{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:ZU7WD7IFNHMBQHHQ7RHGFHDKMT","short_pith_number":"pith:ZU7WD7IF","canonical_record":{"source":{"id":"2310.13345","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-20T08:16:46Z","cross_cats_sorted":[],"title_canon_sha256":"ae9df6fb0360230f5c0b7e6f3346cc49ed9b82bdcb4202659d4d37423d40001a","abstract_canon_sha256":"e19701720f0f617dff773a2e7313ea2a9b28d74e09c3c11a002f8eec0d4d4809"},"schema_version":"1.0"},"canonical_sha256":"cd3f61fd0569d8181cf0fc4e629c6a64e17d151a55bce2ee0a3e68ae4645cef6","source":{"kind":"arxiv","id":"2310.13345","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.13345","created_at":"2026-07-05T07:03:01Z"},{"alias_kind":"arxiv_version","alias_value":"2310.13345v1","created_at":"2026-07-05T07:03:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.13345","created_at":"2026-07-05T07:03:01Z"},{"alias_kind":"pith_short_12","alias_value":"ZU7WD7IFNHMB","created_at":"2026-07-05T07:03:01Z"},{"alias_kind":"pith_short_16","alias_value":"ZU7WD7IFNHMBQHHQ","created_at":"2026-07-05T07:03:01Z"},{"alias_kind":"pith_short_8","alias_value":"ZU7WD7IF","created_at":"2026-07-05T07:03:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:ZU7WD7IFNHMBQHHQ7RHGFHDKMT","target":"record","payload":{"canonical_record":{"source":{"id":"2310.13345","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-20T08:16:46Z","cross_cats_sorted":[],"title_canon_sha256":"ae9df6fb0360230f5c0b7e6f3346cc49ed9b82bdcb4202659d4d37423d40001a","abstract_canon_sha256":"e19701720f0f617dff773a2e7313ea2a9b28d74e09c3c11a002f8eec0d4d4809"},"schema_version":"1.0"},"canonical_sha256":"cd3f61fd0569d8181cf0fc4e629c6a64e17d151a55bce2ee0a3e68ae4645cef6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:03:01.924166Z","signature_b64":"iQgpMfLriMEmtxJVdNZq9rEfCQ9Pjg2SAzX1HZ/Xoorxk8p4wAJSIbwRimjhW1KqOuYCIky7e29+BK/SmqRJAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cd3f61fd0569d8181cf0fc4e629c6a64e17d151a55bce2ee0a3e68ae4645cef6","last_reissued_at":"2026-07-05T07:03:01.923625Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:03:01.923625Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.13345","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:03:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"J9Ymmp/mrFOHdSCZcYDpPS2MBTnnQfPZef+xbC4ef6KFECStA3gKHNhPy5Zvw6cymhIGR2EopyV+U6//qf11Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T16:26:22.536788Z"},"content_sha256":"dabd1a70578a0eafa45c85a0138deebad5831792f3b04f278613c4da46409126","schema_version":"1.0","event_id":"sha256:dabd1a70578a0eafa45c85a0138deebad5831792f3b04f278613c4da46409126"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:ZU7WD7IFNHMBQHHQ7RHGFHDKMT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"An LLM can Fool Itself: A Prompt-Based Adversarial Attack","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Di Wang, Jingfeng Zhang, Keyi Kong, Lizhen Cui, Mohan Kankanhalli, Ning Liu, Xilie Xu","submitted_at":"2023-10-20T08:16:46Z","abstract_excerpt":"The wide-ranging applications of large language models (LLMs), especially in safety-critical domains, necessitate the proper evaluation of the LLM's adversarial robustness. This paper proposes an efficient tool to audit the LLM's adversarial robustness via a prompt-based adversarial attack (PromptAttack). PromptAttack converts adversarial textual attacks into an attack prompt that can cause the victim LLM to output the adversarial sample to fool itself. The attack prompt is composed of three important components: (1) original input (OI) including the original sample and its ground-truth label,"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.13345","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.13345/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:03:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ICsLMeqWgn1S4XEfj8RM99i1pYJVJzHJuPOy2PB7ZkvZMSRqpNF3vmYqYftxuO60jhYs5rSzPMMBZe1z++ruBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T16:26:22.537266Z"},"content_sha256":"2d817ba47fef924c8f51f5e1980e3d6316007680c6f064e1dac59e32670fd3c0","schema_version":"1.0","event_id":"sha256:2d817ba47fef924c8f51f5e1980e3d6316007680c6f064e1dac59e32670fd3c0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZU7WD7IFNHMBQHHQ7RHGFHDKMT/bundle.json","state_url":"https://pith.science/pith/ZU7WD7IFNHMBQHHQ7RHGFHDKMT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZU7WD7IFNHMBQHHQ7RHGFHDKMT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-08T16:26:22Z","links":{"resolver":"https://pith.science/pith/ZU7WD7IFNHMBQHHQ7RHGFHDKMT","bundle":"https://pith.science/pith/ZU7WD7IFNHMBQHHQ7RHGFHDKMT/bundle.json","state":"https://pith.science/pith/ZU7WD7IFNHMBQHHQ7RHGFHDKMT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZU7WD7IFNHMBQHHQ7RHGFHDKMT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:ZU7WD7IFNHMBQHHQ7RHGFHDKMT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e19701720f0f617dff773a2e7313ea2a9b28d74e09c3c11a002f8eec0d4d4809","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-20T08:16:46Z","title_canon_sha256":"ae9df6fb0360230f5c0b7e6f3346cc49ed9b82bdcb4202659d4d37423d40001a"},"schema_version":"1.0","source":{"id":"2310.13345","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.13345","created_at":"2026-07-05T07:03:01Z"},{"alias_kind":"arxiv_version","alias_value":"2310.13345v1","created_at":"2026-07-05T07:03:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.13345","created_at":"2026-07-05T07:03:01Z"},{"alias_kind":"pith_short_12","alias_value":"ZU7WD7IFNHMB","created_at":"2026-07-05T07:03:01Z"},{"alias_kind":"pith_short_16","alias_value":"ZU7WD7IFNHMBQHHQ","created_at":"2026-07-05T07:03:01Z"},{"alias_kind":"pith_short_8","alias_value":"ZU7WD7IF","created_at":"2026-07-05T07:03:01Z"}],"graph_snapshots":[{"event_id":"sha256:2d817ba47fef924c8f51f5e1980e3d6316007680c6f064e1dac59e32670fd3c0","target":"graph","created_at":"2026-07-05T07:03:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.13345/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The wide-ranging applications of large language models (LLMs), especially in safety-critical domains, necessitate the proper evaluation of the LLM's adversarial robustness. This paper proposes an efficient tool to audit the LLM's adversarial robustness via a prompt-based adversarial attack (PromptAttack). PromptAttack converts adversarial textual attacks into an attack prompt that can cause the victim LLM to output the adversarial sample to fool itself. The attack prompt is composed of three important components: (1) original input (OI) including the original sample and its ground-truth label,","authors_text":"Di Wang, Jingfeng Zhang, Keyi Kong, Lizhen Cui, Mohan Kankanhalli, Ning Liu, Xilie Xu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-20T08:16:46Z","title":"An LLM can Fool Itself: A Prompt-Based Adversarial Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.13345","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:dabd1a70578a0eafa45c85a0138deebad5831792f3b04f278613c4da46409126","target":"record","created_at":"2026-07-05T07:03:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e19701720f0f617dff773a2e7313ea2a9b28d74e09c3c11a002f8eec0d4d4809","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-20T08:16:46Z","title_canon_sha256":"ae9df6fb0360230f5c0b7e6f3346cc49ed9b82bdcb4202659d4d37423d40001a"},"schema_version":"1.0","source":{"id":"2310.13345","kind":"arxiv","version":1}},"canonical_sha256":"cd3f61fd0569d8181cf0fc4e629c6a64e17d151a55bce2ee0a3e68ae4645cef6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cd3f61fd0569d8181cf0fc4e629c6a64e17d151a55bce2ee0a3e68ae4645cef6","first_computed_at":"2026-07-05T07:03:01.923625Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:03:01.923625Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"iQgpMfLriMEmtxJVdNZq9rEfCQ9Pjg2SAzX1HZ/Xoorxk8p4wAJSIbwRimjhW1KqOuYCIky7e29+BK/SmqRJAw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:03:01.924166Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.13345","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:dabd1a70578a0eafa45c85a0138deebad5831792f3b04f278613c4da46409126","sha256:2d817ba47fef924c8f51f5e1980e3d6316007680c6f064e1dac59e32670fd3c0"],"state_sha256":"335c6494fea0001fc0cf925ecb5ab4a58f23d4788b68e0bd4f278605f4dc1ed8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4NKvpcquPNeuIhT9IzU2nKnZeg/RbG6D3HGFgvPMyAo4NtohjYn4DK3FKO8rPiv0bRb1UnYY+5K6IMR5uN0KBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-08T16:26:22.540224Z","bundle_sha256":"08781b1126ed4f86d65d9536ec10f60c23e65922ad5fbe418664714c824cce74"}}