{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2026:X6NP2JONPIHGRQXRS2WQTHBGPQ","short_pith_number":"pith:X6NP2JON","schema_version":"1.0","canonical_sha256":"bf9afd25cd7a0e68c2f196ad099c267c2da736fa72785b820170a3ba0bd21263","source":{"kind":"arxiv","id":"2607.07922","version":1},"attestation_state":"computed","paper":{"title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Giorgio Buttazzo, Giulia Marchiori Pietrosanti, Giulio Rossolini","submitted_at":"2026-07-08T21:08:57Z","abstract_excerpt":"Vision Transformers (ViTs) remain vulnerable to localized adversarial attacks, e.g., adversarial patches, while recent test-time defenses mitigate them by suppressing image tokens with abnormally high attention scores. These defenses exploit a strong coupling between attention and adversarial effectiveness: adversarial tokens often need to attract substantial attention to influence the prediction. We introduce adversarial decoys, independently optimized image patches that redirect the attention, and therefore related defenses, toward selected target tokens. Rather than jointly optimizing miscl"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2607.07922","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2026-07-08T21:08:57Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"ebda192063682d59bb9c1681629f1cebd6c7963c9299508646fb9c3dcaf2d588","abstract_canon_sha256":"aff3dc2e54483442c97d5d5360ed50ce203c2bdaf962d0c3e8803007010fd165"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-10T00:19:04.896594Z","signature_b64":"IP4XeiUaQqSaVqrQQ3l5jUYNGipu3/ORrC+iq/uGApBUO81W59fDZAoklFWB74OTf4E4xMSztDOsG9aba4ERBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bf9afd25cd7a0e68c2f196ad099c267c2da736fa72785b820170a3ba0bd21263","last_reissued_at":"2026-07-10T00:19:04.896164Z","signature_status":"signed_v1","first_computed_at":"2026-07-10T00:19:04.896164Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Giorgio Buttazzo, Giulia Marchiori Pietrosanti, Giulio Rossolini","submitted_at":"2026-07-08T21:08:57Z","abstract_excerpt":"Vision Transformers (ViTs) remain vulnerable to localized adversarial attacks, e.g., adversarial patches, while recent test-time defenses mitigate them by suppressing image tokens with abnormally high attention scores. These defenses exploit a strong coupling between attention and adversarial effectiveness: adversarial tokens often need to attract substantial attention to influence the prediction. We introduce adversarial decoys, independently optimized image patches that redirect the attention, and therefore related defenses, toward selected target tokens. Rather than jointly optimizing miscl"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.07922","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.07922/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2607.07922","created_at":"2026-07-10T00:19:04.896227+00:00"},{"alias_kind":"arxiv_version","alias_value":"2607.07922v1","created_at":"2026-07-10T00:19:04.896227+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.07922","created_at":"2026-07-10T00:19:04.896227+00:00"},{"alias_kind":"pith_short_12","alias_value":"X6NP2JONPIHG","created_at":"2026-07-10T00:19:04.896227+00:00"},{"alias_kind":"pith_short_16","alias_value":"X6NP2JONPIHGRQXR","created_at":"2026-07-10T00:19:04.896227+00:00"},{"alias_kind":"pith_short_8","alias_value":"X6NP2JON","created_at":"2026-07-10T00:19:04.896227+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/X6NP2JONPIHGRQXRS2WQTHBGPQ","json":"https://pith.science/pith/X6NP2JONPIHGRQXRS2WQTHBGPQ.json","graph_json":"https://pith.science/api/pith-number/X6NP2JONPIHGRQXRS2WQTHBGPQ/graph.json","events_json":"https://pith.science/api/pith-number/X6NP2JONPIHGRQXRS2WQTHBGPQ/events.json","paper":"https://pith.science/paper/X6NP2JON"},"agent_actions":{"view_html":"https://pith.science/pith/X6NP2JONPIHGRQXRS2WQTHBGPQ","download_json":"https://pith.science/pith/X6NP2JONPIHGRQXRS2WQTHBGPQ.json","view_paper":"https://pith.science/paper/X6NP2JON","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2607.07922&json=true","fetch_graph":"https://pith.science/api/pith-number/X6NP2JONPIHGRQXRS2WQTHBGPQ/graph.json","fetch_events":"https://pith.science/api/pith-number/X6NP2JONPIHGRQXRS2WQTHBGPQ/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/X6NP2JONPIHGRQXRS2WQTHBGPQ/action/timestamp_anchor","attest_storage":"https://pith.science/pith/X6NP2JONPIHGRQXRS2WQTHBGPQ/action/storage_attestation","attest_author":"https://pith.science/pith/X6NP2JONPIHGRQXRS2WQTHBGPQ/action/author_attestation","sign_citation":"https://pith.science/pith/X6NP2JONPIHGRQXRS2WQTHBGPQ/action/citation_signature","submit_replication":"https://pith.science/pith/X6NP2JONPIHGRQXRS2WQTHBGPQ/action/replication_record"}},"created_at":"2026-07-10T00:19:04.896227+00:00","updated_at":"2026-07-10T00:19:04.896227+00:00"}