{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:XBTOVHKMBFYR6NAZKFH6ZUHYQO","short_pith_number":"pith:XBTOVHKM","canonical_record":{"source":{"id":"2303.05719","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-03-10T05:54:11Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"4b2399b1bbdfceeac56ade1923656e8af0c7feb39284127359e221d1f94fe640","abstract_canon_sha256":"3638ed3c4d52925e4de70eed663c2bfae9be9758df968569ebbdd0a3dea4c241"},"schema_version":"1.0"},"canonical_sha256":"b866ea9d4c09711f3419514fecd0f88396240cc215994ac43fb71e2fa474a085","source":{"kind":"arxiv","id":"2303.05719","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.05719","created_at":"2026-07-05T05:49:46Z"},{"alias_kind":"arxiv_version","alias_value":"2303.05719v1","created_at":"2026-07-05T05:49:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.05719","created_at":"2026-07-05T05:49:46Z"},{"alias_kind":"pith_short_12","alias_value":"XBTOVHKMBFYR","created_at":"2026-07-05T05:49:46Z"},{"alias_kind":"pith_short_16","alias_value":"XBTOVHKMBFYR6NAZ","created_at":"2026-07-05T05:49:46Z"},{"alias_kind":"pith_short_8","alias_value":"XBTOVHKM","created_at":"2026-07-05T05:49:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:XBTOVHKMBFYR6NAZKFH6ZUHYQO","target":"record","payload":{"canonical_record":{"source":{"id":"2303.05719","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-03-10T05:54:11Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"4b2399b1bbdfceeac56ade1923656e8af0c7feb39284127359e221d1f94fe640","abstract_canon_sha256":"3638ed3c4d52925e4de70eed663c2bfae9be9758df968569ebbdd0a3dea4c241"},"schema_version":"1.0"},"canonical_sha256":"b866ea9d4c09711f3419514fecd0f88396240cc215994ac43fb71e2fa474a085","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:49:46.836961Z","signature_b64":"tYDlFvz2TtRh3QWRKXARi5yuYmkPKNXD9LWtI/mNXHLWB7253H9MBS6mhpIGlH2GFPQh2bAN0JhkcDk3TNUQBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b866ea9d4c09711f3419514fecd0f88396240cc215994ac43fb71e2fa474a085","last_reissued_at":"2026-07-05T05:49:46.836616Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:49:46.836616Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2303.05719","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:49:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BpMxETBJu1rQim0TQ/W8z3HM90L40YLH+dekeZcTXOuDz350zOOVPv0UNVK2TufqEe/u567zSZfjdDnSVpBTCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T00:04:16.180065Z"},"content_sha256":"9607f47fe381b998e044cb6ff75affd7da9cb224a9abfe9ccd69ffaf04ab350a","schema_version":"1.0","event_id":"sha256:9607f47fe381b998e044cb6ff75affd7da9cb224a9abfe9ccd69ffaf04ab350a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:XBTOVHKMBFYR6NAZKFH6ZUHYQO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Boosting Adversarial Attacks by Leveraging Decision Boundary Information","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Boheng Zeng, ChaoQun Li, Jingkuan Song, Lianli Gao, Qilong Zhang, ShuaiQi Jing","submitted_at":"2023-03-10T05:54:11Z","abstract_excerpt":"Due to the gap between a substitute model and a victim model, the gradient-based noise generated from a substitute model may have low transferability for a victim model since their gradients are different. Inspired by the fact that the decision boundaries of different models do not differ much, we conduct experiments and discover that the gradients of different models are more similar on the decision boundary than in the original position. Moreover, since the decision boundary in the vicinity of an input image is flat along most directions, we conjecture that the boundary gradients can help fi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.05719","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2303.05719/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:49:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YwIqOf878QrUi9b+uIbKxEGgIZngHR+nsS8yGhSvV5tdw48rGDMK7BUrYGnPYWgqfalTfV9TgPrdoUmh4cROCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T00:04:16.180594Z"},"content_sha256":"ad5a099e4c96259126abd6ce889216bc4c7805d9716260a898e05e810a33c5f5","schema_version":"1.0","event_id":"sha256:ad5a099e4c96259126abd6ce889216bc4c7805d9716260a898e05e810a33c5f5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XBTOVHKMBFYR6NAZKFH6ZUHYQO/bundle.json","state_url":"https://pith.science/pith/XBTOVHKMBFYR6NAZKFH6ZUHYQO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XBTOVHKMBFYR6NAZKFH6ZUHYQO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T00:04:16Z","links":{"resolver":"https://pith.science/pith/XBTOVHKMBFYR6NAZKFH6ZUHYQO","bundle":"https://pith.science/pith/XBTOVHKMBFYR6NAZKFH6ZUHYQO/bundle.json","state":"https://pith.science/pith/XBTOVHKMBFYR6NAZKFH6ZUHYQO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XBTOVHKMBFYR6NAZKFH6ZUHYQO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:XBTOVHKMBFYR6NAZKFH6ZUHYQO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3638ed3c4d52925e4de70eed663c2bfae9be9758df968569ebbdd0a3dea4c241","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-03-10T05:54:11Z","title_canon_sha256":"4b2399b1bbdfceeac56ade1923656e8af0c7feb39284127359e221d1f94fe640"},"schema_version":"1.0","source":{"id":"2303.05719","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.05719","created_at":"2026-07-05T05:49:46Z"},{"alias_kind":"arxiv_version","alias_value":"2303.05719v1","created_at":"2026-07-05T05:49:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.05719","created_at":"2026-07-05T05:49:46Z"},{"alias_kind":"pith_short_12","alias_value":"XBTOVHKMBFYR","created_at":"2026-07-05T05:49:46Z"},{"alias_kind":"pith_short_16","alias_value":"XBTOVHKMBFYR6NAZ","created_at":"2026-07-05T05:49:46Z"},{"alias_kind":"pith_short_8","alias_value":"XBTOVHKM","created_at":"2026-07-05T05:49:46Z"}],"graph_snapshots":[{"event_id":"sha256:ad5a099e4c96259126abd6ce889216bc4c7805d9716260a898e05e810a33c5f5","target":"graph","created_at":"2026-07-05T05:49:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2303.05719/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Due to the gap between a substitute model and a victim model, the gradient-based noise generated from a substitute model may have low transferability for a victim model since their gradients are different. Inspired by the fact that the decision boundaries of different models do not differ much, we conduct experiments and discover that the gradients of different models are more similar on the decision boundary than in the original position. Moreover, since the decision boundary in the vicinity of an input image is flat along most directions, we conjecture that the boundary gradients can help fi","authors_text":"Boheng Zeng, ChaoQun Li, Jingkuan Song, Lianli Gao, Qilong Zhang, ShuaiQi Jing","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-03-10T05:54:11Z","title":"Boosting Adversarial Attacks by Leveraging Decision Boundary Information"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.05719","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9607f47fe381b998e044cb6ff75affd7da9cb224a9abfe9ccd69ffaf04ab350a","target":"record","created_at":"2026-07-05T05:49:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3638ed3c4d52925e4de70eed663c2bfae9be9758df968569ebbdd0a3dea4c241","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-03-10T05:54:11Z","title_canon_sha256":"4b2399b1bbdfceeac56ade1923656e8af0c7feb39284127359e221d1f94fe640"},"schema_version":"1.0","source":{"id":"2303.05719","kind":"arxiv","version":1}},"canonical_sha256":"b866ea9d4c09711f3419514fecd0f88396240cc215994ac43fb71e2fa474a085","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b866ea9d4c09711f3419514fecd0f88396240cc215994ac43fb71e2fa474a085","first_computed_at":"2026-07-05T05:49:46.836616Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:49:46.836616Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"tYDlFvz2TtRh3QWRKXARi5yuYmkPKNXD9LWtI/mNXHLWB7253H9MBS6mhpIGlH2GFPQh2bAN0JhkcDk3TNUQBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T05:49:46.836961Z","signed_message":"canonical_sha256_bytes"},"source_id":"2303.05719","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9607f47fe381b998e044cb6ff75affd7da9cb224a9abfe9ccd69ffaf04ab350a","sha256:ad5a099e4c96259126abd6ce889216bc4c7805d9716260a898e05e810a33c5f5"],"state_sha256":"c6ff1d56a2c6d15abec902683597d0195ab73e223d211274f4a77f4675959f49"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BUf3av4VFG8/SFNJgN0S1ZZiBaXERrCNSTE3BPnsi3PtsFqI26zTTwwnI/rIYBv8V6P3iqTe2mY9MESITw3GCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T00:04:16.184775Z","bundle_sha256":"0193f3c2507399f235c190106338502f5c72f8f46a82b03eb95b8800b2d476af"}}