{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:VBEENTZPT3Y357HP4JVYIDC7WX","short_pith_number":"pith:VBEENTZP","canonical_record":{"source":{"id":"2009.05107","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-08-14T09:03:26Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"1ed6d081436f64651b8c3426291b31992a31da2d1db4b053e35b94c434c56c6d","abstract_canon_sha256":"b8e9547902b3c29e998a818f231984e21877abd4cf3d67303d86c2efb2d23914"},"schema_version":"1.0"},"canonical_sha256":"a84846cf2f9ef1befcefe26b840c5fb5c9a97e4fd8b9738baa7f3c9601f9f276","source":{"kind":"arxiv","id":"2009.05107","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.05107","created_at":"2026-07-05T07:30:35Z"},{"alias_kind":"arxiv_version","alias_value":"2009.05107v2","created_at":"2026-07-05T07:30:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.05107","created_at":"2026-07-05T07:30:35Z"},{"alias_kind":"pith_short_12","alias_value":"VBEENTZPT3Y3","created_at":"2026-07-05T07:30:35Z"},{"alias_kind":"pith_short_16","alias_value":"VBEENTZPT3Y357HP","created_at":"2026-07-05T07:30:35Z"},{"alias_kind":"pith_short_8","alias_value":"VBEENTZP","created_at":"2026-07-05T07:30:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:VBEENTZPT3Y357HP4JVYIDC7WX","target":"record","payload":{"canonical_record":{"source":{"id":"2009.05107","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-08-14T09:03:26Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"1ed6d081436f64651b8c3426291b31992a31da2d1db4b053e35b94c434c56c6d","abstract_canon_sha256":"b8e9547902b3c29e998a818f231984e21877abd4cf3d67303d86c2efb2d23914"},"schema_version":"1.0"},"canonical_sha256":"a84846cf2f9ef1befcefe26b840c5fb5c9a97e4fd8b9738baa7f3c9601f9f276","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:30:35.933076Z","signature_b64":"PX2tqcz/Z5Ym6CK8LylzfjWpn5llmyAR7DBHXANGgdvJ9ppoykMH4rgwl+2dx0AW96ni4airPhb3d0JNudEtCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a84846cf2f9ef1befcefe26b840c5fb5c9a97e4fd8b9738baa7f3c9601f9f276","last_reissued_at":"2026-07-05T07:30:35.932613Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:30:35.932613Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2009.05107","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:30:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"49ZjE9nJbGc06GjUpDAKY2l1CmAP5+qOkaNeYIk13X6edMB/cIZ4brmHqjtSuCqUxafKxPql3zJNy8+8XUGZCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T08:03:12.343413Z"},"content_sha256":"30bee35dea49297da4f7addd1593dc8b78e3cedf58af191f3b2abca4ac8480e2","schema_version":"1.0","event_id":"sha256:30bee35dea49297da4f7addd1593dc8b78e3cedf58af191f3b2abca4ac8480e2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:VBEENTZPT3Y357HP4JVYIDC7WX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Generating Image Adversarial Examples by Embedding Digital Watermarks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CV","authors_text":"Kim-Kwang Raymond Choo, Tianqing Zhu, Tiantian Li, Wei Ren, Yuexin Xiang","submitted_at":"2020-08-14T09:03:26Z","abstract_excerpt":"With the increasing attention to deep neural network (DNN) models, attacks are also upcoming for such models. For example, an attacker may carefully construct images in specific ways (also referred to as adversarial examples) aiming to mislead the DNN models to output incorrect classification results. Similarly, many efforts are proposed to detect and mitigate adversarial examples, usually for certain dedicated attacks. In this paper, we propose a novel digital watermark-based method to generate image adversarial examples to fool DNN models. Specifically, partial main features of the watermark"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.05107","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2009.05107/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:30:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EQ4MYCBpCVpejcAWPoi5gaA/DsRRlnrH0qh9a1a+GOwX8wcODY7TKVYqmph0/fnm8mQ9SO2jghz+2BuYIQZaCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T08:03:12.365485Z"},"content_sha256":"c61a4dbc4f2196696a2a5e41396d79e5b2c110a95cf9f6cd8b4f9816faf6ba02","schema_version":"1.0","event_id":"sha256:c61a4dbc4f2196696a2a5e41396d79e5b2c110a95cf9f6cd8b4f9816faf6ba02"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VBEENTZPT3Y357HP4JVYIDC7WX/bundle.json","state_url":"https://pith.science/pith/VBEENTZPT3Y357HP4JVYIDC7WX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VBEENTZPT3Y357HP4JVYIDC7WX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T08:03:12Z","links":{"resolver":"https://pith.science/pith/VBEENTZPT3Y357HP4JVYIDC7WX","bundle":"https://pith.science/pith/VBEENTZPT3Y357HP4JVYIDC7WX/bundle.json","state":"https://pith.science/pith/VBEENTZPT3Y357HP4JVYIDC7WX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VBEENTZPT3Y357HP4JVYIDC7WX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:VBEENTZPT3Y357HP4JVYIDC7WX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b8e9547902b3c29e998a818f231984e21877abd4cf3d67303d86c2efb2d23914","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-08-14T09:03:26Z","title_canon_sha256":"1ed6d081436f64651b8c3426291b31992a31da2d1db4b053e35b94c434c56c6d"},"schema_version":"1.0","source":{"id":"2009.05107","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.05107","created_at":"2026-07-05T07:30:35Z"},{"alias_kind":"arxiv_version","alias_value":"2009.05107v2","created_at":"2026-07-05T07:30:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.05107","created_at":"2026-07-05T07:30:35Z"},{"alias_kind":"pith_short_12","alias_value":"VBEENTZPT3Y3","created_at":"2026-07-05T07:30:35Z"},{"alias_kind":"pith_short_16","alias_value":"VBEENTZPT3Y357HP","created_at":"2026-07-05T07:30:35Z"},{"alias_kind":"pith_short_8","alias_value":"VBEENTZP","created_at":"2026-07-05T07:30:35Z"}],"graph_snapshots":[{"event_id":"sha256:c61a4dbc4f2196696a2a5e41396d79e5b2c110a95cf9f6cd8b4f9816faf6ba02","target":"graph","created_at":"2026-07-05T07:30:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2009.05107/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the increasing attention to deep neural network (DNN) models, attacks are also upcoming for such models. For example, an attacker may carefully construct images in specific ways (also referred to as adversarial examples) aiming to mislead the DNN models to output incorrect classification results. Similarly, many efforts are proposed to detect and mitigate adversarial examples, usually for certain dedicated attacks. In this paper, we propose a novel digital watermark-based method to generate image adversarial examples to fool DNN models. Specifically, partial main features of the watermark","authors_text":"Kim-Kwang Raymond Choo, Tianqing Zhu, Tiantian Li, Wei Ren, Yuexin Xiang","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-08-14T09:03:26Z","title":"Generating Image Adversarial Examples by Embedding Digital Watermarks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.05107","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:30bee35dea49297da4f7addd1593dc8b78e3cedf58af191f3b2abca4ac8480e2","target":"record","created_at":"2026-07-05T07:30:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b8e9547902b3c29e998a818f231984e21877abd4cf3d67303d86c2efb2d23914","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-08-14T09:03:26Z","title_canon_sha256":"1ed6d081436f64651b8c3426291b31992a31da2d1db4b053e35b94c434c56c6d"},"schema_version":"1.0","source":{"id":"2009.05107","kind":"arxiv","version":2}},"canonical_sha256":"a84846cf2f9ef1befcefe26b840c5fb5c9a97e4fd8b9738baa7f3c9601f9f276","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a84846cf2f9ef1befcefe26b840c5fb5c9a97e4fd8b9738baa7f3c9601f9f276","first_computed_at":"2026-07-05T07:30:35.932613Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:30:35.932613Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PX2tqcz/Z5Ym6CK8LylzfjWpn5llmyAR7DBHXANGgdvJ9ppoykMH4rgwl+2dx0AW96ni4airPhb3d0JNudEtCw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:30:35.933076Z","signed_message":"canonical_sha256_bytes"},"source_id":"2009.05107","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:30bee35dea49297da4f7addd1593dc8b78e3cedf58af191f3b2abca4ac8480e2","sha256:c61a4dbc4f2196696a2a5e41396d79e5b2c110a95cf9f6cd8b4f9816faf6ba02"],"state_sha256":"8aa35f8b1b10b490fc284d7ece763e645691010350a036284f5529b2d3254ef5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Y+EIn9fwW3YyM+eA+6lzYs1JDwIlVFA7LDJLsQPjovOXR7+ykJTc2E/DNZTDpVxE9uwU4lu8MPrMOUAKgkTjAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T08:03:12.372923Z","bundle_sha256":"18276ff0bfc95f2f1e2c39f67e07408702de648fc7ebecf512cccb633146777a"}}