{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:SQKNR5TZBTNDSFUO2FDTKOZILK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"74f13d5a2435b891c5158b81b269bda8733e66cc10475d598518bb0754b76fd4","cross_cats_sorted":["eess.IV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-08-20T15:38:40Z","title_canon_sha256":"6e38c3f702ec4ffffd922ba1f0017bffa409fc2cb9dd8d10410a0df67df65e9c"},"schema_version":"1.0","source":{"id":"2308.10299","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.10299","created_at":"2026-07-05T07:59:52Z"},{"alias_kind":"arxiv_version","alias_value":"2308.10299v3","created_at":"2026-07-05T07:59:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.10299","created_at":"2026-07-05T07:59:52Z"},{"alias_kind":"pith_short_12","alias_value":"SQKNR5TZBTND","created_at":"2026-07-05T07:59:52Z"},{"alias_kind":"pith_short_16","alias_value":"SQKNR5TZBTNDSFUO","created_at":"2026-07-05T07:59:52Z"},{"alias_kind":"pith_short_8","alias_value":"SQKNR5TZ","created_at":"2026-07-05T07:59:52Z"}],"graph_snapshots":[{"event_id":"sha256:ff413810b3d1f901f17a5b84c16efc68c0d47a06425fa3ad93e29aa05b566237","target":"graph","created_at":"2026-07-05T07:59:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2308.10299/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial examples mislead deep neural networks with imperceptible perturbations and have brought significant threats to deep learning. An important aspect is their transferability, which refers to their ability to deceive other models, thus enabling attacks in the black-box setting. Though various methods have been proposed to boost transferability, the performance still falls short compared with white-box attacks. In this work, we observe that existing input transformation based attacks, one of the mainstream transfer-based attacks, result in different attention heatmaps on various models,","authors_text":"Kunyu Wang, Wenxuan Wang, Xiaosen Wang, Xuanran He","cross_cats":["eess.IV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-08-20T15:38:40Z","title":"Boosting Adversarial Transferability by Block Shuffle and Rotation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.10299","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:64184a799d69d5fe011ef686388cbddacdec1efaeb9e8cefbc4a2340c3973080","target":"record","created_at":"2026-07-05T07:59:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"74f13d5a2435b891c5158b81b269bda8733e66cc10475d598518bb0754b76fd4","cross_cats_sorted":["eess.IV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-08-20T15:38:40Z","title_canon_sha256":"6e38c3f702ec4ffffd922ba1f0017bffa409fc2cb9dd8d10410a0df67df65e9c"},"schema_version":"1.0","source":{"id":"2308.10299","kind":"arxiv","version":3}},"canonical_sha256":"9414d8f6790cda39168ed147353b285aa54e31f959948bd19869720039ed4091","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9414d8f6790cda39168ed147353b285aa54e31f959948bd19869720039ed4091","first_computed_at":"2026-07-05T07:59:52.361826Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:59:52.361826Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"74Mmusv2NaDNzHIR7pD59CfNECNVzswRIG+9E7mmSFVb6p9UyxHDR3jgK8YlqaHHFnhMiNE/gL3fzo76sFMlDg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:59:52.362299Z","signed_message":"canonical_sha256_bytes"},"source_id":"2308.10299","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:64184a799d69d5fe011ef686388cbddacdec1efaeb9e8cefbc4a2340c3973080","sha256:ff413810b3d1f901f17a5b84c16efc68c0d47a06425fa3ad93e29aa05b566237"],"state_sha256":"3824cbcfd63fa9cf5727be7ecf20a338f9eae1ea592347c252a42bb4cf6487fc"}