{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:ZFJ2DMLIE4UJNNBUZQPRJLWL4P","short_pith_number":"pith:ZFJ2DMLI","canonical_record":{"source":{"id":"2112.02797","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2021-12-06T05:59:30Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"6e38854c44daae38c963f4bd18d3c6b7499916875a5f4f849e7585eda4f332ab","abstract_canon_sha256":"295be34cca2ec352dc3b86432fd9752d04c83a69acf189266419478a712a4636"},"schema_version":"1.0"},"canonical_sha256":"c953a1b168272896b434cc1f14aecbe3cbe93f3554b4dd2f633b20277d9eb8cd","source":{"kind":"arxiv","id":"2112.02797","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.02797","created_at":"2026-07-05T03:37:57Z"},{"alias_kind":"arxiv_version","alias_value":"2112.02797v1","created_at":"2026-07-05T03:37:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.02797","created_at":"2026-07-05T03:37:57Z"},{"alias_kind":"pith_short_12","alias_value":"ZFJ2DMLIE4UJ","created_at":"2026-07-05T03:37:57Z"},{"alias_kind":"pith_short_16","alias_value":"ZFJ2DMLIE4UJNNBU","created_at":"2026-07-05T03:37:57Z"},{"alias_kind":"pith_short_8","alias_value":"ZFJ2DMLI","created_at":"2026-07-05T03:37:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:ZFJ2DMLIE4UJNNBUZQPRJLWL4P","target":"record","payload":{"canonical_record":{"source":{"id":"2112.02797","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2021-12-06T05:59:30Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"6e38854c44daae38c963f4bd18d3c6b7499916875a5f4f849e7585eda4f332ab","abstract_canon_sha256":"295be34cca2ec352dc3b86432fd9752d04c83a69acf189266419478a712a4636"},"schema_version":"1.0"},"canonical_sha256":"c953a1b168272896b434cc1f14aecbe3cbe93f3554b4dd2f633b20277d9eb8cd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:37:57.863067Z","signature_b64":"2uf93dD7heRdZgZGFQErDHJko4fHqBOYkQCgeOEhxY99Qv5yEYxaGERmr7/7r8sWiibraBFY8STCHONPLdsiAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c953a1b168272896b434cc1f14aecbe3cbe93f3554b4dd2f633b20277d9eb8cd","last_reissued_at":"2026-07-05T03:37:57.862546Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:37:57.862546Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2112.02797","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:37:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qy5zpguNzLv1Ltj/JKHMmPuK9ulpoWSpXfpPqxpmdYuutPAzIOIIL3dMCQgqqB26ENbgxf5XHn0u92kXCgTtCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T04:55:50.744333Z"},"content_sha256":"106b3276cd6f10d23bda1a744326fac736bce9cd3c5621151d7c041270a5d09c","schema_version":"1.0","event_id":"sha256:106b3276cd6f10d23bda1a744326fac736bce9cd3c5621151d7c041270a5d09c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:ZFJ2DMLIE4UJNNBUZQPRJLWL4P","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ML Attack Models: Adversarial Attacks and Data Poisoning Attacks","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Jing Lin, Kaiqi Xiong, Long Dang, Mohamed Rahouti","submitted_at":"2021-12-06T05:59:30Z","abstract_excerpt":"Many state-of-the-art ML models have outperformed humans in various tasks such as image classification. With such outstanding performance, ML models are widely used today. However, the existence of adversarial attacks and data poisoning attacks really questions the robustness of ML models. For instance, Engstrom et al. demonstrated that state-of-the-art image classifiers could be easily fooled by a small rotation on an arbitrary image. As ML systems are being increasingly integrated into safety and security-sensitive applications, adversarial attacks and data poisoning attacks pose a considera"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.02797","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2112.02797/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:37:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ljQoZzN8GEHKuq2PZYRm1pxLma7gkbQJC5KuVPExTKk0n1Xt6xom1e/sGYG8pxHSSNiHadvGar8DfqojzLO5BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T04:55:50.745365Z"},"content_sha256":"e5f4935268087cccf0f342ad360bd4fb48da56be816cf38030377775ff3fb907","schema_version":"1.0","event_id":"sha256:e5f4935268087cccf0f342ad360bd4fb48da56be816cf38030377775ff3fb907"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZFJ2DMLIE4UJNNBUZQPRJLWL4P/bundle.json","state_url":"https://pith.science/pith/ZFJ2DMLIE4UJNNBUZQPRJLWL4P/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZFJ2DMLIE4UJNNBUZQPRJLWL4P/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T04:55:50Z","links":{"resolver":"https://pith.science/pith/ZFJ2DMLIE4UJNNBUZQPRJLWL4P","bundle":"https://pith.science/pith/ZFJ2DMLIE4UJNNBUZQPRJLWL4P/bundle.json","state":"https://pith.science/pith/ZFJ2DMLIE4UJNNBUZQPRJLWL4P/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZFJ2DMLIE4UJNNBUZQPRJLWL4P/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:ZFJ2DMLIE4UJNNBUZQPRJLWL4P","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"295be34cca2ec352dc3b86432fd9752d04c83a69acf189266419478a712a4636","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2021-12-06T05:59:30Z","title_canon_sha256":"6e38854c44daae38c963f4bd18d3c6b7499916875a5f4f849e7585eda4f332ab"},"schema_version":"1.0","source":{"id":"2112.02797","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.02797","created_at":"2026-07-05T03:37:57Z"},{"alias_kind":"arxiv_version","alias_value":"2112.02797v1","created_at":"2026-07-05T03:37:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.02797","created_at":"2026-07-05T03:37:57Z"},{"alias_kind":"pith_short_12","alias_value":"ZFJ2DMLIE4UJ","created_at":"2026-07-05T03:37:57Z"},{"alias_kind":"pith_short_16","alias_value":"ZFJ2DMLIE4UJNNBU","created_at":"2026-07-05T03:37:57Z"},{"alias_kind":"pith_short_8","alias_value":"ZFJ2DMLI","created_at":"2026-07-05T03:37:57Z"}],"graph_snapshots":[{"event_id":"sha256:e5f4935268087cccf0f342ad360bd4fb48da56be816cf38030377775ff3fb907","target":"graph","created_at":"2026-07-05T03:37:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2112.02797/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Many state-of-the-art ML models have outperformed humans in various tasks such as image classification. With such outstanding performance, ML models are widely used today. However, the existence of adversarial attacks and data poisoning attacks really questions the robustness of ML models. For instance, Engstrom et al. demonstrated that state-of-the-art image classifiers could be easily fooled by a small rotation on an arbitrary image. As ML systems are being increasingly integrated into safety and security-sensitive applications, adversarial attacks and data poisoning attacks pose a considera","authors_text":"Jing Lin, Kaiqi Xiong, Long Dang, Mohamed Rahouti","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2021-12-06T05:59:30Z","title":"ML Attack Models: Adversarial Attacks and Data Poisoning Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.02797","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:106b3276cd6f10d23bda1a744326fac736bce9cd3c5621151d7c041270a5d09c","target":"record","created_at":"2026-07-05T03:37:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"295be34cca2ec352dc3b86432fd9752d04c83a69acf189266419478a712a4636","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2021-12-06T05:59:30Z","title_canon_sha256":"6e38854c44daae38c963f4bd18d3c6b7499916875a5f4f849e7585eda4f332ab"},"schema_version":"1.0","source":{"id":"2112.02797","kind":"arxiv","version":1}},"canonical_sha256":"c953a1b168272896b434cc1f14aecbe3cbe93f3554b4dd2f633b20277d9eb8cd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c953a1b168272896b434cc1f14aecbe3cbe93f3554b4dd2f633b20277d9eb8cd","first_computed_at":"2026-07-05T03:37:57.862546Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:37:57.862546Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2uf93dD7heRdZgZGFQErDHJko4fHqBOYkQCgeOEhxY99Qv5yEYxaGERmr7/7r8sWiibraBFY8STCHONPLdsiAw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:37:57.863067Z","signed_message":"canonical_sha256_bytes"},"source_id":"2112.02797","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:106b3276cd6f10d23bda1a744326fac736bce9cd3c5621151d7c041270a5d09c","sha256:e5f4935268087cccf0f342ad360bd4fb48da56be816cf38030377775ff3fb907"],"state_sha256":"ef47b8e7fe6602c558bca322652c96108fe122fea99f8bf0f87a7db069b92c70"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"45iExLeOLt/ze6o/M9d5UuuO8aelVHMg35MtGRYnSHNn4Sbvl3UIWNO1q8zw9wr8aQdzTZ+DcuOef5PdRQmtDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T04:55:50.750616Z","bundle_sha256":"14ea8955b7baa9581dce9ccc28c986a397e831c0803e15cbb94e69d961b3d26c"}}