{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:WSWPSAYH5M565GNBAT4LMND6OH","short_pith_number":"pith:WSWPSAYH","canonical_record":{"source":{"id":"2106.02105","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-03T19:53:46Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"735ef3b05c8904b0022d4ae1e1f8736017e8c19fb60928260551ea2d77358b1d","abstract_canon_sha256":"f15772ab9a3937a9b36736f70e694a41dbbf20e5e8cbf6789dde31977eb93389"},"schema_version":"1.0"},"canonical_sha256":"b4acf90307eb3bee99a104f8b6347e71da9627c72606a7eb71f1d603b7334d45","source":{"kind":"arxiv","id":"2106.02105","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.02105","created_at":"2026-07-05T03:25:31Z"},{"alias_kind":"arxiv_version","alias_value":"2106.02105v2","created_at":"2026-07-05T03:25:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.02105","created_at":"2026-07-05T03:25:31Z"},{"alias_kind":"pith_short_12","alias_value":"WSWPSAYH5M56","created_at":"2026-07-05T03:25:31Z"},{"alias_kind":"pith_short_16","alias_value":"WSWPSAYH5M565GNB","created_at":"2026-07-05T03:25:31Z"},{"alias_kind":"pith_short_8","alias_value":"WSWPSAYH","created_at":"2026-07-05T03:25:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:WSWPSAYH5M565GNBAT4LMND6OH","target":"record","payload":{"canonical_record":{"source":{"id":"2106.02105","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-03T19:53:46Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"735ef3b05c8904b0022d4ae1e1f8736017e8c19fb60928260551ea2d77358b1d","abstract_canon_sha256":"f15772ab9a3937a9b36736f70e694a41dbbf20e5e8cbf6789dde31977eb93389"},"schema_version":"1.0"},"canonical_sha256":"b4acf90307eb3bee99a104f8b6347e71da9627c72606a7eb71f1d603b7334d45","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:25:31.648895Z","signature_b64":"g4XT7kRUVCoILJ+j/3zO24HgZDyfYbpsa1tK8yl12s95ZyF6DRtofBBT7/jLiSm6snxjomPi0LZcZ5MJ3FtwDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b4acf90307eb3bee99a104f8b6347e71da9627c72606a7eb71f1d603b7334d45","last_reissued_at":"2026-07-05T03:25:31.648478Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:25:31.648478Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2106.02105","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:25:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"h0fnUYFvpbTAKAzDooheQ7UEIlxO5uxcZyF4zwWfTuMF51CPlCWV1vqnt/cCWIzXGKkqm0+RH64JTU79brAuBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T07:48:08.593274Z"},"content_sha256":"b7d64bcd0c2656a0361fa8ec378a56202d9dde01d06c260c9d0b2ce89f2c8727","schema_version":"1.0","event_id":"sha256:b7d64bcd0c2656a0361fa8ec378a56202d9dde01d06c260c9d0b2ce89f2c8727"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:WSWPSAYH5M565GNBAT4LMND6OH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Garrett T. Kenyon, Jacob M. Springer, Melanie Mitchell","submitted_at":"2021-06-03T19:53:46Z","abstract_excerpt":"Adversarial examples for neural network image classifiers are known to be transferable: examples optimized to be misclassified by a source classifier are often misclassified as well by classifiers with different architectures. However, targeted adversarial examples -- optimized to be classified as a chosen target class -- tend to be less transferable between architectures. While prior research on constructing transferable targeted attacks has focused on improving the optimization procedure, in this work we examine the role of the source classifier. Here, we show that training the source classi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.02105","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2106.02105/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:25:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LirAqLuF0is6tH7K8IXknj3vn99SrujVby4c5vWBIo99lUvNAxOsxc30Z3efPAxek50KE0Dr375YJPOX2oKKBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T07:48:08.593683Z"},"content_sha256":"3034db53392c78f51a92eaceaf7351b7302f4c904e8563509358d75cb9396c22","schema_version":"1.0","event_id":"sha256:3034db53392c78f51a92eaceaf7351b7302f4c904e8563509358d75cb9396c22"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WSWPSAYH5M565GNBAT4LMND6OH/bundle.json","state_url":"https://pith.science/pith/WSWPSAYH5M565GNBAT4LMND6OH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WSWPSAYH5M565GNBAT4LMND6OH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T07:48:08Z","links":{"resolver":"https://pith.science/pith/WSWPSAYH5M565GNBAT4LMND6OH","bundle":"https://pith.science/pith/WSWPSAYH5M565GNBAT4LMND6OH/bundle.json","state":"https://pith.science/pith/WSWPSAYH5M565GNBAT4LMND6OH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WSWPSAYH5M565GNBAT4LMND6OH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:WSWPSAYH5M565GNBAT4LMND6OH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f15772ab9a3937a9b36736f70e694a41dbbf20e5e8cbf6789dde31977eb93389","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-03T19:53:46Z","title_canon_sha256":"735ef3b05c8904b0022d4ae1e1f8736017e8c19fb60928260551ea2d77358b1d"},"schema_version":"1.0","source":{"id":"2106.02105","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.02105","created_at":"2026-07-05T03:25:31Z"},{"alias_kind":"arxiv_version","alias_value":"2106.02105v2","created_at":"2026-07-05T03:25:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.02105","created_at":"2026-07-05T03:25:31Z"},{"alias_kind":"pith_short_12","alias_value":"WSWPSAYH5M56","created_at":"2026-07-05T03:25:31Z"},{"alias_kind":"pith_short_16","alias_value":"WSWPSAYH5M565GNB","created_at":"2026-07-05T03:25:31Z"},{"alias_kind":"pith_short_8","alias_value":"WSWPSAYH","created_at":"2026-07-05T03:25:31Z"}],"graph_snapshots":[{"event_id":"sha256:3034db53392c78f51a92eaceaf7351b7302f4c904e8563509358d75cb9396c22","target":"graph","created_at":"2026-07-05T03:25:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.02105/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial examples for neural network image classifiers are known to be transferable: examples optimized to be misclassified by a source classifier are often misclassified as well by classifiers with different architectures. However, targeted adversarial examples -- optimized to be classified as a chosen target class -- tend to be less transferable between architectures. While prior research on constructing transferable targeted attacks has focused on improving the optimization procedure, in this work we examine the role of the source classifier. Here, we show that training the source classi","authors_text":"Garrett T. Kenyon, Jacob M. Springer, Melanie Mitchell","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-03T19:53:46Z","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.02105","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b7d64bcd0c2656a0361fa8ec378a56202d9dde01d06c260c9d0b2ce89f2c8727","target":"record","created_at":"2026-07-05T03:25:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f15772ab9a3937a9b36736f70e694a41dbbf20e5e8cbf6789dde31977eb93389","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-03T19:53:46Z","title_canon_sha256":"735ef3b05c8904b0022d4ae1e1f8736017e8c19fb60928260551ea2d77358b1d"},"schema_version":"1.0","source":{"id":"2106.02105","kind":"arxiv","version":2}},"canonical_sha256":"b4acf90307eb3bee99a104f8b6347e71da9627c72606a7eb71f1d603b7334d45","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b4acf90307eb3bee99a104f8b6347e71da9627c72606a7eb71f1d603b7334d45","first_computed_at":"2026-07-05T03:25:31.648478Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:25:31.648478Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"g4XT7kRUVCoILJ+j/3zO24HgZDyfYbpsa1tK8yl12s95ZyF6DRtofBBT7/jLiSm6snxjomPi0LZcZ5MJ3FtwDA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:25:31.648895Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.02105","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b7d64bcd0c2656a0361fa8ec378a56202d9dde01d06c260c9d0b2ce89f2c8727","sha256:3034db53392c78f51a92eaceaf7351b7302f4c904e8563509358d75cb9396c22"],"state_sha256":"b5c0d87f951fe677846f9f88a99f046b2d02c0620b2d7b9f4ace7188993a2526"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SGaH/2zEYs1IkFIsYDNlroHtoIPt7F0OHiMhSsnJ6n0F9Q0sAzdzYcIf6e13IKe39ZVOtKzRfRsVcusvpHF2Dw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T07:48:08.596086Z","bundle_sha256":"afd5d2136c4922c345f28e9094a6acffacb3a4c8aa2d160a3a8d073d819402ec"}}