{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:ZQN32KB5AR6D7TSI55RNVJ6BJN","short_pith_number":"pith:ZQN32KB5","canonical_record":{"source":{"id":"1812.03413","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-12-09T02:11:03Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"57b18bad9991ed75e2e45ebf624fc3340455edf245921d4525c47c87b462688b","abstract_canon_sha256":"ef40a6195c7da150a6623755fc30bdf18515fe0e002cd58eac614e06b9e96567"},"schema_version":"1.0"},"canonical_sha256":"cc1bbd283d047c3fce48ef62daa7c14b4cf24fd03b56b3b8b93467f29242adbe","source":{"kind":"arxiv","id":"1812.03413","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1812.03413","created_at":"2026-07-05T00:21:32Z"},{"alias_kind":"arxiv_version","alias_value":"1812.03413v3","created_at":"2026-07-05T00:21:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1812.03413","created_at":"2026-07-05T00:21:32Z"},{"alias_kind":"pith_short_12","alias_value":"ZQN32KB5AR6D","created_at":"2026-07-05T00:21:32Z"},{"alias_kind":"pith_short_16","alias_value":"ZQN32KB5AR6D7TSI","created_at":"2026-07-05T00:21:32Z"},{"alias_kind":"pith_short_8","alias_value":"ZQN32KB5","created_at":"2026-07-05T00:21:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:ZQN32KB5AR6D7TSI55RNVJ6BJN","target":"record","payload":{"canonical_record":{"source":{"id":"1812.03413","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-12-09T02:11:03Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"57b18bad9991ed75e2e45ebf624fc3340455edf245921d4525c47c87b462688b","abstract_canon_sha256":"ef40a6195c7da150a6623755fc30bdf18515fe0e002cd58eac614e06b9e96567"},"schema_version":"1.0"},"canonical_sha256":"cc1bbd283d047c3fce48ef62daa7c14b4cf24fd03b56b3b8b93467f29242adbe","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:21:32.189909Z","signature_b64":"EspkqSBS2cBMxJ/1EcYtfr0+1HXPbaWQ1zY4HjVGOwatD5gAfVSZxVwXUj49OwxbfAWXeBysp4zHS9/sp1D5AA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cc1bbd283d047c3fce48ef62daa7c14b4cf24fd03b56b3b8b93467f29242adbe","last_reissued_at":"2026-07-05T00:21:32.189441Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:21:32.189441Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1812.03413","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:21:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LNMBYQdu76kYvZmPWt2P1j/h+7BFnreyDZd/djc0tReUYSCyRmznFVJpsGtgkimsUxaPJNQW5JERj1W9C1GIDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T11:48:02.846769Z"},"content_sha256":"ee2d72266713c083c3104e0213c3e81cd162d877c9cd9828aec2d90bafda733f","schema_version":"1.0","event_id":"sha256:ee2d72266713c083c3104e0213c3e81cd162d877c9cd9828aec2d90bafda733f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:ZQN32KB5AR6D7TSI55RNVJ6BJN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Learning Transferable Adversarial Examples via Ghost Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Alan Yuille, Cihang Xie, Song Bai, Yingwei Li, Yuyin Zhou, Zhishuai Zhang","submitted_at":"2018-12-09T02:11:03Z","abstract_excerpt":"Recent development of adversarial attacks has proven that ensemble-based methods outperform traditional, non-ensemble ones in black-box attack. However, as it is computationally prohibitive to acquire a family of diverse models, these methods achieve inferior performance constrained by the limited number of models to be ensembled.\n  In this paper, we propose Ghost Networks to improve the transferability of adversarial examples. The critical principle of ghost networks is to apply feature-level perturbations to an existing model to potentially create a huge set of diverse models. After that, mo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1812.03413","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1812.03413/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:21:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"t26GubRieNcuQ0YSwn1YfreF+brXdUegrsk4I0yMWkfolCdwPeK5ypNIb2DMI6bhsJuN+b1MPREgYAVnnahQCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T11:48:02.847325Z"},"content_sha256":"7703add0ceac10a7077d81c65ee256230acf1b4b8bba56d39994eefd27d8053a","schema_version":"1.0","event_id":"sha256:7703add0ceac10a7077d81c65ee256230acf1b4b8bba56d39994eefd27d8053a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZQN32KB5AR6D7TSI55RNVJ6BJN/bundle.json","state_url":"https://pith.science/pith/ZQN32KB5AR6D7TSI55RNVJ6BJN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZQN32KB5AR6D7TSI55RNVJ6BJN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T11:48:02Z","links":{"resolver":"https://pith.science/pith/ZQN32KB5AR6D7TSI55RNVJ6BJN","bundle":"https://pith.science/pith/ZQN32KB5AR6D7TSI55RNVJ6BJN/bundle.json","state":"https://pith.science/pith/ZQN32KB5AR6D7TSI55RNVJ6BJN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZQN32KB5AR6D7TSI55RNVJ6BJN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:ZQN32KB5AR6D7TSI55RNVJ6BJN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ef40a6195c7da150a6623755fc30bdf18515fe0e002cd58eac614e06b9e96567","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-12-09T02:11:03Z","title_canon_sha256":"57b18bad9991ed75e2e45ebf624fc3340455edf245921d4525c47c87b462688b"},"schema_version":"1.0","source":{"id":"1812.03413","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1812.03413","created_at":"2026-07-05T00:21:32Z"},{"alias_kind":"arxiv_version","alias_value":"1812.03413v3","created_at":"2026-07-05T00:21:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1812.03413","created_at":"2026-07-05T00:21:32Z"},{"alias_kind":"pith_short_12","alias_value":"ZQN32KB5AR6D","created_at":"2026-07-05T00:21:32Z"},{"alias_kind":"pith_short_16","alias_value":"ZQN32KB5AR6D7TSI","created_at":"2026-07-05T00:21:32Z"},{"alias_kind":"pith_short_8","alias_value":"ZQN32KB5","created_at":"2026-07-05T00:21:32Z"}],"graph_snapshots":[{"event_id":"sha256:7703add0ceac10a7077d81c65ee256230acf1b4b8bba56d39994eefd27d8053a","target":"graph","created_at":"2026-07-05T00:21:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1812.03413/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent development of adversarial attacks has proven that ensemble-based methods outperform traditional, non-ensemble ones in black-box attack. However, as it is computationally prohibitive to acquire a family of diverse models, these methods achieve inferior performance constrained by the limited number of models to be ensembled.\n  In this paper, we propose Ghost Networks to improve the transferability of adversarial examples. The critical principle of ghost networks is to apply feature-level perturbations to an existing model to potentially create a huge set of diverse models. After that, mo","authors_text":"Alan Yuille, Cihang Xie, Song Bai, Yingwei Li, Yuyin Zhou, Zhishuai Zhang","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-12-09T02:11:03Z","title":"Learning Transferable Adversarial Examples via Ghost Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1812.03413","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ee2d72266713c083c3104e0213c3e81cd162d877c9cd9828aec2d90bafda733f","target":"record","created_at":"2026-07-05T00:21:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ef40a6195c7da150a6623755fc30bdf18515fe0e002cd58eac614e06b9e96567","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-12-09T02:11:03Z","title_canon_sha256":"57b18bad9991ed75e2e45ebf624fc3340455edf245921d4525c47c87b462688b"},"schema_version":"1.0","source":{"id":"1812.03413","kind":"arxiv","version":3}},"canonical_sha256":"cc1bbd283d047c3fce48ef62daa7c14b4cf24fd03b56b3b8b93467f29242adbe","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cc1bbd283d047c3fce48ef62daa7c14b4cf24fd03b56b3b8b93467f29242adbe","first_computed_at":"2026-07-05T00:21:32.189441Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:21:32.189441Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"EspkqSBS2cBMxJ/1EcYtfr0+1HXPbaWQ1zY4HjVGOwatD5gAfVSZxVwXUj49OwxbfAWXeBysp4zHS9/sp1D5AA==","signature_status":"signed_v1","signed_at":"2026-07-05T00:21:32.189909Z","signed_message":"canonical_sha256_bytes"},"source_id":"1812.03413","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ee2d72266713c083c3104e0213c3e81cd162d877c9cd9828aec2d90bafda733f","sha256:7703add0ceac10a7077d81c65ee256230acf1b4b8bba56d39994eefd27d8053a"],"state_sha256":"c62ddd398c70d2120b39fd6419ce7924fc6e55a03eff333e1265cf6140cecdcf"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YdEx0Sa1o1gOiqmWGnNZunQcFLUIZgInXBijKVvaJUVOCuV7ufRSMPuz/0fqwESwSUVWGFZDv/n9MFC49QGyBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T11:48:02.851546Z","bundle_sha256":"33ed649e3b581346cfde3fdc17c82142e31ae17d3e292555f01e9ea19ee3dd53"}}