{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:X2IAPYYB4HNRGPF73M44W6PAR2","short_pith_number":"pith:X2IAPYYB","canonical_record":{"source":{"id":"2108.07033","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-08-16T11:52:41Z","cross_cats_sorted":[],"title_canon_sha256":"439fad478de8903bd414da297088efca11e5b54c6d35845067de28bda0f4ce32","abstract_canon_sha256":"1161f50114b8b1b1496bbebb36266f20b84111ae46a4a14bf6eded714ca670cf"},"schema_version":"1.0"},"canonical_sha256":"be9007e301e1db133cbfdb39cb79e08ead04c62d756c96a4a373cbe980b430f1","source":{"kind":"arxiv","id":"2108.07033","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2108.07033","created_at":"2026-07-05T03:06:00Z"},{"alias_kind":"arxiv_version","alias_value":"2108.07033v1","created_at":"2026-07-05T03:06:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.07033","created_at":"2026-07-05T03:06:00Z"},{"alias_kind":"pith_short_12","alias_value":"X2IAPYYB4HNR","created_at":"2026-07-05T03:06:00Z"},{"alias_kind":"pith_short_16","alias_value":"X2IAPYYB4HNRGPF7","created_at":"2026-07-05T03:06:00Z"},{"alias_kind":"pith_short_8","alias_value":"X2IAPYYB","created_at":"2026-07-05T03:06:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:X2IAPYYB4HNRGPF73M44W6PAR2","target":"record","payload":{"canonical_record":{"source":{"id":"2108.07033","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-08-16T11:52:41Z","cross_cats_sorted":[],"title_canon_sha256":"439fad478de8903bd414da297088efca11e5b54c6d35845067de28bda0f4ce32","abstract_canon_sha256":"1161f50114b8b1b1496bbebb36266f20b84111ae46a4a14bf6eded714ca670cf"},"schema_version":"1.0"},"canonical_sha256":"be9007e301e1db133cbfdb39cb79e08ead04c62d756c96a4a373cbe980b430f1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:06:00.280100Z","signature_b64":"me26t3TTHrh5IPOHeGiDGUxclM+4HtRBQw8Kafu/OxsS4rTantEDDG0hlqpavh0xIUAX2F4RhYBGxmT69vY2Aw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"be9007e301e1db133cbfdb39cb79e08ead04c62d756c96a4a373cbe980b430f1","last_reissued_at":"2026-07-05T03:06:00.279751Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:06:00.279751Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2108.07033","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:06:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hOxA1FRaRM+EiWSsytX476HPoYGFuURSgD+f643gf7DbaqbYNfAPU3X5oPFwjfMorFns44vC0nd4HNGEofp9DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-19T11:25:46.199034Z"},"content_sha256":"efd5e9f2c1928d58a5e2b54c7360a26e9d02581b1480f9ac3d6c5a952c401efb","schema_version":"1.0","event_id":"sha256:efd5e9f2c1928d58a5e2b54c7360a26e9d02581b1480f9ac3d6c5a952c401efb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:X2IAPYYB4HNRGPF73M44W6PAR2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Exploring Transferable and Robust Adversarial Perturbation Generation from the Perspective of Network Hierarchy","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Ruijie Yang, Ruikui Wang, Yuanfang Guo, Yunhong Wang","submitted_at":"2021-08-16T11:52:41Z","abstract_excerpt":"The transferability and robustness of adversarial examples are two practical yet important properties for black-box adversarial attacks. In this paper, we explore effective mechanisms to boost both of them from the perspective of network hierarchy, where a typical network can be hierarchically divided into output stage, intermediate stage and input stage. Since over-specialization of source model, we can hardly improve the transferability and robustness of the adversarial perturbations in the output stage. Therefore, we focus on the intermediate and input stages in this paper and propose a tra"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.07033","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2108.07033/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:06:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PY9dEwIhazi6IK9dK0bY8BEVE3B+J9qxm9d9kCcGlLKc58gjbzk+4wXkcIxJ+rkZ6aquJCcUCDb7QSW0OGNVDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-19T11:25:46.199420Z"},"content_sha256":"ae296ac53fb385ea0c0f9163bd17aec54245fa6138b18e816ab739b66666b3d0","schema_version":"1.0","event_id":"sha256:ae296ac53fb385ea0c0f9163bd17aec54245fa6138b18e816ab739b66666b3d0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/X2IAPYYB4HNRGPF73M44W6PAR2/bundle.json","state_url":"https://pith.science/pith/X2IAPYYB4HNRGPF73M44W6PAR2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/X2IAPYYB4HNRGPF73M44W6PAR2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-19T11:25:46Z","links":{"resolver":"https://pith.science/pith/X2IAPYYB4HNRGPF73M44W6PAR2","bundle":"https://pith.science/pith/X2IAPYYB4HNRGPF73M44W6PAR2/bundle.json","state":"https://pith.science/pith/X2IAPYYB4HNRGPF73M44W6PAR2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/X2IAPYYB4HNRGPF73M44W6PAR2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:X2IAPYYB4HNRGPF73M44W6PAR2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1161f50114b8b1b1496bbebb36266f20b84111ae46a4a14bf6eded714ca670cf","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-08-16T11:52:41Z","title_canon_sha256":"439fad478de8903bd414da297088efca11e5b54c6d35845067de28bda0f4ce32"},"schema_version":"1.0","source":{"id":"2108.07033","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2108.07033","created_at":"2026-07-05T03:06:00Z"},{"alias_kind":"arxiv_version","alias_value":"2108.07033v1","created_at":"2026-07-05T03:06:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.07033","created_at":"2026-07-05T03:06:00Z"},{"alias_kind":"pith_short_12","alias_value":"X2IAPYYB4HNR","created_at":"2026-07-05T03:06:00Z"},{"alias_kind":"pith_short_16","alias_value":"X2IAPYYB4HNRGPF7","created_at":"2026-07-05T03:06:00Z"},{"alias_kind":"pith_short_8","alias_value":"X2IAPYYB","created_at":"2026-07-05T03:06:00Z"}],"graph_snapshots":[{"event_id":"sha256:ae296ac53fb385ea0c0f9163bd17aec54245fa6138b18e816ab739b66666b3d0","target":"graph","created_at":"2026-07-05T03:06:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2108.07033/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The transferability and robustness of adversarial examples are two practical yet important properties for black-box adversarial attacks. In this paper, we explore effective mechanisms to boost both of them from the perspective of network hierarchy, where a typical network can be hierarchically divided into output stage, intermediate stage and input stage. Since over-specialization of source model, we can hardly improve the transferability and robustness of the adversarial perturbations in the output stage. Therefore, we focus on the intermediate and input stages in this paper and propose a tra","authors_text":"Ruijie Yang, Ruikui Wang, Yuanfang Guo, Yunhong Wang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-08-16T11:52:41Z","title":"Exploring Transferable and Robust Adversarial Perturbation Generation from the Perspective of Network Hierarchy"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.07033","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:efd5e9f2c1928d58a5e2b54c7360a26e9d02581b1480f9ac3d6c5a952c401efb","target":"record","created_at":"2026-07-05T03:06:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1161f50114b8b1b1496bbebb36266f20b84111ae46a4a14bf6eded714ca670cf","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-08-16T11:52:41Z","title_canon_sha256":"439fad478de8903bd414da297088efca11e5b54c6d35845067de28bda0f4ce32"},"schema_version":"1.0","source":{"id":"2108.07033","kind":"arxiv","version":1}},"canonical_sha256":"be9007e301e1db133cbfdb39cb79e08ead04c62d756c96a4a373cbe980b430f1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"be9007e301e1db133cbfdb39cb79e08ead04c62d756c96a4a373cbe980b430f1","first_computed_at":"2026-07-05T03:06:00.279751Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:06:00.279751Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"me26t3TTHrh5IPOHeGiDGUxclM+4HtRBQw8Kafu/OxsS4rTantEDDG0hlqpavh0xIUAX2F4RhYBGxmT69vY2Aw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:06:00.280100Z","signed_message":"canonical_sha256_bytes"},"source_id":"2108.07033","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:efd5e9f2c1928d58a5e2b54c7360a26e9d02581b1480f9ac3d6c5a952c401efb","sha256:ae296ac53fb385ea0c0f9163bd17aec54245fa6138b18e816ab739b66666b3d0"],"state_sha256":"ce9b84209e2ed12aaf42e73770e22ca089e6a0a0f4fb8470594b122a7f5f1422"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"C5J3mXq/yeCddynpRy7sNYE+QfQH4LiFSpWcoj/DoDD7tjFUC8Y4pueIY5aqe/quwCj9ElcZVqz1hC5y0AUtDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-19T11:25:46.201506Z","bundle_sha256":"4f5499f9061fcc62b7dd60ab3b8f91bc4d490e3cbda0abf3fbab55a6f2356279"}}