{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:DWCBNMMFIA4M2DX7RVLI2LZEAM","short_pith_number":"pith:DWCBNMMF","canonical_record":{"source":{"id":"2103.09916","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-03-17T21:21:44Z","cross_cats_sorted":[],"title_canon_sha256":"3a23d18ad85a4c1d9906318b24a82053739bf1fd9c4f80eaa98e5197be853af7","abstract_canon_sha256":"0ba845d28a86aa88d7c06567ec4d14256de27e2022d90656560aedfb4d36f9ce"},"schema_version":"1.0"},"canonical_sha256":"1d8416b1854038cd0eff8d568d2f240301e1ec08b981e6135170e3d7d636d863","source":{"kind":"arxiv","id":"2103.09916","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.09916","created_at":"2026-07-05T02:24:14Z"},{"alias_kind":"arxiv_version","alias_value":"2103.09916v1","created_at":"2026-07-05T02:24:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.09916","created_at":"2026-07-05T02:24:14Z"},{"alias_kind":"pith_short_12","alias_value":"DWCBNMMFIA4M","created_at":"2026-07-05T02:24:14Z"},{"alias_kind":"pith_short_16","alias_value":"DWCBNMMFIA4M2DX7","created_at":"2026-07-05T02:24:14Z"},{"alias_kind":"pith_short_8","alias_value":"DWCBNMMF","created_at":"2026-07-05T02:24:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:DWCBNMMFIA4M2DX7RVLI2LZEAM","target":"record","payload":{"canonical_record":{"source":{"id":"2103.09916","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-03-17T21:21:44Z","cross_cats_sorted":[],"title_canon_sha256":"3a23d18ad85a4c1d9906318b24a82053739bf1fd9c4f80eaa98e5197be853af7","abstract_canon_sha256":"0ba845d28a86aa88d7c06567ec4d14256de27e2022d90656560aedfb4d36f9ce"},"schema_version":"1.0"},"canonical_sha256":"1d8416b1854038cd0eff8d568d2f240301e1ec08b981e6135170e3d7d636d863","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:24:14.987955Z","signature_b64":"e622ykWERBROyIaJ99Gt5kWTf7ukImpD7PzqgMxOa0lNg0VSn7R7nGSvDhtiphnnjZLHbdakKUta4jlLFXjAAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1d8416b1854038cd0eff8d568d2f240301e1ec08b981e6135170e3d7d636d863","last_reissued_at":"2026-07-05T02:24:14.987548Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:24:14.987548Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2103.09916","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:24:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vjPa+j1kBRJ/uhyOyLNIW9wHStN5iw2NUh2wPhx5B7U8HZriuJk7qlgPhZLOQX6qVIVrDTcVPEUfnIDbRyOQCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-12T16:43:57.506423Z"},"content_sha256":"1df59972643233237bcdaac94c2b08ffb54845b754f96154adf61a99ae536ad4","schema_version":"1.0","event_id":"sha256:1df59972643233237bcdaac94c2b08ffb54845b754f96154adf61a99ae536ad4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:DWCBNMMFIA4M2DX7RVLI2LZEAM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap?","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Hai Li, Huanrui Yang, Jingyang Zhang, Kevin J Liang, Nathan Inkawhich, Yiran Chen","submitted_at":"2021-03-17T21:21:44Z","abstract_excerpt":"We design blackbox transfer-based targeted adversarial attacks for an environment where the attacker's source model and the target blackbox model may have disjoint label spaces and training datasets. This scenario significantly differs from the \"standard\" blackbox setting, and warrants a unique approach to the attacking process. Our methodology begins with the construction of a class correspondence matrix between the whitebox and blackbox label sets. During the online phase of the attack, we then leverage representations of highly related proxy classes from the whitebox distribution to fool th"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.09916","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2103.09916/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:24:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LCVtyllbWyZbB7S1ErHTL8OHJDFaaMAtQODGunei94UMnoWaCM+oafagCKNNk1Ixqtuh7HjmBQL77C9bKf2fBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-12T16:43:57.506816Z"},"content_sha256":"2db24687cd9977ade67a1f0a7b459de0b04239a909f20ab774cd27ddfad5daec","schema_version":"1.0","event_id":"sha256:2db24687cd9977ade67a1f0a7b459de0b04239a909f20ab774cd27ddfad5daec"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DWCBNMMFIA4M2DX7RVLI2LZEAM/bundle.json","state_url":"https://pith.science/pith/DWCBNMMFIA4M2DX7RVLI2LZEAM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DWCBNMMFIA4M2DX7RVLI2LZEAM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-12T16:43:57Z","links":{"resolver":"https://pith.science/pith/DWCBNMMFIA4M2DX7RVLI2LZEAM","bundle":"https://pith.science/pith/DWCBNMMFIA4M2DX7RVLI2LZEAM/bundle.json","state":"https://pith.science/pith/DWCBNMMFIA4M2DX7RVLI2LZEAM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DWCBNMMFIA4M2DX7RVLI2LZEAM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:DWCBNMMFIA4M2DX7RVLI2LZEAM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0ba845d28a86aa88d7c06567ec4d14256de27e2022d90656560aedfb4d36f9ce","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-03-17T21:21:44Z","title_canon_sha256":"3a23d18ad85a4c1d9906318b24a82053739bf1fd9c4f80eaa98e5197be853af7"},"schema_version":"1.0","source":{"id":"2103.09916","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.09916","created_at":"2026-07-05T02:24:14Z"},{"alias_kind":"arxiv_version","alias_value":"2103.09916v1","created_at":"2026-07-05T02:24:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.09916","created_at":"2026-07-05T02:24:14Z"},{"alias_kind":"pith_short_12","alias_value":"DWCBNMMFIA4M","created_at":"2026-07-05T02:24:14Z"},{"alias_kind":"pith_short_16","alias_value":"DWCBNMMFIA4M2DX7","created_at":"2026-07-05T02:24:14Z"},{"alias_kind":"pith_short_8","alias_value":"DWCBNMMF","created_at":"2026-07-05T02:24:14Z"}],"graph_snapshots":[{"event_id":"sha256:2db24687cd9977ade67a1f0a7b459de0b04239a909f20ab774cd27ddfad5daec","target":"graph","created_at":"2026-07-05T02:24:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2103.09916/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We design blackbox transfer-based targeted adversarial attacks for an environment where the attacker's source model and the target blackbox model may have disjoint label spaces and training datasets. This scenario significantly differs from the \"standard\" blackbox setting, and warrants a unique approach to the attacking process. Our methodology begins with the construction of a class correspondence matrix between the whitebox and blackbox label sets. During the online phase of the attack, we then leverage representations of highly related proxy classes from the whitebox distribution to fool th","authors_text":"Hai Li, Huanrui Yang, Jingyang Zhang, Kevin J Liang, Nathan Inkawhich, Yiran Chen","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-03-17T21:21:44Z","title":"Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.09916","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1df59972643233237bcdaac94c2b08ffb54845b754f96154adf61a99ae536ad4","target":"record","created_at":"2026-07-05T02:24:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0ba845d28a86aa88d7c06567ec4d14256de27e2022d90656560aedfb4d36f9ce","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-03-17T21:21:44Z","title_canon_sha256":"3a23d18ad85a4c1d9906318b24a82053739bf1fd9c4f80eaa98e5197be853af7"},"schema_version":"1.0","source":{"id":"2103.09916","kind":"arxiv","version":1}},"canonical_sha256":"1d8416b1854038cd0eff8d568d2f240301e1ec08b981e6135170e3d7d636d863","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1d8416b1854038cd0eff8d568d2f240301e1ec08b981e6135170e3d7d636d863","first_computed_at":"2026-07-05T02:24:14.987548Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:24:14.987548Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"e622ykWERBROyIaJ99Gt5kWTf7ukImpD7PzqgMxOa0lNg0VSn7R7nGSvDhtiphnnjZLHbdakKUta4jlLFXjAAw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:24:14.987955Z","signed_message":"canonical_sha256_bytes"},"source_id":"2103.09916","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1df59972643233237bcdaac94c2b08ffb54845b754f96154adf61a99ae536ad4","sha256:2db24687cd9977ade67a1f0a7b459de0b04239a909f20ab774cd27ddfad5daec"],"state_sha256":"311ee53bf0081035a27928785b323330084ba1521a1798b6d44ac1752d640889"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yqfTatfoIDOjdzTnGB/eDpZcfpGE4OTJbhZ4JtM9wS1NHl8WCLVaEUQ/+v3Amf6ZZbCOrdirwR7EIoTmTtsDCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-12T16:43:57.510440Z","bundle_sha256":"73c5b6691c202b9f46a3ba83dc73b7e56f7a914edcaa96516181f21717a06dff"}}