{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:QB6WI4SG3VS5X4NXVW36KXS2RB","short_pith_number":"pith:QB6WI4SG","canonical_record":{"source":{"id":"2302.00944","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-02-02T08:35:34Z","cross_cats_sorted":[],"title_canon_sha256":"fab4dd6d87e980eeceeb2d2512a9fb4c56135d42be82feef0ecf77d84ac44518","abstract_canon_sha256":"8c4065a2000c0223a0561d48623272fd2f2f88e2441b0cc185165e82fe3e9ff4"},"schema_version":"1.0"},"canonical_sha256":"807d647246dd65dbf1b7adb7e55e5a8871716711f504641a28e52e46e12f633e","source":{"kind":"arxiv","id":"2302.00944","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.00944","created_at":"2026-07-05T06:21:15Z"},{"alias_kind":"arxiv_version","alias_value":"2302.00944v2","created_at":"2026-07-05T06:21:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.00944","created_at":"2026-07-05T06:21:15Z"},{"alias_kind":"pith_short_12","alias_value":"QB6WI4SG3VS5","created_at":"2026-07-05T06:21:15Z"},{"alias_kind":"pith_short_16","alias_value":"QB6WI4SG3VS5X4NX","created_at":"2026-07-05T06:21:15Z"},{"alias_kind":"pith_short_8","alias_value":"QB6WI4SG","created_at":"2026-07-05T06:21:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:QB6WI4SG3VS5X4NXVW36KXS2RB","target":"record","payload":{"canonical_record":{"source":{"id":"2302.00944","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-02-02T08:35:34Z","cross_cats_sorted":[],"title_canon_sha256":"fab4dd6d87e980eeceeb2d2512a9fb4c56135d42be82feef0ecf77d84ac44518","abstract_canon_sha256":"8c4065a2000c0223a0561d48623272fd2f2f88e2441b0cc185165e82fe3e9ff4"},"schema_version":"1.0"},"canonical_sha256":"807d647246dd65dbf1b7adb7e55e5a8871716711f504641a28e52e46e12f633e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:21:15.331737Z","signature_b64":"ZMny7udAAYgiNnUIBwUP8+uNiPo9FOsibM9MXeImE0fHE2ecnzAj82A14Hn7/g1Or19fjF6pBFyCWRUPN7i/DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"807d647246dd65dbf1b7adb7e55e5a8871716711f504641a28e52e46e12f633e","last_reissued_at":"2026-07-05T06:21:15.331299Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:21:15.331299Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2302.00944","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:21:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kVLm0fFmiTZLKMdrMmupg8TsWS7r6NY3dPufgKFgADP40SefVFVLAmAXBxulp8vBbHli8bg/YY+x0G3U8/QfBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T21:36:07.452533Z"},"content_sha256":"11b2176bca555318dbb598abf79ad9bacc2411efb851dc0c8236d471ee679394","schema_version":"1.0","event_id":"sha256:11b2176bca555318dbb598abf79ad9bacc2411efb851dc0c8236d471ee679394"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:QB6WI4SG3VS5X4NXVW36KXS2RB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TransFool: An Adversarial Attack against Neural Machine Translation Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Ljiljana Dolamic, Pascal Frossard, Sahar Sadrizadeh","submitted_at":"2023-02-02T08:35:34Z","abstract_excerpt":"Deep neural networks have been shown to be vulnerable to small perturbations of their inputs, known as adversarial attacks. In this paper, we investigate the vulnerability of Neural Machine Translation (NMT) models to adversarial attacks and propose a new attack algorithm called TransFool. To fool NMT models, TransFool builds on a multi-term optimization problem and a gradient projection step. By integrating the embedding representation of a language model, we generate fluent adversarial examples in the source language that maintain a high level of semantic similarity with the clean samples. E"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.00944","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2302.00944/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:21:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FBVm00INjn8PlRRKkHu1vtE74wOP0zeML0crxQ10DkT7/xJpRnESBC0pVJsY0WKtxuVmetGUHLyzzhiqKFydAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T21:36:07.453238Z"},"content_sha256":"7eb83044091cda72be0be24fd14da9d50c7a2eef7f9b4340b44270211d9cc9a5","schema_version":"1.0","event_id":"sha256:7eb83044091cda72be0be24fd14da9d50c7a2eef7f9b4340b44270211d9cc9a5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QB6WI4SG3VS5X4NXVW36KXS2RB/bundle.json","state_url":"https://pith.science/pith/QB6WI4SG3VS5X4NXVW36KXS2RB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QB6WI4SG3VS5X4NXVW36KXS2RB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T21:36:07Z","links":{"resolver":"https://pith.science/pith/QB6WI4SG3VS5X4NXVW36KXS2RB","bundle":"https://pith.science/pith/QB6WI4SG3VS5X4NXVW36KXS2RB/bundle.json","state":"https://pith.science/pith/QB6WI4SG3VS5X4NXVW36KXS2RB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QB6WI4SG3VS5X4NXVW36KXS2RB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:QB6WI4SG3VS5X4NXVW36KXS2RB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8c4065a2000c0223a0561d48623272fd2f2f88e2441b0cc185165e82fe3e9ff4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-02-02T08:35:34Z","title_canon_sha256":"fab4dd6d87e980eeceeb2d2512a9fb4c56135d42be82feef0ecf77d84ac44518"},"schema_version":"1.0","source":{"id":"2302.00944","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.00944","created_at":"2026-07-05T06:21:15Z"},{"alias_kind":"arxiv_version","alias_value":"2302.00944v2","created_at":"2026-07-05T06:21:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.00944","created_at":"2026-07-05T06:21:15Z"},{"alias_kind":"pith_short_12","alias_value":"QB6WI4SG3VS5","created_at":"2026-07-05T06:21:15Z"},{"alias_kind":"pith_short_16","alias_value":"QB6WI4SG3VS5X4NX","created_at":"2026-07-05T06:21:15Z"},{"alias_kind":"pith_short_8","alias_value":"QB6WI4SG","created_at":"2026-07-05T06:21:15Z"}],"graph_snapshots":[{"event_id":"sha256:7eb83044091cda72be0be24fd14da9d50c7a2eef7f9b4340b44270211d9cc9a5","target":"graph","created_at":"2026-07-05T06:21:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2302.00944/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks have been shown to be vulnerable to small perturbations of their inputs, known as adversarial attacks. In this paper, we investigate the vulnerability of Neural Machine Translation (NMT) models to adversarial attacks and propose a new attack algorithm called TransFool. To fool NMT models, TransFool builds on a multi-term optimization problem and a gradient projection step. By integrating the embedding representation of a language model, we generate fluent adversarial examples in the source language that maintain a high level of semantic similarity with the clean samples. E","authors_text":"Ljiljana Dolamic, Pascal Frossard, Sahar Sadrizadeh","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-02-02T08:35:34Z","title":"TransFool: An Adversarial Attack against Neural Machine Translation Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.00944","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:11b2176bca555318dbb598abf79ad9bacc2411efb851dc0c8236d471ee679394","target":"record","created_at":"2026-07-05T06:21:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8c4065a2000c0223a0561d48623272fd2f2f88e2441b0cc185165e82fe3e9ff4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-02-02T08:35:34Z","title_canon_sha256":"fab4dd6d87e980eeceeb2d2512a9fb4c56135d42be82feef0ecf77d84ac44518"},"schema_version":"1.0","source":{"id":"2302.00944","kind":"arxiv","version":2}},"canonical_sha256":"807d647246dd65dbf1b7adb7e55e5a8871716711f504641a28e52e46e12f633e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"807d647246dd65dbf1b7adb7e55e5a8871716711f504641a28e52e46e12f633e","first_computed_at":"2026-07-05T06:21:15.331299Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:21:15.331299Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZMny7udAAYgiNnUIBwUP8+uNiPo9FOsibM9MXeImE0fHE2ecnzAj82A14Hn7/g1Or19fjF6pBFyCWRUPN7i/DA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:21:15.331737Z","signed_message":"canonical_sha256_bytes"},"source_id":"2302.00944","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:11b2176bca555318dbb598abf79ad9bacc2411efb851dc0c8236d471ee679394","sha256:7eb83044091cda72be0be24fd14da9d50c7a2eef7f9b4340b44270211d9cc9a5"],"state_sha256":"38f96f6747b748fc80c95438b1a11a36f81032d3d5e9e4e81436a4d80ea96e63"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5ZnVlXYMzVFaCBMCYv6/xFn1OLmDrX0RZ4uhZDamH8WngsmVTyPgugyVXsdl774Ct4R81I3H1Yz33/8kAHY7BQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T21:36:07.458896Z","bundle_sha256":"083b1c4056a4f5a537f7e84735db6f5255d7dc3f8186e4ca7a2b89b80c803c25"}}