{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:ZSAOJDN6X7HYH4AP2FKV2OYXFS","short_pith_number":"pith:ZSAOJDN6","canonical_record":{"source":{"id":"2304.11359","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-04-22T09:55:48Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"216cdffab72090b7aec556b4a643da83feb0b86e6bcbf2bf994f0dec3fcef1b3","abstract_canon_sha256":"e5d4addce77e4b562267b2063b39cf856189f9a9a6f76c6af71091fafee44bfb"},"schema_version":"1.0"},"canonical_sha256":"cc80e48dbebfcf83f00fd1555d3b172c8a9ee7afe7c41dcf59df0356f33a7954","source":{"kind":"arxiv","id":"2304.11359","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.11359","created_at":"2026-07-05T06:06:58Z"},{"alias_kind":"arxiv_version","alias_value":"2304.11359v2","created_at":"2026-07-05T06:06:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.11359","created_at":"2026-07-05T06:06:58Z"},{"alias_kind":"pith_short_12","alias_value":"ZSAOJDN6X7HY","created_at":"2026-07-05T06:06:58Z"},{"alias_kind":"pith_short_16","alias_value":"ZSAOJDN6X7HYH4AP","created_at":"2026-07-05T06:06:58Z"},{"alias_kind":"pith_short_8","alias_value":"ZSAOJDN6","created_at":"2026-07-05T06:06:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:ZSAOJDN6X7HYH4AP2FKV2OYXFS","target":"record","payload":{"canonical_record":{"source":{"id":"2304.11359","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-04-22T09:55:48Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"216cdffab72090b7aec556b4a643da83feb0b86e6bcbf2bf994f0dec3fcef1b3","abstract_canon_sha256":"e5d4addce77e4b562267b2063b39cf856189f9a9a6f76c6af71091fafee44bfb"},"schema_version":"1.0"},"canonical_sha256":"cc80e48dbebfcf83f00fd1555d3b172c8a9ee7afe7c41dcf59df0356f33a7954","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:06:58.718485Z","signature_b64":"LVzmS6GfwA03qrzyHdF6e9lja9qs/TQQkgNRcUCGLY4XegQOBVHPLemgdQhZzz6qoHF8qzmmY4XnV/MO/ScyAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cc80e48dbebfcf83f00fd1555d3b172c8a9ee7afe7c41dcf59df0356f33a7954","last_reissued_at":"2026-07-05T06:06:58.718055Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:06:58.718055Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2304.11359","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:06:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lP+Bt8c3nyTpGkSOCowig7RjfBDAk7bbBLtR8GOZLRW2xzvR3fZLE2mhMj8A/tTba35ujeyoq4pXMAYEp7jgAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T06:48:37.487959Z"},"content_sha256":"e631d70003ba4417b8ca63181d1194898366f7fad81b1154894f1401acf6ee52","schema_version":"1.0","event_id":"sha256:e631d70003ba4417b8ca63181d1194898366f7fad81b1154894f1401acf6ee52"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:ZSAOJDN6X7HYH4AP2FKV2OYXFS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Detecting Adversarial Faces Using Only Real Face Self-Perturbations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Hefei Ling, Jiazhong Chen, Jinyuan Zhang, Ning Yu, Ping Li, Qian Wang, Xiaorui Lin, Yongqin Xian","submitted_at":"2023-04-22T09:55:48Z","abstract_excerpt":"Adversarial attacks aim to disturb the functionality of a target system by adding specific noise to the input samples, bringing potential threats to security and robustness when applied to facial recognition systems. Although existing defense techniques achieve high accuracy in detecting some specific adversarial faces (adv-faces), new attack methods especially GAN-based attacks with completely different noise patterns circumvent them and reach a higher attack success rate. Even worse, existing techniques require attack data before implementing the defense, making it impractical to defend newl"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.11359","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2304.11359/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:06:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4I1SKpfZfkkDQbhP5bIUvRi70wn8BXEpadXTzRjOpKiqhXESJYg4RcE4Hr1DD9dD9rK5C8eKmfFCry7e84nHCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T06:48:37.488632Z"},"content_sha256":"c69cbc20c0a1ce9312041f2758d09190d6a8f85dc833c5d928800fa154d4f131","schema_version":"1.0","event_id":"sha256:c69cbc20c0a1ce9312041f2758d09190d6a8f85dc833c5d928800fa154d4f131"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZSAOJDN6X7HYH4AP2FKV2OYXFS/bundle.json","state_url":"https://pith.science/pith/ZSAOJDN6X7HYH4AP2FKV2OYXFS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZSAOJDN6X7HYH4AP2FKV2OYXFS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T06:48:37Z","links":{"resolver":"https://pith.science/pith/ZSAOJDN6X7HYH4AP2FKV2OYXFS","bundle":"https://pith.science/pith/ZSAOJDN6X7HYH4AP2FKV2OYXFS/bundle.json","state":"https://pith.science/pith/ZSAOJDN6X7HYH4AP2FKV2OYXFS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZSAOJDN6X7HYH4AP2FKV2OYXFS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:ZSAOJDN6X7HYH4AP2FKV2OYXFS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e5d4addce77e4b562267b2063b39cf856189f9a9a6f76c6af71091fafee44bfb","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-04-22T09:55:48Z","title_canon_sha256":"216cdffab72090b7aec556b4a643da83feb0b86e6bcbf2bf994f0dec3fcef1b3"},"schema_version":"1.0","source":{"id":"2304.11359","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.11359","created_at":"2026-07-05T06:06:58Z"},{"alias_kind":"arxiv_version","alias_value":"2304.11359v2","created_at":"2026-07-05T06:06:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.11359","created_at":"2026-07-05T06:06:58Z"},{"alias_kind":"pith_short_12","alias_value":"ZSAOJDN6X7HY","created_at":"2026-07-05T06:06:58Z"},{"alias_kind":"pith_short_16","alias_value":"ZSAOJDN6X7HYH4AP","created_at":"2026-07-05T06:06:58Z"},{"alias_kind":"pith_short_8","alias_value":"ZSAOJDN6","created_at":"2026-07-05T06:06:58Z"}],"graph_snapshots":[{"event_id":"sha256:c69cbc20c0a1ce9312041f2758d09190d6a8f85dc833c5d928800fa154d4f131","target":"graph","created_at":"2026-07-05T06:06:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2304.11359/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial attacks aim to disturb the functionality of a target system by adding specific noise to the input samples, bringing potential threats to security and robustness when applied to facial recognition systems. Although existing defense techniques achieve high accuracy in detecting some specific adversarial faces (adv-faces), new attack methods especially GAN-based attacks with completely different noise patterns circumvent them and reach a higher attack success rate. Even worse, existing techniques require attack data before implementing the defense, making it impractical to defend newl","authors_text":"Hefei Ling, Jiazhong Chen, Jinyuan Zhang, Ning Yu, Ping Li, Qian Wang, Xiaorui Lin, Yongqin Xian","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-04-22T09:55:48Z","title":"Detecting Adversarial Faces Using Only Real Face Self-Perturbations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.11359","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e631d70003ba4417b8ca63181d1194898366f7fad81b1154894f1401acf6ee52","target":"record","created_at":"2026-07-05T06:06:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e5d4addce77e4b562267b2063b39cf856189f9a9a6f76c6af71091fafee44bfb","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-04-22T09:55:48Z","title_canon_sha256":"216cdffab72090b7aec556b4a643da83feb0b86e6bcbf2bf994f0dec3fcef1b3"},"schema_version":"1.0","source":{"id":"2304.11359","kind":"arxiv","version":2}},"canonical_sha256":"cc80e48dbebfcf83f00fd1555d3b172c8a9ee7afe7c41dcf59df0356f33a7954","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cc80e48dbebfcf83f00fd1555d3b172c8a9ee7afe7c41dcf59df0356f33a7954","first_computed_at":"2026-07-05T06:06:58.718055Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:06:58.718055Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LVzmS6GfwA03qrzyHdF6e9lja9qs/TQQkgNRcUCGLY4XegQOBVHPLemgdQhZzz6qoHF8qzmmY4XnV/MO/ScyAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:06:58.718485Z","signed_message":"canonical_sha256_bytes"},"source_id":"2304.11359","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e631d70003ba4417b8ca63181d1194898366f7fad81b1154894f1401acf6ee52","sha256:c69cbc20c0a1ce9312041f2758d09190d6a8f85dc833c5d928800fa154d4f131"],"state_sha256":"a6900a55062ea7fbf2bcf4b85a9fff2fea87cebb5ec18e1c6cee0f3ff3eb83c1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DxPw+O7KvvRVyWPWZM62lvRY0WRkPmrbvhX9YIudIXTXWUk8V7bwKQh68JLxLPWFRIjUf2NGPwzHNyr0baZiAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T06:48:37.492056Z","bundle_sha256":"affbd35e1cd10f7fda8c1ebb8108c4acdff5ec9d98383c2926da0a38b057df0d"}}