{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:ZOFTEVPWP4WJEE2VOHVHQHBBLG","short_pith_number":"pith:ZOFTEVPW","canonical_record":{"source":{"id":"2307.12499","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-07-24T03:10:02Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"d2dc2de2a9811bd502a4b6f8f9957df74c1449935935632b0eaa9cd078f4c6b5","abstract_canon_sha256":"fd1331f060acd18ce7d0fcace5e195f46db8f97cdc4f652f77a52864228b6c0d"},"schema_version":"1.0"},"canonical_sha256":"cb8b3255f67f2c92135571ea781c2159af9de2ceb9628ef3e34c1712d6ad31c2","source":{"kind":"arxiv","id":"2307.12499","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.12499","created_at":"2026-07-05T08:43:22Z"},{"alias_kind":"arxiv_version","alias_value":"2307.12499v4","created_at":"2026-07-05T08:43:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.12499","created_at":"2026-07-05T08:43:22Z"},{"alias_kind":"pith_short_12","alias_value":"ZOFTEVPWP4WJ","created_at":"2026-07-05T08:43:22Z"},{"alias_kind":"pith_short_16","alias_value":"ZOFTEVPWP4WJEE2V","created_at":"2026-07-05T08:43:22Z"},{"alias_kind":"pith_short_8","alias_value":"ZOFTEVPW","created_at":"2026-07-05T08:43:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:ZOFTEVPWP4WJEE2VOHVHQHBBLG","target":"record","payload":{"canonical_record":{"source":{"id":"2307.12499","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-07-24T03:10:02Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"d2dc2de2a9811bd502a4b6f8f9957df74c1449935935632b0eaa9cd078f4c6b5","abstract_canon_sha256":"fd1331f060acd18ce7d0fcace5e195f46db8f97cdc4f652f77a52864228b6c0d"},"schema_version":"1.0"},"canonical_sha256":"cb8b3255f67f2c92135571ea781c2159af9de2ceb9628ef3e34c1712d6ad31c2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:43:22.878400Z","signature_b64":"u2ctuLbmyBr6c6VJBiwHgXQoSmvhPBZOydsO9WYTcUzh5d/wpAJi+ZvYn1DE/CefOu55+2hubGASKMQGAV4VBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cb8b3255f67f2c92135571ea781c2159af9de2ceb9628ef3e34c1712d6ad31c2","last_reissued_at":"2026-07-05T08:43:22.877967Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:43:22.877967Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2307.12499","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:43:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OAom1jioO9YnK/h6q63DUJNHRpwx3wsOnSxjpUDxC5/VRxcw4IM9bfzsK2uRz+e16gAi+sPGFCn8EfZ2NJfIAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T14:48:54.961977Z"},"content_sha256":"0478a7d965a4dd5a6ca2a2e768b936e7ad35e051574ad805767f1d38a6fb6470","schema_version":"1.0","event_id":"sha256:0478a7d965a4dd5a6ca2a2e768b936e7ad35e051574ad805767f1d38a6fb6470"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:ZOFTEVPWP4WJEE2VOHVHQHBBLG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"AdvDiff: Generating Unrestricted Adversarial Examples using Diffusion Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.LG","authors_text":"Bin Xiao, Kaisheng Liang, Xuelong Dai","submitted_at":"2023-07-24T03:10:02Z","abstract_excerpt":"Unrestricted adversarial attacks present a serious threat to deep learning models and adversarial defense techniques. They pose severe security problems for deep learning applications because they can effectively bypass defense mechanisms. However, previous attack methods often directly inject Projected Gradient Descent (PGD) gradients into the sampling of generative models, which are not theoretically provable and thus generate unrealistic examples by incorporating adversarial objectives, especially for GAN-based methods on large-scale datasets like ImageNet. In this paper, we propose a new m"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.12499","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2307.12499/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:43:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eMJTquxvinQcOHCaCb9RQOyeLwAMfUrU/HtTUUJ3sW5LoT4yZ5/zn5aTLnidyWycLEnID6j6FDszcyhgIJEwDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T14:48:54.962367Z"},"content_sha256":"bd487feb833d5811ebbd839c2c18b482ab4abf76751bb23f6734a4909a6fc626","schema_version":"1.0","event_id":"sha256:bd487feb833d5811ebbd839c2c18b482ab4abf76751bb23f6734a4909a6fc626"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZOFTEVPWP4WJEE2VOHVHQHBBLG/bundle.json","state_url":"https://pith.science/pith/ZOFTEVPWP4WJEE2VOHVHQHBBLG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZOFTEVPWP4WJEE2VOHVHQHBBLG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T14:48:54Z","links":{"resolver":"https://pith.science/pith/ZOFTEVPWP4WJEE2VOHVHQHBBLG","bundle":"https://pith.science/pith/ZOFTEVPWP4WJEE2VOHVHQHBBLG/bundle.json","state":"https://pith.science/pith/ZOFTEVPWP4WJEE2VOHVHQHBBLG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZOFTEVPWP4WJEE2VOHVHQHBBLG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:ZOFTEVPWP4WJEE2VOHVHQHBBLG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fd1331f060acd18ce7d0fcace5e195f46db8f97cdc4f652f77a52864228b6c0d","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-07-24T03:10:02Z","title_canon_sha256":"d2dc2de2a9811bd502a4b6f8f9957df74c1449935935632b0eaa9cd078f4c6b5"},"schema_version":"1.0","source":{"id":"2307.12499","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.12499","created_at":"2026-07-05T08:43:22Z"},{"alias_kind":"arxiv_version","alias_value":"2307.12499v4","created_at":"2026-07-05T08:43:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.12499","created_at":"2026-07-05T08:43:22Z"},{"alias_kind":"pith_short_12","alias_value":"ZOFTEVPWP4WJ","created_at":"2026-07-05T08:43:22Z"},{"alias_kind":"pith_short_16","alias_value":"ZOFTEVPWP4WJEE2V","created_at":"2026-07-05T08:43:22Z"},{"alias_kind":"pith_short_8","alias_value":"ZOFTEVPW","created_at":"2026-07-05T08:43:22Z"}],"graph_snapshots":[{"event_id":"sha256:bd487feb833d5811ebbd839c2c18b482ab4abf76751bb23f6734a4909a6fc626","target":"graph","created_at":"2026-07-05T08:43:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2307.12499/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Unrestricted adversarial attacks present a serious threat to deep learning models and adversarial defense techniques. They pose severe security problems for deep learning applications because they can effectively bypass defense mechanisms. However, previous attack methods often directly inject Projected Gradient Descent (PGD) gradients into the sampling of generative models, which are not theoretically provable and thus generate unrealistic examples by incorporating adversarial objectives, especially for GAN-based methods on large-scale datasets like ImageNet. In this paper, we propose a new m","authors_text":"Bin Xiao, Kaisheng Liang, Xuelong Dai","cross_cats":["cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-07-24T03:10:02Z","title":"AdvDiff: Generating Unrestricted Adversarial Examples using Diffusion Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.12499","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0478a7d965a4dd5a6ca2a2e768b936e7ad35e051574ad805767f1d38a6fb6470","target":"record","created_at":"2026-07-05T08:43:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fd1331f060acd18ce7d0fcace5e195f46db8f97cdc4f652f77a52864228b6c0d","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-07-24T03:10:02Z","title_canon_sha256":"d2dc2de2a9811bd502a4b6f8f9957df74c1449935935632b0eaa9cd078f4c6b5"},"schema_version":"1.0","source":{"id":"2307.12499","kind":"arxiv","version":4}},"canonical_sha256":"cb8b3255f67f2c92135571ea781c2159af9de2ceb9628ef3e34c1712d6ad31c2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cb8b3255f67f2c92135571ea781c2159af9de2ceb9628ef3e34c1712d6ad31c2","first_computed_at":"2026-07-05T08:43:22.877967Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:43:22.877967Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"u2ctuLbmyBr6c6VJBiwHgXQoSmvhPBZOydsO9WYTcUzh5d/wpAJi+ZvYn1DE/CefOu55+2hubGASKMQGAV4VBg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:43:22.878400Z","signed_message":"canonical_sha256_bytes"},"source_id":"2307.12499","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0478a7d965a4dd5a6ca2a2e768b936e7ad35e051574ad805767f1d38a6fb6470","sha256:bd487feb833d5811ebbd839c2c18b482ab4abf76751bb23f6734a4909a6fc626"],"state_sha256":"815683317000a48955e6ddcb6654f3585189270c7c8f49a1c7ea39b8b0d54c26"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Jr3RqAZXq466X0u+n4SVy/G1s+7dbzCNCBe5gpAASQH388/nCCmrNcCRGF5iMaH0tJvigH4INHe7VUOFkF2NDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T14:48:54.965238Z","bundle_sha256":"382dcedf8234575f64423d32b0f2102137d18901a32821c48991b81dcab0bcfa"}}