{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:UOYHW5G34BVNF5DNZ2UH5ILCGZ","short_pith_number":"pith:UOYHW5G3","canonical_record":{"source":{"id":"2102.00436","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-01-31T11:40:50Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"08c578fdc4093fb916db45bc2f97059a82cbec31e13376d94c40e3dd444550a3","abstract_canon_sha256":"1b8b1704b2448a5cb90890e0fe2627cdb36aaec2e5f97a3ba9f53c5e00b84b86"},"schema_version":"1.0"},"canonical_sha256":"a3b07b74dbe06ad2f46dcea87ea1623679cc4280744ca7daedca3ec9f83cc28e","source":{"kind":"arxiv","id":"2102.00436","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2102.00436","created_at":"2026-07-05T03:06:45Z"},{"alias_kind":"arxiv_version","alias_value":"2102.00436v3","created_at":"2026-07-05T03:06:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2102.00436","created_at":"2026-07-05T03:06:45Z"},{"alias_kind":"pith_short_12","alias_value":"UOYHW5G34BVN","created_at":"2026-07-05T03:06:45Z"},{"alias_kind":"pith_short_16","alias_value":"UOYHW5G34BVNF5DN","created_at":"2026-07-05T03:06:45Z"},{"alias_kind":"pith_short_8","alias_value":"UOYHW5G3","created_at":"2026-07-05T03:06:45Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:UOYHW5G34BVNF5DNZ2UH5ILCGZ","target":"record","payload":{"canonical_record":{"source":{"id":"2102.00436","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-01-31T11:40:50Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"08c578fdc4093fb916db45bc2f97059a82cbec31e13376d94c40e3dd444550a3","abstract_canon_sha256":"1b8b1704b2448a5cb90890e0fe2627cdb36aaec2e5f97a3ba9f53c5e00b84b86"},"schema_version":"1.0"},"canonical_sha256":"a3b07b74dbe06ad2f46dcea87ea1623679cc4280744ca7daedca3ec9f83cc28e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:06:45.770273Z","signature_b64":"1D39le0PwCabN7Ba06+pyGwFLjJyCQAqx1Ly2j52bUU7ttQXugxcktdpnuzRfkbCpjfC3Y+kzAy6qZQ7fthoCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a3b07b74dbe06ad2f46dcea87ea1623679cc4280744ca7daedca3ec9f83cc28e","last_reissued_at":"2026-07-05T03:06:45.769864Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:06:45.769864Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2102.00436","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:06:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ygGx6o/+IjsmpGhX1UEG8ULEN7eKADMAG2T2uh+gv37jtnGqlmo8+k3HSoo8HiGBnkrKvo+cCswTsrV49AmxAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T05:19:05.433811Z"},"content_sha256":"77feb0dd07edf4f7f514f83ca77a908bf48a4f9f3ecec85f0ee24d47a9b6e557","schema_version":"1.0","event_id":"sha256:77feb0dd07edf4f7f514f83ca77a908bf48a4f9f3ecec85f0ee24d47a9b6e557"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:UOYHW5G34BVNF5DNZ2UH5ILCGZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Admix: Enhancing the Transferability of Adversarial Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CV","authors_text":"Jingdong Wang, Kun He, Xiaosen Wang, Xuanran He","submitted_at":"2021-01-31T11:40:50Z","abstract_excerpt":"Deep neural networks are known to be extremely vulnerable to adversarial examples under white-box setting. Moreover, the malicious adversaries crafted on the surrogate (source) model often exhibit black-box transferability on other models with the same learning task but having different architectures. Recently, various methods are proposed to boost the adversarial transferability, among which the input transformation is one of the most effective approaches. We investigate in this direction and observe that existing transformations are all applied on a single image, which might limit the advers"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2102.00436","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2102.00436/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:06:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pXevgTK2F9RbnFxgK1U0BdHFY/Arja7rC5/gUXG5ePPJBhYByhkYgLMysuWjVs/l/mvnSbIe3IFW73k2TLWdAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T05:19:05.434722Z"},"content_sha256":"2c3949e2a494b6250dcbf16de1859dc57f2c45ac384bc71fae165bc749474ad6","schema_version":"1.0","event_id":"sha256:2c3949e2a494b6250dcbf16de1859dc57f2c45ac384bc71fae165bc749474ad6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UOYHW5G34BVNF5DNZ2UH5ILCGZ/bundle.json","state_url":"https://pith.science/pith/UOYHW5G34BVNF5DNZ2UH5ILCGZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UOYHW5G34BVNF5DNZ2UH5ILCGZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T05:19:05Z","links":{"resolver":"https://pith.science/pith/UOYHW5G34BVNF5DNZ2UH5ILCGZ","bundle":"https://pith.science/pith/UOYHW5G34BVNF5DNZ2UH5ILCGZ/bundle.json","state":"https://pith.science/pith/UOYHW5G34BVNF5DNZ2UH5ILCGZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UOYHW5G34BVNF5DNZ2UH5ILCGZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:UOYHW5G34BVNF5DNZ2UH5ILCGZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1b8b1704b2448a5cb90890e0fe2627cdb36aaec2e5f97a3ba9f53c5e00b84b86","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-01-31T11:40:50Z","title_canon_sha256":"08c578fdc4093fb916db45bc2f97059a82cbec31e13376d94c40e3dd444550a3"},"schema_version":"1.0","source":{"id":"2102.00436","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2102.00436","created_at":"2026-07-05T03:06:45Z"},{"alias_kind":"arxiv_version","alias_value":"2102.00436v3","created_at":"2026-07-05T03:06:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2102.00436","created_at":"2026-07-05T03:06:45Z"},{"alias_kind":"pith_short_12","alias_value":"UOYHW5G34BVN","created_at":"2026-07-05T03:06:45Z"},{"alias_kind":"pith_short_16","alias_value":"UOYHW5G34BVNF5DN","created_at":"2026-07-05T03:06:45Z"},{"alias_kind":"pith_short_8","alias_value":"UOYHW5G3","created_at":"2026-07-05T03:06:45Z"}],"graph_snapshots":[{"event_id":"sha256:2c3949e2a494b6250dcbf16de1859dc57f2c45ac384bc71fae165bc749474ad6","target":"graph","created_at":"2026-07-05T03:06:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2102.00436/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks are known to be extremely vulnerable to adversarial examples under white-box setting. Moreover, the malicious adversaries crafted on the surrogate (source) model often exhibit black-box transferability on other models with the same learning task but having different architectures. Recently, various methods are proposed to boost the adversarial transferability, among which the input transformation is one of the most effective approaches. We investigate in this direction and observe that existing transformations are all applied on a single image, which might limit the advers","authors_text":"Jingdong Wang, Kun He, Xiaosen Wang, Xuanran He","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-01-31T11:40:50Z","title":"Admix: Enhancing the Transferability of Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2102.00436","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:77feb0dd07edf4f7f514f83ca77a908bf48a4f9f3ecec85f0ee24d47a9b6e557","target":"record","created_at":"2026-07-05T03:06:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1b8b1704b2448a5cb90890e0fe2627cdb36aaec2e5f97a3ba9f53c5e00b84b86","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-01-31T11:40:50Z","title_canon_sha256":"08c578fdc4093fb916db45bc2f97059a82cbec31e13376d94c40e3dd444550a3"},"schema_version":"1.0","source":{"id":"2102.00436","kind":"arxiv","version":3}},"canonical_sha256":"a3b07b74dbe06ad2f46dcea87ea1623679cc4280744ca7daedca3ec9f83cc28e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a3b07b74dbe06ad2f46dcea87ea1623679cc4280744ca7daedca3ec9f83cc28e","first_computed_at":"2026-07-05T03:06:45.769864Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:06:45.769864Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1D39le0PwCabN7Ba06+pyGwFLjJyCQAqx1Ly2j52bUU7ttQXugxcktdpnuzRfkbCpjfC3Y+kzAy6qZQ7fthoCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:06:45.770273Z","signed_message":"canonical_sha256_bytes"},"source_id":"2102.00436","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:77feb0dd07edf4f7f514f83ca77a908bf48a4f9f3ecec85f0ee24d47a9b6e557","sha256:2c3949e2a494b6250dcbf16de1859dc57f2c45ac384bc71fae165bc749474ad6"],"state_sha256":"0feffa614138fbffb51137e937dfe61c506e955ecdc867e21ca5cbf0d49d8e0a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"A0TRq/bh+Mg2RRJO+22pF8oevSUsLiT7euy1XHQjwQqvjQjPn7yUGWWudapgOWjgwLLaYJDAUtj5ErN1RBWKAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T05:19:05.493551Z","bundle_sha256":"b14b6453ab1a77b01b310d94dc475a3db947977229e2896980f202f1449b868d"}}