{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:VU7623X5TDF7HO2XVN5ILJGNM2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b6c3e76cada2462ff4e521018b3f8feb67ed4d2d2beb07bf6d5a9edf04233e1f","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-03-19T16:44:23Z","title_canon_sha256":"6b4a4aa55f2c4cbdcb77a262ed14f97561e79b323f76f6e0bf751e478f9cf91a"},"schema_version":"1.0","source":{"id":"2503.15404","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.15404","created_at":"2026-07-05T10:35:25Z"},{"alias_kind":"arxiv_version","alias_value":"2503.15404v1","created_at":"2026-07-05T10:35:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.15404","created_at":"2026-07-05T10:35:25Z"},{"alias_kind":"pith_short_12","alias_value":"VU7623X5TDF7","created_at":"2026-07-05T10:35:25Z"},{"alias_kind":"pith_short_16","alias_value":"VU7623X5TDF7HO2X","created_at":"2026-07-05T10:35:25Z"},{"alias_kind":"pith_short_8","alias_value":"VU7623X5","created_at":"2026-07-05T10:35:25Z"}],"graph_snapshots":[{"event_id":"sha256:79bb25c356cd626f6c8c8b303fdb2a5bd6cb002f7685dd7d47754fc9dde9b41b","target":"graph","created_at":"2026-07-05T10:35:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.15404/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision Transformers (ViTs) have been widely applied in various computer vision and vision-language tasks. To gain insights into their robustness in practical scenarios, transferable adversarial examples on ViTs have been extensively studied. A typical approach to improving adversarial transferability is by refining the surrogate model. However, existing work on ViTs has restricted their surrogate refinement to backward propagation. In this work, we instead focus on Forward Propagation Refinement (FPR) and specifically refine two key modules of ViTs: attention maps and token embeddings. For att","authors_text":"Bo Yang, Chao Shen, Chenhao Lin, Lu Zhou, Yuchen Ren, Zhe Liu, Zhengyu Zhao","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-03-19T16:44:23Z","title":"Improving Adversarial Transferability on Vision Transformers via Forward Propagation Refinement"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.15404","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:286ad638e025f035b85dde9391a80a7a48321cc08dd60d7f62ef80b8f5564811","target":"record","created_at":"2026-07-05T10:35:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b6c3e76cada2462ff4e521018b3f8feb67ed4d2d2beb07bf6d5a9edf04233e1f","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-03-19T16:44:23Z","title_canon_sha256":"6b4a4aa55f2c4cbdcb77a262ed14f97561e79b323f76f6e0bf751e478f9cf91a"},"schema_version":"1.0","source":{"id":"2503.15404","kind":"arxiv","version":1}},"canonical_sha256":"ad3fed6efd98cbf3bb57ab7a85a4cd66a54a34bd7e0d4251f661de25eb082c18","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ad3fed6efd98cbf3bb57ab7a85a4cd66a54a34bd7e0d4251f661de25eb082c18","first_computed_at":"2026-07-05T10:35:25.621532Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:35:25.621532Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8APUap1cqY1LAS/KEB9405scJVZfJEnoOW6qPOpNE1Apu6yLQ2xwlTKEpfyB+3NknztrW8SG8BdYrAv21DlXCA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:35:25.622274Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.15404","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:286ad638e025f035b85dde9391a80a7a48321cc08dd60d7f62ef80b8f5564811","sha256:79bb25c356cd626f6c8c8b303fdb2a5bd6cb002f7685dd7d47754fc9dde9b41b"],"state_sha256":"71a67d439b44d1d5c3ebea8072c4e54da3146f1da177984bac90303a6325aa56"}