{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:RWOWBYKCX3ZGAU5C6ZGVCOP2JZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3dc14cce8ccd7fdd088b179905a97f02363cfbbe5dfee6d5e7c842039e3d3268","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-29T03:36:42Z","title_canon_sha256":"b2aad7dc176bf555c9f8c1971ae5fe76acb94176b9bd4358b3ba6e50087f88bd"},"schema_version":"1.0","source":{"id":"2309.16952","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.16952","created_at":"2026-07-05T07:35:40Z"},{"alias_kind":"arxiv_version","alias_value":"2309.16952v2","created_at":"2026-07-05T07:35:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.16952","created_at":"2026-07-05T07:35:40Z"},{"alias_kind":"pith_short_12","alias_value":"RWOWBYKCX3ZG","created_at":"2026-07-05T07:35:40Z"},{"alias_kind":"pith_short_16","alias_value":"RWOWBYKCX3ZGAU5C","created_at":"2026-07-05T07:35:40Z"},{"alias_kind":"pith_short_8","alias_value":"RWOWBYKC","created_at":"2026-07-05T07:35:40Z"}],"graph_snapshots":[{"event_id":"sha256:3805f3929a33f838981f3e7164155c62e4012718f3ddad6e7d6d51d4ac91762b","target":"graph","created_at":"2026-07-05T07:35:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.16952/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Untrustworthy users can misuse image generators to synthesize high-quality deepfakes and engage in unethical activities. Watermarking deters misuse by marking generated content with a hidden message, enabling its detection using a secret watermarking key. A core security property of watermarking is robustness, which states that an attacker can only evade detection by substantially degrading image quality. Assessing robustness requires designing an adaptive attack for the specific watermarking algorithm. When evaluating watermarking algorithms and their (adaptive) attacks, it is challenging to ","authors_text":"Abdulrahman Diaa, Florian Kerschbaum, Lucas Fenaux, Nils Lukas","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-29T03:36:42Z","title":"Leveraging Optimization for Adaptive Attacks on Image Watermarks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.16952","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5521373e4ebc1f25fa91089d212763297ef2d063c349918e7aeede56a9470cb9","target":"record","created_at":"2026-07-05T07:35:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3dc14cce8ccd7fdd088b179905a97f02363cfbbe5dfee6d5e7c842039e3d3268","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-29T03:36:42Z","title_canon_sha256":"b2aad7dc176bf555c9f8c1971ae5fe76acb94176b9bd4358b3ba6e50087f88bd"},"schema_version":"1.0","source":{"id":"2309.16952","kind":"arxiv","version":2}},"canonical_sha256":"8d9d60e142bef26053a2f64d5139fa4e58a3c6186d382651dbb0288e9b88183d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8d9d60e142bef26053a2f64d5139fa4e58a3c6186d382651dbb0288e9b88183d","first_computed_at":"2026-07-05T07:35:40.297634Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:35:40.297634Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"YyBtMmiFT3uiBcdOVZd2VCJGyWjTfrBNEWFNB9QkfgAc7lSrbzqX3+Os7DWP+dHYICFOJpU3+8FALGK59SIeDg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:35:40.298083Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.16952","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5521373e4ebc1f25fa91089d212763297ef2d063c349918e7aeede56a9470cb9","sha256:3805f3929a33f838981f3e7164155c62e4012718f3ddad6e7d6d51d4ac91762b"],"state_sha256":"fb819f80e38bbac07cd4abb36a3099901f0bbe934afbaace6f79a33848a73650"}