{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:QMUECVZ75PPJT25XUY56MILGXV","short_pith_number":"pith:QMUECVZ7","canonical_record":{"source":{"id":"2303.02669","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-03-05T13:30:25Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"3170b2fa44415b40f37dffed96723ae57259e9a55763c21d3279eaf8bdc4af8d","abstract_canon_sha256":"9353dad3e819db9b284ad1c696c70936890209d7b0c158e0dc671167083b1218"},"schema_version":"1.0"},"canonical_sha256":"832841573febde99ebb7a63be62166bd60b784ad33fd1f225e2d87d54874f64d","source":{"kind":"arxiv","id":"2303.02669","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.02669","created_at":"2026-07-05T07:32:42Z"},{"alias_kind":"arxiv_version","alias_value":"2303.02669v1","created_at":"2026-07-05T07:32:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.02669","created_at":"2026-07-05T07:32:42Z"},{"alias_kind":"pith_short_12","alias_value":"QMUECVZ75PPJ","created_at":"2026-07-05T07:32:42Z"},{"alias_kind":"pith_short_16","alias_value":"QMUECVZ75PPJT25X","created_at":"2026-07-05T07:32:42Z"},{"alias_kind":"pith_short_8","alias_value":"QMUECVZ7","created_at":"2026-07-05T07:32:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:QMUECVZ75PPJT25XUY56MILGXV","target":"record","payload":{"canonical_record":{"source":{"id":"2303.02669","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-03-05T13:30:25Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"3170b2fa44415b40f37dffed96723ae57259e9a55763c21d3279eaf8bdc4af8d","abstract_canon_sha256":"9353dad3e819db9b284ad1c696c70936890209d7b0c158e0dc671167083b1218"},"schema_version":"1.0"},"canonical_sha256":"832841573febde99ebb7a63be62166bd60b784ad33fd1f225e2d87d54874f64d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:32:42.087204Z","signature_b64":"TMU1DHNvOQAY34LFUGGQHpobDhB8j4GiJFVDXcbCf+NxjGfeG2C5aNyTclPm2IlazXtV+2F31JIs9YJ1oyr4CA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"832841573febde99ebb7a63be62166bd60b784ad33fd1f225e2d87d54874f64d","last_reissued_at":"2026-07-05T07:32:42.086671Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:32:42.086671Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2303.02669","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:32:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"s9Aa2+AlKMNYitfJPaQzqFPdbHksOXFaVSqV9kqL2HL9r1Bl/Wl+q5jcqQ+l12+JiIEjdNJneusFsGV8I9qTAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T10:55:47.823386Z"},"content_sha256":"c29f51e7482bbc41ef523f293000b4a7fe63d38b820479f6db453d50cdc0f3ea","schema_version":"1.0","event_id":"sha256:c29f51e7482bbc41ef523f293000b4a7fe63d38b820479f6db453d50cdc0f3ea"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:QMUECVZ75PPJT25XUY56MILGXV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Consistent Valid Physically-Realizable Adversarial Attack against Crowd-flow Prediction Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Ala Al-Fuqaha, Fethi Filali, Hassan Ali, Junaid Qadir, Muhammad Atif Butt","submitted_at":"2023-03-05T13:30:25Z","abstract_excerpt":"Recent works have shown that deep learning (DL) models can effectively learn city-wide crowd-flow patterns, which can be used for more effective urban planning and smart city management. However, DL models have been known to perform poorly on inconspicuous adversarial perturbations. Although many works have studied these adversarial perturbations in general, the adversarial vulnerabilities of deep crowd-flow prediction models in particular have remained largely unexplored. In this paper, we perform a rigorous analysis of the adversarial vulnerabilities of DL-based crowd-flow prediction models "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.02669","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2303.02669/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:32:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5UbkfXTPZoax7HcULqexpUSaDHXM7BKNBUyopCRFBvSODaY+hNM9GaiCdtScSfzLhmTK8LAuUeDHzksmnGXZCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T10:55:47.824342Z"},"content_sha256":"19c93ad87aa465a6fc5ed047aa61e900b16d986db77f40da9ef3e876fa88b21c","schema_version":"1.0","event_id":"sha256:19c93ad87aa465a6fc5ed047aa61e900b16d986db77f40da9ef3e876fa88b21c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QMUECVZ75PPJT25XUY56MILGXV/bundle.json","state_url":"https://pith.science/pith/QMUECVZ75PPJT25XUY56MILGXV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QMUECVZ75PPJT25XUY56MILGXV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T10:55:47Z","links":{"resolver":"https://pith.science/pith/QMUECVZ75PPJT25XUY56MILGXV","bundle":"https://pith.science/pith/QMUECVZ75PPJT25XUY56MILGXV/bundle.json","state":"https://pith.science/pith/QMUECVZ75PPJT25XUY56MILGXV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QMUECVZ75PPJT25XUY56MILGXV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:QMUECVZ75PPJT25XUY56MILGXV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9353dad3e819db9b284ad1c696c70936890209d7b0c158e0dc671167083b1218","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-03-05T13:30:25Z","title_canon_sha256":"3170b2fa44415b40f37dffed96723ae57259e9a55763c21d3279eaf8bdc4af8d"},"schema_version":"1.0","source":{"id":"2303.02669","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.02669","created_at":"2026-07-05T07:32:42Z"},{"alias_kind":"arxiv_version","alias_value":"2303.02669v1","created_at":"2026-07-05T07:32:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.02669","created_at":"2026-07-05T07:32:42Z"},{"alias_kind":"pith_short_12","alias_value":"QMUECVZ75PPJ","created_at":"2026-07-05T07:32:42Z"},{"alias_kind":"pith_short_16","alias_value":"QMUECVZ75PPJT25X","created_at":"2026-07-05T07:32:42Z"},{"alias_kind":"pith_short_8","alias_value":"QMUECVZ7","created_at":"2026-07-05T07:32:42Z"}],"graph_snapshots":[{"event_id":"sha256:19c93ad87aa465a6fc5ed047aa61e900b16d986db77f40da9ef3e876fa88b21c","target":"graph","created_at":"2026-07-05T07:32:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2303.02669/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent works have shown that deep learning (DL) models can effectively learn city-wide crowd-flow patterns, which can be used for more effective urban planning and smart city management. However, DL models have been known to perform poorly on inconspicuous adversarial perturbations. Although many works have studied these adversarial perturbations in general, the adversarial vulnerabilities of deep crowd-flow prediction models in particular have remained largely unexplored. In this paper, we perform a rigorous analysis of the adversarial vulnerabilities of DL-based crowd-flow prediction models ","authors_text":"Ala Al-Fuqaha, Fethi Filali, Hassan Ali, Junaid Qadir, Muhammad Atif Butt","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-03-05T13:30:25Z","title":"Consistent Valid Physically-Realizable Adversarial Attack against Crowd-flow Prediction Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.02669","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c29f51e7482bbc41ef523f293000b4a7fe63d38b820479f6db453d50cdc0f3ea","target":"record","created_at":"2026-07-05T07:32:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9353dad3e819db9b284ad1c696c70936890209d7b0c158e0dc671167083b1218","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-03-05T13:30:25Z","title_canon_sha256":"3170b2fa44415b40f37dffed96723ae57259e9a55763c21d3279eaf8bdc4af8d"},"schema_version":"1.0","source":{"id":"2303.02669","kind":"arxiv","version":1}},"canonical_sha256":"832841573febde99ebb7a63be62166bd60b784ad33fd1f225e2d87d54874f64d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"832841573febde99ebb7a63be62166bd60b784ad33fd1f225e2d87d54874f64d","first_computed_at":"2026-07-05T07:32:42.086671Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:32:42.086671Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TMU1DHNvOQAY34LFUGGQHpobDhB8j4GiJFVDXcbCf+NxjGfeG2C5aNyTclPm2IlazXtV+2F31JIs9YJ1oyr4CA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:32:42.087204Z","signed_message":"canonical_sha256_bytes"},"source_id":"2303.02669","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c29f51e7482bbc41ef523f293000b4a7fe63d38b820479f6db453d50cdc0f3ea","sha256:19c93ad87aa465a6fc5ed047aa61e900b16d986db77f40da9ef3e876fa88b21c"],"state_sha256":"e064dad81773370feeebb9dfff7075b8969db7630d82dd61ce4830d94d3ed8c7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EwLmWJaBP2r0ibaDgtFGW1sXYQp4tIhiOrJS+zB8X8mA5PlBqOw/ZgbdjMr3LfhWgGEbgq3ShTRrya3d2YO1Bw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T10:55:47.829982Z","bundle_sha256":"8b72168f23014be7872be210af6256dd26169ada1db44a0b98fb70f6a049c317"}}