{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:U2ABCIUWGVNZHPVEAY62E4KVJI","short_pith_number":"pith:U2ABCIUW","canonical_record":{"source":{"id":"2210.04213","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-10-09T09:58:51Z","cross_cats_sorted":[],"title_canon_sha256":"2e4bb236b63e08d0724504f97bc6c962c7bc8ecdfda0b238208a3a5b84f5a2d7","abstract_canon_sha256":"7a13057b51147268c2db512ec70361279bca7aea2e30f3198e2449c1635bc9d3"},"schema_version":"1.0"},"canonical_sha256":"a680112296355b93bea4063da271554a29687225e09f2d7b9c10b37e8afc58fa","source":{"kind":"arxiv","id":"2210.04213","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.04213","created_at":"2026-07-05T05:04:38Z"},{"alias_kind":"arxiv_version","alias_value":"2210.04213v1","created_at":"2026-07-05T05:04:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.04213","created_at":"2026-07-05T05:04:38Z"},{"alias_kind":"pith_short_12","alias_value":"U2ABCIUWGVNZ","created_at":"2026-07-05T05:04:38Z"},{"alias_kind":"pith_short_16","alias_value":"U2ABCIUWGVNZHPVE","created_at":"2026-07-05T05:04:38Z"},{"alias_kind":"pith_short_8","alias_value":"U2ABCIUW","created_at":"2026-07-05T05:04:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:U2ABCIUWGVNZHPVEAY62E4KVJI","target":"record","payload":{"canonical_record":{"source":{"id":"2210.04213","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-10-09T09:58:51Z","cross_cats_sorted":[],"title_canon_sha256":"2e4bb236b63e08d0724504f97bc6c962c7bc8ecdfda0b238208a3a5b84f5a2d7","abstract_canon_sha256":"7a13057b51147268c2db512ec70361279bca7aea2e30f3198e2449c1635bc9d3"},"schema_version":"1.0"},"canonical_sha256":"a680112296355b93bea4063da271554a29687225e09f2d7b9c10b37e8afc58fa","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:04:38.197136Z","signature_b64":"x62W1JSRJJCue15xe09yDjSYUTd+2R/gige2VEahCJWg/eKPEX6OzXjSQ0AxLct5ywLz3Row2cf1pSU7ekMFAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a680112296355b93bea4063da271554a29687225e09f2d7b9c10b37e8afc58fa","last_reissued_at":"2026-07-05T05:04:38.196794Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:04:38.196794Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2210.04213","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:04:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DrvIjlTlIqoeeTlW+eyufSJVfl1Bi3SNdRLFthY08SYfeekZg3sz+GW6m6pVqUA2TuPvoWuJmi9XxOdiouvrAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-26T00:46:01.569074Z"},"content_sha256":"d6963e313a959ee0804026c0222e18cbdfb762ab4c1363b370b6832c86ab237d","schema_version":"1.0","event_id":"sha256:d6963e313a959ee0804026c0222e18cbdfb762ab4c1363b370b6832c86ab237d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:U2ABCIUWGVNZHPVEAY62E4KVJI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards Understanding and Boosting Adversarial Transferability from a Distribution Perspective","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Bolun Zheng, Kejiang Chen, Qingming Huang, Xiang Tian, Xiaodan Li, Yaowu Chen, Yao Zhu, Yuan He, Yuefeng Chen","submitted_at":"2022-10-09T09:58:51Z","abstract_excerpt":"Transferable adversarial attacks against Deep neural networks (DNNs) have received broad attention in recent years. An adversarial example can be crafted by a surrogate model and then attack the unknown target model successfully, which brings a severe threat to DNNs. The exact underlying reasons for the transferability are still not completely understood. Previous work mostly explores the causes from the model perspective, e.g., decision boundary, model architecture, and model capacity. adversarial attacks against Deep neural networks (DNNs) have received broad attention in recent years. An ad"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.04213","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2210.04213/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:04:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"u0Ul4K+bWwO8yEQIUpPQLrccS1Zb9JMm0m2CJtRL3GIRDVYBVCxm22V4rQrN7eLeYaK3REqMlqYU9IY2rbv7DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-26T00:46:01.569467Z"},"content_sha256":"b9e8b7df822ecbb330dadee867ddc2823188f82c4750bad1aa8ce1587bd7aeec","schema_version":"1.0","event_id":"sha256:b9e8b7df822ecbb330dadee867ddc2823188f82c4750bad1aa8ce1587bd7aeec"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/U2ABCIUWGVNZHPVEAY62E4KVJI/bundle.json","state_url":"https://pith.science/pith/U2ABCIUWGVNZHPVEAY62E4KVJI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/U2ABCIUWGVNZHPVEAY62E4KVJI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-26T00:46:01Z","links":{"resolver":"https://pith.science/pith/U2ABCIUWGVNZHPVEAY62E4KVJI","bundle":"https://pith.science/pith/U2ABCIUWGVNZHPVEAY62E4KVJI/bundle.json","state":"https://pith.science/pith/U2ABCIUWGVNZHPVEAY62E4KVJI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/U2ABCIUWGVNZHPVEAY62E4KVJI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:U2ABCIUWGVNZHPVEAY62E4KVJI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7a13057b51147268c2db512ec70361279bca7aea2e30f3198e2449c1635bc9d3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-10-09T09:58:51Z","title_canon_sha256":"2e4bb236b63e08d0724504f97bc6c962c7bc8ecdfda0b238208a3a5b84f5a2d7"},"schema_version":"1.0","source":{"id":"2210.04213","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.04213","created_at":"2026-07-05T05:04:38Z"},{"alias_kind":"arxiv_version","alias_value":"2210.04213v1","created_at":"2026-07-05T05:04:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.04213","created_at":"2026-07-05T05:04:38Z"},{"alias_kind":"pith_short_12","alias_value":"U2ABCIUWGVNZ","created_at":"2026-07-05T05:04:38Z"},{"alias_kind":"pith_short_16","alias_value":"U2ABCIUWGVNZHPVE","created_at":"2026-07-05T05:04:38Z"},{"alias_kind":"pith_short_8","alias_value":"U2ABCIUW","created_at":"2026-07-05T05:04:38Z"}],"graph_snapshots":[{"event_id":"sha256:b9e8b7df822ecbb330dadee867ddc2823188f82c4750bad1aa8ce1587bd7aeec","target":"graph","created_at":"2026-07-05T05:04:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.04213/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Transferable adversarial attacks against Deep neural networks (DNNs) have received broad attention in recent years. An adversarial example can be crafted by a surrogate model and then attack the unknown target model successfully, which brings a severe threat to DNNs. The exact underlying reasons for the transferability are still not completely understood. Previous work mostly explores the causes from the model perspective, e.g., decision boundary, model architecture, and model capacity. adversarial attacks against Deep neural networks (DNNs) have received broad attention in recent years. An ad","authors_text":"Bolun Zheng, Kejiang Chen, Qingming Huang, Xiang Tian, Xiaodan Li, Yaowu Chen, Yao Zhu, Yuan He, Yuefeng Chen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-10-09T09:58:51Z","title":"Towards Understanding and Boosting Adversarial Transferability from a Distribution Perspective"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.04213","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d6963e313a959ee0804026c0222e18cbdfb762ab4c1363b370b6832c86ab237d","target":"record","created_at":"2026-07-05T05:04:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7a13057b51147268c2db512ec70361279bca7aea2e30f3198e2449c1635bc9d3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-10-09T09:58:51Z","title_canon_sha256":"2e4bb236b63e08d0724504f97bc6c962c7bc8ecdfda0b238208a3a5b84f5a2d7"},"schema_version":"1.0","source":{"id":"2210.04213","kind":"arxiv","version":1}},"canonical_sha256":"a680112296355b93bea4063da271554a29687225e09f2d7b9c10b37e8afc58fa","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a680112296355b93bea4063da271554a29687225e09f2d7b9c10b37e8afc58fa","first_computed_at":"2026-07-05T05:04:38.196794Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:04:38.196794Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"x62W1JSRJJCue15xe09yDjSYUTd+2R/gige2VEahCJWg/eKPEX6OzXjSQ0AxLct5ywLz3Row2cf1pSU7ekMFAA==","signature_status":"signed_v1","signed_at":"2026-07-05T05:04:38.197136Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.04213","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d6963e313a959ee0804026c0222e18cbdfb762ab4c1363b370b6832c86ab237d","sha256:b9e8b7df822ecbb330dadee867ddc2823188f82c4750bad1aa8ce1587bd7aeec"],"state_sha256":"4fe61edf027825cea6c468fd31e3ffc26da29aba7f4137ea8e513d0442c98224"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kryzdXK2/Gdt+yNZiFPzU2gY5+bdY7BCYseFb9e6nRhipURODocDpthqD5X0afmAaNaN0QtQA9rlTODyMyTrDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-26T00:46:01.571616Z","bundle_sha256":"529a58a23065ac39e1a6f0d7a12e142a72bc477e1e3a7d5c17cadcd30f801182"}}