{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:TL2SYUWYJD4FF5WJJ7BRROBPFX","short_pith_number":"pith:TL2SYUWY","canonical_record":{"source":{"id":"2508.12384","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-08-17T14:47:31Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"af0bb1f54f7bb4ab7105d555b87d383aa28c217affec0ca7b5c45a39c4525d11","abstract_canon_sha256":"b0893fbbf0fabc307416ec9a2212a2a1ac91e444d66ff638f6a525c77b0eba38"},"schema_version":"1.0"},"canonical_sha256":"9af52c52d848f852f6c94fc318b82f2dd64693a9db1bc465b579e7c73cd76372","source":{"kind":"arxiv","id":"2508.12384","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.12384","created_at":"2026-07-05T11:55:04Z"},{"alias_kind":"arxiv_version","alias_value":"2508.12384v1","created_at":"2026-07-05T11:55:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.12384","created_at":"2026-07-05T11:55:04Z"},{"alias_kind":"pith_short_12","alias_value":"TL2SYUWYJD4F","created_at":"2026-07-05T11:55:04Z"},{"alias_kind":"pith_short_16","alias_value":"TL2SYUWYJD4FF5WJ","created_at":"2026-07-05T11:55:04Z"},{"alias_kind":"pith_short_8","alias_value":"TL2SYUWY","created_at":"2026-07-05T11:55:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:TL2SYUWYJD4FF5WJJ7BRROBPFX","target":"record","payload":{"canonical_record":{"source":{"id":"2508.12384","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-08-17T14:47:31Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"af0bb1f54f7bb4ab7105d555b87d383aa28c217affec0ca7b5c45a39c4525d11","abstract_canon_sha256":"b0893fbbf0fabc307416ec9a2212a2a1ac91e444d66ff638f6a525c77b0eba38"},"schema_version":"1.0"},"canonical_sha256":"9af52c52d848f852f6c94fc318b82f2dd64693a9db1bc465b579e7c73cd76372","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:55:04.800478Z","signature_b64":"p4MF8adwWQkvaIUxkBUkpSQMnWtVuBnLfP+E8SuKoGCySXD2AgSuwqYXURMKy/Yq9dt1rO2tin67835fVa0kBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9af52c52d848f852f6c94fc318b82f2dd64693a9db1bc465b579e7c73cd76372","last_reissued_at":"2026-07-05T11:55:04.799920Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:55:04.799920Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.12384","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:55:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wmVicy45AVZTa/nygzxHiM4Ka5thlFgpND+Cy+ZbHuqKy/UoG4X0QTTbFZqQ+sPFcuTZtrVpQIV1D8t/Y/joAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T09:02:21.707138Z"},"content_sha256":"5179c2a55a58df0fa2ea64f670108769183605d9462f9bbe155b7055efdd85b5","schema_version":"1.0","event_id":"sha256:5179c2a55a58df0fa2ea64f670108769183605d9462f9bbe155b7055efdd85b5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:TL2SYUWYJD4FF5WJJ7BRROBPFX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CV","authors_text":"Hanwen Cao, Haobo Lu, Kun He, Xiaosen Wang","submitted_at":"2025-08-17T14:47:31Z","abstract_excerpt":"Ensemble-based attacks have been proven to be effective in enhancing adversarial transferability by aggregating the outputs of models with various architectures. However, existing research primarily focuses on refining ensemble weights or optimizing the ensemble path, overlooking the exploration of ensemble models to enhance the transferability of adversarial attacks. To address this gap, we propose applying adversarial augmentation to the surrogate models, aiming to boost overall generalization of ensemble models and reduce the risk of adversarial overfitting. Meanwhile, observing that ensemb"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.12384","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.12384/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:55:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qKbnGVqPh87Va6ySBfvxqnXp5GsUmTw3u7Uo8ffNN89qsSdTZD6S0xgOa31ErHGdGDtl9GTgkI3aRR3amoMZAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T09:02:21.707723Z"},"content_sha256":"cb19603a75dfd4a6f0a8db3b2d47a4fc060f42dbb4785e2f099d76776e0089f5","schema_version":"1.0","event_id":"sha256:cb19603a75dfd4a6f0a8db3b2d47a4fc060f42dbb4785e2f099d76776e0089f5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TL2SYUWYJD4FF5WJJ7BRROBPFX/bundle.json","state_url":"https://pith.science/pith/TL2SYUWYJD4FF5WJJ7BRROBPFX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TL2SYUWYJD4FF5WJJ7BRROBPFX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T09:02:21Z","links":{"resolver":"https://pith.science/pith/TL2SYUWYJD4FF5WJJ7BRROBPFX","bundle":"https://pith.science/pith/TL2SYUWYJD4FF5WJJ7BRROBPFX/bundle.json","state":"https://pith.science/pith/TL2SYUWYJD4FF5WJJ7BRROBPFX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TL2SYUWYJD4FF5WJJ7BRROBPFX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:TL2SYUWYJD4FF5WJJ7BRROBPFX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b0893fbbf0fabc307416ec9a2212a2a1ac91e444d66ff638f6a525c77b0eba38","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-08-17T14:47:31Z","title_canon_sha256":"af0bb1f54f7bb4ab7105d555b87d383aa28c217affec0ca7b5c45a39c4525d11"},"schema_version":"1.0","source":{"id":"2508.12384","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.12384","created_at":"2026-07-05T11:55:04Z"},{"alias_kind":"arxiv_version","alias_value":"2508.12384v1","created_at":"2026-07-05T11:55:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.12384","created_at":"2026-07-05T11:55:04Z"},{"alias_kind":"pith_short_12","alias_value":"TL2SYUWYJD4F","created_at":"2026-07-05T11:55:04Z"},{"alias_kind":"pith_short_16","alias_value":"TL2SYUWYJD4FF5WJ","created_at":"2026-07-05T11:55:04Z"},{"alias_kind":"pith_short_8","alias_value":"TL2SYUWY","created_at":"2026-07-05T11:55:04Z"}],"graph_snapshots":[{"event_id":"sha256:cb19603a75dfd4a6f0a8db3b2d47a4fc060f42dbb4785e2f099d76776e0089f5","target":"graph","created_at":"2026-07-05T11:55:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.12384/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Ensemble-based attacks have been proven to be effective in enhancing adversarial transferability by aggregating the outputs of models with various architectures. However, existing research primarily focuses on refining ensemble weights or optimizing the ensemble path, overlooking the exploration of ensemble models to enhance the transferability of adversarial attacks. To address this gap, we propose applying adversarial augmentation to the surrogate models, aiming to boost overall generalization of ensemble models and reduce the risk of adversarial overfitting. Meanwhile, observing that ensemb","authors_text":"Hanwen Cao, Haobo Lu, Kun He, Xiaosen Wang","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.12384","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5179c2a55a58df0fa2ea64f670108769183605d9462f9bbe155b7055efdd85b5","target":"record","created_at":"2026-07-05T11:55:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b0893fbbf0fabc307416ec9a2212a2a1ac91e444d66ff638f6a525c77b0eba38","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-08-17T14:47:31Z","title_canon_sha256":"af0bb1f54f7bb4ab7105d555b87d383aa28c217affec0ca7b5c45a39c4525d11"},"schema_version":"1.0","source":{"id":"2508.12384","kind":"arxiv","version":1}},"canonical_sha256":"9af52c52d848f852f6c94fc318b82f2dd64693a9db1bc465b579e7c73cd76372","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9af52c52d848f852f6c94fc318b82f2dd64693a9db1bc465b579e7c73cd76372","first_computed_at":"2026-07-05T11:55:04.799920Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:55:04.799920Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"p4MF8adwWQkvaIUxkBUkpSQMnWtVuBnLfP+E8SuKoGCySXD2AgSuwqYXURMKy/Yq9dt1rO2tin67835fVa0kBw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:55:04.800478Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.12384","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5179c2a55a58df0fa2ea64f670108769183605d9462f9bbe155b7055efdd85b5","sha256:cb19603a75dfd4a6f0a8db3b2d47a4fc060f42dbb4785e2f099d76776e0089f5"],"state_sha256":"6aff042bd0dc27c01ae4aa10b737c333dbe93aac1306d0dadf978f21b74aced3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cIk1PUOZs3PF/zd6MkyTRmx25OWb67Ruw00q4bSy2zyRtWAMUzj1+HbOG0cgZEKHNw42hOK5pzBp8G5JbBuOCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T09:02:21.711195Z","bundle_sha256":"8f1f67204ed8bc245ec5ebdc6f9f657040ef3c0c1ccd681dd66ef33bff2a3a90"}}