{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:QJPWOBN5ZA73CN74F6NHUZP4TS","short_pith_number":"pith:QJPWOBN5","canonical_record":{"source":{"id":"2310.16540","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-10-25T10:39:51Z","cross_cats_sorted":[],"title_canon_sha256":"afe18d61489e00ba82651e3ccabe7e64286b467f4d48be9a6028d5eecb09ba4c","abstract_canon_sha256":"9388fdaea3a7916f84022cbcc7d9ded242ff3652ace99438d5ac2dbb3922ab25"},"schema_version":"1.0"},"canonical_sha256":"825f6705bdc83fb137fc2f9a7a65fc9c82b30978bf2aa6767d9e3cea1834c3ec","source":{"kind":"arxiv","id":"2310.16540","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.16540","created_at":"2026-07-05T07:04:59Z"},{"alias_kind":"arxiv_version","alias_value":"2310.16540v1","created_at":"2026-07-05T07:04:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.16540","created_at":"2026-07-05T07:04:59Z"},{"alias_kind":"pith_short_12","alias_value":"QJPWOBN5ZA73","created_at":"2026-07-05T07:04:59Z"},{"alias_kind":"pith_short_16","alias_value":"QJPWOBN5ZA73CN74","created_at":"2026-07-05T07:04:59Z"},{"alias_kind":"pith_short_8","alias_value":"QJPWOBN5","created_at":"2026-07-05T07:04:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:QJPWOBN5ZA73CN74F6NHUZP4TS","target":"record","payload":{"canonical_record":{"source":{"id":"2310.16540","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-10-25T10:39:51Z","cross_cats_sorted":[],"title_canon_sha256":"afe18d61489e00ba82651e3ccabe7e64286b467f4d48be9a6028d5eecb09ba4c","abstract_canon_sha256":"9388fdaea3a7916f84022cbcc7d9ded242ff3652ace99438d5ac2dbb3922ab25"},"schema_version":"1.0"},"canonical_sha256":"825f6705bdc83fb137fc2f9a7a65fc9c82b30978bf2aa6767d9e3cea1834c3ec","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:04:59.212955Z","signature_b64":"F1Hnm2WJLX/TG0d53i8Rm6fKvH+IacUJk3hBIn93meL8DjnsJNlR9iARHKu8S5WxrG1dSbSsPPgpICD/evFwCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"825f6705bdc83fb137fc2f9a7a65fc9c82b30978bf2aa6767d9e3cea1834c3ec","last_reissued_at":"2026-07-05T07:04:59.212421Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:04:59.212421Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.16540","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:04:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/gg3C4VVluLlU+BuAmRGh107BjBjajIEjJA0x2WeV7bhXA0p1Ofvvxf26pQ/eOHPXgx6u5CCiFXvc4gyhylrCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:53:25.849505Z"},"content_sha256":"fdebfb4e0a50357c93e9bd50946b676ed642734468fd6823284496fd82a45705","schema_version":"1.0","event_id":"sha256:fdebfb4e0a50357c93e9bd50946b676ed642734468fd6823284496fd82a45705"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:QJPWOBN5ZA73CN74F6NHUZP4TS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Dual Defense: Adversarial, Traceable, and Invisible Robust Watermarking against Face Swapping","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Caiyun Xie, Chuanxi Chen, Dengpan Ye, Jiacheng Deng, Long Tang, Yunming Zhang, Ziyi Liu","submitted_at":"2023-10-25T10:39:51Z","abstract_excerpt":"The malicious applications of deep forgery, represented by face swapping, have introduced security threats such as misinformation dissemination and identity fraud. While some research has proposed the use of robust watermarking methods to trace the copyright of facial images for post-event traceability, these methods cannot effectively prevent the generation of forgeries at the source and curb their dissemination. To address this problem, we propose a novel comprehensive active defense mechanism that combines traceability and adversariality, called Dual Defense. Dual Defense invisibly embeds a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.16540","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.16540/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:04:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VAngFSVyuFSPNkpaLY4Yr1A5pGM6y2hsFuEaajaHC57IozcN6M0wxzVufiI52GgtSTtUS3VcBEHjgN18MMmkCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:53:25.849900Z"},"content_sha256":"62497419efb4a9ec7c624f27e59e04c2460c5dc87d1b3fe4afba0a324d354fb8","schema_version":"1.0","event_id":"sha256:62497419efb4a9ec7c624f27e59e04c2460c5dc87d1b3fe4afba0a324d354fb8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QJPWOBN5ZA73CN74F6NHUZP4TS/bundle.json","state_url":"https://pith.science/pith/QJPWOBN5ZA73CN74F6NHUZP4TS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QJPWOBN5ZA73CN74F6NHUZP4TS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T05:53:25Z","links":{"resolver":"https://pith.science/pith/QJPWOBN5ZA73CN74F6NHUZP4TS","bundle":"https://pith.science/pith/QJPWOBN5ZA73CN74F6NHUZP4TS/bundle.json","state":"https://pith.science/pith/QJPWOBN5ZA73CN74F6NHUZP4TS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QJPWOBN5ZA73CN74F6NHUZP4TS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:QJPWOBN5ZA73CN74F6NHUZP4TS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9388fdaea3a7916f84022cbcc7d9ded242ff3652ace99438d5ac2dbb3922ab25","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-10-25T10:39:51Z","title_canon_sha256":"afe18d61489e00ba82651e3ccabe7e64286b467f4d48be9a6028d5eecb09ba4c"},"schema_version":"1.0","source":{"id":"2310.16540","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.16540","created_at":"2026-07-05T07:04:59Z"},{"alias_kind":"arxiv_version","alias_value":"2310.16540v1","created_at":"2026-07-05T07:04:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.16540","created_at":"2026-07-05T07:04:59Z"},{"alias_kind":"pith_short_12","alias_value":"QJPWOBN5ZA73","created_at":"2026-07-05T07:04:59Z"},{"alias_kind":"pith_short_16","alias_value":"QJPWOBN5ZA73CN74","created_at":"2026-07-05T07:04:59Z"},{"alias_kind":"pith_short_8","alias_value":"QJPWOBN5","created_at":"2026-07-05T07:04:59Z"}],"graph_snapshots":[{"event_id":"sha256:62497419efb4a9ec7c624f27e59e04c2460c5dc87d1b3fe4afba0a324d354fb8","target":"graph","created_at":"2026-07-05T07:04:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.16540/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The malicious applications of deep forgery, represented by face swapping, have introduced security threats such as misinformation dissemination and identity fraud. While some research has proposed the use of robust watermarking methods to trace the copyright of facial images for post-event traceability, these methods cannot effectively prevent the generation of forgeries at the source and curb their dissemination. To address this problem, we propose a novel comprehensive active defense mechanism that combines traceability and adversariality, called Dual Defense. Dual Defense invisibly embeds a","authors_text":"Caiyun Xie, Chuanxi Chen, Dengpan Ye, Jiacheng Deng, Long Tang, Yunming Zhang, Ziyi Liu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-10-25T10:39:51Z","title":"Dual Defense: Adversarial, Traceable, and Invisible Robust Watermarking against Face Swapping"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.16540","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fdebfb4e0a50357c93e9bd50946b676ed642734468fd6823284496fd82a45705","target":"record","created_at":"2026-07-05T07:04:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9388fdaea3a7916f84022cbcc7d9ded242ff3652ace99438d5ac2dbb3922ab25","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-10-25T10:39:51Z","title_canon_sha256":"afe18d61489e00ba82651e3ccabe7e64286b467f4d48be9a6028d5eecb09ba4c"},"schema_version":"1.0","source":{"id":"2310.16540","kind":"arxiv","version":1}},"canonical_sha256":"825f6705bdc83fb137fc2f9a7a65fc9c82b30978bf2aa6767d9e3cea1834c3ec","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"825f6705bdc83fb137fc2f9a7a65fc9c82b30978bf2aa6767d9e3cea1834c3ec","first_computed_at":"2026-07-05T07:04:59.212421Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:04:59.212421Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"F1Hnm2WJLX/TG0d53i8Rm6fKvH+IacUJk3hBIn93meL8DjnsJNlR9iARHKu8S5WxrG1dSbSsPPgpICD/evFwCA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:04:59.212955Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.16540","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fdebfb4e0a50357c93e9bd50946b676ed642734468fd6823284496fd82a45705","sha256:62497419efb4a9ec7c624f27e59e04c2460c5dc87d1b3fe4afba0a324d354fb8"],"state_sha256":"f966dfeada7e127f9b0dfd1c4fc268fbaf042299de8d3f33fbb5b64f95da539f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7fohMO1PILsK9liqUPGuhTCbL9BtB9QQ6/PCkh1DCAQw8MaoQEiF8UtS2EuhpksaIxJGa0JEoiKCBilTA3CcDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T05:53:25.852101Z","bundle_sha256":"3a3ae13e8d3a023fcbe4bc2a94cee09329f5c8392766e39132830482700d9327"}}