{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:VG3ZOVRHCNM7RBMKA7N7TFB2YE","short_pith_number":"pith:VG3ZOVRH","canonical_record":{"source":{"id":"2410.15889","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-21T11:06:56Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"481b7ab8e504fcfd5619d1662b7d35deceacb7bcecb2946ae325883e6cd57c35","abstract_canon_sha256":"b08a2b58892796537fa891bb52e78db023c2dc07f5cd17e838bed542791cf8a1"},"schema_version":"1.0"},"canonical_sha256":"a9b79756271359f8858a07dbf9943ac12b8c0d3c87605edb1b8a660964d1a10b","source":{"kind":"arxiv","id":"2410.15889","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.15889","created_at":"2026-07-05T09:23:26Z"},{"alias_kind":"arxiv_version","alias_value":"2410.15889v1","created_at":"2026-07-05T09:23:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.15889","created_at":"2026-07-05T09:23:26Z"},{"alias_kind":"pith_short_12","alias_value":"VG3ZOVRHCNM7","created_at":"2026-07-05T09:23:26Z"},{"alias_kind":"pith_short_16","alias_value":"VG3ZOVRHCNM7RBMK","created_at":"2026-07-05T09:23:26Z"},{"alias_kind":"pith_short_8","alias_value":"VG3ZOVRH","created_at":"2026-07-05T09:23:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:VG3ZOVRHCNM7RBMKA7N7TFB2YE","target":"record","payload":{"canonical_record":{"source":{"id":"2410.15889","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-21T11:06:56Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"481b7ab8e504fcfd5619d1662b7d35deceacb7bcecb2946ae325883e6cd57c35","abstract_canon_sha256":"b08a2b58892796537fa891bb52e78db023c2dc07f5cd17e838bed542791cf8a1"},"schema_version":"1.0"},"canonical_sha256":"a9b79756271359f8858a07dbf9943ac12b8c0d3c87605edb1b8a660964d1a10b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:23:26.467308Z","signature_b64":"bX6VBdKXZe78HrdbF2zc8RLXc4WTx0l34qmIZUeTh5ysWNYBdcYnT3QMik2kVHvileXlcGBFgLY/dYR6VxlADg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a9b79756271359f8858a07dbf9943ac12b8c0d3c87605edb1b8a660964d1a10b","last_reissued_at":"2026-07-05T09:23:26.466803Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:23:26.466803Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.15889","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:23:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"z9Vbf27eud5gt3eUQU8lM9dlcZNNPvQFzAUmKb+sN5aTNAaOET3woJ2hy22i7GRwGWt7daB7cbaixV/BATmWDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T02:42:20.134482Z"},"content_sha256":"32da9762d7db31d206cb8b89387dcd056fc578d95a4d8a685655ad518283444c","schema_version":"1.0","event_id":"sha256:32da9762d7db31d206cb8b89387dcd056fc578d95a4d8a685655ad518283444c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:VG3ZOVRHCNM7RBMKA7N7TFB2YE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Model Mimic Attack: Knowledge Distillation for Provably Transferable Adversarial Examples","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Andrew Perminov, Denis Turdakov, Kirill Lukyanov, Mikhail Pautov","submitted_at":"2024-10-21T11:06:56Z","abstract_excerpt":"The vulnerability of artificial neural networks to adversarial perturbations in the black-box setting is widely studied in the literature. The majority of attack methods to construct these perturbations suffer from an impractically large number of queries required to find an adversarial example. In this work, we focus on knowledge distillation as an approach to conduct transfer-based black-box adversarial attacks and propose an iterative training of the surrogate model on an expanding dataset. This work is the first, to our knowledge, to provide provable guarantees on the success of knowledge "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.15889","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.15889/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:23:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zLOlpByY/8DU5nCJa+70IKO8/0vhs+4bREZKp0d6DawlKik3U7S6wXx/RaR27/yVLCkLpdx4wcCpCihrSg2rAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T02:42:20.135126Z"},"content_sha256":"facdf53adeb51ca1113dba02772c9e900debc6d45cbc557ccd6a793550a0b273","schema_version":"1.0","event_id":"sha256:facdf53adeb51ca1113dba02772c9e900debc6d45cbc557ccd6a793550a0b273"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VG3ZOVRHCNM7RBMKA7N7TFB2YE/bundle.json","state_url":"https://pith.science/pith/VG3ZOVRHCNM7RBMKA7N7TFB2YE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VG3ZOVRHCNM7RBMKA7N7TFB2YE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T02:42:20Z","links":{"resolver":"https://pith.science/pith/VG3ZOVRHCNM7RBMKA7N7TFB2YE","bundle":"https://pith.science/pith/VG3ZOVRHCNM7RBMKA7N7TFB2YE/bundle.json","state":"https://pith.science/pith/VG3ZOVRHCNM7RBMKA7N7TFB2YE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VG3ZOVRHCNM7RBMKA7N7TFB2YE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:VG3ZOVRHCNM7RBMKA7N7TFB2YE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b08a2b58892796537fa891bb52e78db023c2dc07f5cd17e838bed542791cf8a1","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-21T11:06:56Z","title_canon_sha256":"481b7ab8e504fcfd5619d1662b7d35deceacb7bcecb2946ae325883e6cd57c35"},"schema_version":"1.0","source":{"id":"2410.15889","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.15889","created_at":"2026-07-05T09:23:26Z"},{"alias_kind":"arxiv_version","alias_value":"2410.15889v1","created_at":"2026-07-05T09:23:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.15889","created_at":"2026-07-05T09:23:26Z"},{"alias_kind":"pith_short_12","alias_value":"VG3ZOVRHCNM7","created_at":"2026-07-05T09:23:26Z"},{"alias_kind":"pith_short_16","alias_value":"VG3ZOVRHCNM7RBMK","created_at":"2026-07-05T09:23:26Z"},{"alias_kind":"pith_short_8","alias_value":"VG3ZOVRH","created_at":"2026-07-05T09:23:26Z"}],"graph_snapshots":[{"event_id":"sha256:facdf53adeb51ca1113dba02772c9e900debc6d45cbc557ccd6a793550a0b273","target":"graph","created_at":"2026-07-05T09:23:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.15889/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The vulnerability of artificial neural networks to adversarial perturbations in the black-box setting is widely studied in the literature. The majority of attack methods to construct these perturbations suffer from an impractically large number of queries required to find an adversarial example. In this work, we focus on knowledge distillation as an approach to conduct transfer-based black-box adversarial attacks and propose an iterative training of the surrogate model on an expanding dataset. This work is the first, to our knowledge, to provide provable guarantees on the success of knowledge ","authors_text":"Andrew Perminov, Denis Turdakov, Kirill Lukyanov, Mikhail Pautov","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-21T11:06:56Z","title":"Model Mimic Attack: Knowledge Distillation for Provably Transferable Adversarial Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.15889","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:32da9762d7db31d206cb8b89387dcd056fc578d95a4d8a685655ad518283444c","target":"record","created_at":"2026-07-05T09:23:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b08a2b58892796537fa891bb52e78db023c2dc07f5cd17e838bed542791cf8a1","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-21T11:06:56Z","title_canon_sha256":"481b7ab8e504fcfd5619d1662b7d35deceacb7bcecb2946ae325883e6cd57c35"},"schema_version":"1.0","source":{"id":"2410.15889","kind":"arxiv","version":1}},"canonical_sha256":"a9b79756271359f8858a07dbf9943ac12b8c0d3c87605edb1b8a660964d1a10b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a9b79756271359f8858a07dbf9943ac12b8c0d3c87605edb1b8a660964d1a10b","first_computed_at":"2026-07-05T09:23:26.466803Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:23:26.466803Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bX6VBdKXZe78HrdbF2zc8RLXc4WTx0l34qmIZUeTh5ysWNYBdcYnT3QMik2kVHvileXlcGBFgLY/dYR6VxlADg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:23:26.467308Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.15889","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:32da9762d7db31d206cb8b89387dcd056fc578d95a4d8a685655ad518283444c","sha256:facdf53adeb51ca1113dba02772c9e900debc6d45cbc557ccd6a793550a0b273"],"state_sha256":"5c2cc64c55361b19c5cfa1190dd73521eceaf8d77207f705d861c89d5c035b26"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3aIDPzq9tJR3S0Sdk2jtCN9vZByxJJwoFY6QGSsEGADN+Erg2NAyrJlVS+S4uOPA36VvnDVe7XTZU/fy14O5CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T02:42:20.138672Z","bundle_sha256":"e2b8c3013bddca3ee1d209c601d9d05948389c8e3312974a435a8d2035449fd8"}}