{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:PM5YX2WDX4OXUCPVGFIF7FQSV4","short_pith_number":"pith:PM5YX2WD","canonical_record":{"source":{"id":"2204.00008","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-31T13:47:30Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"44703fa159850a2b454aa08696af4361f9de4ec7637d53e4c6d3b57ad2375cc6","abstract_canon_sha256":"97a338244c0f0c39dac4aa5b700da8fbb4db6d11a9cd6c9812d5379831b206a1"},"schema_version":"1.0"},"canonical_sha256":"7b3b8beac3bf1d7a09f531505f9612af2c7168d62e684d6cd6aac077b9e91b9f","source":{"kind":"arxiv","id":"2204.00008","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2204.00008","created_at":"2026-07-05T04:10:41Z"},{"alias_kind":"arxiv_version","alias_value":"2204.00008v1","created_at":"2026-07-05T04:10:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.00008","created_at":"2026-07-05T04:10:41Z"},{"alias_kind":"pith_short_12","alias_value":"PM5YX2WDX4OX","created_at":"2026-07-05T04:10:41Z"},{"alias_kind":"pith_short_16","alias_value":"PM5YX2WDX4OXUCPV","created_at":"2026-07-05T04:10:41Z"},{"alias_kind":"pith_short_8","alias_value":"PM5YX2WD","created_at":"2026-07-05T04:10:41Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:PM5YX2WDX4OXUCPVGFIF7FQSV4","target":"record","payload":{"canonical_record":{"source":{"id":"2204.00008","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-31T13:47:30Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"44703fa159850a2b454aa08696af4361f9de4ec7637d53e4c6d3b57ad2375cc6","abstract_canon_sha256":"97a338244c0f0c39dac4aa5b700da8fbb4db6d11a9cd6c9812d5379831b206a1"},"schema_version":"1.0"},"canonical_sha256":"7b3b8beac3bf1d7a09f531505f9612af2c7168d62e684d6cd6aac077b9e91b9f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:10:41.795721Z","signature_b64":"jv9xQZFMrvgmynpCjdKNeQEeUFvi0xJrU0wKXrtbwmIK8mjD1O5rNIqRTiHVJrY57nfHeURwrQKy+D0zjRvoCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7b3b8beac3bf1d7a09f531505f9612af2c7168d62e684d6cd6aac077b9e91b9f","last_reissued_at":"2026-07-05T04:10:41.795268Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:10:41.795268Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2204.00008","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:10:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xoxrWSZkIwOSkNxuxwoLlzRtPlIQb9VBDZY6mHgA/BV4GHPD7+1d3mwCFUZkHfL9i0vVfVrmxDjKh2VdQdUYAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T18:20:58.608040Z"},"content_sha256":"504933b962404e0288790a9142483b6e14891d9a9a6733d5cc5a770f41c1b11b","schema_version":"1.0","event_id":"sha256:504933b962404e0288790a9142483b6e14891d9a9a6733d5cc5a770f41c1b11b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:PM5YX2WDX4OXUCPVGFIF7FQSV4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Improving Adversarial Transferability via Neuron Attribution-Based Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Jen-tse Huang, Jianping Zhang, Michael R. Lyu, Weibin Wu, Wenxuan Wang, Yizhan Huang, Yuxin Su","submitted_at":"2022-03-31T13:47:30Z","abstract_excerpt":"Deep neural networks (DNNs) are known to be vulnerable to adversarial examples. It is thus imperative to devise effective attack algorithms to identify the deficiencies of DNNs beforehand in security-sensitive applications. To efficiently tackle the black-box setting where the target model's particulars are unknown, feature-level transfer-based attacks propose to contaminate the intermediate feature outputs of local models, and then directly employ the crafted adversarial samples to attack the target model. Due to the transferability of features, feature-level attacks have shown promise in syn"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.00008","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2204.00008/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:10:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3/ox+GWBHKjxu+cwH5EgJaTnYsw+7OCcFlbnMmAMFV4Rb8kHkJcLQx06WDTsD4Nx3PcxFgVMt2edkjHA9TaUDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T18:20:58.608558Z"},"content_sha256":"78ed37bf866b84b3806a3e29894520f078d99bd58d3cb3d1cb20535d7782acd1","schema_version":"1.0","event_id":"sha256:78ed37bf866b84b3806a3e29894520f078d99bd58d3cb3d1cb20535d7782acd1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PM5YX2WDX4OXUCPVGFIF7FQSV4/bundle.json","state_url":"https://pith.science/pith/PM5YX2WDX4OXUCPVGFIF7FQSV4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PM5YX2WDX4OXUCPVGFIF7FQSV4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T18:20:58Z","links":{"resolver":"https://pith.science/pith/PM5YX2WDX4OXUCPVGFIF7FQSV4","bundle":"https://pith.science/pith/PM5YX2WDX4OXUCPVGFIF7FQSV4/bundle.json","state":"https://pith.science/pith/PM5YX2WDX4OXUCPVGFIF7FQSV4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PM5YX2WDX4OXUCPVGFIF7FQSV4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:PM5YX2WDX4OXUCPVGFIF7FQSV4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"97a338244c0f0c39dac4aa5b700da8fbb4db6d11a9cd6c9812d5379831b206a1","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-31T13:47:30Z","title_canon_sha256":"44703fa159850a2b454aa08696af4361f9de4ec7637d53e4c6d3b57ad2375cc6"},"schema_version":"1.0","source":{"id":"2204.00008","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2204.00008","created_at":"2026-07-05T04:10:41Z"},{"alias_kind":"arxiv_version","alias_value":"2204.00008v1","created_at":"2026-07-05T04:10:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.00008","created_at":"2026-07-05T04:10:41Z"},{"alias_kind":"pith_short_12","alias_value":"PM5YX2WDX4OX","created_at":"2026-07-05T04:10:41Z"},{"alias_kind":"pith_short_16","alias_value":"PM5YX2WDX4OXUCPV","created_at":"2026-07-05T04:10:41Z"},{"alias_kind":"pith_short_8","alias_value":"PM5YX2WD","created_at":"2026-07-05T04:10:41Z"}],"graph_snapshots":[{"event_id":"sha256:78ed37bf866b84b3806a3e29894520f078d99bd58d3cb3d1cb20535d7782acd1","target":"graph","created_at":"2026-07-05T04:10:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2204.00008/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) are known to be vulnerable to adversarial examples. It is thus imperative to devise effective attack algorithms to identify the deficiencies of DNNs beforehand in security-sensitive applications. To efficiently tackle the black-box setting where the target model's particulars are unknown, feature-level transfer-based attacks propose to contaminate the intermediate feature outputs of local models, and then directly employ the crafted adversarial samples to attack the target model. Due to the transferability of features, feature-level attacks have shown promise in syn","authors_text":"Jen-tse Huang, Jianping Zhang, Michael R. Lyu, Weibin Wu, Wenxuan Wang, Yizhan Huang, Yuxin Su","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-31T13:47:30Z","title":"Improving Adversarial Transferability via Neuron Attribution-Based Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.00008","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:504933b962404e0288790a9142483b6e14891d9a9a6733d5cc5a770f41c1b11b","target":"record","created_at":"2026-07-05T04:10:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"97a338244c0f0c39dac4aa5b700da8fbb4db6d11a9cd6c9812d5379831b206a1","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-31T13:47:30Z","title_canon_sha256":"44703fa159850a2b454aa08696af4361f9de4ec7637d53e4c6d3b57ad2375cc6"},"schema_version":"1.0","source":{"id":"2204.00008","kind":"arxiv","version":1}},"canonical_sha256":"7b3b8beac3bf1d7a09f531505f9612af2c7168d62e684d6cd6aac077b9e91b9f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7b3b8beac3bf1d7a09f531505f9612af2c7168d62e684d6cd6aac077b9e91b9f","first_computed_at":"2026-07-05T04:10:41.795268Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:10:41.795268Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jv9xQZFMrvgmynpCjdKNeQEeUFvi0xJrU0wKXrtbwmIK8mjD1O5rNIqRTiHVJrY57nfHeURwrQKy+D0zjRvoCw==","signature_status":"signed_v1","signed_at":"2026-07-05T04:10:41.795721Z","signed_message":"canonical_sha256_bytes"},"source_id":"2204.00008","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:504933b962404e0288790a9142483b6e14891d9a9a6733d5cc5a770f41c1b11b","sha256:78ed37bf866b84b3806a3e29894520f078d99bd58d3cb3d1cb20535d7782acd1"],"state_sha256":"4c2a07c98def40fed3178a4b8c4a97b05ef55d643c522a5f8acd6b2d849a8a5c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"H1VjUSOqAfVXQqzNdAHB5ZJz/JGKmJQVR4t+oM3E5XyUr3Fvk/bmQZsU6TEk+3yXZtz3W4+K7JjnebeM54ceAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T18:20:58.613476Z","bundle_sha256":"7f9147ed8f3b1d0340b8c95d36b8b4d406baeef8b99ccbf6fc82483e8e366d44"}}