{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:DAFQJVSC3AXNJSZ3DRI7MEXRJV","short_pith_number":"pith:DAFQJVSC","canonical_record":{"source":{"id":"2608.06674","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-08-07T00:42:25Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"facda5d9607a7458b591a090263cf10ba2aaee079def72f6e28b376bc086c13a","abstract_canon_sha256":"25a0bdc0c76f8fc62711912649cf48bbe9552dd29cd8f12b0f6bd7682b5c584b"},"schema_version":"1.0"},"canonical_sha256":"180b04d642d82ed4cb3b1c51f612f14d7a408f6576cd1dac3efc0fd902d2820f","source":{"kind":"arxiv","id":"2608.06674","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.06674","created_at":"2026-08-10T01:11:40Z"},{"alias_kind":"arxiv_version","alias_value":"2608.06674v1","created_at":"2026-08-10T01:11:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.06674","created_at":"2026-08-10T01:11:40Z"},{"alias_kind":"pith_short_12","alias_value":"DAFQJVSC3AXN","created_at":"2026-08-10T01:11:40Z"},{"alias_kind":"pith_short_16","alias_value":"DAFQJVSC3AXNJSZ3","created_at":"2026-08-10T01:11:40Z"},{"alias_kind":"pith_short_8","alias_value":"DAFQJVSC","created_at":"2026-08-10T01:11:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:DAFQJVSC3AXNJSZ3DRI7MEXRJV","target":"record","payload":{"canonical_record":{"source":{"id":"2608.06674","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-08-07T00:42:25Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"facda5d9607a7458b591a090263cf10ba2aaee079def72f6e28b376bc086c13a","abstract_canon_sha256":"25a0bdc0c76f8fc62711912649cf48bbe9552dd29cd8f12b0f6bd7682b5c584b"},"schema_version":"1.0"},"canonical_sha256":"180b04d642d82ed4cb3b1c51f612f14d7a408f6576cd1dac3efc0fd902d2820f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-10T01:11:40.493901Z","signature_b64":"7DjTIc7LcvxrajuQ4A9maVUyuZUPSP6VWEP0xohs8ofSK9UBFoEhonHwsvbgr9k47LS/bSOun9h0WgZ6KwuXCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"180b04d642d82ed4cb3b1c51f612f14d7a408f6576cd1dac3efc0fd902d2820f","last_reissued_at":"2026-08-10T01:11:40.491462Z","signature_status":"signed_v1","first_computed_at":"2026-08-10T01:11:40.491462Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.06674","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-10T01:11:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"K2UtOMvT8xYeJXLKyu49aWr3ryujlk8g5qABR2lp3UmzLb3mbUCK8z9CdoYTAYohouGA3BLsHg55SsNI/zjTCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T16:42:43.503991Z"},"content_sha256":"6c6df139c625d92d7b9c3690b931d984baa880ecd6cb8b81c659bb137ef03695","schema_version":"1.0","event_id":"sha256:6c6df139c625d92d7b9c3690b931d984baa880ecd6cb8b81c659bb137ef03695"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:DAFQJVSC3AXNJSZ3DRI7MEXRJV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Corrupting Attention: Evasion-Based Adversarial Attacks on Encoder Attention in Detection Transformers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"A V Subramanyam, Basura Fernando, Clinton Fookes, Harshala Gammulle, Ridma Jayasundara, Sanka Rasnayake, Shaheer Mohamed, Sridha Sridharan, Tharindu Fernando","submitted_at":"2026-08-07T00:42:25Z","abstract_excerpt":"Adversarial vulnerabilities remain a major concern for the safe deployment of neural networks, particularly in object detection, a core task embedded in many safety-critical systems. Detection transformers have emerged as leading object detectors, yet their adversarial robustness remains comparatively underexplored. Most existing attacks target the detection output rather than the attention mechanism that makes these models distinctive. In this paper, we introduce the first attack that directly optimizes an encoder-attention objective under an imperceptible, bounded $\\ell_\\infty$ perturbation."},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.06674","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.06674/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-10T01:11:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gLFGzFt/BDlzVEtNtI7kN9WEfTh7F85i7JNYMJ2TABTKwOhAxdlrL2uKYMmN6MnqMYPdNJChzEtdVD3/187gAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T16:42:43.504585Z"},"content_sha256":"a1d319e1358813ec16476beee36b82ae0a40be48e285f6dc1eab56fc4ef7661a","schema_version":"1.0","event_id":"sha256:a1d319e1358813ec16476beee36b82ae0a40be48e285f6dc1eab56fc4ef7661a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DAFQJVSC3AXNJSZ3DRI7MEXRJV/bundle.json","state_url":"https://pith.science/pith/DAFQJVSC3AXNJSZ3DRI7MEXRJV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DAFQJVSC3AXNJSZ3DRI7MEXRJV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T16:42:43Z","links":{"resolver":"https://pith.science/pith/DAFQJVSC3AXNJSZ3DRI7MEXRJV","bundle":"https://pith.science/pith/DAFQJVSC3AXNJSZ3DRI7MEXRJV/bundle.json","state":"https://pith.science/pith/DAFQJVSC3AXNJSZ3DRI7MEXRJV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DAFQJVSC3AXNJSZ3DRI7MEXRJV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:DAFQJVSC3AXNJSZ3DRI7MEXRJV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"25a0bdc0c76f8fc62711912649cf48bbe9552dd29cd8f12b0f6bd7682b5c584b","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-08-07T00:42:25Z","title_canon_sha256":"facda5d9607a7458b591a090263cf10ba2aaee079def72f6e28b376bc086c13a"},"schema_version":"1.0","source":{"id":"2608.06674","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.06674","created_at":"2026-08-10T01:11:40Z"},{"alias_kind":"arxiv_version","alias_value":"2608.06674v1","created_at":"2026-08-10T01:11:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.06674","created_at":"2026-08-10T01:11:40Z"},{"alias_kind":"pith_short_12","alias_value":"DAFQJVSC3AXN","created_at":"2026-08-10T01:11:40Z"},{"alias_kind":"pith_short_16","alias_value":"DAFQJVSC3AXNJSZ3","created_at":"2026-08-10T01:11:40Z"},{"alias_kind":"pith_short_8","alias_value":"DAFQJVSC","created_at":"2026-08-10T01:11:40Z"}],"graph_snapshots":[{"event_id":"sha256:a1d319e1358813ec16476beee36b82ae0a40be48e285f6dc1eab56fc4ef7661a","target":"graph","created_at":"2026-08-10T01:11:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.06674/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial vulnerabilities remain a major concern for the safe deployment of neural networks, particularly in object detection, a core task embedded in many safety-critical systems. Detection transformers have emerged as leading object detectors, yet their adversarial robustness remains comparatively underexplored. Most existing attacks target the detection output rather than the attention mechanism that makes these models distinctive. In this paper, we introduce the first attack that directly optimizes an encoder-attention objective under an imperceptible, bounded $\\ell_\\infty$ perturbation.","authors_text":"A V Subramanyam, Basura Fernando, Clinton Fookes, Harshala Gammulle, Ridma Jayasundara, Sanka Rasnayake, Shaheer Mohamed, Sridha Sridharan, Tharindu Fernando","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-08-07T00:42:25Z","title":"Corrupting Attention: Evasion-Based Adversarial Attacks on Encoder Attention in Detection Transformers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.06674","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6c6df139c625d92d7b9c3690b931d984baa880ecd6cb8b81c659bb137ef03695","target":"record","created_at":"2026-08-10T01:11:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"25a0bdc0c76f8fc62711912649cf48bbe9552dd29cd8f12b0f6bd7682b5c584b","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-08-07T00:42:25Z","title_canon_sha256":"facda5d9607a7458b591a090263cf10ba2aaee079def72f6e28b376bc086c13a"},"schema_version":"1.0","source":{"id":"2608.06674","kind":"arxiv","version":1}},"canonical_sha256":"180b04d642d82ed4cb3b1c51f612f14d7a408f6576cd1dac3efc0fd902d2820f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"180b04d642d82ed4cb3b1c51f612f14d7a408f6576cd1dac3efc0fd902d2820f","first_computed_at":"2026-08-10T01:11:40.491462Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-10T01:11:40.491462Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7DjTIc7LcvxrajuQ4A9maVUyuZUPSP6VWEP0xohs8ofSK9UBFoEhonHwsvbgr9k47LS/bSOun9h0WgZ6KwuXCw==","signature_status":"signed_v1","signed_at":"2026-08-10T01:11:40.493901Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.06674","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6c6df139c625d92d7b9c3690b931d984baa880ecd6cb8b81c659bb137ef03695","sha256:a1d319e1358813ec16476beee36b82ae0a40be48e285f6dc1eab56fc4ef7661a"],"state_sha256":"b41e9b58532daba65b688aa3cd98a6a124e74124f54098f8b8d04df49e3fe61b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TO/wMgMlZIVWpXtgfj2BgBaoekcndBOXJ1DHdEWwysET6ksWN2BmB65MsrZ9XGpOmR2oGg6FptfICMkcHiBPAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T16:42:43.509373Z","bundle_sha256":"40fef41cf01a0dfa5321d60db4e8398856daf44cd10e39f210ad161297118bcd"}}