{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:RHGUKZ43XNEWNLBTW5J2G3SIQN","short_pith_number":"pith:RHGUKZ43","canonical_record":{"source":{"id":"2012.03843","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2020-12-07T16:47:33Z","cross_cats_sorted":[],"title_canon_sha256":"f6f0de290fab7e02443b9457fbd0a848ea80ab8ba8f104b90b31b2796933a7d7","abstract_canon_sha256":"6f1515d7751d149c99dc63458bd538e9c0b51377fe8c3fbc0a8a92b8ecbc7faa"},"schema_version":"1.0"},"canonical_sha256":"89cd45679bbb4966ac33b753a36e488363002c99d5ba61a2c5c0b221e96686ec","source":{"kind":"arxiv","id":"2012.03843","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2012.03843","created_at":"2026-07-05T04:08:38Z"},{"alias_kind":"arxiv_version","alias_value":"2012.03843v2","created_at":"2026-07-05T04:08:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.03843","created_at":"2026-07-05T04:08:38Z"},{"alias_kind":"pith_short_12","alias_value":"RHGUKZ43XNEW","created_at":"2026-07-05T04:08:38Z"},{"alias_kind":"pith_short_16","alias_value":"RHGUKZ43XNEWNLBT","created_at":"2026-07-05T04:08:38Z"},{"alias_kind":"pith_short_8","alias_value":"RHGUKZ43","created_at":"2026-07-05T04:08:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:RHGUKZ43XNEWNLBTW5J2G3SIQN","target":"record","payload":{"canonical_record":{"source":{"id":"2012.03843","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2020-12-07T16:47:33Z","cross_cats_sorted":[],"title_canon_sha256":"f6f0de290fab7e02443b9457fbd0a848ea80ab8ba8f104b90b31b2796933a7d7","abstract_canon_sha256":"6f1515d7751d149c99dc63458bd538e9c0b51377fe8c3fbc0a8a92b8ecbc7faa"},"schema_version":"1.0"},"canonical_sha256":"89cd45679bbb4966ac33b753a36e488363002c99d5ba61a2c5c0b221e96686ec","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:08:38.375954Z","signature_b64":"oYTzSt6FR795+utMJPxN6zT2mfjprRdk47yEnQ2XbcxcEV6RngZJIeT2ZL/WoJeIKKTismnOu62WUEgCF+pTAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"89cd45679bbb4966ac33b753a36e488363002c99d5ba61a2c5c0b221e96686ec","last_reissued_at":"2026-07-05T04:08:38.375513Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:08:38.375513Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2012.03843","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:08:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CvJZdkqqMXyD5zYiyNs6yhRzZkF9MStD2CrgJOdYt49lZfkxMJfMRP3ZlrKrqUp9XoyrhxCACfjVNlpaKatvCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T08:54:06.011790Z"},"content_sha256":"9c5b5737ea47265d47b004753dce0a671bc84cbd86ed4cbc607b9d9539a6e567","schema_version":"1.0","event_id":"sha256:9c5b5737ea47265d47b004753dce0a671bc84cbd86ed4cbc607b9d9539a6e567"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:RHGUKZ43XNEWNLBTW5J2G3SIQN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Are DNNs fooled by extremely unrecognizable images?","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Hiroshi Kera, Soichiro Kumano, Toshihiko Yamasaki","submitted_at":"2020-12-07T16:47:33Z","abstract_excerpt":"Fooling images are a potential threat to deep neural networks (DNNs). These images are not recognizable to humans as natural objects, such as dogs and cats, but are misclassified by DNNs as natural-object classes with high confidence scores. Despite their original design concept, existing fooling images retain some features that are characteristic of the target objects if looked into closely. Hence, DNNs can react to these features. In this paper, we address the question of whether there can be fooling images with no characteristic pattern of natural objects locally or globally. As a minimal c"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.03843","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2012.03843/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:08:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rHRhkkGWEn6oolwbmKOm3bLhAQlHBvofFr2XQRCKAsXz+4ChaJMahASdhvsL04Ttwi+gNvtsRrh5LQ+Ni3XkAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T08:54:06.012122Z"},"content_sha256":"0e2e545136b786a64ccb63f7bae5f23714c7a155d4a707362f8ba6f40ee85de2","schema_version":"1.0","event_id":"sha256:0e2e545136b786a64ccb63f7bae5f23714c7a155d4a707362f8ba6f40ee85de2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RHGUKZ43XNEWNLBTW5J2G3SIQN/bundle.json","state_url":"https://pith.science/pith/RHGUKZ43XNEWNLBTW5J2G3SIQN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RHGUKZ43XNEWNLBTW5J2G3SIQN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T08:54:06Z","links":{"resolver":"https://pith.science/pith/RHGUKZ43XNEWNLBTW5J2G3SIQN","bundle":"https://pith.science/pith/RHGUKZ43XNEWNLBTW5J2G3SIQN/bundle.json","state":"https://pith.science/pith/RHGUKZ43XNEWNLBTW5J2G3SIQN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RHGUKZ43XNEWNLBTW5J2G3SIQN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:RHGUKZ43XNEWNLBTW5J2G3SIQN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6f1515d7751d149c99dc63458bd538e9c0b51377fe8c3fbc0a8a92b8ecbc7faa","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2020-12-07T16:47:33Z","title_canon_sha256":"f6f0de290fab7e02443b9457fbd0a848ea80ab8ba8f104b90b31b2796933a7d7"},"schema_version":"1.0","source":{"id":"2012.03843","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2012.03843","created_at":"2026-07-05T04:08:38Z"},{"alias_kind":"arxiv_version","alias_value":"2012.03843v2","created_at":"2026-07-05T04:08:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.03843","created_at":"2026-07-05T04:08:38Z"},{"alias_kind":"pith_short_12","alias_value":"RHGUKZ43XNEW","created_at":"2026-07-05T04:08:38Z"},{"alias_kind":"pith_short_16","alias_value":"RHGUKZ43XNEWNLBT","created_at":"2026-07-05T04:08:38Z"},{"alias_kind":"pith_short_8","alias_value":"RHGUKZ43","created_at":"2026-07-05T04:08:38Z"}],"graph_snapshots":[{"event_id":"sha256:0e2e545136b786a64ccb63f7bae5f23714c7a155d4a707362f8ba6f40ee85de2","target":"graph","created_at":"2026-07-05T04:08:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2012.03843/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Fooling images are a potential threat to deep neural networks (DNNs). These images are not recognizable to humans as natural objects, such as dogs and cats, but are misclassified by DNNs as natural-object classes with high confidence scores. Despite their original design concept, existing fooling images retain some features that are characteristic of the target objects if looked into closely. Hence, DNNs can react to these features. In this paper, we address the question of whether there can be fooling images with no characteristic pattern of natural objects locally or globally. As a minimal c","authors_text":"Hiroshi Kera, Soichiro Kumano, Toshihiko Yamasaki","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2020-12-07T16:47:33Z","title":"Are DNNs fooled by extremely unrecognizable images?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.03843","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9c5b5737ea47265d47b004753dce0a671bc84cbd86ed4cbc607b9d9539a6e567","target":"record","created_at":"2026-07-05T04:08:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6f1515d7751d149c99dc63458bd538e9c0b51377fe8c3fbc0a8a92b8ecbc7faa","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2020-12-07T16:47:33Z","title_canon_sha256":"f6f0de290fab7e02443b9457fbd0a848ea80ab8ba8f104b90b31b2796933a7d7"},"schema_version":"1.0","source":{"id":"2012.03843","kind":"arxiv","version":2}},"canonical_sha256":"89cd45679bbb4966ac33b753a36e488363002c99d5ba61a2c5c0b221e96686ec","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"89cd45679bbb4966ac33b753a36e488363002c99d5ba61a2c5c0b221e96686ec","first_computed_at":"2026-07-05T04:08:38.375513Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:08:38.375513Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"oYTzSt6FR795+utMJPxN6zT2mfjprRdk47yEnQ2XbcxcEV6RngZJIeT2ZL/WoJeIKKTismnOu62WUEgCF+pTAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T04:08:38.375954Z","signed_message":"canonical_sha256_bytes"},"source_id":"2012.03843","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9c5b5737ea47265d47b004753dce0a671bc84cbd86ed4cbc607b9d9539a6e567","sha256:0e2e545136b786a64ccb63f7bae5f23714c7a155d4a707362f8ba6f40ee85de2"],"state_sha256":"37c212c6bf3e738ed433c08a314fc8175d757cf1a9ac1cfdb4c75e1927da41cb"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FWAZiNS6Pw1qN4fkeg+lDbI2USXrKqPKnbBnV6up6MSW+eYufHeNDiMgkuKkx2HpQ06M0ypDM3zvgJw4cKdrDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T08:54:06.015155Z","bundle_sha256":"3a90a5a037bec302bea7889363d0c53703a3f734da471fafc1cda9188984df3c"}}