{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:WEUGNNBH3VDTEFH6YIR2ZUD2KO","short_pith_number":"pith:WEUGNNBH","canonical_record":{"source":{"id":"2507.21985","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-07-29T16:36:01Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"25ef12bbea79c6536d9e1b991f51f1d63670378d0e79b90b78e0a7028c78a176","abstract_canon_sha256":"0d7bbb1c357c987fbbd9e3e4d6d0801d146e067f40291cae401570314837af40"},"schema_version":"1.0"},"canonical_sha256":"b12866b427dd473214fec223acd07a53b685a32bb3e38acfc10476c137b7da14","source":{"kind":"arxiv","id":"2507.21985","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.21985","created_at":"2026-07-05T11:45:11Z"},{"alias_kind":"arxiv_version","alias_value":"2507.21985v1","created_at":"2026-07-05T11:45:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.21985","created_at":"2026-07-05T11:45:11Z"},{"alias_kind":"pith_short_12","alias_value":"WEUGNNBH3VDT","created_at":"2026-07-05T11:45:11Z"},{"alias_kind":"pith_short_16","alias_value":"WEUGNNBH3VDTEFH6","created_at":"2026-07-05T11:45:11Z"},{"alias_kind":"pith_short_8","alias_value":"WEUGNNBH","created_at":"2026-07-05T11:45:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:WEUGNNBH3VDTEFH6YIR2ZUD2KO","target":"record","payload":{"canonical_record":{"source":{"id":"2507.21985","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-07-29T16:36:01Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"25ef12bbea79c6536d9e1b991f51f1d63670378d0e79b90b78e0a7028c78a176","abstract_canon_sha256":"0d7bbb1c357c987fbbd9e3e4d6d0801d146e067f40291cae401570314837af40"},"schema_version":"1.0"},"canonical_sha256":"b12866b427dd473214fec223acd07a53b685a32bb3e38acfc10476c137b7da14","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:45:11.015494Z","signature_b64":"n9IwbEZk9sytheao18Jwuzqk1+kweudPKgrmwJd3Y2eHRPYBHsW6yEmesrtj7UDb3GNqv+L44qDztq1Va5p4Aw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b12866b427dd473214fec223acd07a53b685a32bb3e38acfc10476c137b7da14","last_reissued_at":"2026-07-05T11:45:11.015039Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:45:11.015039Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.21985","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:45:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wQJWZKhyuc5GJZVuJ6HFvMv19TkzLRBB3CkR2WpFA/xZ5zNS/mLaDWGWJ/9qDexTW0xjC1QMzGSDTcuek6RoCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T04:50:05.245843Z"},"content_sha256":"d739d2e429fdd896755216ab20c5de9f002198d1246bae24670676ac4671b58d","schema_version":"1.0","event_id":"sha256:d739d2e429fdd896755216ab20c5de9f002198d1246bae24670676ac4671b58d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:WEUGNNBH3VDTEFH6YIR2ZUD2KO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CV","authors_text":"Donghyun Kim, Ga San Jhun, Hyun Jun Yook, Jae Hyun Cho, Min Jeon, Tae Hyung Kim, Youn Kyu Lee","submitted_at":"2025-07-29T16:36:01Z","abstract_excerpt":"Machine unlearning (MU) removes specific data points or concepts from deep learning models to enhance privacy and prevent sensitive content generation. Adversarial prompts can exploit unlearned models to generate content containing removed concepts, posing a significant security risk. However, existing adversarial attack methods still face challenges in generating content that aligns with an attacker's intent while incurring high computational costs to identify successful prompts. To address these challenges, we propose ZIUM, a Zero-shot Intent-aware adversarial attack on Unlearned Models, whi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.21985","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.21985/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:45:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"y37oZsoBgDiH4QspWjB4rDUO3YVtlN+U13KJwrL2dRKQ1OkVl92uWRTl4unKBYIfeJuIFLh4cRhfyfYPhLHZDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T04:50:05.246806Z"},"content_sha256":"a5beb50eb1dbd90325cf1f665a6d8c22d34b9b5ed845fc7e77f27d02c6df3d1c","schema_version":"1.0","event_id":"sha256:a5beb50eb1dbd90325cf1f665a6d8c22d34b9b5ed845fc7e77f27d02c6df3d1c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WEUGNNBH3VDTEFH6YIR2ZUD2KO/bundle.json","state_url":"https://pith.science/pith/WEUGNNBH3VDTEFH6YIR2ZUD2KO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WEUGNNBH3VDTEFH6YIR2ZUD2KO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T04:50:05Z","links":{"resolver":"https://pith.science/pith/WEUGNNBH3VDTEFH6YIR2ZUD2KO","bundle":"https://pith.science/pith/WEUGNNBH3VDTEFH6YIR2ZUD2KO/bundle.json","state":"https://pith.science/pith/WEUGNNBH3VDTEFH6YIR2ZUD2KO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WEUGNNBH3VDTEFH6YIR2ZUD2KO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:WEUGNNBH3VDTEFH6YIR2ZUD2KO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0d7bbb1c357c987fbbd9e3e4d6d0801d146e067f40291cae401570314837af40","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-07-29T16:36:01Z","title_canon_sha256":"25ef12bbea79c6536d9e1b991f51f1d63670378d0e79b90b78e0a7028c78a176"},"schema_version":"1.0","source":{"id":"2507.21985","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.21985","created_at":"2026-07-05T11:45:11Z"},{"alias_kind":"arxiv_version","alias_value":"2507.21985v1","created_at":"2026-07-05T11:45:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.21985","created_at":"2026-07-05T11:45:11Z"},{"alias_kind":"pith_short_12","alias_value":"WEUGNNBH3VDT","created_at":"2026-07-05T11:45:11Z"},{"alias_kind":"pith_short_16","alias_value":"WEUGNNBH3VDTEFH6","created_at":"2026-07-05T11:45:11Z"},{"alias_kind":"pith_short_8","alias_value":"WEUGNNBH","created_at":"2026-07-05T11:45:11Z"}],"graph_snapshots":[{"event_id":"sha256:a5beb50eb1dbd90325cf1f665a6d8c22d34b9b5ed845fc7e77f27d02c6df3d1c","target":"graph","created_at":"2026-07-05T11:45:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.21985/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine unlearning (MU) removes specific data points or concepts from deep learning models to enhance privacy and prevent sensitive content generation. Adversarial prompts can exploit unlearned models to generate content containing removed concepts, posing a significant security risk. However, existing adversarial attack methods still face challenges in generating content that aligns with an attacker's intent while incurring high computational costs to identify successful prompts. To address these challenges, we propose ZIUM, a Zero-shot Intent-aware adversarial attack on Unlearned Models, whi","authors_text":"Donghyun Kim, Ga San Jhun, Hyun Jun Yook, Jae Hyun Cho, Min Jeon, Tae Hyung Kim, Youn Kyu Lee","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-07-29T16:36:01Z","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.21985","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d739d2e429fdd896755216ab20c5de9f002198d1246bae24670676ac4671b58d","target":"record","created_at":"2026-07-05T11:45:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0d7bbb1c357c987fbbd9e3e4d6d0801d146e067f40291cae401570314837af40","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-07-29T16:36:01Z","title_canon_sha256":"25ef12bbea79c6536d9e1b991f51f1d63670378d0e79b90b78e0a7028c78a176"},"schema_version":"1.0","source":{"id":"2507.21985","kind":"arxiv","version":1}},"canonical_sha256":"b12866b427dd473214fec223acd07a53b685a32bb3e38acfc10476c137b7da14","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b12866b427dd473214fec223acd07a53b685a32bb3e38acfc10476c137b7da14","first_computed_at":"2026-07-05T11:45:11.015039Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:45:11.015039Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"n9IwbEZk9sytheao18Jwuzqk1+kweudPKgrmwJd3Y2eHRPYBHsW6yEmesrtj7UDb3GNqv+L44qDztq1Va5p4Aw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:45:11.015494Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.21985","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d739d2e429fdd896755216ab20c5de9f002198d1246bae24670676ac4671b58d","sha256:a5beb50eb1dbd90325cf1f665a6d8c22d34b9b5ed845fc7e77f27d02c6df3d1c"],"state_sha256":"5d9cdc16f59ca881343731fcd535be3ca6ff6cc60330c55c6eaa86ca7faa4742"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lPNqC2qW08rqVhj066dj/BQLgZv4h3hDRiCmIqSBE8Q5YTHtkuweAgrJmf91lq1yLY/utpWDVCAag6/cue4fBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T04:50:05.252989Z","bundle_sha256":"d2917eb28e24ec6dbb4d957aaa1f95fd15e8e063a6ff1c468e90170f967d82a4"}}