{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:Z2IZANZBW73GW7Y5553CQBKWCC","short_pith_number":"pith:Z2IZANZB","canonical_record":{"source":{"id":"2210.03895","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2022-10-08T03:06:49Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","stat.ML"],"title_canon_sha256":"ee3fdf2718699a8816426e27cb979c73c0eeec68f6439a3b0a0256156403b92c","abstract_canon_sha256":"611b2f03e5fc51abb68d054b2f971ea22b8086dfeda8c0cc1a8c866eed34342e"},"schema_version":"1.0"},"canonical_sha256":"ce91903721b7f66b7f1def76280556108a014fd04a1672abd2b16b0e806a1a15","source":{"kind":"arxiv","id":"2210.03895","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.03895","created_at":"2026-07-05T05:04:33Z"},{"alias_kind":"arxiv_version","alias_value":"2210.03895v1","created_at":"2026-07-05T05:04:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.03895","created_at":"2026-07-05T05:04:33Z"},{"alias_kind":"pith_short_12","alias_value":"Z2IZANZBW73G","created_at":"2026-07-05T05:04:33Z"},{"alias_kind":"pith_short_16","alias_value":"Z2IZANZBW73GW7Y5","created_at":"2026-07-05T05:04:33Z"},{"alias_kind":"pith_short_8","alias_value":"Z2IZANZB","created_at":"2026-07-05T05:04:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:Z2IZANZBW73GW7Y5553CQBKWCC","target":"record","payload":{"canonical_record":{"source":{"id":"2210.03895","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2022-10-08T03:06:49Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","stat.ML"],"title_canon_sha256":"ee3fdf2718699a8816426e27cb979c73c0eeec68f6439a3b0a0256156403b92c","abstract_canon_sha256":"611b2f03e5fc51abb68d054b2f971ea22b8086dfeda8c0cc1a8c866eed34342e"},"schema_version":"1.0"},"canonical_sha256":"ce91903721b7f66b7f1def76280556108a014fd04a1672abd2b16b0e806a1a15","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:04:33.473117Z","signature_b64":"8B7wxrHqhhsjWLomJXoulh+Cp9qDqNGlDfbqVGcWxE/lbCESEDSB1AkFJsBIkxoRWtq69gW+TCP7do3cULnfBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ce91903721b7f66b7f1def76280556108a014fd04a1672abd2b16b0e806a1a15","last_reissued_at":"2026-07-05T05:04:33.472694Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:04:33.472694Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2210.03895","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:04:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yBl8NPBJKfczXMsgZd/7nu31MFWqsFeFIQwD1/KMDULERsx/dZV5nO2+g4WzmOD0bRQXSBq2NHJRA0BeMkzMDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-31T18:58:42.403436Z"},"content_sha256":"c9b131ee3d62de34638ab16e523a91e20db00972f4228656506b2a7a5a46698b","schema_version":"1.0","event_id":"sha256:c9b131ee3d62de34638ab16e523a91e20db00972f4228656506b2a7a5a46698b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:Z2IZANZBW73GW7Y5553CQBKWCC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ViewFool: Evaluating the Robustness of Visual Recognition to Adversarial Viewpoints","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG","stat.ML"],"primary_cat":"cs.CV","authors_text":"Caixin Kang, Hang Su, Jun Zhu, Shouwei Ruan, Xingxing Wei, Yinpeng Dong","submitted_at":"2022-10-08T03:06:49Z","abstract_excerpt":"Recent studies have demonstrated that visual recognition models lack robustness to distribution shift. However, current work mainly considers model robustness to 2D image transformations, leaving viewpoint changes in the 3D world less explored. In general, viewpoint changes are prevalent in various real-world applications (e.g., autonomous driving), making it imperative to evaluate viewpoint robustness. In this paper, we propose a novel method called ViewFool to find adversarial viewpoints that mislead visual recognition models. By encoding real-world objects as neural radiance fields (NeRF), "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.03895","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2210.03895/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:04:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"h+jlJxDY5hBdeu/WiqD8qTkzBoA+UJJEhky6qBhtgyGJPcb12x+jt5eaLEAD2L5kDWmFVaf13vCVBDubEzUFCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-31T18:58:42.404171Z"},"content_sha256":"37799ceeaac16b345d5a0f565bb193e59b7bb325d685115c9341c4d6c7b2f12c","schema_version":"1.0","event_id":"sha256:37799ceeaac16b345d5a0f565bb193e59b7bb325d685115c9341c4d6c7b2f12c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Z2IZANZBW73GW7Y5553CQBKWCC/bundle.json","state_url":"https://pith.science/pith/Z2IZANZBW73GW7Y5553CQBKWCC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Z2IZANZBW73GW7Y5553CQBKWCC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-31T18:58:42Z","links":{"resolver":"https://pith.science/pith/Z2IZANZBW73GW7Y5553CQBKWCC","bundle":"https://pith.science/pith/Z2IZANZBW73GW7Y5553CQBKWCC/bundle.json","state":"https://pith.science/pith/Z2IZANZBW73GW7Y5553CQBKWCC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Z2IZANZBW73GW7Y5553CQBKWCC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:Z2IZANZBW73GW7Y5553CQBKWCC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"611b2f03e5fc51abb68d054b2f971ea22b8086dfeda8c0cc1a8c866eed34342e","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","stat.ML"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2022-10-08T03:06:49Z","title_canon_sha256":"ee3fdf2718699a8816426e27cb979c73c0eeec68f6439a3b0a0256156403b92c"},"schema_version":"1.0","source":{"id":"2210.03895","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.03895","created_at":"2026-07-05T05:04:33Z"},{"alias_kind":"arxiv_version","alias_value":"2210.03895v1","created_at":"2026-07-05T05:04:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.03895","created_at":"2026-07-05T05:04:33Z"},{"alias_kind":"pith_short_12","alias_value":"Z2IZANZBW73G","created_at":"2026-07-05T05:04:33Z"},{"alias_kind":"pith_short_16","alias_value":"Z2IZANZBW73GW7Y5","created_at":"2026-07-05T05:04:33Z"},{"alias_kind":"pith_short_8","alias_value":"Z2IZANZB","created_at":"2026-07-05T05:04:33Z"}],"graph_snapshots":[{"event_id":"sha256:37799ceeaac16b345d5a0f565bb193e59b7bb325d685115c9341c4d6c7b2f12c","target":"graph","created_at":"2026-07-05T05:04:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.03895/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent studies have demonstrated that visual recognition models lack robustness to distribution shift. However, current work mainly considers model robustness to 2D image transformations, leaving viewpoint changes in the 3D world less explored. In general, viewpoint changes are prevalent in various real-world applications (e.g., autonomous driving), making it imperative to evaluate viewpoint robustness. In this paper, we propose a novel method called ViewFool to find adversarial viewpoints that mislead visual recognition models. By encoding real-world objects as neural radiance fields (NeRF), ","authors_text":"Caixin Kang, Hang Su, Jun Zhu, Shouwei Ruan, Xingxing Wei, Yinpeng Dong","cross_cats":["cs.AI","cs.CR","cs.LG","stat.ML"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2022-10-08T03:06:49Z","title":"ViewFool: Evaluating the Robustness of Visual Recognition to Adversarial Viewpoints"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.03895","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c9b131ee3d62de34638ab16e523a91e20db00972f4228656506b2a7a5a46698b","target":"record","created_at":"2026-07-05T05:04:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"611b2f03e5fc51abb68d054b2f971ea22b8086dfeda8c0cc1a8c866eed34342e","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","stat.ML"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2022-10-08T03:06:49Z","title_canon_sha256":"ee3fdf2718699a8816426e27cb979c73c0eeec68f6439a3b0a0256156403b92c"},"schema_version":"1.0","source":{"id":"2210.03895","kind":"arxiv","version":1}},"canonical_sha256":"ce91903721b7f66b7f1def76280556108a014fd04a1672abd2b16b0e806a1a15","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ce91903721b7f66b7f1def76280556108a014fd04a1672abd2b16b0e806a1a15","first_computed_at":"2026-07-05T05:04:33.472694Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:04:33.472694Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8B7wxrHqhhsjWLomJXoulh+Cp9qDqNGlDfbqVGcWxE/lbCESEDSB1AkFJsBIkxoRWtq69gW+TCP7do3cULnfBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T05:04:33.473117Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.03895","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c9b131ee3d62de34638ab16e523a91e20db00972f4228656506b2a7a5a46698b","sha256:37799ceeaac16b345d5a0f565bb193e59b7bb325d685115c9341c4d6c7b2f12c"],"state_sha256":"843a97cb9c934774bdb3329f5c2bab9ed41a92c22732c44ccc27e04507dd64ff"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"e6gd/D3jxRUCKqyF0vjqJTojTtNDdSXs0on5zAtTypDRuPDE8yiEXNT1Uuxd51fDDX/IuOdogghKouIz2P2vDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-31T18:58:42.411320Z","bundle_sha256":"7b07f35f2298593a67cd8b9459e648ee632be358f4c5250cb1fa71b155216269"}}