{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2024:G3DC7F6FJTU7SWDEGNW4KDM3B6","short_pith_number":"pith:G3DC7F6F","schema_version":"1.0","canonical_sha256":"36c62f97c54ce9f95864336dc50d9b0f88ff90df968faff4f8ae4263454db862","source":{"kind":"arxiv","id":"2410.04682","version":3},"attestation_state":"computed","paper":{"title":"On the Adversarial Risk of Test Time Adaptation: An Investigation into Realistic Test-Time Data Poisoning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.LG","authors_text":"Chuan-Sheng Foo, Kui Jia, Nanqing Liu, Xulei Yang, Xun Xu, Yongyi Su, Yushu Li","submitted_at":"2024-10-07T01:29:19Z","abstract_excerpt":"Test-time adaptation (TTA) updates the model weights during the inference stage using testing data to enhance generalization. However, this practice exposes TTA to adversarial risks. Existing studies have shown that when TTA is updated with crafted adversarial test samples, also known as test-time poisoned data, the performance on benign samples can deteriorate. Nonetheless, the perceived adversarial risk may be overstated if the poisoned data is generated under overly strong assumptions. In this work, we first review realistic assumptions for test-time data poisoning, including white-box vers"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2410.04682","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-07T01:29:19Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"e8ae12314f580eb0da670fb5ae15f62f4dca47660cc36fcf04a67d01b3d89cd1","abstract_canon_sha256":"bb87b75d04c5deef803759e22f5d174c9f25ea9c66eecb48d20fd7eaa836fe62"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:21:24.170872Z","signature_b64":"FS3OZApUDPfKb8KaV+50hpvcowx1r2rpfF+1whhHg1xVnOsgOmz86BE+0PJGYgfsS7VbmFIO2vhWlew1W0tqAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"36c62f97c54ce9f95864336dc50d9b0f88ff90df968faff4f8ae4263454db862","last_reissued_at":"2026-07-05T10:21:24.170324Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:21:24.170324Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"On the Adversarial Risk of Test Time Adaptation: An Investigation into Realistic Test-Time Data Poisoning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.LG","authors_text":"Chuan-Sheng Foo, Kui Jia, Nanqing Liu, Xulei Yang, Xun Xu, Yongyi Su, Yushu Li","submitted_at":"2024-10-07T01:29:19Z","abstract_excerpt":"Test-time adaptation (TTA) updates the model weights during the inference stage using testing data to enhance generalization. However, this practice exposes TTA to adversarial risks. Existing studies have shown that when TTA is updated with crafted adversarial test samples, also known as test-time poisoned data, the performance on benign samples can deteriorate. Nonetheless, the perceived adversarial risk may be overstated if the poisoned data is generated under overly strong assumptions. In this work, we first review realistic assumptions for test-time data poisoning, including white-box vers"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.04682","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.04682/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2410.04682","created_at":"2026-07-05T10:21:24.170388+00:00"},{"alias_kind":"arxiv_version","alias_value":"2410.04682v3","created_at":"2026-07-05T10:21:24.170388+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.04682","created_at":"2026-07-05T10:21:24.170388+00:00"},{"alias_kind":"pith_short_12","alias_value":"G3DC7F6FJTU7","created_at":"2026-07-05T10:21:24.170388+00:00"},{"alias_kind":"pith_short_16","alias_value":"G3DC7F6FJTU7SWDE","created_at":"2026-07-05T10:21:24.170388+00:00"},{"alias_kind":"pith_short_8","alias_value":"G3DC7F6F","created_at":"2026-07-05T10:21:24.170388+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":0,"sample":[{"citing_arxiv_id":"2605.23411","citing_title":"Sample-wise Targeted Adversarial Attacks on Test-time Adaptation","ref_index":42,"is_internal_anchor":false}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/G3DC7F6FJTU7SWDEGNW4KDM3B6","json":"https://pith.science/pith/G3DC7F6FJTU7SWDEGNW4KDM3B6.json","graph_json":"https://pith.science/api/pith-number/G3DC7F6FJTU7SWDEGNW4KDM3B6/graph.json","events_json":"https://pith.science/api/pith-number/G3DC7F6FJTU7SWDEGNW4KDM3B6/events.json","paper":"https://pith.science/paper/G3DC7F6F"},"agent_actions":{"view_html":"https://pith.science/pith/G3DC7F6FJTU7SWDEGNW4KDM3B6","download_json":"https://pith.science/pith/G3DC7F6FJTU7SWDEGNW4KDM3B6.json","view_paper":"https://pith.science/paper/G3DC7F6F","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2410.04682&json=true","fetch_graph":"https://pith.science/api/pith-number/G3DC7F6FJTU7SWDEGNW4KDM3B6/graph.json","fetch_events":"https://pith.science/api/pith-number/G3DC7F6FJTU7SWDEGNW4KDM3B6/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/G3DC7F6FJTU7SWDEGNW4KDM3B6/action/timestamp_anchor","attest_storage":"https://pith.science/pith/G3DC7F6FJTU7SWDEGNW4KDM3B6/action/storage_attestation","attest_author":"https://pith.science/pith/G3DC7F6FJTU7SWDEGNW4KDM3B6/action/author_attestation","sign_citation":"https://pith.science/pith/G3DC7F6FJTU7SWDEGNW4KDM3B6/action/citation_signature","submit_replication":"https://pith.science/pith/G3DC7F6FJTU7SWDEGNW4KDM3B6/action/replication_record"}},"created_at":"2026-07-05T10:21:24.170388+00:00","updated_at":"2026-07-05T10:21:24.170388+00:00"}