{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2018:Q4MXKWTT422WJYR6FRE57VHU74","short_pith_number":"pith:Q4MXKWTT","schema_version":"1.0","canonical_sha256":"8719755a73e6b564e23e2c49dfd4f4ff03ebbcd554640cfbc3697762cfc5d05e","source":{"kind":"arxiv","id":"1807.07769","version":2},"attestation_state":"computed","paper":{"title":"Physical Adversarial Examples for Object Detectors","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Amir Rahmati, Atul Prakash, Bo Li, Dawn Song, Earlence Fernandes, Florian Tramer, Ivan Evtimov, Kevin Eykholt, Tadayoshi Kohno","submitted_at":"2018-07-20T10:14:27Z","abstract_excerpt":"Deep neural networks (DNNs) are vulnerable to adversarial examples-maliciously crafted inputs that cause DNNs to make incorrect predictions. Recent work has shown that these attacks generalize to the physical domain, to create perturbations on physical objects that fool image classifiers under a variety of real-world conditions. Such attacks pose a risk to deep learning models used in safety-critical cyber-physical systems. In this work, we extend physical attacks to more challenging object detection models, a broader class of deep learning algorithms widely used to detect and label multiple o"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"1807.07769","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-07-20T10:14:27Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"e70e0f5dccae4724735d652f0ffe537119c39c3c4b1e7998ba4ee9af97acef5d","abstract_canon_sha256":"7100f1aacde97f2a1408c377e8a59d366df40bc186c232ee99bc243832e2d11b"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:04:00.323795Z","signature_b64":"cREnA9UrpzCChz6UAGH0Lu6k7DUw3GiNGPZ0BbrNPVflFSJpHk2RIjW3zBUM9P24dsInr0qhwWWiWWdvSXFWAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8719755a73e6b564e23e2c49dfd4f4ff03ebbcd554640cfbc3697762cfc5d05e","last_reissued_at":"2026-05-18T00:04:00.323253Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:04:00.323253Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Physical Adversarial Examples for Object Detectors","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Amir Rahmati, Atul Prakash, Bo Li, Dawn Song, Earlence Fernandes, Florian Tramer, Ivan Evtimov, Kevin Eykholt, Tadayoshi Kohno","submitted_at":"2018-07-20T10:14:27Z","abstract_excerpt":"Deep neural networks (DNNs) are vulnerable to adversarial examples-maliciously crafted inputs that cause DNNs to make incorrect predictions. Recent work has shown that these attacks generalize to the physical domain, to create perturbations on physical objects that fool image classifiers under a variety of real-world conditions. Such attacks pose a risk to deep learning models used in safety-critical cyber-physical systems. In this work, we extend physical attacks to more challenging object detection models, a broader class of deep learning algorithms widely used to detect and label multiple o"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1807.07769","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"1807.07769","created_at":"2026-05-18T00:04:00.323340+00:00"},{"alias_kind":"arxiv_version","alias_value":"1807.07769v2","created_at":"2026-05-18T00:04:00.323340+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1807.07769","created_at":"2026-05-18T00:04:00.323340+00:00"},{"alias_kind":"pith_short_12","alias_value":"Q4MXKWTT422W","created_at":"2026-05-18T12:32:46.962924+00:00"},{"alias_kind":"pith_short_16","alias_value":"Q4MXKWTT422WJYR6","created_at":"2026-05-18T12:32:46.962924+00:00"},{"alias_kind":"pith_short_8","alias_value":"Q4MXKWTT","created_at":"2026-05-18T12:32:46.962924+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":3,"internal_anchor_count":3,"sample":[{"citing_arxiv_id":"1906.09288","citing_title":"Hiding Faces in Plain Sight: Disrupting AI Face Synthesis with Adversarial Perturbations","ref_index":62,"is_internal_anchor":true},{"citing_arxiv_id":"1907.00374","citing_title":"Fooling a Real Car with Adversarial Traffic Signs","ref_index":28,"is_internal_anchor":true},{"citing_arxiv_id":"1907.10310","citing_title":"Towards Adversarially Robust Object Detection","ref_index":11,"is_internal_anchor":true}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/Q4MXKWTT422WJYR6FRE57VHU74","json":"https://pith.science/pith/Q4MXKWTT422WJYR6FRE57VHU74.json","graph_json":"https://pith.science/api/pith-number/Q4MXKWTT422WJYR6FRE57VHU74/graph.json","events_json":"https://pith.science/api/pith-number/Q4MXKWTT422WJYR6FRE57VHU74/events.json","paper":"https://pith.science/paper/Q4MXKWTT"},"agent_actions":{"view_html":"https://pith.science/pith/Q4MXKWTT422WJYR6FRE57VHU74","download_json":"https://pith.science/pith/Q4MXKWTT422WJYR6FRE57VHU74.json","view_paper":"https://pith.science/paper/Q4MXKWTT","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=1807.07769&json=true","fetch_graph":"https://pith.science/api/pith-number/Q4MXKWTT422WJYR6FRE57VHU74/graph.json","fetch_events":"https://pith.science/api/pith-number/Q4MXKWTT422WJYR6FRE57VHU74/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/Q4MXKWTT422WJYR6FRE57VHU74/action/timestamp_anchor","attest_storage":"https://pith.science/pith/Q4MXKWTT422WJYR6FRE57VHU74/action/storage_attestation","attest_author":"https://pith.science/pith/Q4MXKWTT422WJYR6FRE57VHU74/action/author_attestation","sign_citation":"https://pith.science/pith/Q4MXKWTT422WJYR6FRE57VHU74/action/citation_signature","submit_replication":"https://pith.science/pith/Q4MXKWTT422WJYR6FRE57VHU74/action/replication_record"}},"created_at":"2026-05-18T00:04:00.323340+00:00","updated_at":"2026-05-18T00:04:00.323340+00:00"}