{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:WS6DIK3SORKIKJDNXNELJTPNJS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"659b4af61d37c1a63cbce96430b10a400e5f3e77af38657b0da671e798dbe624","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-09T13:14:11Z","title_canon_sha256":"d6f0de2c7aeda18945ac489d4fc8e5608fec644735e0063dcf9dffb45e8f79b1"},"schema_version":"1.0","source":{"id":"2410.06851","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.06851","created_at":"2026-07-05T11:10:47Z"},{"alias_kind":"arxiv_version","alias_value":"2410.06851v3","created_at":"2026-07-05T11:10:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.06851","created_at":"2026-07-05T11:10:47Z"},{"alias_kind":"pith_short_12","alias_value":"WS6DIK3SORKI","created_at":"2026-07-05T11:10:47Z"},{"alias_kind":"pith_short_16","alias_value":"WS6DIK3SORKIKJDN","created_at":"2026-07-05T11:10:47Z"},{"alias_kind":"pith_short_8","alias_value":"WS6DIK3S","created_at":"2026-07-05T11:10:47Z"}],"graph_snapshots":[{"event_id":"sha256:e049fa9993ce70d75a5a0a5e75e2aa5621e024ec683da9dfdb5f16283dfbea58","target":"graph","created_at":"2026-07-05T11:10:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.06851/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Model ensemble adversarial attack has become a powerful method for generating transferable adversarial examples that can target even unknown models, but its theoretical foundation remains underexplored. To address this gap, we provide early theoretical insights that serve as a roadmap for advancing model ensemble adversarial attack. We first define transferability error to measure the error in adversarial transferability, alongside concepts of diversity and empirical model ensemble Rademacher complexity. We then decompose the transferability error into vulnerability, diversity, and a constant,","authors_text":"Huayi Tang, Wei Yao, Yong Liu, Zeliang Zhang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-09T13:14:11Z","title":"Understanding Model Ensemble in Transferable Adversarial Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.06851","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:baf27cefd0f4585c58a81986c1f5cdcfe4a75b2b592c3ae08168901c0ab27ac5","target":"record","created_at":"2026-07-05T11:10:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"659b4af61d37c1a63cbce96430b10a400e5f3e77af38657b0da671e798dbe624","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-09T13:14:11Z","title_canon_sha256":"d6f0de2c7aeda18945ac489d4fc8e5608fec644735e0063dcf9dffb45e8f79b1"},"schema_version":"1.0","source":{"id":"2410.06851","kind":"arxiv","version":3}},"canonical_sha256":"b4bc342b72745485246dbb48b4cded4ca10db11e4e8e0f9b7373a992229d098a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b4bc342b72745485246dbb48b4cded4ca10db11e4e8e0f9b7373a992229d098a","first_computed_at":"2026-07-05T11:10:47.784261Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:10:47.784261Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"YD8zSRO1KimNK91Jb6+oPxYb20QOe47UO3Cp1pNbR3znOfWy68l12q9LgtmxQ8PWCUxJ2xqCTUE7AFfa8463AQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:10:47.784777Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.06851","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:baf27cefd0f4585c58a81986c1f5cdcfe4a75b2b592c3ae08168901c0ab27ac5","sha256:e049fa9993ce70d75a5a0a5e75e2aa5621e024ec683da9dfdb5f16283dfbea58"],"state_sha256":"4b1da869aed72c47ce4001a5799ad49969a4c4fd4ed2ab8688fa89482037bba8"}