{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:XAMZ73KBVXC26EIHKF2L5MCWSM","short_pith_number":"pith:XAMZ73KB","canonical_record":{"source":{"id":"1901.03006","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-01-10T03:12:07Z","cross_cats_sorted":["cs.CR","cs.LG","stat.ML"],"title_canon_sha256":"dc4e8b4b979ff860b54985cbb9f9c74cf39c4a0bef577371cbaad754c43e64ae","abstract_canon_sha256":"d1f7c4893feb7255d525b4432700a8730127b66758b13c8fa24ad718a11dd7c0"},"schema_version":"1.0"},"canonical_sha256":"b8199fed41adc5af11075174beb0569301529cf6399b39f63f9e04e2fba2a31b","source":{"kind":"arxiv","id":"1901.03006","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1901.03006","created_at":"2026-05-17T23:42:02Z"},{"alias_kind":"arxiv_version","alias_value":"1901.03006v4","created_at":"2026-05-17T23:42:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1901.03006","created_at":"2026-05-17T23:42:02Z"},{"alias_kind":"pith_short_12","alias_value":"XAMZ73KBVXC2","created_at":"2026-05-18T12:33:33Z"},{"alias_kind":"pith_short_16","alias_value":"XAMZ73KBVXC26EIH","created_at":"2026-05-18T12:33:33Z"},{"alias_kind":"pith_short_8","alias_value":"XAMZ73KB","created_at":"2026-05-18T12:33:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:XAMZ73KBVXC26EIHKF2L5MCWSM","target":"record","payload":{"canonical_record":{"source":{"id":"1901.03006","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-01-10T03:12:07Z","cross_cats_sorted":["cs.CR","cs.LG","stat.ML"],"title_canon_sha256":"dc4e8b4b979ff860b54985cbb9f9c74cf39c4a0bef577371cbaad754c43e64ae","abstract_canon_sha256":"d1f7c4893feb7255d525b4432700a8730127b66758b13c8fa24ad718a11dd7c0"},"schema_version":"1.0"},"canonical_sha256":"b8199fed41adc5af11075174beb0569301529cf6399b39f63f9e04e2fba2a31b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:42:02.638375Z","signature_b64":"/YHspuXOgZUHKl7Jpaz9qMiRlS2wbtJfZCWDFOvSN4xJae6dbFDlGF2A8EoB3ovByC9SySGHLRY4MOGC5tz2BQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b8199fed41adc5af11075174beb0569301529cf6399b39f63f9e04e2fba2a31b","last_reissued_at":"2026-05-17T23:42:02.637656Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:42:02.637656Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1901.03006","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:42:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WrfXvP3YBC72P1wl7oOVYqPfvbjOFQeGx7x3xfOFkmO9VWUjqDKvsYnW+DzNwPn6QChdfuXOje8sKJpWnEIBAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T10:44:18.789600Z"},"content_sha256":"d241a844132ca77a9e29f72187d27589d2ddf921cc6dcdb3bd292da2918f5674","schema_version":"1.0","event_id":"sha256:d241a844132ca77a9e29f72187d27589d2ddf921cc6dcdb3bd292da2918f5674"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:XAMZ73KBVXC26EIHKF2L5MCWSM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Extending Adversarial Attacks and Defenses to Deep 3D Point Cloud Classifiers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG","stat.ML"],"primary_cat":"cs.CV","authors_text":"Daniel Liu, Hao Su, Ronald Yu","submitted_at":"2019-01-10T03:12:07Z","abstract_excerpt":"3D object classification and segmentation using deep neural networks has been extremely successful. As the problem of identifying 3D objects has many safety-critical applications, the neural networks have to be robust against adversarial changes to the input data set. There is a growing body of research on generating human-imperceptible adversarial attacks and defenses against them in the 2D image classification domain. However, 3D objects have various differences with 2D images, and this specific domain has not been rigorously studied so far.\n  We present a preliminary evaluation of adversari"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1901.03006","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:42:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3KoykIuTsu0zdoW7f18UtiVHpM+R3dupoZIbknAb0zbLj/Pommd+nwYHb/iOYz351oVeAGMTYkrFjKNRRHWFBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T10:44:18.789943Z"},"content_sha256":"52451a6f0e896c996b68dfc4fa0d91ef8d6923d3113ac13968a94c2807362cd2","schema_version":"1.0","event_id":"sha256:52451a6f0e896c996b68dfc4fa0d91ef8d6923d3113ac13968a94c2807362cd2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XAMZ73KBVXC26EIHKF2L5MCWSM/bundle.json","state_url":"https://pith.science/pith/XAMZ73KBVXC26EIHKF2L5MCWSM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XAMZ73KBVXC26EIHKF2L5MCWSM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T10:44:18Z","links":{"resolver":"https://pith.science/pith/XAMZ73KBVXC26EIHKF2L5MCWSM","bundle":"https://pith.science/pith/XAMZ73KBVXC26EIHKF2L5MCWSM/bundle.json","state":"https://pith.science/pith/XAMZ73KBVXC26EIHKF2L5MCWSM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XAMZ73KBVXC26EIHKF2L5MCWSM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:XAMZ73KBVXC26EIHKF2L5MCWSM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d1f7c4893feb7255d525b4432700a8730127b66758b13c8fa24ad718a11dd7c0","cross_cats_sorted":["cs.CR","cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-01-10T03:12:07Z","title_canon_sha256":"dc4e8b4b979ff860b54985cbb9f9c74cf39c4a0bef577371cbaad754c43e64ae"},"schema_version":"1.0","source":{"id":"1901.03006","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1901.03006","created_at":"2026-05-17T23:42:02Z"},{"alias_kind":"arxiv_version","alias_value":"1901.03006v4","created_at":"2026-05-17T23:42:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1901.03006","created_at":"2026-05-17T23:42:02Z"},{"alias_kind":"pith_short_12","alias_value":"XAMZ73KBVXC2","created_at":"2026-05-18T12:33:33Z"},{"alias_kind":"pith_short_16","alias_value":"XAMZ73KBVXC26EIH","created_at":"2026-05-18T12:33:33Z"},{"alias_kind":"pith_short_8","alias_value":"XAMZ73KB","created_at":"2026-05-18T12:33:33Z"}],"graph_snapshots":[{"event_id":"sha256:52451a6f0e896c996b68dfc4fa0d91ef8d6923d3113ac13968a94c2807362cd2","target":"graph","created_at":"2026-05-17T23:42:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"3D object classification and segmentation using deep neural networks has been extremely successful. As the problem of identifying 3D objects has many safety-critical applications, the neural networks have to be robust against adversarial changes to the input data set. There is a growing body of research on generating human-imperceptible adversarial attacks and defenses against them in the 2D image classification domain. However, 3D objects have various differences with 2D images, and this specific domain has not been rigorously studied so far.\n  We present a preliminary evaluation of adversari","authors_text":"Daniel Liu, Hao Su, Ronald Yu","cross_cats":["cs.CR","cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-01-10T03:12:07Z","title":"Extending Adversarial Attacks and Defenses to Deep 3D Point Cloud Classifiers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1901.03006","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d241a844132ca77a9e29f72187d27589d2ddf921cc6dcdb3bd292da2918f5674","target":"record","created_at":"2026-05-17T23:42:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d1f7c4893feb7255d525b4432700a8730127b66758b13c8fa24ad718a11dd7c0","cross_cats_sorted":["cs.CR","cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-01-10T03:12:07Z","title_canon_sha256":"dc4e8b4b979ff860b54985cbb9f9c74cf39c4a0bef577371cbaad754c43e64ae"},"schema_version":"1.0","source":{"id":"1901.03006","kind":"arxiv","version":4}},"canonical_sha256":"b8199fed41adc5af11075174beb0569301529cf6399b39f63f9e04e2fba2a31b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b8199fed41adc5af11075174beb0569301529cf6399b39f63f9e04e2fba2a31b","first_computed_at":"2026-05-17T23:42:02.637656Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:42:02.637656Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/YHspuXOgZUHKl7Jpaz9qMiRlS2wbtJfZCWDFOvSN4xJae6dbFDlGF2A8EoB3ovByC9SySGHLRY4MOGC5tz2BQ==","signature_status":"signed_v1","signed_at":"2026-05-17T23:42:02.638375Z","signed_message":"canonical_sha256_bytes"},"source_id":"1901.03006","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d241a844132ca77a9e29f72187d27589d2ddf921cc6dcdb3bd292da2918f5674","sha256:52451a6f0e896c996b68dfc4fa0d91ef8d6923d3113ac13968a94c2807362cd2"],"state_sha256":"3693d4f67200c6b23b191491ed47eeef00016a454274c89258375bb5c4f3493b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tNYtTy/Nvo595JZPUic/zhXY7pqNq4d09WpX/Lv9arQIiKGQRO6yWV2vzVRhBRjqP20I1bWhPQHnfMK/X/sEBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T10:44:18.792017Z","bundle_sha256":"163ca427d215c54583380cd2df8f9767d030a2b2eb6392ab0bc0d13a6efe1243"}}