{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:RAG7TWN4RBVUPF7QL2B67WINVG","short_pith_number":"pith:RAG7TWN4","canonical_record":{"source":{"id":"2110.07305","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-10-14T12:15:58Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"62e908fbf7884682c26fe9b3157fb0bf6e19aba454b9e9b648cbbe594b55462b","abstract_canon_sha256":"0221d5fb7ae9aeac694efe17dc5c9ce4a89fcd32d01d67505bee9d7f05a2be4c"},"schema_version":"1.0"},"canonical_sha256":"880df9d9bc886b4797f05e83efd90da9b5204ecdff13265ec1d4b3a532982674","source":{"kind":"arxiv","id":"2110.07305","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.07305","created_at":"2026-07-05T03:22:40Z"},{"alias_kind":"arxiv_version","alias_value":"2110.07305v1","created_at":"2026-07-05T03:22:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.07305","created_at":"2026-07-05T03:22:40Z"},{"alias_kind":"pith_short_12","alias_value":"RAG7TWN4RBVU","created_at":"2026-07-05T03:22:40Z"},{"alias_kind":"pith_short_16","alias_value":"RAG7TWN4RBVUPF7Q","created_at":"2026-07-05T03:22:40Z"},{"alias_kind":"pith_short_8","alias_value":"RAG7TWN4","created_at":"2026-07-05T03:22:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:RAG7TWN4RBVUPF7QL2B67WINVG","target":"record","payload":{"canonical_record":{"source":{"id":"2110.07305","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-10-14T12:15:58Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"62e908fbf7884682c26fe9b3157fb0bf6e19aba454b9e9b648cbbe594b55462b","abstract_canon_sha256":"0221d5fb7ae9aeac694efe17dc5c9ce4a89fcd32d01d67505bee9d7f05a2be4c"},"schema_version":"1.0"},"canonical_sha256":"880df9d9bc886b4797f05e83efd90da9b5204ecdff13265ec1d4b3a532982674","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:22:40.944547Z","signature_b64":"6EO0h4gVFeS6pMHYqynUSYxsgK2U/NYybTRU3aQdFcf5+/bJSfykE/W5GJExk2GrgwQxOm83grela0Rhv0loCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"880df9d9bc886b4797f05e83efd90da9b5204ecdff13265ec1d4b3a532982674","last_reissued_at":"2026-07-05T03:22:40.944187Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:22:40.944187Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2110.07305","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:22:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9ID4GzlasSGgumzr8Lnf4hXdYSHZ1HhELkImj6IrQp+A3qj2HdUuCmI4ItWuhW2VEmIBhhRNOLLGRKL8s4QtCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T17:41:07.077392Z"},"content_sha256":"4488797ab42f450c42785915344b3c25381577173963c17544c2c101279a7f01","schema_version":"1.0","event_id":"sha256:4488797ab42f450c42785915344b3c25381577173963c17544c2c101279a7f01"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:RAG7TWN4RBVUPF7QL2B67WINVG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DI-AA: An Interpretable White-box Attack for Fooling Deep Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Jianhua Wang, Jiqiang Liu, Ricardo J. Rodr\\'iguez, Xiaolin Chang, Yixiang Wang","submitted_at":"2021-10-14T12:15:58Z","abstract_excerpt":"White-box Adversarial Example (AE) attacks towards Deep Neural Networks (DNNs) have a more powerful destructive capacity than black-box AE attacks in the fields of AE strategies. However, almost all the white-box approaches lack interpretation from the point of view of DNNs. That is, adversaries did not investigate the attacks from the perspective of interpretable features, and few of these approaches considered what features the DNN actually learns. In this paper, we propose an interpretable white-box AE attack approach, DI-AA, which explores the application of the interpretable approach of t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.07305","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2110.07305/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:22:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rBeOH4ixqbiEmvQkUuagipUqC92gxSqplvqXskRpgyptOwTa6qywAsY5TBaRVYx8EAKx2Jl0T9uYCNdL6UOnAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T17:41:07.078319Z"},"content_sha256":"499a3db0e280750141ba7927a3d7cbfe214687892188a1ff616622466a739684","schema_version":"1.0","event_id":"sha256:499a3db0e280750141ba7927a3d7cbfe214687892188a1ff616622466a739684"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RAG7TWN4RBVUPF7QL2B67WINVG/bundle.json","state_url":"https://pith.science/pith/RAG7TWN4RBVUPF7QL2B67WINVG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RAG7TWN4RBVUPF7QL2B67WINVG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T17:41:07Z","links":{"resolver":"https://pith.science/pith/RAG7TWN4RBVUPF7QL2B67WINVG","bundle":"https://pith.science/pith/RAG7TWN4RBVUPF7QL2B67WINVG/bundle.json","state":"https://pith.science/pith/RAG7TWN4RBVUPF7QL2B67WINVG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RAG7TWN4RBVUPF7QL2B67WINVG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:RAG7TWN4RBVUPF7QL2B67WINVG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0221d5fb7ae9aeac694efe17dc5c9ce4a89fcd32d01d67505bee9d7f05a2be4c","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-10-14T12:15:58Z","title_canon_sha256":"62e908fbf7884682c26fe9b3157fb0bf6e19aba454b9e9b648cbbe594b55462b"},"schema_version":"1.0","source":{"id":"2110.07305","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.07305","created_at":"2026-07-05T03:22:40Z"},{"alias_kind":"arxiv_version","alias_value":"2110.07305v1","created_at":"2026-07-05T03:22:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.07305","created_at":"2026-07-05T03:22:40Z"},{"alias_kind":"pith_short_12","alias_value":"RAG7TWN4RBVU","created_at":"2026-07-05T03:22:40Z"},{"alias_kind":"pith_short_16","alias_value":"RAG7TWN4RBVUPF7Q","created_at":"2026-07-05T03:22:40Z"},{"alias_kind":"pith_short_8","alias_value":"RAG7TWN4","created_at":"2026-07-05T03:22:40Z"}],"graph_snapshots":[{"event_id":"sha256:499a3db0e280750141ba7927a3d7cbfe214687892188a1ff616622466a739684","target":"graph","created_at":"2026-07-05T03:22:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2110.07305/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"White-box Adversarial Example (AE) attacks towards Deep Neural Networks (DNNs) have a more powerful destructive capacity than black-box AE attacks in the fields of AE strategies. However, almost all the white-box approaches lack interpretation from the point of view of DNNs. That is, adversaries did not investigate the attacks from the perspective of interpretable features, and few of these approaches considered what features the DNN actually learns. In this paper, we propose an interpretable white-box AE attack approach, DI-AA, which explores the application of the interpretable approach of t","authors_text":"Jianhua Wang, Jiqiang Liu, Ricardo J. Rodr\\'iguez, Xiaolin Chang, Yixiang Wang","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-10-14T12:15:58Z","title":"DI-AA: An Interpretable White-box Attack for Fooling Deep Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.07305","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4488797ab42f450c42785915344b3c25381577173963c17544c2c101279a7f01","target":"record","created_at":"2026-07-05T03:22:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0221d5fb7ae9aeac694efe17dc5c9ce4a89fcd32d01d67505bee9d7f05a2be4c","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-10-14T12:15:58Z","title_canon_sha256":"62e908fbf7884682c26fe9b3157fb0bf6e19aba454b9e9b648cbbe594b55462b"},"schema_version":"1.0","source":{"id":"2110.07305","kind":"arxiv","version":1}},"canonical_sha256":"880df9d9bc886b4797f05e83efd90da9b5204ecdff13265ec1d4b3a532982674","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"880df9d9bc886b4797f05e83efd90da9b5204ecdff13265ec1d4b3a532982674","first_computed_at":"2026-07-05T03:22:40.944187Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:22:40.944187Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6EO0h4gVFeS6pMHYqynUSYxsgK2U/NYybTRU3aQdFcf5+/bJSfykE/W5GJExk2GrgwQxOm83grela0Rhv0loCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:22:40.944547Z","signed_message":"canonical_sha256_bytes"},"source_id":"2110.07305","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4488797ab42f450c42785915344b3c25381577173963c17544c2c101279a7f01","sha256:499a3db0e280750141ba7927a3d7cbfe214687892188a1ff616622466a739684"],"state_sha256":"23f10b3760efa551132d4492bd4910e10e43c465aee178d0df859c6717c657b4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3e2qBPWU/aUIYHWjulVUxS3Bn4AHa/n7aQb3s+a9lVAAsMQIxfI0/iwi9XjM1yIMpIHnM1yG5dK3QT6jGD73Cg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T17:41:07.084567Z","bundle_sha256":"e76698cedfc3ed7c93b654cb477fcbc0ffae3ea4977cbb8a1a367b92b5397e7c"}}