{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:X5F3OZTUALQBIHG76PDQSJ32PX","short_pith_number":"pith:X5F3OZTU","canonical_record":{"source":{"id":"2302.02213","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-02-04T17:59:30Z","cross_cats_sorted":[],"title_canon_sha256":"258151df1b51de9761e4884a85860c98a224ee97a84b99eb016e1d346a063c04","abstract_canon_sha256":"4faec979a49791714d2cba0f9d632668126ce9fa044d42c3870eb124860b7a1e"},"schema_version":"1.0"},"canonical_sha256":"bf4bb7667402e0141cdff3c709277a7ddddb3645b2b988eb81e7e013b1679667","source":{"kind":"arxiv","id":"2302.02213","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.02213","created_at":"2026-07-05T08:40:38Z"},{"alias_kind":"arxiv_version","alias_value":"2302.02213v3","created_at":"2026-07-05T08:40:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.02213","created_at":"2026-07-05T08:40:38Z"},{"alias_kind":"pith_short_12","alias_value":"X5F3OZTUALQB","created_at":"2026-07-05T08:40:38Z"},{"alias_kind":"pith_short_16","alias_value":"X5F3OZTUALQBIHG7","created_at":"2026-07-05T08:40:38Z"},{"alias_kind":"pith_short_8","alias_value":"X5F3OZTU","created_at":"2026-07-05T08:40:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:X5F3OZTUALQBIHG76PDQSJ32PX","target":"record","payload":{"canonical_record":{"source":{"id":"2302.02213","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-02-04T17:59:30Z","cross_cats_sorted":[],"title_canon_sha256":"258151df1b51de9761e4884a85860c98a224ee97a84b99eb016e1d346a063c04","abstract_canon_sha256":"4faec979a49791714d2cba0f9d632668126ce9fa044d42c3870eb124860b7a1e"},"schema_version":"1.0"},"canonical_sha256":"bf4bb7667402e0141cdff3c709277a7ddddb3645b2b988eb81e7e013b1679667","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:40:38.143958Z","signature_b64":"jyXMIWcI/NOiTN2qpBRPalTz/onAStr+TCWo5eCneURk/FwnI6MGpRaA3YO7U2y5fcTX1bW5mM3ZolTYk4nwBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bf4bb7667402e0141cdff3c709277a7ddddb3645b2b988eb81e7e013b1679667","last_reissued_at":"2026-07-05T08:40:38.143434Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:40:38.143434Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2302.02213","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:40:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QrWzKG4vB2xkVCSKSrlXOLApRkRiFupUlZqiHCWGMNJrtnHZEHdr+H+Rzpl5EM2XOwrnHLVeFb8xus4eZcQ6CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T21:12:29.852096Z"},"content_sha256":"0b71ed8955c17490f9d7e2516a68c5d4239ae952503b993db94ee7f7fab4a8ec","schema_version":"1.0","event_id":"sha256:0b71ed8955c17490f9d7e2516a68c5d4239ae952503b993db94ee7f7fab4a8ec"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:X5F3OZTUALQBIHG76PDQSJ32PX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"CosPGD: an efficient white-box adversarial attack for pixel-wise prediction tasks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Margret Keuper, Shashank Agnihotri, Steffen Jung","submitted_at":"2023-02-04T17:59:30Z","abstract_excerpt":"While neural networks allow highly accurate predictions in many tasks, their lack of robustness towards even slight input perturbations often hampers their deployment. Adversarial attacks such as the seminal projected gradient descent (PGD) offer an effective means to evaluate a model's robustness and dedicated solutions have been proposed for attacks on semantic segmentation or optical flow estimation. While they attempt to increase the attack's efficiency, a further objective is to balance its effect, so that it acts on the entire image domain instead of isolated point-wise predictions. This"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.02213","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2302.02213/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:40:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8h+FD5X/viMCsMj+RKCI8TIUKbjx0KsWmCoj+RGBMGE4TTBZ5xqGGxWATLKuJiAF3CWJfw6bOAThHajLiBnyBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T21:12:29.852796Z"},"content_sha256":"218363efb7e63ed7a7266c74e6bd7f1b78518ed02b3939fbcc194849bc19bd2c","schema_version":"1.0","event_id":"sha256:218363efb7e63ed7a7266c74e6bd7f1b78518ed02b3939fbcc194849bc19bd2c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/X5F3OZTUALQBIHG76PDQSJ32PX/bundle.json","state_url":"https://pith.science/pith/X5F3OZTUALQBIHG76PDQSJ32PX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/X5F3OZTUALQBIHG76PDQSJ32PX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T21:12:29Z","links":{"resolver":"https://pith.science/pith/X5F3OZTUALQBIHG76PDQSJ32PX","bundle":"https://pith.science/pith/X5F3OZTUALQBIHG76PDQSJ32PX/bundle.json","state":"https://pith.science/pith/X5F3OZTUALQBIHG76PDQSJ32PX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/X5F3OZTUALQBIHG76PDQSJ32PX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:X5F3OZTUALQBIHG76PDQSJ32PX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4faec979a49791714d2cba0f9d632668126ce9fa044d42c3870eb124860b7a1e","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-02-04T17:59:30Z","title_canon_sha256":"258151df1b51de9761e4884a85860c98a224ee97a84b99eb016e1d346a063c04"},"schema_version":"1.0","source":{"id":"2302.02213","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.02213","created_at":"2026-07-05T08:40:38Z"},{"alias_kind":"arxiv_version","alias_value":"2302.02213v3","created_at":"2026-07-05T08:40:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.02213","created_at":"2026-07-05T08:40:38Z"},{"alias_kind":"pith_short_12","alias_value":"X5F3OZTUALQB","created_at":"2026-07-05T08:40:38Z"},{"alias_kind":"pith_short_16","alias_value":"X5F3OZTUALQBIHG7","created_at":"2026-07-05T08:40:38Z"},{"alias_kind":"pith_short_8","alias_value":"X5F3OZTU","created_at":"2026-07-05T08:40:38Z"}],"graph_snapshots":[{"event_id":"sha256:218363efb7e63ed7a7266c74e6bd7f1b78518ed02b3939fbcc194849bc19bd2c","target":"graph","created_at":"2026-07-05T08:40:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2302.02213/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While neural networks allow highly accurate predictions in many tasks, their lack of robustness towards even slight input perturbations often hampers their deployment. Adversarial attacks such as the seminal projected gradient descent (PGD) offer an effective means to evaluate a model's robustness and dedicated solutions have been proposed for attacks on semantic segmentation or optical flow estimation. While they attempt to increase the attack's efficiency, a further objective is to balance its effect, so that it acts on the entire image domain instead of isolated point-wise predictions. This","authors_text":"Margret Keuper, Shashank Agnihotri, Steffen Jung","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-02-04T17:59:30Z","title":"CosPGD: an efficient white-box adversarial attack for pixel-wise prediction tasks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.02213","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0b71ed8955c17490f9d7e2516a68c5d4239ae952503b993db94ee7f7fab4a8ec","target":"record","created_at":"2026-07-05T08:40:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4faec979a49791714d2cba0f9d632668126ce9fa044d42c3870eb124860b7a1e","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-02-04T17:59:30Z","title_canon_sha256":"258151df1b51de9761e4884a85860c98a224ee97a84b99eb016e1d346a063c04"},"schema_version":"1.0","source":{"id":"2302.02213","kind":"arxiv","version":3}},"canonical_sha256":"bf4bb7667402e0141cdff3c709277a7ddddb3645b2b988eb81e7e013b1679667","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bf4bb7667402e0141cdff3c709277a7ddddb3645b2b988eb81e7e013b1679667","first_computed_at":"2026-07-05T08:40:38.143434Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:40:38.143434Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jyXMIWcI/NOiTN2qpBRPalTz/onAStr+TCWo5eCneURk/FwnI6MGpRaA3YO7U2y5fcTX1bW5mM3ZolTYk4nwBA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:40:38.143958Z","signed_message":"canonical_sha256_bytes"},"source_id":"2302.02213","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0b71ed8955c17490f9d7e2516a68c5d4239ae952503b993db94ee7f7fab4a8ec","sha256:218363efb7e63ed7a7266c74e6bd7f1b78518ed02b3939fbcc194849bc19bd2c"],"state_sha256":"097e30dced014270c26875a0f839dca70c959d08fab209ee40e017c7b8913b27"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"q24Hor9BV++WOVgC8Ct4/5n1DdKf4hYwBs+FVKfP8Anw4T9hJtMj09yooiJvIdbogoWFWcf4qatPxbq89YV1Dw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T21:12:29.859293Z","bundle_sha256":"d0be5684b96c159dffc14df31af93073ef896476f590f8a62b7808222ffc42bc"}}