{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:QV7WNSPCUKQ2H7XPFIP4HM7A2S","short_pith_number":"pith:QV7WNSPC","canonical_record":{"source":{"id":"2504.01308","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-04-02T02:35:19Z","cross_cats_sorted":[],"title_canon_sha256":"4a741a5dfead05303e70e2742d043166d45a65865da540571cf2cacbd74cb03f","abstract_canon_sha256":"f60c79848f32477a5c83d8dd3a5ce2d2254c0ebb1a96f1579b8d87afae8184eb"},"schema_version":"1.0"},"canonical_sha256":"857f66c9e2a2a1a3feef2a1fc3b3e0d48c4b8561fcf9a4a562293ec0c2a04064","source":{"kind":"arxiv","id":"2504.01308","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.01308","created_at":"2026-07-05T11:47:21Z"},{"alias_kind":"arxiv_version","alias_value":"2504.01308v3","created_at":"2026-07-05T11:47:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.01308","created_at":"2026-07-05T11:47:21Z"},{"alias_kind":"pith_short_12","alias_value":"QV7WNSPCUKQ2","created_at":"2026-07-05T11:47:21Z"},{"alias_kind":"pith_short_16","alias_value":"QV7WNSPCUKQ2H7XP","created_at":"2026-07-05T11:47:21Z"},{"alias_kind":"pith_short_8","alias_value":"QV7WNSPC","created_at":"2026-07-05T11:47:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:QV7WNSPCUKQ2H7XPFIP4HM7A2S","target":"record","payload":{"canonical_record":{"source":{"id":"2504.01308","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-04-02T02:35:19Z","cross_cats_sorted":[],"title_canon_sha256":"4a741a5dfead05303e70e2742d043166d45a65865da540571cf2cacbd74cb03f","abstract_canon_sha256":"f60c79848f32477a5c83d8dd3a5ce2d2254c0ebb1a96f1579b8d87afae8184eb"},"schema_version":"1.0"},"canonical_sha256":"857f66c9e2a2a1a3feef2a1fc3b3e0d48c4b8561fcf9a4a562293ec0c2a04064","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:47:21.108005Z","signature_b64":"/21v2wwBPD9uvoQhVRtjoFwjpN5zP/qxe4HS9A4g/qM8kYpgeH2g2BmFI4AdeDdI9hpW1Rk1I1YlCEuPEtBfCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"857f66c9e2a2a1a3feef2a1fc3b3e0d48c4b8561fcf9a4a562293ec0c2a04064","last_reissued_at":"2026-07-05T11:47:21.107443Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:47:21.107443Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.01308","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:47:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vDHn1KdT4paDJejJG7LDbpE1xUHyuJlVH169CjXfOHYAdfn1QgqwEG5LTWj6hsiXybKdZJCSxe7VpHGylaICCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T05:41:12.418355Z"},"content_sha256":"c819a654518d36ad8a4972e370a577f1d9a83e124441ac87d82fa526cf61e331","schema_version":"1.0","event_id":"sha256:c819a654518d36ad8a4972e370a577f1d9a83e124441ac87d82fa526cf61e331"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:QV7WNSPCUKQ2H7XPFIP4HM7A2S","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Safeguarding Vision-Language Models: Mitigating Vulnerabilities to Gaussian Noise in Perturbation-based Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Jiawei Wang, Kin-man Lam, Yicheng Fu, Yichun Feng, Yuanjun Chai, Yushen Zuo, Zhendong Liu","submitted_at":"2025-04-02T02:35:19Z","abstract_excerpt":"Vision-Language Models (VLMs) extend the capabilities of Large Language Models (LLMs) by incorporating visual information, yet they remain vulnerable to jailbreak attacks, especially when processing noisy or corrupted images. Although existing VLMs adopt security measures during training to mitigate such attacks, vulnerabilities associated with noise-augmented visual inputs are overlooked. In this work, we identify that missing noise-augmented training causes critical security gaps: many VLMs are susceptible to even simple perturbations such as Gaussian noise. To address this challenge, we pro"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.01308","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.01308/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:47:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5/A/MSpDXIeLBzdc5IRo4rpmb+h03pqDp9knNn0efaCPWrJC/7QDp5om/dU04rkURgxiFAchVXTsS4WP7cVGDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T05:41:12.419005Z"},"content_sha256":"b9f038093559addc8e96aba7a9d5e121f36039bd45937171a7f97ff0106c278a","schema_version":"1.0","event_id":"sha256:b9f038093559addc8e96aba7a9d5e121f36039bd45937171a7f97ff0106c278a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QV7WNSPCUKQ2H7XPFIP4HM7A2S/bundle.json","state_url":"https://pith.science/pith/QV7WNSPCUKQ2H7XPFIP4HM7A2S/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QV7WNSPCUKQ2H7XPFIP4HM7A2S/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-09T05:41:12Z","links":{"resolver":"https://pith.science/pith/QV7WNSPCUKQ2H7XPFIP4HM7A2S","bundle":"https://pith.science/pith/QV7WNSPCUKQ2H7XPFIP4HM7A2S/bundle.json","state":"https://pith.science/pith/QV7WNSPCUKQ2H7XPFIP4HM7A2S/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QV7WNSPCUKQ2H7XPFIP4HM7A2S/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:QV7WNSPCUKQ2H7XPFIP4HM7A2S","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f60c79848f32477a5c83d8dd3a5ce2d2254c0ebb1a96f1579b8d87afae8184eb","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-04-02T02:35:19Z","title_canon_sha256":"4a741a5dfead05303e70e2742d043166d45a65865da540571cf2cacbd74cb03f"},"schema_version":"1.0","source":{"id":"2504.01308","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.01308","created_at":"2026-07-05T11:47:21Z"},{"alias_kind":"arxiv_version","alias_value":"2504.01308v3","created_at":"2026-07-05T11:47:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.01308","created_at":"2026-07-05T11:47:21Z"},{"alias_kind":"pith_short_12","alias_value":"QV7WNSPCUKQ2","created_at":"2026-07-05T11:47:21Z"},{"alias_kind":"pith_short_16","alias_value":"QV7WNSPCUKQ2H7XP","created_at":"2026-07-05T11:47:21Z"},{"alias_kind":"pith_short_8","alias_value":"QV7WNSPC","created_at":"2026-07-05T11:47:21Z"}],"graph_snapshots":[{"event_id":"sha256:b9f038093559addc8e96aba7a9d5e121f36039bd45937171a7f97ff0106c278a","target":"graph","created_at":"2026-07-05T11:47:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.01308/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision-Language Models (VLMs) extend the capabilities of Large Language Models (LLMs) by incorporating visual information, yet they remain vulnerable to jailbreak attacks, especially when processing noisy or corrupted images. Although existing VLMs adopt security measures during training to mitigate such attacks, vulnerabilities associated with noise-augmented visual inputs are overlooked. In this work, we identify that missing noise-augmented training causes critical security gaps: many VLMs are susceptible to even simple perturbations such as Gaussian noise. To address this challenge, we pro","authors_text":"Jiawei Wang, Kin-man Lam, Yicheng Fu, Yichun Feng, Yuanjun Chai, Yushen Zuo, Zhendong Liu","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-04-02T02:35:19Z","title":"Safeguarding Vision-Language Models: Mitigating Vulnerabilities to Gaussian Noise in Perturbation-based Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.01308","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c819a654518d36ad8a4972e370a577f1d9a83e124441ac87d82fa526cf61e331","target":"record","created_at":"2026-07-05T11:47:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f60c79848f32477a5c83d8dd3a5ce2d2254c0ebb1a96f1579b8d87afae8184eb","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-04-02T02:35:19Z","title_canon_sha256":"4a741a5dfead05303e70e2742d043166d45a65865da540571cf2cacbd74cb03f"},"schema_version":"1.0","source":{"id":"2504.01308","kind":"arxiv","version":3}},"canonical_sha256":"857f66c9e2a2a1a3feef2a1fc3b3e0d48c4b8561fcf9a4a562293ec0c2a04064","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"857f66c9e2a2a1a3feef2a1fc3b3e0d48c4b8561fcf9a4a562293ec0c2a04064","first_computed_at":"2026-07-05T11:47:21.107443Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:47:21.107443Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/21v2wwBPD9uvoQhVRtjoFwjpN5zP/qxe4HS9A4g/qM8kYpgeH2g2BmFI4AdeDdI9hpW1Rk1I1YlCEuPEtBfCA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:47:21.108005Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.01308","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c819a654518d36ad8a4972e370a577f1d9a83e124441ac87d82fa526cf61e331","sha256:b9f038093559addc8e96aba7a9d5e121f36039bd45937171a7f97ff0106c278a"],"state_sha256":"85350a52075d3d3991f849579a88cb43df0d3c985bfc8e7832f37205cd583056"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"z2UmUCpiXbGoldRfzk1MJ5dI2Vj1l/Dy3Gl7GGbbykX0Nh44Sg8KcQsmBdWVZY3PNZM2tzdXZ9BH7d5kUYfFAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-09T05:41:12.422555Z","bundle_sha256":"0fc04d34037c5a3dcb6666619a8ef8a299de2fbd09798783335d6be0e46eccda"}}