{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:Z7YD4YD2UG7JDPBOVKAY6TBAE7","short_pith_number":"pith:Z7YD4YD2","canonical_record":{"source":{"id":"2608.04680","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T10:47:58Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"726e30f8a0f26cf701a3eb2065b1ece8d115284e9dcf906e2104bde780ed6f04","abstract_canon_sha256":"6e2767b73c837421aa6166387a2f4713bdcc4982e34253d50f3a314937c4fa15"},"schema_version":"1.0"},"canonical_sha256":"cff03e607aa1be91bc2eaa818f4c2027e3eab816b3e1ed76a7f96ff0bf80bb4b","source":{"kind":"arxiv","id":"2608.04680","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.04680","created_at":"2026-08-06T01:46:16Z"},{"alias_kind":"arxiv_version","alias_value":"2608.04680v1","created_at":"2026-08-06T01:46:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.04680","created_at":"2026-08-06T01:46:16Z"},{"alias_kind":"pith_short_12","alias_value":"Z7YD4YD2UG7J","created_at":"2026-08-06T01:46:16Z"},{"alias_kind":"pith_short_16","alias_value":"Z7YD4YD2UG7JDPBO","created_at":"2026-08-06T01:46:16Z"},{"alias_kind":"pith_short_8","alias_value":"Z7YD4YD2","created_at":"2026-08-06T01:46:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:Z7YD4YD2UG7JDPBOVKAY6TBAE7","target":"record","payload":{"canonical_record":{"source":{"id":"2608.04680","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T10:47:58Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"726e30f8a0f26cf701a3eb2065b1ece8d115284e9dcf906e2104bde780ed6f04","abstract_canon_sha256":"6e2767b73c837421aa6166387a2f4713bdcc4982e34253d50f3a314937c4fa15"},"schema_version":"1.0"},"canonical_sha256":"cff03e607aa1be91bc2eaa818f4c2027e3eab816b3e1ed76a7f96ff0bf80bb4b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-06T01:46:16.871320Z","signature_b64":"lI3aVLwjgfwPO5hVBVi4xEDah6J0JENJQmEEHfVrDBKkfjKJdIu660E/3vS9w31ZhC7UdMody18LMJRGHY6QCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cff03e607aa1be91bc2eaa818f4c2027e3eab816b3e1ed76a7f96ff0bf80bb4b","last_reissued_at":"2026-08-06T01:46:16.869775Z","signature_status":"signed_v1","first_computed_at":"2026-08-06T01:46:16.869775Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.04680","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-06T01:46:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fwQ5EkVBqLkWOKnksb03TgTKKBU5RY6EfSTj4VzqQ9YtoQi3N2UsC10aJtFbyyxK9JvJ7dpE15SG7Nh8BtXeBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T15:22:56.029399Z"},"content_sha256":"20e150d7cb2bb355c84381146243bb70dd763b53600662136ba046b06d126fad","schema_version":"1.0","event_id":"sha256:20e150d7cb2bb355c84381146243bb70dd763b53600662136ba046b06d126fad"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:Z7YD4YD2UG7JDPBOVKAY6TBAE7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.CR","authors_text":"Anadi Goyal, Anupam Chattopadhyay, Chandan Karfa, Nandish Chattopadhyay, Norrathep Rattanavipanon","submitted_at":"2026-08-05T10:47:58Z","abstract_excerpt":"To adopt the Vision Transformers (ViTs) in resource-constrained environment, token pruning is widely used to reduce computational cost without impacting accuracy. However, adversaries have developed targeted attacks against said token pruning techniques to undermine such attempts to make ViTs efficient. In this paper, we propose MOAT, a model-agnostic pre-processing defense pipeline that applies a combination of input transformations to protect efficient ViT implementations against adversarial efficiency attacks. MOAT operates directly on the input without requiring modifications to the model "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.04680","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.04680/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-06T01:46:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7WmJnNdGXb0aogYNJIEWm+LsI3Y9DuZziK/GswlWd1F25X8oa2UJwpbYHj1486Oio1fv4O3OT9mIEEJoLxEmDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T15:22:56.029938Z"},"content_sha256":"99927534ac98c94ddf61d0f857de2c0c1b45e707004e738f6d2809d3313e1d0d","schema_version":"1.0","event_id":"sha256:99927534ac98c94ddf61d0f857de2c0c1b45e707004e738f6d2809d3313e1d0d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Z7YD4YD2UG7JDPBOVKAY6TBAE7/bundle.json","state_url":"https://pith.science/pith/Z7YD4YD2UG7JDPBOVKAY6TBAE7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Z7YD4YD2UG7JDPBOVKAY6TBAE7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T15:22:56Z","links":{"resolver":"https://pith.science/pith/Z7YD4YD2UG7JDPBOVKAY6TBAE7","bundle":"https://pith.science/pith/Z7YD4YD2UG7JDPBOVKAY6TBAE7/bundle.json","state":"https://pith.science/pith/Z7YD4YD2UG7JDPBOVKAY6TBAE7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Z7YD4YD2UG7JDPBOVKAY6TBAE7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:Z7YD4YD2UG7JDPBOVKAY6TBAE7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6e2767b73c837421aa6166387a2f4713bdcc4982e34253d50f3a314937c4fa15","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T10:47:58Z","title_canon_sha256":"726e30f8a0f26cf701a3eb2065b1ece8d115284e9dcf906e2104bde780ed6f04"},"schema_version":"1.0","source":{"id":"2608.04680","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.04680","created_at":"2026-08-06T01:46:16Z"},{"alias_kind":"arxiv_version","alias_value":"2608.04680v1","created_at":"2026-08-06T01:46:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.04680","created_at":"2026-08-06T01:46:16Z"},{"alias_kind":"pith_short_12","alias_value":"Z7YD4YD2UG7J","created_at":"2026-08-06T01:46:16Z"},{"alias_kind":"pith_short_16","alias_value":"Z7YD4YD2UG7JDPBO","created_at":"2026-08-06T01:46:16Z"},{"alias_kind":"pith_short_8","alias_value":"Z7YD4YD2","created_at":"2026-08-06T01:46:16Z"}],"graph_snapshots":[{"event_id":"sha256:99927534ac98c94ddf61d0f857de2c0c1b45e707004e738f6d2809d3313e1d0d","target":"graph","created_at":"2026-08-06T01:46:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.04680/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"To adopt the Vision Transformers (ViTs) in resource-constrained environment, token pruning is widely used to reduce computational cost without impacting accuracy. However, adversaries have developed targeted attacks against said token pruning techniques to undermine such attempts to make ViTs efficient. In this paper, we propose MOAT, a model-agnostic pre-processing defense pipeline that applies a combination of input transformations to protect efficient ViT implementations against adversarial efficiency attacks. MOAT operates directly on the input without requiring modifications to the model ","authors_text":"Anadi Goyal, Anupam Chattopadhyay, Chandan Karfa, Nandish Chattopadhyay, Norrathep Rattanavipanon","cross_cats":["cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.04680","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:20e150d7cb2bb355c84381146243bb70dd763b53600662136ba046b06d126fad","target":"record","created_at":"2026-08-06T01:46:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6e2767b73c837421aa6166387a2f4713bdcc4982e34253d50f3a314937c4fa15","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T10:47:58Z","title_canon_sha256":"726e30f8a0f26cf701a3eb2065b1ece8d115284e9dcf906e2104bde780ed6f04"},"schema_version":"1.0","source":{"id":"2608.04680","kind":"arxiv","version":1}},"canonical_sha256":"cff03e607aa1be91bc2eaa818f4c2027e3eab816b3e1ed76a7f96ff0bf80bb4b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cff03e607aa1be91bc2eaa818f4c2027e3eab816b3e1ed76a7f96ff0bf80bb4b","first_computed_at":"2026-08-06T01:46:16.869775Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-06T01:46:16.869775Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lI3aVLwjgfwPO5hVBVi4xEDah6J0JENJQmEEHfVrDBKkfjKJdIu660E/3vS9w31ZhC7UdMody18LMJRGHY6QCA==","signature_status":"signed_v1","signed_at":"2026-08-06T01:46:16.871320Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.04680","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:20e150d7cb2bb355c84381146243bb70dd763b53600662136ba046b06d126fad","sha256:99927534ac98c94ddf61d0f857de2c0c1b45e707004e738f6d2809d3313e1d0d"],"state_sha256":"5ca5aeec6ab12c98f2fdeb895fbea33076ae15a8c96a15ec368a03b4f9a671fa"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M/sOvP20U+4pF5iB1QMiQy+2+/jIfDFs8d1myQJxpQqWxt5dZwilqWSk7DN+Pgzr0ugwTRAuW3PSdAqKhMAtAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T15:22:56.034819Z","bundle_sha256":"a576b65e232c9511c924008cff37c822b66e3559d88549dd703f46a0e073553e"}}