{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:X27N5PGNZV4OORRYANF6GCKEEK","short_pith_number":"pith:X27N5PGN","canonical_record":{"source":{"id":"2312.04913","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-12-08T09:08:50Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"edef034fc367e0c9f24d00710583281628652e6eeeb9ef2963ec0702a70e1417","abstract_canon_sha256":"2b1d954bef6ed96ec97a46bf86aca35a16c0b845d51c205ff675e64211032d69"},"schema_version":"1.0"},"canonical_sha256":"bebedebccdcd78e74638034be30944228a9fe76925694bf2ac979c2e35bd71b8","source":{"kind":"arxiv","id":"2312.04913","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.04913","created_at":"2026-07-05T07:21:54Z"},{"alias_kind":"arxiv_version","alias_value":"2312.04913v1","created_at":"2026-07-05T07:21:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.04913","created_at":"2026-07-05T07:21:54Z"},{"alias_kind":"pith_short_12","alias_value":"X27N5PGNZV4O","created_at":"2026-07-05T07:21:54Z"},{"alias_kind":"pith_short_16","alias_value":"X27N5PGNZV4OORRY","created_at":"2026-07-05T07:21:54Z"},{"alias_kind":"pith_short_8","alias_value":"X27N5PGN","created_at":"2026-07-05T07:21:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:X27N5PGNZV4OORRYANF6GCKEEK","target":"record","payload":{"canonical_record":{"source":{"id":"2312.04913","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-12-08T09:08:50Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"edef034fc367e0c9f24d00710583281628652e6eeeb9ef2963ec0702a70e1417","abstract_canon_sha256":"2b1d954bef6ed96ec97a46bf86aca35a16c0b845d51c205ff675e64211032d69"},"schema_version":"1.0"},"canonical_sha256":"bebedebccdcd78e74638034be30944228a9fe76925694bf2ac979c2e35bd71b8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:21:54.230778Z","signature_b64":"FVgo0ot0XcYtCj2U9rCnDNZIkfGQl0tijg0qxkZC/swrU4z5cs12W5wYbhmt6lzxdET0OiW8oRWWy4fdJ/zUDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bebedebccdcd78e74638034be30944228a9fe76925694bf2ac979c2e35bd71b8","last_reissued_at":"2026-07-05T07:21:54.230289Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:21:54.230289Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.04913","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:21:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jjfeQg3mkth34sD10+yjIzjZy6AnxhCOx0VdWc71fGyJRJwOe6KWQ2k/qshdwYuK65YqG7rmdzlO6d+GTvYhDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T00:43:00.872064Z"},"content_sha256":"fad2b7286306547d3110b2f6bd3b69866e4037673815779011509df9a71e7e3b","schema_version":"1.0","event_id":"sha256:fad2b7286306547d3110b2f6bd3b69866e4037673815779011509df9a71e7e3b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:X27N5PGNZV4OORRYANF6GCKEEK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Bangyan He, Siyuan Liang, Tianrui Lou, Xiaochun Cao, Xiaojun Jia, Yang Liu","submitted_at":"2023-12-08T09:08:50Z","abstract_excerpt":"Current Visual-Language Pre-training (VLP) models are vulnerable to adversarial examples. These adversarial examples present substantial security risks to VLP models, as they can leverage inherent weaknesses in the models, resulting in incorrect predictions. In contrast to white-box adversarial attacks, transfer attacks (where the adversary crafts adversarial examples on a white-box model to fool another black-box model) are more reflective of real-world scenarios, thus making them more meaningful for research. By summarizing and analyzing existing research, we identified two factors that can "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.04913","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.04913/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:21:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uh70en9Rx0hF8zpWPIeCFtYZOCDrKWUBtzVdqFWwS74zZrmBBZuMWZTIgrKdHlHfaTJCvXC78ilHFt/I3LYNDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T00:43:00.872572Z"},"content_sha256":"d6fc4d7e30d53db4b1c1fc445d1f6fbfbc355749ab30e0219f339e60b051f68c","schema_version":"1.0","event_id":"sha256:d6fc4d7e30d53db4b1c1fc445d1f6fbfbc355749ab30e0219f339e60b051f68c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/X27N5PGNZV4OORRYANF6GCKEEK/bundle.json","state_url":"https://pith.science/pith/X27N5PGNZV4OORRYANF6GCKEEK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/X27N5PGNZV4OORRYANF6GCKEEK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T00:43:00Z","links":{"resolver":"https://pith.science/pith/X27N5PGNZV4OORRYANF6GCKEEK","bundle":"https://pith.science/pith/X27N5PGNZV4OORRYANF6GCKEEK/bundle.json","state":"https://pith.science/pith/X27N5PGNZV4OORRYANF6GCKEEK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/X27N5PGNZV4OORRYANF6GCKEEK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:X27N5PGNZV4OORRYANF6GCKEEK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2b1d954bef6ed96ec97a46bf86aca35a16c0b845d51c205ff675e64211032d69","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-12-08T09:08:50Z","title_canon_sha256":"edef034fc367e0c9f24d00710583281628652e6eeeb9ef2963ec0702a70e1417"},"schema_version":"1.0","source":{"id":"2312.04913","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.04913","created_at":"2026-07-05T07:21:54Z"},{"alias_kind":"arxiv_version","alias_value":"2312.04913v1","created_at":"2026-07-05T07:21:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.04913","created_at":"2026-07-05T07:21:54Z"},{"alias_kind":"pith_short_12","alias_value":"X27N5PGNZV4O","created_at":"2026-07-05T07:21:54Z"},{"alias_kind":"pith_short_16","alias_value":"X27N5PGNZV4OORRY","created_at":"2026-07-05T07:21:54Z"},{"alias_kind":"pith_short_8","alias_value":"X27N5PGN","created_at":"2026-07-05T07:21:54Z"}],"graph_snapshots":[{"event_id":"sha256:d6fc4d7e30d53db4b1c1fc445d1f6fbfbc355749ab30e0219f339e60b051f68c","target":"graph","created_at":"2026-07-05T07:21:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.04913/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Current Visual-Language Pre-training (VLP) models are vulnerable to adversarial examples. These adversarial examples present substantial security risks to VLP models, as they can leverage inherent weaknesses in the models, resulting in incorrect predictions. In contrast to white-box adversarial attacks, transfer attacks (where the adversary crafts adversarial examples on a white-box model to fool another black-box model) are more reflective of real-world scenarios, thus making them more meaningful for research. By summarizing and analyzing existing research, we identified two factors that can ","authors_text":"Bangyan He, Siyuan Liang, Tianrui Lou, Xiaochun Cao, Xiaojun Jia, Yang Liu","cross_cats":["cs.AI","cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-12-08T09:08:50Z","title":"SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.04913","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fad2b7286306547d3110b2f6bd3b69866e4037673815779011509df9a71e7e3b","target":"record","created_at":"2026-07-05T07:21:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2b1d954bef6ed96ec97a46bf86aca35a16c0b845d51c205ff675e64211032d69","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-12-08T09:08:50Z","title_canon_sha256":"edef034fc367e0c9f24d00710583281628652e6eeeb9ef2963ec0702a70e1417"},"schema_version":"1.0","source":{"id":"2312.04913","kind":"arxiv","version":1}},"canonical_sha256":"bebedebccdcd78e74638034be30944228a9fe76925694bf2ac979c2e35bd71b8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bebedebccdcd78e74638034be30944228a9fe76925694bf2ac979c2e35bd71b8","first_computed_at":"2026-07-05T07:21:54.230289Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:21:54.230289Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FVgo0ot0XcYtCj2U9rCnDNZIkfGQl0tijg0qxkZC/swrU4z5cs12W5wYbhmt6lzxdET0OiW8oRWWy4fdJ/zUDw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:21:54.230778Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.04913","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fad2b7286306547d3110b2f6bd3b69866e4037673815779011509df9a71e7e3b","sha256:d6fc4d7e30d53db4b1c1fc445d1f6fbfbc355749ab30e0219f339e60b051f68c"],"state_sha256":"dd44c3b6da67474c898bb1112a522adba5d0bd44bd9595cf8140d372123824ad"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LEUJQA2DIF6m2Z3xSXitMUg0FOcQDpK1NFHh1YeaPQG6PyndL1U7XbLdfOVaxiRhML3TZTQ/8W1cmvayGrIuDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T00:43:00.876048Z","bundle_sha256":"43a54a36ee7d760e31bcdd06f8a378b248e2ec97e09e48da6e0bb35a10687ec6"}}