{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:FLIEIUECVESBNADL5WTSQQF6VC","short_pith_number":"pith:FLIEIUEC","canonical_record":{"source":{"id":"1911.07140","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-17T03:10:49Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"7d76512651967f02150bb3f9204b1d772ce716bb877b58cc47a54c2396b5dfe4","abstract_canon_sha256":"4c397eb7244a53d219dc231d82ec6d3dadbf6087f7c5a4fd4e3c4685908c143d"},"schema_version":"1.0"},"canonical_sha256":"2ad0445082a92416806beda72840bea88a3aa93308b8c79ebdd931ed32ceee18","source":{"kind":"arxiv","id":"1911.07140","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.07140","created_at":"2026-07-05T00:29:41Z"},{"alias_kind":"arxiv_version","alias_value":"1911.07140v2","created_at":"2026-07-05T00:29:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.07140","created_at":"2026-07-05T00:29:41Z"},{"alias_kind":"pith_short_12","alias_value":"FLIEIUECVESB","created_at":"2026-07-05T00:29:41Z"},{"alias_kind":"pith_short_16","alias_value":"FLIEIUECVESBNADL","created_at":"2026-07-05T00:29:41Z"},{"alias_kind":"pith_short_8","alias_value":"FLIEIUEC","created_at":"2026-07-05T00:29:41Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:FLIEIUECVESBNADL5WTSQQF6VC","target":"record","payload":{"canonical_record":{"source":{"id":"1911.07140","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-17T03:10:49Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"7d76512651967f02150bb3f9204b1d772ce716bb877b58cc47a54c2396b5dfe4","abstract_canon_sha256":"4c397eb7244a53d219dc231d82ec6d3dadbf6087f7c5a4fd4e3c4685908c143d"},"schema_version":"1.0"},"canonical_sha256":"2ad0445082a92416806beda72840bea88a3aa93308b8c79ebdd931ed32ceee18","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:29:41.215914Z","signature_b64":"1DGNhBQ//tpB6eg4YujFLrE+S5IC+bxLvPiDcsibTJJA01W1a4tEX2tjeuAqVzYCDzWjgGivb5OUPdXvN6I1Dw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2ad0445082a92416806beda72840bea88a3aa93308b8c79ebdd931ed32ceee18","last_reissued_at":"2026-07-05T00:29:41.215441Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:29:41.215441Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1911.07140","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:29:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"t0lambiL5BsMc7P7uRjfxpWlHxUn9GbyoM+Y6WHh5lNzkCNDtciv6+3iqTb5rvzkd1LfGdaT5fwWdOLZX1f3DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T19:54:25.246717Z"},"content_sha256":"83243cecc34bc3c514aec466bbe16d31dd13136ad48ddb2ae8bc1c5fc23cc00d","schema_version":"1.0","event_id":"sha256:83243cecc34bc3c514aec466bbe16d31dd13136ad48ddb2ae8bc1c5fc23cc00d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:FLIEIUECVESBNADL5WTSQQF6VC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Black-Box Adversarial Attack with Transferable Model-based Embedding","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Tong Zhang, Zhichao Huang","submitted_at":"2019-11-17T03:10:49Z","abstract_excerpt":"We present a new method for black-box adversarial attack. Unlike previous methods that combined transfer-based and scored-based methods by using the gradient or initialization of a surrogate white-box model, this new method tries to learn a low-dimensional embedding using a pretrained model, and then performs efficient search within the embedding space to attack an unknown target network. The method produces adversarial perturbations with high level semantic patterns that are easily transferable. We show that this approach can greatly improve the query efficiency of black-box adversarial attac"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.07140","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1911.07140/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:29:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vK36ZZFjKETxrMII6pdpX6gDBm400cdmWQpfIukC+t85rkOyLgRwhbThctd9o+V7/ZzDxTB94JsB2sYijYWYBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T19:54:25.247605Z"},"content_sha256":"a2cc323c94e5c6c7de70b0f11fae422a66e777c81af6e244ffe45d140b1bcd5d","schema_version":"1.0","event_id":"sha256:a2cc323c94e5c6c7de70b0f11fae422a66e777c81af6e244ffe45d140b1bcd5d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FLIEIUECVESBNADL5WTSQQF6VC/bundle.json","state_url":"https://pith.science/pith/FLIEIUECVESBNADL5WTSQQF6VC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FLIEIUECVESBNADL5WTSQQF6VC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T19:54:25Z","links":{"resolver":"https://pith.science/pith/FLIEIUECVESBNADL5WTSQQF6VC","bundle":"https://pith.science/pith/FLIEIUECVESBNADL5WTSQQF6VC/bundle.json","state":"https://pith.science/pith/FLIEIUECVESBNADL5WTSQQF6VC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FLIEIUECVESBNADL5WTSQQF6VC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:FLIEIUECVESBNADL5WTSQQF6VC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4c397eb7244a53d219dc231d82ec6d3dadbf6087f7c5a4fd4e3c4685908c143d","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-17T03:10:49Z","title_canon_sha256":"7d76512651967f02150bb3f9204b1d772ce716bb877b58cc47a54c2396b5dfe4"},"schema_version":"1.0","source":{"id":"1911.07140","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.07140","created_at":"2026-07-05T00:29:41Z"},{"alias_kind":"arxiv_version","alias_value":"1911.07140v2","created_at":"2026-07-05T00:29:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.07140","created_at":"2026-07-05T00:29:41Z"},{"alias_kind":"pith_short_12","alias_value":"FLIEIUECVESB","created_at":"2026-07-05T00:29:41Z"},{"alias_kind":"pith_short_16","alias_value":"FLIEIUECVESBNADL","created_at":"2026-07-05T00:29:41Z"},{"alias_kind":"pith_short_8","alias_value":"FLIEIUEC","created_at":"2026-07-05T00:29:41Z"}],"graph_snapshots":[{"event_id":"sha256:a2cc323c94e5c6c7de70b0f11fae422a66e777c81af6e244ffe45d140b1bcd5d","target":"graph","created_at":"2026-07-05T00:29:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1911.07140/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We present a new method for black-box adversarial attack. Unlike previous methods that combined transfer-based and scored-based methods by using the gradient or initialization of a surrogate white-box model, this new method tries to learn a low-dimensional embedding using a pretrained model, and then performs efficient search within the embedding space to attack an unknown target network. The method produces adversarial perturbations with high level semantic patterns that are easily transferable. We show that this approach can greatly improve the query efficiency of black-box adversarial attac","authors_text":"Tong Zhang, Zhichao Huang","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-17T03:10:49Z","title":"Black-Box Adversarial Attack with Transferable Model-based Embedding"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.07140","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:83243cecc34bc3c514aec466bbe16d31dd13136ad48ddb2ae8bc1c5fc23cc00d","target":"record","created_at":"2026-07-05T00:29:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4c397eb7244a53d219dc231d82ec6d3dadbf6087f7c5a4fd4e3c4685908c143d","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-17T03:10:49Z","title_canon_sha256":"7d76512651967f02150bb3f9204b1d772ce716bb877b58cc47a54c2396b5dfe4"},"schema_version":"1.0","source":{"id":"1911.07140","kind":"arxiv","version":2}},"canonical_sha256":"2ad0445082a92416806beda72840bea88a3aa93308b8c79ebdd931ed32ceee18","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2ad0445082a92416806beda72840bea88a3aa93308b8c79ebdd931ed32ceee18","first_computed_at":"2026-07-05T00:29:41.215441Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:29:41.215441Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1DGNhBQ//tpB6eg4YujFLrE+S5IC+bxLvPiDcsibTJJA01W1a4tEX2tjeuAqVzYCDzWjgGivb5OUPdXvN6I1Dw==","signature_status":"signed_v1","signed_at":"2026-07-05T00:29:41.215914Z","signed_message":"canonical_sha256_bytes"},"source_id":"1911.07140","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:83243cecc34bc3c514aec466bbe16d31dd13136ad48ddb2ae8bc1c5fc23cc00d","sha256:a2cc323c94e5c6c7de70b0f11fae422a66e777c81af6e244ffe45d140b1bcd5d"],"state_sha256":"c550e0599a4113fa0770d8b200229857eb8a2f09d7a4edee5e26f89419395f50"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"z+TKG+AhDk61OEdDTGtI2WPTIYckH9SloiYAEzL7zet2gcWP5T4S8gD6K0ctgO4FcFdmTV/lSH3N1sTAXfx9AQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T19:54:25.256082Z","bundle_sha256":"df8ef44203da477f0d4c0e93e746b15b385282ae61929ae92ad62eb6fccf6cf1"}}