{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:UKAN6YICFK4DD3JDKUTZSP5AUG","short_pith_number":"pith:UKAN6YIC","canonical_record":{"source":{"id":"2501.02232","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-01-04T08:38:20Z","cross_cats_sorted":[],"title_canon_sha256":"c250685bf8a67272e8f5b66f8dc462a9db0228c064d7c5832a4413514252ac35","abstract_canon_sha256":"a79d711ca018db68bc339ceebcadc25fee6f63ca5f169e0f7609dfa3cff6cca3"},"schema_version":"1.0"},"canonical_sha256":"a280df61022ab831ed235527993fa0a1a700a80f5e067770184974c7dd3100a5","source":{"kind":"arxiv","id":"2501.02232","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.02232","created_at":"2026-07-05T09:57:04Z"},{"alias_kind":"arxiv_version","alias_value":"2501.02232v1","created_at":"2026-07-05T09:57:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.02232","created_at":"2026-07-05T09:57:04Z"},{"alias_kind":"pith_short_12","alias_value":"UKAN6YICFK4D","created_at":"2026-07-05T09:57:04Z"},{"alias_kind":"pith_short_16","alias_value":"UKAN6YICFK4DD3JD","created_at":"2026-07-05T09:57:04Z"},{"alias_kind":"pith_short_8","alias_value":"UKAN6YIC","created_at":"2026-07-05T09:57:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:UKAN6YICFK4DD3JDKUTZSP5AUG","target":"record","payload":{"canonical_record":{"source":{"id":"2501.02232","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-01-04T08:38:20Z","cross_cats_sorted":[],"title_canon_sha256":"c250685bf8a67272e8f5b66f8dc462a9db0228c064d7c5832a4413514252ac35","abstract_canon_sha256":"a79d711ca018db68bc339ceebcadc25fee6f63ca5f169e0f7609dfa3cff6cca3"},"schema_version":"1.0"},"canonical_sha256":"a280df61022ab831ed235527993fa0a1a700a80f5e067770184974c7dd3100a5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:57:04.272958Z","signature_b64":"TmkGpPu55YSCOlzTR9lE3YvI5gjpcOvPheb/7tLVzO3bLLrZVy1NnkjOSbuN+QRhgQ8+AUGFpqt/S5vdpFA5CQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a280df61022ab831ed235527993fa0a1a700a80f5e067770184974c7dd3100a5","last_reissued_at":"2026-07-05T09:57:04.272529Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:57:04.272529Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.02232","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:57:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"E52mUZVQ5RBLiv+hNW2NfMUMeFSxwXMAWX4Bp6lcSStb7fpU+ClEZlLkhjPhJhf6GFcT9MM5Xbo53y94z0cUCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:09:39.182928Z"},"content_sha256":"b992f39b5d9d6b415acbcfc397c89ebe5e79f8d4c7a64215b10be6d1769bae07","schema_version":"1.0","event_id":"sha256:b992f39b5d9d6b415acbcfc397c89ebe5e79f8d4c7a64215b10be6d1769bae07"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:UKAN6YICFK4DD3JDKUTZSP5AUG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Distillation-Enhanced Physical Adversarial Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"ChaoQun Li, Huanqian Yan, Wei Liu, Yonglin Wu, Zhuodong Liu","submitted_at":"2025-01-04T08:38:20Z","abstract_excerpt":"The study of physical adversarial patches is crucial for identifying vulnerabilities in AI-based recognition systems and developing more robust deep learning models. While recent research has focused on improving patch stealthiness for greater practical applicability, achieving an effective balance between stealth and attack performance remains a significant challenge. To address this issue, we propose a novel physical adversarial attack method that leverages knowledge distillation. Specifically, we first define a stealthy color space tailored to the target environment to ensure smooth blendin"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.02232","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.02232/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:57:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/Y+fpiLFnXFIUNvXHkFgNngtYAInK+1HzVShwRH5NmDbWYawNxdYWcM1f05+OBqYAKOks22jx2U10fcIcnxYCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:09:39.184089Z"},"content_sha256":"a0d47641ef23e9149a77715d4a81cc6ca6191de799150741535ba5b72fe41e54","schema_version":"1.0","event_id":"sha256:a0d47641ef23e9149a77715d4a81cc6ca6191de799150741535ba5b72fe41e54"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UKAN6YICFK4DD3JDKUTZSP5AUG/bundle.json","state_url":"https://pith.science/pith/UKAN6YICFK4DD3JDKUTZSP5AUG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UKAN6YICFK4DD3JDKUTZSP5AUG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T16:09:39Z","links":{"resolver":"https://pith.science/pith/UKAN6YICFK4DD3JDKUTZSP5AUG","bundle":"https://pith.science/pith/UKAN6YICFK4DD3JDKUTZSP5AUG/bundle.json","state":"https://pith.science/pith/UKAN6YICFK4DD3JDKUTZSP5AUG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UKAN6YICFK4DD3JDKUTZSP5AUG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:UKAN6YICFK4DD3JDKUTZSP5AUG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a79d711ca018db68bc339ceebcadc25fee6f63ca5f169e0f7609dfa3cff6cca3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-01-04T08:38:20Z","title_canon_sha256":"c250685bf8a67272e8f5b66f8dc462a9db0228c064d7c5832a4413514252ac35"},"schema_version":"1.0","source":{"id":"2501.02232","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.02232","created_at":"2026-07-05T09:57:04Z"},{"alias_kind":"arxiv_version","alias_value":"2501.02232v1","created_at":"2026-07-05T09:57:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.02232","created_at":"2026-07-05T09:57:04Z"},{"alias_kind":"pith_short_12","alias_value":"UKAN6YICFK4D","created_at":"2026-07-05T09:57:04Z"},{"alias_kind":"pith_short_16","alias_value":"UKAN6YICFK4DD3JD","created_at":"2026-07-05T09:57:04Z"},{"alias_kind":"pith_short_8","alias_value":"UKAN6YIC","created_at":"2026-07-05T09:57:04Z"}],"graph_snapshots":[{"event_id":"sha256:a0d47641ef23e9149a77715d4a81cc6ca6191de799150741535ba5b72fe41e54","target":"graph","created_at":"2026-07-05T09:57:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.02232/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The study of physical adversarial patches is crucial for identifying vulnerabilities in AI-based recognition systems and developing more robust deep learning models. While recent research has focused on improving patch stealthiness for greater practical applicability, achieving an effective balance between stealth and attack performance remains a significant challenge. To address this issue, we propose a novel physical adversarial attack method that leverages knowledge distillation. Specifically, we first define a stealthy color space tailored to the target environment to ensure smooth blendin","authors_text":"ChaoQun Li, Huanqian Yan, Wei Liu, Yonglin Wu, Zhuodong Liu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.02232","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b992f39b5d9d6b415acbcfc397c89ebe5e79f8d4c7a64215b10be6d1769bae07","target":"record","created_at":"2026-07-05T09:57:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a79d711ca018db68bc339ceebcadc25fee6f63ca5f169e0f7609dfa3cff6cca3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-01-04T08:38:20Z","title_canon_sha256":"c250685bf8a67272e8f5b66f8dc462a9db0228c064d7c5832a4413514252ac35"},"schema_version":"1.0","source":{"id":"2501.02232","kind":"arxiv","version":1}},"canonical_sha256":"a280df61022ab831ed235527993fa0a1a700a80f5e067770184974c7dd3100a5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a280df61022ab831ed235527993fa0a1a700a80f5e067770184974c7dd3100a5","first_computed_at":"2026-07-05T09:57:04.272529Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:57:04.272529Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TmkGpPu55YSCOlzTR9lE3YvI5gjpcOvPheb/7tLVzO3bLLrZVy1NnkjOSbuN+QRhgQ8+AUGFpqt/S5vdpFA5CQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:57:04.272958Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.02232","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b992f39b5d9d6b415acbcfc397c89ebe5e79f8d4c7a64215b10be6d1769bae07","sha256:a0d47641ef23e9149a77715d4a81cc6ca6191de799150741535ba5b72fe41e54"],"state_sha256":"96fcbce35a228d6f7409729030fca0b182bbff2bea3f5976aea34f8e079c0a31"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VslPewe5ibBAhwxy/RjGyyGozVJk2JAZNUBwOvbmhXN91h3xxfmMX53i9IhcM73oX0zVFKKBH0Dp1cP5nLrbCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T16:09:39.202621Z","bundle_sha256":"450999e19034331ea10890506b55ca1276563b8d34b5a3334b9136d505bac864"}}