{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:Z6JA3YWAJXZHHK63M2KYIHN3OI","short_pith_number":"pith:Z6JA3YWA","canonical_record":{"source":{"id":"1908.06281","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-17T10:03:05Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"213869bbd6055b31dd31843e4284dc87e3ccff124da1c3b132033e62cc664398","abstract_canon_sha256":"8d9fadbffe8f35f64dee382ee075ee3b855700fbfc67e041ab6286459988d597"},"schema_version":"1.0"},"canonical_sha256":"cf920de2c04df273abdb6695841dbb7225d819f5a58d73d0267ae70fdcd80a07","source":{"kind":"arxiv","id":"1908.06281","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.06281","created_at":"2026-07-05T00:37:46Z"},{"alias_kind":"arxiv_version","alias_value":"1908.06281v5","created_at":"2026-07-05T00:37:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.06281","created_at":"2026-07-05T00:37:46Z"},{"alias_kind":"pith_short_12","alias_value":"Z6JA3YWAJXZH","created_at":"2026-07-05T00:37:46Z"},{"alias_kind":"pith_short_16","alias_value":"Z6JA3YWAJXZHHK63","created_at":"2026-07-05T00:37:46Z"},{"alias_kind":"pith_short_8","alias_value":"Z6JA3YWA","created_at":"2026-07-05T00:37:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:Z6JA3YWAJXZHHK63M2KYIHN3OI","target":"record","payload":{"canonical_record":{"source":{"id":"1908.06281","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-17T10:03:05Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"213869bbd6055b31dd31843e4284dc87e3ccff124da1c3b132033e62cc664398","abstract_canon_sha256":"8d9fadbffe8f35f64dee382ee075ee3b855700fbfc67e041ab6286459988d597"},"schema_version":"1.0"},"canonical_sha256":"cf920de2c04df273abdb6695841dbb7225d819f5a58d73d0267ae70fdcd80a07","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:37:46.808731Z","signature_b64":"be6v8HHbdL9pmcRp1+p2mCgK/a2R+QJo4utamhgd8amShvM++uIqx0yk5ZFgK67IWOhL89Ro3kWMt4rGKpWDDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cf920de2c04df273abdb6695841dbb7225d819f5a58d73d0267ae70fdcd80a07","last_reissued_at":"2026-07-05T00:37:46.808240Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:37:46.808240Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1908.06281","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:37:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rzGwwhV303CriN7GMSwa+S+pk6yURtzKoJn2E4mV2WG71HYICqs96POioVbTy6U7CNXbiNQBiqQrNroj7QKaCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T04:15:30.799114Z"},"content_sha256":"4309b2e5d2dcc5b917b44bffdc0ce028654e355ad6a0d4dbe7ffc3549f7d0f19","schema_version":"1.0","event_id":"sha256:4309b2e5d2dcc5b917b44bffdc0ce028654e355ad6a0d4dbe7ffc3549f7d0f19"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:Z6JA3YWAJXZHHK63M2KYIHN3OI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Chuanbiao Song, Jiadong Lin, John E. Hopcroft, Kun He, Liwei Wang","submitted_at":"2019-08-17T10:03:05Z","abstract_excerpt":"Deep learning models are vulnerable to adversarial examples crafted by applying human-imperceptible perturbations on benign inputs. However, under the black-box setting, most existing adversaries often have a poor transferability to attack other defense models. In this work, from the perspective of regarding the adversarial example generation as an optimization process, we propose two new methods to improve the transferability of adversarial examples, namely Nesterov Iterative Fast Gradient Sign Method (NI-FGSM) and Scale-Invariant attack Method (SIM). NI-FGSM aims to adapt Nesterov accelerate"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.06281","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1908.06281/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:37:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tQ8Zl1ScpFWiP/w4KOtRXDbszJDL3cXYd7qSvuq/RTwdBSpnp0aQZfs5Ts3PfO/t3PkNsLznAeRFarBc6Dd4Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T04:15:30.800044Z"},"content_sha256":"e100bce255b549bb6b10af218e83e68ae85a59b6f46cda6a5b6760c26dd50fc6","schema_version":"1.0","event_id":"sha256:e100bce255b549bb6b10af218e83e68ae85a59b6f46cda6a5b6760c26dd50fc6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Z6JA3YWAJXZHHK63M2KYIHN3OI/bundle.json","state_url":"https://pith.science/pith/Z6JA3YWAJXZHHK63M2KYIHN3OI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Z6JA3YWAJXZHHK63M2KYIHN3OI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T04:15:30Z","links":{"resolver":"https://pith.science/pith/Z6JA3YWAJXZHHK63M2KYIHN3OI","bundle":"https://pith.science/pith/Z6JA3YWAJXZHHK63M2KYIHN3OI/bundle.json","state":"https://pith.science/pith/Z6JA3YWAJXZHHK63M2KYIHN3OI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Z6JA3YWAJXZHHK63M2KYIHN3OI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:Z6JA3YWAJXZHHK63M2KYIHN3OI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8d9fadbffe8f35f64dee382ee075ee3b855700fbfc67e041ab6286459988d597","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-17T10:03:05Z","title_canon_sha256":"213869bbd6055b31dd31843e4284dc87e3ccff124da1c3b132033e62cc664398"},"schema_version":"1.0","source":{"id":"1908.06281","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.06281","created_at":"2026-07-05T00:37:46Z"},{"alias_kind":"arxiv_version","alias_value":"1908.06281v5","created_at":"2026-07-05T00:37:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.06281","created_at":"2026-07-05T00:37:46Z"},{"alias_kind":"pith_short_12","alias_value":"Z6JA3YWAJXZH","created_at":"2026-07-05T00:37:46Z"},{"alias_kind":"pith_short_16","alias_value":"Z6JA3YWAJXZHHK63","created_at":"2026-07-05T00:37:46Z"},{"alias_kind":"pith_short_8","alias_value":"Z6JA3YWA","created_at":"2026-07-05T00:37:46Z"}],"graph_snapshots":[{"event_id":"sha256:e100bce255b549bb6b10af218e83e68ae85a59b6f46cda6a5b6760c26dd50fc6","target":"graph","created_at":"2026-07-05T00:37:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1908.06281/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep learning models are vulnerable to adversarial examples crafted by applying human-imperceptible perturbations on benign inputs. However, under the black-box setting, most existing adversaries often have a poor transferability to attack other defense models. In this work, from the perspective of regarding the adversarial example generation as an optimization process, we propose two new methods to improve the transferability of adversarial examples, namely Nesterov Iterative Fast Gradient Sign Method (NI-FGSM) and Scale-Invariant attack Method (SIM). NI-FGSM aims to adapt Nesterov accelerate","authors_text":"Chuanbiao Song, Jiadong Lin, John E. Hopcroft, Kun He, Liwei Wang","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.06281","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4309b2e5d2dcc5b917b44bffdc0ce028654e355ad6a0d4dbe7ffc3549f7d0f19","target":"record","created_at":"2026-07-05T00:37:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8d9fadbffe8f35f64dee382ee075ee3b855700fbfc67e041ab6286459988d597","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-17T10:03:05Z","title_canon_sha256":"213869bbd6055b31dd31843e4284dc87e3ccff124da1c3b132033e62cc664398"},"schema_version":"1.0","source":{"id":"1908.06281","kind":"arxiv","version":5}},"canonical_sha256":"cf920de2c04df273abdb6695841dbb7225d819f5a58d73d0267ae70fdcd80a07","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cf920de2c04df273abdb6695841dbb7225d819f5a58d73d0267ae70fdcd80a07","first_computed_at":"2026-07-05T00:37:46.808240Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:37:46.808240Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"be6v8HHbdL9pmcRp1+p2mCgK/a2R+QJo4utamhgd8amShvM++uIqx0yk5ZFgK67IWOhL89Ro3kWMt4rGKpWDDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T00:37:46.808731Z","signed_message":"canonical_sha256_bytes"},"source_id":"1908.06281","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4309b2e5d2dcc5b917b44bffdc0ce028654e355ad6a0d4dbe7ffc3549f7d0f19","sha256:e100bce255b549bb6b10af218e83e68ae85a59b6f46cda6a5b6760c26dd50fc6"],"state_sha256":"ced02d56ffcf0dd63f3259015058f7023afb36d6c80e3cbb35d228f74b54078e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"b8bdZqOjplUwUKeW3hpBdjSmVb8x5B8dV4oO2YCyH0x9ul6DtJtVIP/cGK6kxyU6pCkSxaLD0r43CRaLNhgMDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T04:15:30.805724Z","bundle_sha256":"5f2c665ba9ea7fb1c5a220666b0baf293a94968bf92b45b61644804819ca125b"}}