{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:RIUGKLHIHR7FB2WTBRBW4NBDNB","short_pith_number":"pith:RIUGKLHI","canonical_record":{"source":{"id":"2206.01898","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-06-04T03:56:07Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"0484c24c1a523812211175172215f77bff51329128096a0d6923ffc1d75fc0e0","abstract_canon_sha256":"43c9bf0de5d88fd2852bb28945b6455fc70a14039fc8756c9e372849efe8cfec"},"schema_version":"1.0"},"canonical_sha256":"8a28652ce83c7e50ead30c436e342368629981ebe38ad87527d25bb270e366fe","source":{"kind":"arxiv","id":"2206.01898","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2206.01898","created_at":"2026-07-05T04:28:57Z"},{"alias_kind":"arxiv_version","alias_value":"2206.01898v1","created_at":"2026-07-05T04:28:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2206.01898","created_at":"2026-07-05T04:28:57Z"},{"alias_kind":"pith_short_12","alias_value":"RIUGKLHIHR7F","created_at":"2026-07-05T04:28:57Z"},{"alias_kind":"pith_short_16","alias_value":"RIUGKLHIHR7FB2WT","created_at":"2026-07-05T04:28:57Z"},{"alias_kind":"pith_short_8","alias_value":"RIUGKLHI","created_at":"2026-07-05T04:28:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:RIUGKLHIHR7FB2WTBRBW4NBDNB","target":"record","payload":{"canonical_record":{"source":{"id":"2206.01898","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-06-04T03:56:07Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"0484c24c1a523812211175172215f77bff51329128096a0d6923ffc1d75fc0e0","abstract_canon_sha256":"43c9bf0de5d88fd2852bb28945b6455fc70a14039fc8756c9e372849efe8cfec"},"schema_version":"1.0"},"canonical_sha256":"8a28652ce83c7e50ead30c436e342368629981ebe38ad87527d25bb270e366fe","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:28:57.443250Z","signature_b64":"7JELrAus6g7y3fI5Gj+rUzgvpWxA965ysOG3KhO9nGCqRTgvrgKzExhQHoTJvN9uIOIjqYmkQH672qNDgZrADQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8a28652ce83c7e50ead30c436e342368629981ebe38ad87527d25bb270e366fe","last_reissued_at":"2026-07-05T04:28:57.442790Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:28:57.442790Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2206.01898","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:28:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZUtof3dopzLMKQf1ZkdOM7AbIyuWjaAQR48vn7/8JJozB7GIPcsdoaqPfHv6emyFIDShsNqx2CyYl4zNSDD/AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T16:08:34.291953Z"},"content_sha256":"320a43d86e83babacef055825de604eb868de0e2b48cda9158d878e9fb67ee7f","schema_version":"1.0","event_id":"sha256:320a43d86e83babacef055825de604eb868de0e2b48cda9158d878e9fb67ee7f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:RIUGKLHIHR7FB2WTBRBW4NBDNB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Saliency Attack: Towards Imperceptible Black-box Adversarial Attack","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Ke Tang, Qing Li, Shengcai Liu, Zeyu Dai","submitted_at":"2022-06-04T03:56:07Z","abstract_excerpt":"Deep neural networks are vulnerable to adversarial examples, even in the black-box setting where the attacker is only accessible to the model output. Recent studies have devised effective black-box attacks with high query efficiency. However, such performance is often accompanied by compromises in attack imperceptibility, hindering the practical use of these approaches. In this paper, we propose to restrict the perturbations to a small salient region to generate adversarial examples that can hardly be perceived. This approach is readily compatible with many existing black-box attacks and can s"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2206.01898","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2206.01898/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:28:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"z8CM63ECE7aho3qU19EXyUz/7xiTvEfN+R2f60HGhq6BAVFqIBPxr9Uuks+kFUvJPKchW7ZofwrToVRo9xX1CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T16:08:34.292463Z"},"content_sha256":"30cc9879c1ae2dbd9943c9f2bb9b0eaafd46350ae55dc951ea6e90d9cbbf72c9","schema_version":"1.0","event_id":"sha256:30cc9879c1ae2dbd9943c9f2bb9b0eaafd46350ae55dc951ea6e90d9cbbf72c9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RIUGKLHIHR7FB2WTBRBW4NBDNB/bundle.json","state_url":"https://pith.science/pith/RIUGKLHIHR7FB2WTBRBW4NBDNB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RIUGKLHIHR7FB2WTBRBW4NBDNB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T16:08:34Z","links":{"resolver":"https://pith.science/pith/RIUGKLHIHR7FB2WTBRBW4NBDNB","bundle":"https://pith.science/pith/RIUGKLHIHR7FB2WTBRBW4NBDNB/bundle.json","state":"https://pith.science/pith/RIUGKLHIHR7FB2WTBRBW4NBDNB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RIUGKLHIHR7FB2WTBRBW4NBDNB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:RIUGKLHIHR7FB2WTBRBW4NBDNB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"43c9bf0de5d88fd2852bb28945b6455fc70a14039fc8756c9e372849efe8cfec","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-06-04T03:56:07Z","title_canon_sha256":"0484c24c1a523812211175172215f77bff51329128096a0d6923ffc1d75fc0e0"},"schema_version":"1.0","source":{"id":"2206.01898","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2206.01898","created_at":"2026-07-05T04:28:57Z"},{"alias_kind":"arxiv_version","alias_value":"2206.01898v1","created_at":"2026-07-05T04:28:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2206.01898","created_at":"2026-07-05T04:28:57Z"},{"alias_kind":"pith_short_12","alias_value":"RIUGKLHIHR7F","created_at":"2026-07-05T04:28:57Z"},{"alias_kind":"pith_short_16","alias_value":"RIUGKLHIHR7FB2WT","created_at":"2026-07-05T04:28:57Z"},{"alias_kind":"pith_short_8","alias_value":"RIUGKLHI","created_at":"2026-07-05T04:28:57Z"}],"graph_snapshots":[{"event_id":"sha256:30cc9879c1ae2dbd9943c9f2bb9b0eaafd46350ae55dc951ea6e90d9cbbf72c9","target":"graph","created_at":"2026-07-05T04:28:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2206.01898/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks are vulnerable to adversarial examples, even in the black-box setting where the attacker is only accessible to the model output. Recent studies have devised effective black-box attacks with high query efficiency. However, such performance is often accompanied by compromises in attack imperceptibility, hindering the practical use of these approaches. In this paper, we propose to restrict the perturbations to a small salient region to generate adversarial examples that can hardly be perceived. This approach is readily compatible with many existing black-box attacks and can s","authors_text":"Ke Tang, Qing Li, Shengcai Liu, Zeyu Dai","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-06-04T03:56:07Z","title":"Saliency Attack: Towards Imperceptible Black-box Adversarial Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2206.01898","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:320a43d86e83babacef055825de604eb868de0e2b48cda9158d878e9fb67ee7f","target":"record","created_at":"2026-07-05T04:28:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"43c9bf0de5d88fd2852bb28945b6455fc70a14039fc8756c9e372849efe8cfec","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-06-04T03:56:07Z","title_canon_sha256":"0484c24c1a523812211175172215f77bff51329128096a0d6923ffc1d75fc0e0"},"schema_version":"1.0","source":{"id":"2206.01898","kind":"arxiv","version":1}},"canonical_sha256":"8a28652ce83c7e50ead30c436e342368629981ebe38ad87527d25bb270e366fe","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8a28652ce83c7e50ead30c436e342368629981ebe38ad87527d25bb270e366fe","first_computed_at":"2026-07-05T04:28:57.442790Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:28:57.442790Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7JELrAus6g7y3fI5Gj+rUzgvpWxA965ysOG3KhO9nGCqRTgvrgKzExhQHoTJvN9uIOIjqYmkQH672qNDgZrADQ==","signature_status":"signed_v1","signed_at":"2026-07-05T04:28:57.443250Z","signed_message":"canonical_sha256_bytes"},"source_id":"2206.01898","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:320a43d86e83babacef055825de604eb868de0e2b48cda9158d878e9fb67ee7f","sha256:30cc9879c1ae2dbd9943c9f2bb9b0eaafd46350ae55dc951ea6e90d9cbbf72c9"],"state_sha256":"3f5598948e673f8ecdeaee054113b0764fafb31e56737c15f7996b4fbd790767"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"F1quF6pG8LpYSORpP4e2t7XgkqXicYqWcY5RY5Owb6p8OCbcP5tnG2baPfsDfz76votv5WZ0CvZtAf//+UsEDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T16:08:34.297151Z","bundle_sha256":"a5b54b0d2e3a5ee1f3ad3e36fc5e43fb56e59d7abf20a51bdc4b219d0bab2a8d"}}