{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2021:DWCBNMMFIA4M2DX7RVLI2LZEAM","short_pith_number":"pith:DWCBNMMF","schema_version":"1.0","canonical_sha256":"1d8416b1854038cd0eff8d568d2f240301e1ec08b981e6135170e3d7d636d863","source":{"kind":"arxiv","id":"2103.09916","version":1},"attestation_state":"computed","paper":{"title":"Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap?","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Hai Li, Huanrui Yang, Jingyang Zhang, Kevin J Liang, Nathan Inkawhich, Yiran Chen","submitted_at":"2021-03-17T21:21:44Z","abstract_excerpt":"We design blackbox transfer-based targeted adversarial attacks for an environment where the attacker's source model and the target blackbox model may have disjoint label spaces and training datasets. This scenario significantly differs from the \"standard\" blackbox setting, and warrants a unique approach to the attacking process. Our methodology begins with the construction of a class correspondence matrix between the whitebox and blackbox label sets. During the online phase of the attack, we then leverage representations of highly related proxy classes from the whitebox distribution to fool th"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2103.09916","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-03-17T21:21:44Z","cross_cats_sorted":[],"title_canon_sha256":"3a23d18ad85a4c1d9906318b24a82053739bf1fd9c4f80eaa98e5197be853af7","abstract_canon_sha256":"0ba845d28a86aa88d7c06567ec4d14256de27e2022d90656560aedfb4d36f9ce"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:24:14.987955Z","signature_b64":"e622ykWERBROyIaJ99Gt5kWTf7ukImpD7PzqgMxOa0lNg0VSn7R7nGSvDhtiphnnjZLHbdakKUta4jlLFXjAAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1d8416b1854038cd0eff8d568d2f240301e1ec08b981e6135170e3d7d636d863","last_reissued_at":"2026-07-05T02:24:14.987548Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:24:14.987548Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap?","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Hai Li, Huanrui Yang, Jingyang Zhang, Kevin J Liang, Nathan Inkawhich, Yiran Chen","submitted_at":"2021-03-17T21:21:44Z","abstract_excerpt":"We design blackbox transfer-based targeted adversarial attacks for an environment where the attacker's source model and the target blackbox model may have disjoint label spaces and training datasets. This scenario significantly differs from the \"standard\" blackbox setting, and warrants a unique approach to the attacking process. Our methodology begins with the construction of a class correspondence matrix between the whitebox and blackbox label sets. During the online phase of the attack, we then leverage representations of highly related proxy classes from the whitebox distribution to fool th"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.09916","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2103.09916/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2103.09916","created_at":"2026-07-05T02:24:14.987630+00:00"},{"alias_kind":"arxiv_version","alias_value":"2103.09916v1","created_at":"2026-07-05T02:24:14.987630+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.09916","created_at":"2026-07-05T02:24:14.987630+00:00"},{"alias_kind":"pith_short_12","alias_value":"DWCBNMMFIA4M","created_at":"2026-07-05T02:24:14.987630+00:00"},{"alias_kind":"pith_short_16","alias_value":"DWCBNMMFIA4M2DX7","created_at":"2026-07-05T02:24:14.987630+00:00"},{"alias_kind":"pith_short_8","alias_value":"DWCBNMMF","created_at":"2026-07-05T02:24:14.987630+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/DWCBNMMFIA4M2DX7RVLI2LZEAM","json":"https://pith.science/pith/DWCBNMMFIA4M2DX7RVLI2LZEAM.json","graph_json":"https://pith.science/api/pith-number/DWCBNMMFIA4M2DX7RVLI2LZEAM/graph.json","events_json":"https://pith.science/api/pith-number/DWCBNMMFIA4M2DX7RVLI2LZEAM/events.json","paper":"https://pith.science/paper/DWCBNMMF"},"agent_actions":{"view_html":"https://pith.science/pith/DWCBNMMFIA4M2DX7RVLI2LZEAM","download_json":"https://pith.science/pith/DWCBNMMFIA4M2DX7RVLI2LZEAM.json","view_paper":"https://pith.science/paper/DWCBNMMF","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2103.09916&json=true","fetch_graph":"https://pith.science/api/pith-number/DWCBNMMFIA4M2DX7RVLI2LZEAM/graph.json","fetch_events":"https://pith.science/api/pith-number/DWCBNMMFIA4M2DX7RVLI2LZEAM/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/DWCBNMMFIA4M2DX7RVLI2LZEAM/action/timestamp_anchor","attest_storage":"https://pith.science/pith/DWCBNMMFIA4M2DX7RVLI2LZEAM/action/storage_attestation","attest_author":"https://pith.science/pith/DWCBNMMFIA4M2DX7RVLI2LZEAM/action/author_attestation","sign_citation":"https://pith.science/pith/DWCBNMMFIA4M2DX7RVLI2LZEAM/action/citation_signature","submit_replication":"https://pith.science/pith/DWCBNMMFIA4M2DX7RVLI2LZEAM/action/replication_record"}},"created_at":"2026-07-05T02:24:14.987630+00:00","updated_at":"2026-07-05T02:24:14.987630+00:00"}