{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:YHLVHD6U4BCMLT2LKBNH4FWHTX","short_pith_number":"pith:YHLVHD6U","canonical_record":{"source":{"id":"2309.16878","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-09-28T22:31:29Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"32b64d959a99268666e8af3a42882ca7303306e6d5203b4a766fc77e49149223","abstract_canon_sha256":"e37c3d6eb78f7e25a5e1229c224da5f49068bc54ddd72e4dc62171e0e879b031"},"schema_version":"1.0"},"canonical_sha256":"c1d7538fd4e044c5cf4b505a7e16c79dcd50bf7ee10e0f062cc3a87fb25c9e04","source":{"kind":"arxiv","id":"2309.16878","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.16878","created_at":"2026-07-05T06:55:28Z"},{"alias_kind":"arxiv_version","alias_value":"2309.16878v1","created_at":"2026-07-05T06:55:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.16878","created_at":"2026-07-05T06:55:28Z"},{"alias_kind":"pith_short_12","alias_value":"YHLVHD6U4BCM","created_at":"2026-07-05T06:55:28Z"},{"alias_kind":"pith_short_16","alias_value":"YHLVHD6U4BCMLT2L","created_at":"2026-07-05T06:55:28Z"},{"alias_kind":"pith_short_8","alias_value":"YHLVHD6U","created_at":"2026-07-05T06:55:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:YHLVHD6U4BCMLT2LKBNH4FWHTX","target":"record","payload":{"canonical_record":{"source":{"id":"2309.16878","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-09-28T22:31:29Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"32b64d959a99268666e8af3a42882ca7303306e6d5203b4a766fc77e49149223","abstract_canon_sha256":"e37c3d6eb78f7e25a5e1229c224da5f49068bc54ddd72e4dc62171e0e879b031"},"schema_version":"1.0"},"canonical_sha256":"c1d7538fd4e044c5cf4b505a7e16c79dcd50bf7ee10e0f062cc3a87fb25c9e04","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:55:28.858764Z","signature_b64":"S/fOcEiRv1D5106ANFIQQfGTNW+hZF+cHvWR1Gj1K+R++MHp9KWstqOl1rvgKgmzrAFU2tuKPvkcq4Pde0z2AA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c1d7538fd4e044c5cf4b505a7e16c79dcd50bf7ee10e0f062cc3a87fb25c9e04","last_reissued_at":"2026-07-05T06:55:28.858254Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:55:28.858254Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.16878","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:55:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WC0PNDsF05FIHLDIsgWJsCBlaXXYGUWspykf6wHe7ZHMmfcuGV1s+88Fvr/eB1x9eGCqBxgBk8vqRg8EEJZ7BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-18T12:10:41.229509Z"},"content_sha256":"ca79ba76fcabe4da6c0e565b8433bb300e53ebe6f9148b60051aa047d28b698d","schema_version":"1.0","event_id":"sha256:ca79ba76fcabe4da6c0e565b8433bb300e53ebe6f9148b60051aa047d28b698d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:YHLVHD6U4BCMLT2LKBNH4FWHTX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Investigating Human-Identifiable Features Hidden in Adversarial Perturbations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CV"],"primary_cat":"cs.LG","authors_text":"Dennis Y. Menn, Hung-yi Lee, Sriram Vishwanath, Tzu-hsun Feng","submitted_at":"2023-09-28T22:31:29Z","abstract_excerpt":"Neural networks perform exceedingly well across various machine learning tasks but are not immune to adversarial perturbations. This vulnerability has implications for real-world applications. While much research has been conducted, the underlying reasons why neural networks fall prey to adversarial attacks are not yet fully understood. Central to our study, which explores up to five attack algorithms across three datasets, is the identification of human-identifiable features in adversarial perturbations. Additionally, we uncover two distinct effects manifesting within human-identifiable featu"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.16878","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.16878/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:55:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"X+7YqI+HuWGGEU92/Onh8L8lVQagkdiUEi7p0wbqfiTOgeWQuC/asiTK912zSLaLES2qdHAYSdeEZD/PH9ueBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-18T12:10:41.229874Z"},"content_sha256":"c599d8dd1562e2caf4a10973ce3eeb0019065584c8bf5c97c353c19c59c57bc2","schema_version":"1.0","event_id":"sha256:c599d8dd1562e2caf4a10973ce3eeb0019065584c8bf5c97c353c19c59c57bc2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YHLVHD6U4BCMLT2LKBNH4FWHTX/bundle.json","state_url":"https://pith.science/pith/YHLVHD6U4BCMLT2LKBNH4FWHTX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YHLVHD6U4BCMLT2LKBNH4FWHTX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-18T12:10:41Z","links":{"resolver":"https://pith.science/pith/YHLVHD6U4BCMLT2LKBNH4FWHTX","bundle":"https://pith.science/pith/YHLVHD6U4BCMLT2LKBNH4FWHTX/bundle.json","state":"https://pith.science/pith/YHLVHD6U4BCMLT2LKBNH4FWHTX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YHLVHD6U4BCMLT2LKBNH4FWHTX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:YHLVHD6U4BCMLT2LKBNH4FWHTX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e37c3d6eb78f7e25a5e1229c224da5f49068bc54ddd72e4dc62171e0e879b031","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-09-28T22:31:29Z","title_canon_sha256":"32b64d959a99268666e8af3a42882ca7303306e6d5203b4a766fc77e49149223"},"schema_version":"1.0","source":{"id":"2309.16878","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.16878","created_at":"2026-07-05T06:55:28Z"},{"alias_kind":"arxiv_version","alias_value":"2309.16878v1","created_at":"2026-07-05T06:55:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.16878","created_at":"2026-07-05T06:55:28Z"},{"alias_kind":"pith_short_12","alias_value":"YHLVHD6U4BCM","created_at":"2026-07-05T06:55:28Z"},{"alias_kind":"pith_short_16","alias_value":"YHLVHD6U4BCMLT2L","created_at":"2026-07-05T06:55:28Z"},{"alias_kind":"pith_short_8","alias_value":"YHLVHD6U","created_at":"2026-07-05T06:55:28Z"}],"graph_snapshots":[{"event_id":"sha256:c599d8dd1562e2caf4a10973ce3eeb0019065584c8bf5c97c353c19c59c57bc2","target":"graph","created_at":"2026-07-05T06:55:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.16878/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Neural networks perform exceedingly well across various machine learning tasks but are not immune to adversarial perturbations. This vulnerability has implications for real-world applications. While much research has been conducted, the underlying reasons why neural networks fall prey to adversarial attacks are not yet fully understood. Central to our study, which explores up to five attack algorithms across three datasets, is the identification of human-identifiable features in adversarial perturbations. Additionally, we uncover two distinct effects manifesting within human-identifiable featu","authors_text":"Dennis Y. Menn, Hung-yi Lee, Sriram Vishwanath, Tzu-hsun Feng","cross_cats":["cs.AI","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-09-28T22:31:29Z","title":"Investigating Human-Identifiable Features Hidden in Adversarial Perturbations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.16878","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ca79ba76fcabe4da6c0e565b8433bb300e53ebe6f9148b60051aa047d28b698d","target":"record","created_at":"2026-07-05T06:55:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e37c3d6eb78f7e25a5e1229c224da5f49068bc54ddd72e4dc62171e0e879b031","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-09-28T22:31:29Z","title_canon_sha256":"32b64d959a99268666e8af3a42882ca7303306e6d5203b4a766fc77e49149223"},"schema_version":"1.0","source":{"id":"2309.16878","kind":"arxiv","version":1}},"canonical_sha256":"c1d7538fd4e044c5cf4b505a7e16c79dcd50bf7ee10e0f062cc3a87fb25c9e04","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c1d7538fd4e044c5cf4b505a7e16c79dcd50bf7ee10e0f062cc3a87fb25c9e04","first_computed_at":"2026-07-05T06:55:28.858254Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:55:28.858254Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"S/fOcEiRv1D5106ANFIQQfGTNW+hZF+cHvWR1Gj1K+R++MHp9KWstqOl1rvgKgmzrAFU2tuKPvkcq4Pde0z2AA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:55:28.858764Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.16878","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ca79ba76fcabe4da6c0e565b8433bb300e53ebe6f9148b60051aa047d28b698d","sha256:c599d8dd1562e2caf4a10973ce3eeb0019065584c8bf5c97c353c19c59c57bc2"],"state_sha256":"eb11a374f924bef0cb99a4c7159f12eb766b1f16a577c3f119d05d5cfa0536e3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rKxea6HcK8b5wKFsQNcd62X2JJcEkZxOXiaU6Yf91aIYta5FO5nAjDlTeGWofzp0xuukv2Ehdy7FONqkU8m+CQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-18T12:10:41.232183Z","bundle_sha256":"dbcafc7c93ee235aa78ae077567f1c02bd2c3cf6fe764de03d96f83f8c6a78b3"}}