{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:U3E4ALS4TZFMHTORP4RQRNTXDB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"670d4a81f2d8802259f2d3722b713ee7443d0fd21de169d595c1161e27d26e04","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-10-07T09:26:42Z","title_canon_sha256":"97933757bc286ef0738be77b5c33917a7a20b5042faa99ea9acfd29ce9d2b623"},"schema_version":"1.0","source":{"id":"2010.03300","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.03300","created_at":"2026-07-05T01:41:21Z"},{"alias_kind":"arxiv_version","alias_value":"2010.03300v1","created_at":"2026-07-05T01:41:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.03300","created_at":"2026-07-05T01:41:21Z"},{"alias_kind":"pith_short_12","alias_value":"U3E4ALS4TZFM","created_at":"2026-07-05T01:41:21Z"},{"alias_kind":"pith_short_16","alias_value":"U3E4ALS4TZFMHTOR","created_at":"2026-07-05T01:41:21Z"},{"alias_kind":"pith_short_8","alias_value":"U3E4ALS4","created_at":"2026-07-05T01:41:21Z"}],"graph_snapshots":[{"event_id":"sha256:2447a3cb519c5ef6104c91608474aeece8b48d562866bb38c737d5367642133a","target":"graph","created_at":"2026-07-05T01:41:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2010.03300/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"A single universal adversarial perturbation (UAP) can be added to all natural images to change most of their predicted class labels. It is of high practical relevance for an attacker to have flexible control over the targeted classes to be attacked, however, the existing UAP method attacks samples from all classes. In this work, we propose a new universal attack method to generate a single perturbation that fools a target network to misclassify only a chosen group of classes, while having limited influence on the remaining classes. Since the proposed attack generates a universal adversarial pe","authors_text":"Chaoning Zhang, In So Kweon, Philipp Benz, Tooba Imtiaz","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-10-07T09:26:42Z","title":"CD-UAP: Class Discriminative Universal Adversarial Perturbation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.03300","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e31ceb1ada4d9a4179ff728d79495ded3bde400291c6a30abda5e211a7acbc3a","target":"record","created_at":"2026-07-05T01:41:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"670d4a81f2d8802259f2d3722b713ee7443d0fd21de169d595c1161e27d26e04","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-10-07T09:26:42Z","title_canon_sha256":"97933757bc286ef0738be77b5c33917a7a20b5042faa99ea9acfd29ce9d2b623"},"schema_version":"1.0","source":{"id":"2010.03300","kind":"arxiv","version":1}},"canonical_sha256":"a6c9c02e5c9e4ac3cdd17f2308b6771841f5c5f1071a52bcc831e32c867a92b8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a6c9c02e5c9e4ac3cdd17f2308b6771841f5c5f1071a52bcc831e32c867a92b8","first_computed_at":"2026-07-05T01:41:21.005868Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:41:21.005868Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gyZ26W8SLPGKd4GkTe/6dctNC0QZSwNB5z+2LeGxbeWbNFvlId4LtYx/UWy2Eou5QEjfs1iafmkLfz6RXddbDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T01:41:21.006361Z","signed_message":"canonical_sha256_bytes"},"source_id":"2010.03300","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e31ceb1ada4d9a4179ff728d79495ded3bde400291c6a30abda5e211a7acbc3a","sha256:2447a3cb519c5ef6104c91608474aeece8b48d562866bb38c737d5367642133a"],"state_sha256":"955019aa886728659097bdddda643a7d81f88484c3cb23a6c38d0d9c9a28d107"}