{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:VXXAZX7MGQ4ZOZY5WFA3CQAOEI","short_pith_number":"pith:VXXAZX7M","canonical_record":{"source":{"id":"2312.09558","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-12-15T06:33:14Z","cross_cats_sorted":[],"title_canon_sha256":"7e809589c76e83c1fba004c778391b27aef72400e7c435efdbe935cac6ed5d47","abstract_canon_sha256":"c75ea1fd83bc9dcde61349252e741d6238ceb89ee8ff67e105309baa9a3b0ce3"},"schema_version":"1.0"},"canonical_sha256":"adee0cdfec343997671db141b1400e222e08f2071cca0ee0c44e4f6ae3ef40f4","source":{"kind":"arxiv","id":"2312.09558","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.09558","created_at":"2026-07-05T08:29:19Z"},{"alias_kind":"arxiv_version","alias_value":"2312.09558v3","created_at":"2026-07-05T08:29:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.09558","created_at":"2026-07-05T08:29:19Z"},{"alias_kind":"pith_short_12","alias_value":"VXXAZX7MGQ4Z","created_at":"2026-07-05T08:29:19Z"},{"alias_kind":"pith_short_16","alias_value":"VXXAZX7MGQ4ZOZY5","created_at":"2026-07-05T08:29:19Z"},{"alias_kind":"pith_short_8","alias_value":"VXXAZX7M","created_at":"2026-07-05T08:29:19Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:VXXAZX7MGQ4ZOZY5WFA3CQAOEI","target":"record","payload":{"canonical_record":{"source":{"id":"2312.09558","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-12-15T06:33:14Z","cross_cats_sorted":[],"title_canon_sha256":"7e809589c76e83c1fba004c778391b27aef72400e7c435efdbe935cac6ed5d47","abstract_canon_sha256":"c75ea1fd83bc9dcde61349252e741d6238ceb89ee8ff67e105309baa9a3b0ce3"},"schema_version":"1.0"},"canonical_sha256":"adee0cdfec343997671db141b1400e222e08f2071cca0ee0c44e4f6ae3ef40f4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:29:19.319679Z","signature_b64":"B8dSRk3RUXpqyJL++iuxuuk/SJovhJ4V52bnknNfMWnXLhh6EVnj8+lN57Jphbi3+0NuxleErCvtr0TlwwSdDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"adee0cdfec343997671db141b1400e222e08f2071cca0ee0c44e4f6ae3ef40f4","last_reissued_at":"2026-07-05T08:29:19.319196Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:29:19.319196Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.09558","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:29:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vyrzHJTJ6o3OUH1qAkw51RuyUNF2Sq20FkgoSZLM771pZLrSTDvKtDj0ya5odUbJ3z3nQ2x0CQHuSPkPkck4Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T05:03:43.610051Z"},"content_sha256":"0c6748537558cc436530a6f7fa7f6d54331644e0ed2e613a93827397304a90f1","schema_version":"1.0","event_id":"sha256:0c6748537558cc436530a6f7fa7f6d54331644e0ed2e613a93827397304a90f1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:VXXAZX7MGQ4ZOZY5WFA3CQAOEI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards Transferable Targeted 3D Adversarial Attack in the Physical World","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Hang Su, Shouwei Ruan, Xiao Yang, Xingxing Wei, Yao Huang, Yinpeng Dong","submitted_at":"2023-12-15T06:33:14Z","abstract_excerpt":"Compared with transferable untargeted attacks, transferable targeted adversarial attacks could specify the misclassification categories of adversarial samples, posing a greater threat to security-critical tasks. In the meanwhile, 3D adversarial samples, due to their potential of multi-view robustness, can more comprehensively identify weaknesses in existing deep learning systems, possessing great application value. However, the field of transferable targeted 3D adversarial attacks remains vacant. The goal of this work is to develop a more effective technique that could generate transferable ta"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.09558","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.09558/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:29:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IEWCet8GV68hKmQQgnb1PVvkfyKRqpkc4q39fok+MskSXsnTp/QXP5qgiU1LY2WgJKM5bv+tZ8Mo41qmRk9YAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T05:03:43.610440Z"},"content_sha256":"90efb87d6afa5bac0128322e055f9cc51fbb390a4d62135d1b60a1897a7dab6e","schema_version":"1.0","event_id":"sha256:90efb87d6afa5bac0128322e055f9cc51fbb390a4d62135d1b60a1897a7dab6e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VXXAZX7MGQ4ZOZY5WFA3CQAOEI/bundle.json","state_url":"https://pith.science/pith/VXXAZX7MGQ4ZOZY5WFA3CQAOEI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VXXAZX7MGQ4ZOZY5WFA3CQAOEI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-08T05:03:43Z","links":{"resolver":"https://pith.science/pith/VXXAZX7MGQ4ZOZY5WFA3CQAOEI","bundle":"https://pith.science/pith/VXXAZX7MGQ4ZOZY5WFA3CQAOEI/bundle.json","state":"https://pith.science/pith/VXXAZX7MGQ4ZOZY5WFA3CQAOEI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VXXAZX7MGQ4ZOZY5WFA3CQAOEI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:VXXAZX7MGQ4ZOZY5WFA3CQAOEI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c75ea1fd83bc9dcde61349252e741d6238ceb89ee8ff67e105309baa9a3b0ce3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-12-15T06:33:14Z","title_canon_sha256":"7e809589c76e83c1fba004c778391b27aef72400e7c435efdbe935cac6ed5d47"},"schema_version":"1.0","source":{"id":"2312.09558","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.09558","created_at":"2026-07-05T08:29:19Z"},{"alias_kind":"arxiv_version","alias_value":"2312.09558v3","created_at":"2026-07-05T08:29:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.09558","created_at":"2026-07-05T08:29:19Z"},{"alias_kind":"pith_short_12","alias_value":"VXXAZX7MGQ4Z","created_at":"2026-07-05T08:29:19Z"},{"alias_kind":"pith_short_16","alias_value":"VXXAZX7MGQ4ZOZY5","created_at":"2026-07-05T08:29:19Z"},{"alias_kind":"pith_short_8","alias_value":"VXXAZX7M","created_at":"2026-07-05T08:29:19Z"}],"graph_snapshots":[{"event_id":"sha256:90efb87d6afa5bac0128322e055f9cc51fbb390a4d62135d1b60a1897a7dab6e","target":"graph","created_at":"2026-07-05T08:29:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.09558/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Compared with transferable untargeted attacks, transferable targeted adversarial attacks could specify the misclassification categories of adversarial samples, posing a greater threat to security-critical tasks. In the meanwhile, 3D adversarial samples, due to their potential of multi-view robustness, can more comprehensively identify weaknesses in existing deep learning systems, possessing great application value. However, the field of transferable targeted 3D adversarial attacks remains vacant. The goal of this work is to develop a more effective technique that could generate transferable ta","authors_text":"Hang Su, Shouwei Ruan, Xiao Yang, Xingxing Wei, Yao Huang, Yinpeng Dong","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-12-15T06:33:14Z","title":"Towards Transferable Targeted 3D Adversarial Attack in the Physical World"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.09558","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0c6748537558cc436530a6f7fa7f6d54331644e0ed2e613a93827397304a90f1","target":"record","created_at":"2026-07-05T08:29:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c75ea1fd83bc9dcde61349252e741d6238ceb89ee8ff67e105309baa9a3b0ce3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-12-15T06:33:14Z","title_canon_sha256":"7e809589c76e83c1fba004c778391b27aef72400e7c435efdbe935cac6ed5d47"},"schema_version":"1.0","source":{"id":"2312.09558","kind":"arxiv","version":3}},"canonical_sha256":"adee0cdfec343997671db141b1400e222e08f2071cca0ee0c44e4f6ae3ef40f4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"adee0cdfec343997671db141b1400e222e08f2071cca0ee0c44e4f6ae3ef40f4","first_computed_at":"2026-07-05T08:29:19.319196Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:29:19.319196Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"B8dSRk3RUXpqyJL++iuxuuk/SJovhJ4V52bnknNfMWnXLhh6EVnj8+lN57Jphbi3+0NuxleErCvtr0TlwwSdDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:29:19.319679Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.09558","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0c6748537558cc436530a6f7fa7f6d54331644e0ed2e613a93827397304a90f1","sha256:90efb87d6afa5bac0128322e055f9cc51fbb390a4d62135d1b60a1897a7dab6e"],"state_sha256":"b1963c82966efb3afe7c1061e10eab42bc7e92e22dcbc104fac4364b2c6d1387"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JFREF7Py5IfLPKor2MxOZ9Xmq3XXF0v9tMEyV4pjVqxRXhf0r+K3MZI9gLgt9BoHTYnJob6sMEcbPOz34OW0DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-08T05:03:43.612381Z","bundle_sha256":"99bff5331fd71cffc7cd0919639493170fa62431bcfddc7a0d775344f60af268"}}