","title_canon_sha256":"482ee2bd8c7a5c79a449dc059241b9eb027c64c5402bcbc91c13dc221cf53f40"},"schema_version":"1.0","source":{"id":"1906.03397","kind":"arxiv","version":1}},"canonical_sha256":"787db43783feb1ba86ba80b15ec3ef117fe75b7b26733fc4d99e0155d383e08e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"787db43783feb1ba86ba80b15ec3ef117fe75b7b26733fc4d99e0155d383e08e","first_computed_at":"2026-07-05T01:45:01.425369Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:45:01.425369Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8SQxdFFgZAVRP02US2CGVOs4YXU9sU2io7dkoZ7OU6rjQAxM4BRdO+toMYx4+VUw5vo0dU6njEwI2DnAQMXABw==","signature_status":"signed_v1","signed_at":"2026-07-05T01:45:01.425804Z","signed_message":"canonical_sha256_bytes"},"source_id":"1906.03397","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:72be66442d39a2b26f15df8b31807e26fd97db94fd076c2497fd4ee4c97ccf54","sha256:6111d40cd84e5359b640399b709cfb4e0cd08265c54f57249e3de71b151ee0a3"],"state_sha256":"ed1a14715bba623cd5b9b08d34a50b67f0f6572f53a637fbb822821342ca54f4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"D78cjJ/rvNwKtEHxboYuBsVGtMdTDS8EcnCWIxI/rIg3u21p90a4SXrgJq+7HGhvESGcleJx9f6JImKc+mt0CQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T02:16:08.747475Z","bundle_sha256":"ac64eb6fc2d64a2e9b615c6afa9585c3997afb1deb18bb3b6c23015829f6a97e"}}