{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:X2PQG5B2D54GTNVFFWCCKY5UZR","short_pith_number":"pith:X2PQG5B2","canonical_record":{"source":{"id":"2310.20175","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-10-31T04:54:55Z","cross_cats_sorted":[],"title_canon_sha256":"b7681ae6422a351bb1ed7cad7cd8ad2413fb76f4addc91389e4cb4bc98c158fa","abstract_canon_sha256":"c7b15ad07b356d874a4fa546b2ce07a8f2060af615e7a944dc98f2f61dc1b80a"},"schema_version":"1.0"},"canonical_sha256":"be9f03743a1f7869b6a52d842563b4cc5d76ddfb0f9fe252443b4b3d76e6c3a4","source":{"kind":"arxiv","id":"2310.20175","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.20175","created_at":"2026-07-05T07:07:40Z"},{"alias_kind":"arxiv_version","alias_value":"2310.20175v2","created_at":"2026-07-05T07:07:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.20175","created_at":"2026-07-05T07:07:40Z"},{"alias_kind":"pith_short_12","alias_value":"X2PQG5B2D54G","created_at":"2026-07-05T07:07:40Z"},{"alias_kind":"pith_short_16","alias_value":"X2PQG5B2D54GTNVF","created_at":"2026-07-05T07:07:40Z"},{"alias_kind":"pith_short_8","alias_value":"X2PQG5B2","created_at":"2026-07-05T07:07:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:X2PQG5B2D54GTNVFFWCCKY5UZR","target":"record","payload":{"canonical_record":{"source":{"id":"2310.20175","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-10-31T04:54:55Z","cross_cats_sorted":[],"title_canon_sha256":"b7681ae6422a351bb1ed7cad7cd8ad2413fb76f4addc91389e4cb4bc98c158fa","abstract_canon_sha256":"c7b15ad07b356d874a4fa546b2ce07a8f2060af615e7a944dc98f2f61dc1b80a"},"schema_version":"1.0"},"canonical_sha256":"be9f03743a1f7869b6a52d842563b4cc5d76ddfb0f9fe252443b4b3d76e6c3a4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:07:40.570475Z","signature_b64":"hbX7vOuBpevdfpB7KMyAV99wOC955iMWU6TI+ap2o2ucNdZrZNkZh5jbubIl1ZSL7YHG7a8xH9/vM5ffmX8ADA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"be9f03743a1f7869b6a52d842563b4cc5d76ddfb0f9fe252443b4b3d76e6c3a4","last_reissued_at":"2026-07-05T07:07:40.570084Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:07:40.570084Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.20175","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:07:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AKOcruVgAbAzMs2Vq2+YpzuI9u6LXqGlXnM6v9qn2d1J4aHnm+Xjeih2/7jg9xlOIosVX5fnxybVPILImVbSDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T02:33:05.247644Z"},"content_sha256":"96972bc46e76cd7073c25052e387b6259551025cfcf8b69210d1ded42b4b8612","schema_version":"1.0","event_id":"sha256:96972bc46e76cd7073c25052e387b6259551025cfcf8b69210d1ded42b4b8612"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:X2PQG5B2D54GTNVFFWCCKY5UZR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LFAA: Crafting Transferable Targeted Adversarial Examples with Low-Frequency Perturbations","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Juluan Shi, Kunyu Wang, Wenxuan Wang","submitted_at":"2023-10-31T04:54:55Z","abstract_excerpt":"Deep neural networks are susceptible to adversarial attacks, which pose a significant threat to their security and reliability in real-world applications. The most notable adversarial attacks are transfer-based attacks, where an adversary crafts an adversarial example to fool one model, which can also fool other models. While previous research has made progress in improving the transferability of untargeted adversarial examples, the generation of targeted adversarial examples that can transfer between models remains a challenging task. In this work, we present a novel approach to generate tran"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.20175","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.20175/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:07:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qMwa7YV25oK6VG8xeNZm/LsOBXUENvek3go6wQTSEmElDDbnb6LzFgQsHeqPtV4jCqNxaRH0us6bFk/uiui2DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T02:33:05.248024Z"},"content_sha256":"25c38612dfb552f307dc4d4ca75191807d4be8757b55252bbb6bb51ff5d84d49","schema_version":"1.0","event_id":"sha256:25c38612dfb552f307dc4d4ca75191807d4be8757b55252bbb6bb51ff5d84d49"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/X2PQG5B2D54GTNVFFWCCKY5UZR/bundle.json","state_url":"https://pith.science/pith/X2PQG5B2D54GTNVFFWCCKY5UZR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/X2PQG5B2D54GTNVFFWCCKY5UZR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T02:33:05Z","links":{"resolver":"https://pith.science/pith/X2PQG5B2D54GTNVFFWCCKY5UZR","bundle":"https://pith.science/pith/X2PQG5B2D54GTNVFFWCCKY5UZR/bundle.json","state":"https://pith.science/pith/X2PQG5B2D54GTNVFFWCCKY5UZR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/X2PQG5B2D54GTNVFFWCCKY5UZR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:X2PQG5B2D54GTNVFFWCCKY5UZR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c7b15ad07b356d874a4fa546b2ce07a8f2060af615e7a944dc98f2f61dc1b80a","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-10-31T04:54:55Z","title_canon_sha256":"b7681ae6422a351bb1ed7cad7cd8ad2413fb76f4addc91389e4cb4bc98c158fa"},"schema_version":"1.0","source":{"id":"2310.20175","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.20175","created_at":"2026-07-05T07:07:40Z"},{"alias_kind":"arxiv_version","alias_value":"2310.20175v2","created_at":"2026-07-05T07:07:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.20175","created_at":"2026-07-05T07:07:40Z"},{"alias_kind":"pith_short_12","alias_value":"X2PQG5B2D54G","created_at":"2026-07-05T07:07:40Z"},{"alias_kind":"pith_short_16","alias_value":"X2PQG5B2D54GTNVF","created_at":"2026-07-05T07:07:40Z"},{"alias_kind":"pith_short_8","alias_value":"X2PQG5B2","created_at":"2026-07-05T07:07:40Z"}],"graph_snapshots":[{"event_id":"sha256:25c38612dfb552f307dc4d4ca75191807d4be8757b55252bbb6bb51ff5d84d49","target":"graph","created_at":"2026-07-05T07:07:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.20175/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks are susceptible to adversarial attacks, which pose a significant threat to their security and reliability in real-world applications. The most notable adversarial attacks are transfer-based attacks, where an adversary crafts an adversarial example to fool one model, which can also fool other models. While previous research has made progress in improving the transferability of untargeted adversarial examples, the generation of targeted adversarial examples that can transfer between models remains a challenging task. In this work, we present a novel approach to generate tran","authors_text":"Juluan Shi, Kunyu Wang, Wenxuan Wang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-10-31T04:54:55Z","title":"LFAA: Crafting Transferable Targeted Adversarial Examples with Low-Frequency Perturbations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.20175","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:96972bc46e76cd7073c25052e387b6259551025cfcf8b69210d1ded42b4b8612","target":"record","created_at":"2026-07-05T07:07:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c7b15ad07b356d874a4fa546b2ce07a8f2060af615e7a944dc98f2f61dc1b80a","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-10-31T04:54:55Z","title_canon_sha256":"b7681ae6422a351bb1ed7cad7cd8ad2413fb76f4addc91389e4cb4bc98c158fa"},"schema_version":"1.0","source":{"id":"2310.20175","kind":"arxiv","version":2}},"canonical_sha256":"be9f03743a1f7869b6a52d842563b4cc5d76ddfb0f9fe252443b4b3d76e6c3a4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"be9f03743a1f7869b6a52d842563b4cc5d76ddfb0f9fe252443b4b3d76e6c3a4","first_computed_at":"2026-07-05T07:07:40.570084Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:07:40.570084Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"hbX7vOuBpevdfpB7KMyAV99wOC955iMWU6TI+ap2o2ucNdZrZNkZh5jbubIl1ZSL7YHG7a8xH9/vM5ffmX8ADA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:07:40.570475Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.20175","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:96972bc46e76cd7073c25052e387b6259551025cfcf8b69210d1ded42b4b8612","sha256:25c38612dfb552f307dc4d4ca75191807d4be8757b55252bbb6bb51ff5d84d49"],"state_sha256":"787592f642d03863b4b865dfecfd3c2db9b5d3f8682c5f12970242bca466815d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hTXS8lr3exQsNUxDAbCTpyc74TY23TzCl4M9fnjV7A85OFAEjqyuyrJX14JexMeCweP3HccRjwCRJPu7ykqTCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T02:33:05.250496Z","bundle_sha256":"6654fb85edb5f162747d51c1fbd4f5c2409581a857abec9cf3532ebab8462b30"}}