{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2023:WN4KEWZWAAR54ALHRGTBROVH3U","short_pith_number":"pith:WN4KEWZW","schema_version":"1.0","canonical_sha256":"b378a25b360023de016789a618baa7dd25f67168815aa2325f0f007f99c21700","source":{"kind":"arxiv","id":"2306.02895","version":2},"attestation_state":"computed","paper":{"title":"Evading Black-box Classifiers Without Breaking Eggs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","stat.ML"],"primary_cat":"cs.CR","authors_text":"Edoardo Debenedetti, Florian Tram\\`er, Nicholas Carlini","submitted_at":"2023-06-05T14:04:53Z","abstract_excerpt":"Decision-based evasion attacks repeatedly query a black-box classifier to generate adversarial examples. Prior work measures the cost of such attacks by the total number of queries made to the classifier. We argue this metric is flawed. Most security-critical machine learning systems aim to weed out \"bad\" data (e.g., malware, harmful content, etc). Queries to such systems carry a fundamentally asymmetric cost: queries detected as \"bad\" come at a higher cost because they trigger additional security filters, e.g., usage throttling or account suspension. Yet, we find that existing decision-based "},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2306.02895","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-05T14:04:53Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"cdab77301aba9b366088a0788dd59a19d96f877308dc5789c3edb99e1b2606f1","abstract_canon_sha256":"d451672f84376ce2288137ae949b92cad8cd81f585e1b1590ce3cd4919a41c5b"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:44:54.576222Z","signature_b64":"B7Y8QsU4tMYx/SBivZpni0Ds2IE1bvlSoa2P36MEWCpM0pILSGeaBGkNaHO9STdGfuu4/+jB71YODzQAHZvCDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b378a25b360023de016789a618baa7dd25f67168815aa2325f0f007f99c21700","last_reissued_at":"2026-07-05T07:44:54.575694Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:44:54.575694Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Evading Black-box Classifiers Without Breaking Eggs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","stat.ML"],"primary_cat":"cs.CR","authors_text":"Edoardo Debenedetti, Florian Tram\\`er, Nicholas Carlini","submitted_at":"2023-06-05T14:04:53Z","abstract_excerpt":"Decision-based evasion attacks repeatedly query a black-box classifier to generate adversarial examples. Prior work measures the cost of such attacks by the total number of queries made to the classifier. We argue this metric is flawed. Most security-critical machine learning systems aim to weed out \"bad\" data (e.g., malware, harmful content, etc). Queries to such systems carry a fundamentally asymmetric cost: queries detected as \"bad\" come at a higher cost because they trigger additional security filters, e.g., usage throttling or account suspension. Yet, we find that existing decision-based "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.02895","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.02895/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2306.02895","created_at":"2026-07-05T07:44:54.575765+00:00"},{"alias_kind":"arxiv_version","alias_value":"2306.02895v2","created_at":"2026-07-05T07:44:54.575765+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.02895","created_at":"2026-07-05T07:44:54.575765+00:00"},{"alias_kind":"pith_short_12","alias_value":"WN4KEWZWAAR5","created_at":"2026-07-05T07:44:54.575765+00:00"},{"alias_kind":"pith_short_16","alias_value":"WN4KEWZWAAR54ALH","created_at":"2026-07-05T07:44:54.575765+00:00"},{"alias_kind":"pith_short_8","alias_value":"WN4KEWZW","created_at":"2026-07-05T07:44:54.575765+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/WN4KEWZWAAR54ALHRGTBROVH3U","json":"https://pith.science/pith/WN4KEWZWAAR54ALHRGTBROVH3U.json","graph_json":"https://pith.science/api/pith-number/WN4KEWZWAAR54ALHRGTBROVH3U/graph.json","events_json":"https://pith.science/api/pith-number/WN4KEWZWAAR54ALHRGTBROVH3U/events.json","paper":"https://pith.science/paper/WN4KEWZW"},"agent_actions":{"view_html":"https://pith.science/pith/WN4KEWZWAAR54ALHRGTBROVH3U","download_json":"https://pith.science/pith/WN4KEWZWAAR54ALHRGTBROVH3U.json","view_paper":"https://pith.science/paper/WN4KEWZW","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2306.02895&json=true","fetch_graph":"https://pith.science/api/pith-number/WN4KEWZWAAR54ALHRGTBROVH3U/graph.json","fetch_events":"https://pith.science/api/pith-number/WN4KEWZWAAR54ALHRGTBROVH3U/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/WN4KEWZWAAR54ALHRGTBROVH3U/action/timestamp_anchor","attest_storage":"https://pith.science/pith/WN4KEWZWAAR54ALHRGTBROVH3U/action/storage_attestation","attest_author":"https://pith.science/pith/WN4KEWZWAAR54ALHRGTBROVH3U/action/author_attestation","sign_citation":"https://pith.science/pith/WN4KEWZWAAR54ALHRGTBROVH3U/action/citation_signature","submit_replication":"https://pith.science/pith/WN4KEWZWAAR54ALHRGTBROVH3U/action/replication_record"}},"created_at":"2026-07-05T07:44:54.575765+00:00","updated_at":"2026-07-05T07:44:54.575765+00:00"}