{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:R6XQLM7KNYPWWRMJ3K3QFFNOZU","short_pith_number":"pith:R6XQLM7K","canonical_record":{"source":{"id":"2304.13919","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-04-27T02:08:13Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"378e2c7a66faa383865c7bb27cf4606f2da3037e60208656d71a277888752059","abstract_canon_sha256":"4cafd95b13f6fb23265e4bcc405175059816f33fa98692525d40fc04d26ae2f9"},"schema_version":"1.0"},"canonical_sha256":"8faf05b3ea6e1f6b4589dab70295aecd1fc7240ca5ba07911c27f1b3b85bb91f","source":{"kind":"arxiv","id":"2304.13919","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.13919","created_at":"2026-07-05T06:04:58Z"},{"alias_kind":"arxiv_version","alias_value":"2304.13919v1","created_at":"2026-07-05T06:04:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.13919","created_at":"2026-07-05T06:04:58Z"},{"alias_kind":"pith_short_12","alias_value":"R6XQLM7KNYPW","created_at":"2026-07-05T06:04:58Z"},{"alias_kind":"pith_short_16","alias_value":"R6XQLM7KNYPWWRMJ","created_at":"2026-07-05T06:04:58Z"},{"alias_kind":"pith_short_8","alias_value":"R6XQLM7K","created_at":"2026-07-05T06:04:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:R6XQLM7KNYPWWRMJ3K3QFFNOZU","target":"record","payload":{"canonical_record":{"source":{"id":"2304.13919","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-04-27T02:08:13Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"378e2c7a66faa383865c7bb27cf4606f2da3037e60208656d71a277888752059","abstract_canon_sha256":"4cafd95b13f6fb23265e4bcc405175059816f33fa98692525d40fc04d26ae2f9"},"schema_version":"1.0"},"canonical_sha256":"8faf05b3ea6e1f6b4589dab70295aecd1fc7240ca5ba07911c27f1b3b85bb91f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:04:58.618513Z","signature_b64":"WM7DJbDusVPROknEp54IRjiUvYZudAr4p3eswByPqlV6Hzx3ROkSlGz05NfvaVUP4XR1Z35NaDYcdJqulw9dBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8faf05b3ea6e1f6b4589dab70295aecd1fc7240ca5ba07911c27f1b3b85bb91f","last_reissued_at":"2026-07-05T06:04:58.618097Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:04:58.618097Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2304.13919","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:04:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cCR56W1YpMw2Ce0qA70B3C3ng90y2pTltRJCuXh1WdrvxWXh7QBBPbpAMFk11dcO0w1Y1v/bDYslJvMTVJQoAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T06:37:43.016092Z"},"content_sha256":"10565c5fc049135327e3fd7ead3d2119360d1467413ba2f9381dee646ced0a21","schema_version":"1.0","event_id":"sha256:10565c5fc049135327e3fd7ead3d2119360d1467413ba2f9381dee646ced0a21"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:R6XQLM7KNYPWWRMJ3K3QFFNOZU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Detection of Adversarial Physical Attacks in Time-Series Image Data","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Insup Lee, James Weimer, Ramneet Kaur, Wenwen Si, Yiannis Kantaros","submitted_at":"2023-04-27T02:08:13Z","abstract_excerpt":"Deep neural networks (DNN) have become a common sensing modality in autonomous systems as they allow for semantically perceiving the ambient environment given input images. Nevertheless, DNN models have proven to be vulnerable to adversarial digital and physical attacks. To mitigate this issue, several detection frameworks have been proposed to detect whether a single input image has been manipulated by adversarial digital noise or not. In our prior work, we proposed a real-time detector, called VisionGuard (VG), for adversarial physical attacks against single input images to DNN models. Build"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.13919","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2304.13919/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:04:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BhnoSqgLLiLhSyQYqAtItTrKOsbq5y8MlByazpSMQltRfHzmFb3swIF4cySFCSxOrHff5HwOnlkLLhPgzzrvDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T06:37:43.016494Z"},"content_sha256":"a54baf42d1ab0976e54d0d31eff3132e73a8e62c63734c036f681a6cf6e24052","schema_version":"1.0","event_id":"sha256:a54baf42d1ab0976e54d0d31eff3132e73a8e62c63734c036f681a6cf6e24052"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/R6XQLM7KNYPWWRMJ3K3QFFNOZU/bundle.json","state_url":"https://pith.science/pith/R6XQLM7KNYPWWRMJ3K3QFFNOZU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/R6XQLM7KNYPWWRMJ3K3QFFNOZU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T06:37:43Z","links":{"resolver":"https://pith.science/pith/R6XQLM7KNYPWWRMJ3K3QFFNOZU","bundle":"https://pith.science/pith/R6XQLM7KNYPWWRMJ3K3QFFNOZU/bundle.json","state":"https://pith.science/pith/R6XQLM7KNYPWWRMJ3K3QFFNOZU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/R6XQLM7KNYPWWRMJ3K3QFFNOZU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:R6XQLM7KNYPWWRMJ3K3QFFNOZU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4cafd95b13f6fb23265e4bcc405175059816f33fa98692525d40fc04d26ae2f9","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-04-27T02:08:13Z","title_canon_sha256":"378e2c7a66faa383865c7bb27cf4606f2da3037e60208656d71a277888752059"},"schema_version":"1.0","source":{"id":"2304.13919","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.13919","created_at":"2026-07-05T06:04:58Z"},{"alias_kind":"arxiv_version","alias_value":"2304.13919v1","created_at":"2026-07-05T06:04:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.13919","created_at":"2026-07-05T06:04:58Z"},{"alias_kind":"pith_short_12","alias_value":"R6XQLM7KNYPW","created_at":"2026-07-05T06:04:58Z"},{"alias_kind":"pith_short_16","alias_value":"R6XQLM7KNYPWWRMJ","created_at":"2026-07-05T06:04:58Z"},{"alias_kind":"pith_short_8","alias_value":"R6XQLM7K","created_at":"2026-07-05T06:04:58Z"}],"graph_snapshots":[{"event_id":"sha256:a54baf42d1ab0976e54d0d31eff3132e73a8e62c63734c036f681a6cf6e24052","target":"graph","created_at":"2026-07-05T06:04:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2304.13919/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNN) have become a common sensing modality in autonomous systems as they allow for semantically perceiving the ambient environment given input images. Nevertheless, DNN models have proven to be vulnerable to adversarial digital and physical attacks. To mitigate this issue, several detection frameworks have been proposed to detect whether a single input image has been manipulated by adversarial digital noise or not. In our prior work, we proposed a real-time detector, called VisionGuard (VG), for adversarial physical attacks against single input images to DNN models. Build","authors_text":"Insup Lee, James Weimer, Ramneet Kaur, Wenwen Si, Yiannis Kantaros","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-04-27T02:08:13Z","title":"Detection of Adversarial Physical Attacks in Time-Series Image Data"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.13919","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:10565c5fc049135327e3fd7ead3d2119360d1467413ba2f9381dee646ced0a21","target":"record","created_at":"2026-07-05T06:04:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4cafd95b13f6fb23265e4bcc405175059816f33fa98692525d40fc04d26ae2f9","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-04-27T02:08:13Z","title_canon_sha256":"378e2c7a66faa383865c7bb27cf4606f2da3037e60208656d71a277888752059"},"schema_version":"1.0","source":{"id":"2304.13919","kind":"arxiv","version":1}},"canonical_sha256":"8faf05b3ea6e1f6b4589dab70295aecd1fc7240ca5ba07911c27f1b3b85bb91f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8faf05b3ea6e1f6b4589dab70295aecd1fc7240ca5ba07911c27f1b3b85bb91f","first_computed_at":"2026-07-05T06:04:58.618097Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:04:58.618097Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"WM7DJbDusVPROknEp54IRjiUvYZudAr4p3eswByPqlV6Hzx3ROkSlGz05NfvaVUP4XR1Z35NaDYcdJqulw9dBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:04:58.618513Z","signed_message":"canonical_sha256_bytes"},"source_id":"2304.13919","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:10565c5fc049135327e3fd7ead3d2119360d1467413ba2f9381dee646ced0a21","sha256:a54baf42d1ab0976e54d0d31eff3132e73a8e62c63734c036f681a6cf6e24052"],"state_sha256":"e2f7074c531d14bb2d126f55c52415b5e4808f29dea83efd604bf6f4d694d1cb"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qyBlZBtgNaVG8K/bZhyuSeB4IPyG8mmxmNbw7zz1XOznxh4LNcXot4bufhT9e13xTDYlUuNadGwP18iLkgmiDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T06:37:43.018784Z","bundle_sha256":"8eb1101edc9f567d3ffbf7faf44b73fdf3b65bfa4b9de9c8cb175eeadc001667"}}