{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:TIUJRNDXEZGOKLWCCUUK7CPDNO","short_pith_number":"pith:TIUJRNDX","canonical_record":{"source":{"id":"2309.01104","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-03T07:01:34Z","cross_cats_sorted":["cs.CR","cs.LG","cs.MM"],"title_canon_sha256":"84fbd76cc8b3b90d9b28ebcaebb97c811226ac97f1d747e6b3306f16c0d1ff1b","abstract_canon_sha256":"f18572d3b5cfed5e2ff48414752e64457cf763b8abbf3c2dc55cd323f105c59c"},"schema_version":"1.0"},"canonical_sha256":"9a2898b477264ce52ec21528af89e36bbe07994fbcd4fdf27acee566a10ace47","source":{"kind":"arxiv","id":"2309.01104","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.01104","created_at":"2026-07-05T06:47:32Z"},{"alias_kind":"arxiv_version","alias_value":"2309.01104v1","created_at":"2026-07-05T06:47:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.01104","created_at":"2026-07-05T06:47:32Z"},{"alias_kind":"pith_short_12","alias_value":"TIUJRNDXEZGO","created_at":"2026-07-05T06:47:32Z"},{"alias_kind":"pith_short_16","alias_value":"TIUJRNDXEZGOKLWC","created_at":"2026-07-05T06:47:32Z"},{"alias_kind":"pith_short_8","alias_value":"TIUJRNDX","created_at":"2026-07-05T06:47:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:TIUJRNDXEZGOKLWCCUUK7CPDNO","target":"record","payload":{"canonical_record":{"source":{"id":"2309.01104","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-03T07:01:34Z","cross_cats_sorted":["cs.CR","cs.LG","cs.MM"],"title_canon_sha256":"84fbd76cc8b3b90d9b28ebcaebb97c811226ac97f1d747e6b3306f16c0d1ff1b","abstract_canon_sha256":"f18572d3b5cfed5e2ff48414752e64457cf763b8abbf3c2dc55cd323f105c59c"},"schema_version":"1.0"},"canonical_sha256":"9a2898b477264ce52ec21528af89e36bbe07994fbcd4fdf27acee566a10ace47","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:47:32.378842Z","signature_b64":"yd/WqSXsev0eHnbzgopCX2T9JkOWm8lJ6IUeixbyq2LhCueBIklid6Dnd6f+w1ijlpdg0qP0KgSvw3yFpbMsCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9a2898b477264ce52ec21528af89e36bbe07994fbcd4fdf27acee566a10ace47","last_reissued_at":"2026-07-05T06:47:32.378265Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:47:32.378265Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.01104","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:47:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ClkUKkHBVERkeunMG1eZ3WbM7a81JjHBbnQr0NrEaZl21Azubbct61S9ZY9mOgDPiod/gL0QunKZMgh3qqNgDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:02:11.576590Z"},"content_sha256":"e63b039bd8c88e5602b31992e6fe026cec20bb9edeb185cf698ecb76d66032cf","schema_version":"1.0","event_id":"sha256:e63b039bd8c88e5602b31992e6fe026cec20bb9edeb185cf698ecb76d66032cf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:TIUJRNDXEZGOKLWCCUUK7CPDNO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Turn Fake into Real: Adversarial Head Turn Attacks Against Deepfake Detection","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.CR","cs.LG","cs.MM"],"primary_cat":"cs.CV","authors_text":"Bruno Lepri, Nicu Sebe, Weijie Wang, Zhengyu Zhao","submitted_at":"2023-09-03T07:01:34Z","abstract_excerpt":"Malicious use of deepfakes leads to serious public concerns and reduces people's trust in digital media. Although effective deepfake detectors have been proposed, they are substantially vulnerable to adversarial attacks. To evaluate the detector's robustness, recent studies have explored various attacks. However, all existing attacks are limited to 2D image perturbations, which are hard to translate into real-world facial changes. In this paper, we propose adversarial head turn (AdvHeat), the first attempt at 3D adversarial face views against deepfake detectors, based on face view synthesis fr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.01104","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.01104/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:47:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OcVQP0A5psuyABampzZJGv3m2HA7LayoY9Azg3+gz3EXcPtR/03UOqVGE++WUSFNSycldAEhAvz57zzJfcrnBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:02:11.577109Z"},"content_sha256":"44609a4b6c1e2ce0e6b98ea7141a76aed2903e2b85b99417bf58724030bf1348","schema_version":"1.0","event_id":"sha256:44609a4b6c1e2ce0e6b98ea7141a76aed2903e2b85b99417bf58724030bf1348"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TIUJRNDXEZGOKLWCCUUK7CPDNO/bundle.json","state_url":"https://pith.science/pith/TIUJRNDXEZGOKLWCCUUK7CPDNO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TIUJRNDXEZGOKLWCCUUK7CPDNO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T18:02:11Z","links":{"resolver":"https://pith.science/pith/TIUJRNDXEZGOKLWCCUUK7CPDNO","bundle":"https://pith.science/pith/TIUJRNDXEZGOKLWCCUUK7CPDNO/bundle.json","state":"https://pith.science/pith/TIUJRNDXEZGOKLWCCUUK7CPDNO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TIUJRNDXEZGOKLWCCUUK7CPDNO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:TIUJRNDXEZGOKLWCCUUK7CPDNO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f18572d3b5cfed5e2ff48414752e64457cf763b8abbf3c2dc55cd323f105c59c","cross_cats_sorted":["cs.CR","cs.LG","cs.MM"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-03T07:01:34Z","title_canon_sha256":"84fbd76cc8b3b90d9b28ebcaebb97c811226ac97f1d747e6b3306f16c0d1ff1b"},"schema_version":"1.0","source":{"id":"2309.01104","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.01104","created_at":"2026-07-05T06:47:32Z"},{"alias_kind":"arxiv_version","alias_value":"2309.01104v1","created_at":"2026-07-05T06:47:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.01104","created_at":"2026-07-05T06:47:32Z"},{"alias_kind":"pith_short_12","alias_value":"TIUJRNDXEZGO","created_at":"2026-07-05T06:47:32Z"},{"alias_kind":"pith_short_16","alias_value":"TIUJRNDXEZGOKLWC","created_at":"2026-07-05T06:47:32Z"},{"alias_kind":"pith_short_8","alias_value":"TIUJRNDX","created_at":"2026-07-05T06:47:32Z"}],"graph_snapshots":[{"event_id":"sha256:44609a4b6c1e2ce0e6b98ea7141a76aed2903e2b85b99417bf58724030bf1348","target":"graph","created_at":"2026-07-05T06:47:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.01104/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Malicious use of deepfakes leads to serious public concerns and reduces people's trust in digital media. Although effective deepfake detectors have been proposed, they are substantially vulnerable to adversarial attacks. To evaluate the detector's robustness, recent studies have explored various attacks. However, all existing attacks are limited to 2D image perturbations, which are hard to translate into real-world facial changes. In this paper, we propose adversarial head turn (AdvHeat), the first attempt at 3D adversarial face views against deepfake detectors, based on face view synthesis fr","authors_text":"Bruno Lepri, Nicu Sebe, Weijie Wang, Zhengyu Zhao","cross_cats":["cs.CR","cs.LG","cs.MM"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-03T07:01:34Z","title":"Turn Fake into Real: Adversarial Head Turn Attacks Against Deepfake Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.01104","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e63b039bd8c88e5602b31992e6fe026cec20bb9edeb185cf698ecb76d66032cf","target":"record","created_at":"2026-07-05T06:47:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f18572d3b5cfed5e2ff48414752e64457cf763b8abbf3c2dc55cd323f105c59c","cross_cats_sorted":["cs.CR","cs.LG","cs.MM"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-03T07:01:34Z","title_canon_sha256":"84fbd76cc8b3b90d9b28ebcaebb97c811226ac97f1d747e6b3306f16c0d1ff1b"},"schema_version":"1.0","source":{"id":"2309.01104","kind":"arxiv","version":1}},"canonical_sha256":"9a2898b477264ce52ec21528af89e36bbe07994fbcd4fdf27acee566a10ace47","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9a2898b477264ce52ec21528af89e36bbe07994fbcd4fdf27acee566a10ace47","first_computed_at":"2026-07-05T06:47:32.378265Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:47:32.378265Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"yd/WqSXsev0eHnbzgopCX2T9JkOWm8lJ6IUeixbyq2LhCueBIklid6Dnd6f+w1ijlpdg0qP0KgSvw3yFpbMsCg==","signature_status":"signed_v1","signed_at":"2026-07-05T06:47:32.378842Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.01104","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e63b039bd8c88e5602b31992e6fe026cec20bb9edeb185cf698ecb76d66032cf","sha256:44609a4b6c1e2ce0e6b98ea7141a76aed2903e2b85b99417bf58724030bf1348"],"state_sha256":"2dc44c686e5c8d4c8091f49cf6f0989dda11b17b163acbf422542c9007ae7f70"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4LGxinHVbftwnTNmu+pWrtEPtRC7xqf7ija5kuh8yMA2ioWYxgnXzGHkOAWbI7CBiE6kZTi/79PNGQ8c+26QDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T18:02:11.581512Z","bundle_sha256":"472a874f774dc7e046066810b3bb522fbc8215e5a1f37f3434158004ec6bc68e"}}