{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:HHSLDDUTKR7AIHSI2COMTDZGE3","short_pith_number":"pith:HHSLDDUT","canonical_record":{"source":{"id":"1811.11875","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-11-28T23:10:47Z","cross_cats_sorted":[],"title_canon_sha256":"372dd0c24f027a9549dd3c8b4eb7456d13f2caec3cbc1ed8cd5ad38142b7fc49","abstract_canon_sha256":"4859b0cfa853f57cf6ab89603ce84014c6771bedb708c6bc71f906a9ce3f6d4c"},"schema_version":"1.0"},"canonical_sha256":"39e4b18e93547e041e48d09cc98f2626d326952b65804ffc1c1ab3ff93ac685f","source":{"kind":"arxiv","id":"1811.11875","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1811.11875","created_at":"2026-05-17T23:59:37Z"},{"alias_kind":"arxiv_version","alias_value":"1811.11875v1","created_at":"2026-05-17T23:59:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1811.11875","created_at":"2026-05-17T23:59:37Z"},{"alias_kind":"pith_short_12","alias_value":"HHSLDDUTKR7A","created_at":"2026-05-18T12:32:28Z"},{"alias_kind":"pith_short_16","alias_value":"HHSLDDUTKR7AIHSI","created_at":"2026-05-18T12:32:28Z"},{"alias_kind":"pith_short_8","alias_value":"HHSLDDUT","created_at":"2026-05-18T12:32:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:HHSLDDUTKR7AIHSI2COMTDZGE3","target":"record","payload":{"canonical_record":{"source":{"id":"1811.11875","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-11-28T23:10:47Z","cross_cats_sorted":[],"title_canon_sha256":"372dd0c24f027a9549dd3c8b4eb7456d13f2caec3cbc1ed8cd5ad38142b7fc49","abstract_canon_sha256":"4859b0cfa853f57cf6ab89603ce84014c6771bedb708c6bc71f906a9ce3f6d4c"},"schema_version":"1.0"},"canonical_sha256":"39e4b18e93547e041e48d09cc98f2626d326952b65804ffc1c1ab3ff93ac685f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:59:37.336611Z","signature_b64":"SoQ5fHEHMC68QiXUpXa3tt/am88Q8IOf5qGI00Dr/vvWwiUsxPu9xuEmy29vByS5YRayoIobJWg6UJEy0Lq7DQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"39e4b18e93547e041e48d09cc98f2626d326952b65804ffc1c1ab3ff93ac685f","last_reissued_at":"2026-05-17T23:59:37.335756Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:59:37.335756Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1811.11875","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:59:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Dhq51ogfswb8LJO7/bVxQvasl1Cak0OFkbGu3ufUqAviis07og0xSBa2BQASwhRx36Fd/WeFnO7hpmRhBD1cAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-13T03:50:39.953923Z"},"content_sha256":"11e906fe6c7d79d99a4323a6c50d013af509f54c3d6ce6344ebbcc8c38f24f93","schema_version":"1.0","event_id":"sha256:11e906fe6c7d79d99a4323a6c50d013af509f54c3d6ce6344ebbcc8c38f24f93"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:HHSLDDUTKR7AIHSI2COMTDZGE3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Attacks for Optical Flow-Based Action Recognition Classifiers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Hai Li, Matthew Inkawhich, Nathan Inkawhich, Yiran Chen","submitted_at":"2018-11-28T23:10:47Z","abstract_excerpt":"The success of deep learning research has catapulted deep models into production systems that our society is becoming increasingly dependent on, especially in the image and video domains. However, recent work has shown that these largely uninterpretable models exhibit glaring security vulnerabilities in the presence of an adversary. In this work, we develop a powerful untargeted adversarial attack for action recognition systems in both white-box and black-box settings. Action recognition models differ from image-classification models in that their inputs contain a temporal dimension, which we "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1811.11875","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:59:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"88cWswhnfY2FYUlIoxCaXA0Mr8JvNI4bAMZrTlDHHnRXny5SSYK5bzHRFWaJSEK8Z6RqMZbw1tFGP1u7xFNIBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-13T03:50:39.954263Z"},"content_sha256":"407bcb2b6150f327bd4e319242a53a6fed682ccd4077c896f57a3356fbf1f6e9","schema_version":"1.0","event_id":"sha256:407bcb2b6150f327bd4e319242a53a6fed682ccd4077c896f57a3356fbf1f6e9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HHSLDDUTKR7AIHSI2COMTDZGE3/bundle.json","state_url":"https://pith.science/pith/HHSLDDUTKR7AIHSI2COMTDZGE3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HHSLDDUTKR7AIHSI2COMTDZGE3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-13T03:50:39Z","links":{"resolver":"https://pith.science/pith/HHSLDDUTKR7AIHSI2COMTDZGE3","bundle":"https://pith.science/pith/HHSLDDUTKR7AIHSI2COMTDZGE3/bundle.json","state":"https://pith.science/pith/HHSLDDUTKR7AIHSI2COMTDZGE3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HHSLDDUTKR7AIHSI2COMTDZGE3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:HHSLDDUTKR7AIHSI2COMTDZGE3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4859b0cfa853f57cf6ab89603ce84014c6771bedb708c6bc71f906a9ce3f6d4c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-11-28T23:10:47Z","title_canon_sha256":"372dd0c24f027a9549dd3c8b4eb7456d13f2caec3cbc1ed8cd5ad38142b7fc49"},"schema_version":"1.0","source":{"id":"1811.11875","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1811.11875","created_at":"2026-05-17T23:59:37Z"},{"alias_kind":"arxiv_version","alias_value":"1811.11875v1","created_at":"2026-05-17T23:59:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1811.11875","created_at":"2026-05-17T23:59:37Z"},{"alias_kind":"pith_short_12","alias_value":"HHSLDDUTKR7A","created_at":"2026-05-18T12:32:28Z"},{"alias_kind":"pith_short_16","alias_value":"HHSLDDUTKR7AIHSI","created_at":"2026-05-18T12:32:28Z"},{"alias_kind":"pith_short_8","alias_value":"HHSLDDUT","created_at":"2026-05-18T12:32:28Z"}],"graph_snapshots":[{"event_id":"sha256:407bcb2b6150f327bd4e319242a53a6fed682ccd4077c896f57a3356fbf1f6e9","target":"graph","created_at":"2026-05-17T23:59:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"The success of deep learning research has catapulted deep models into production systems that our society is becoming increasingly dependent on, especially in the image and video domains. However, recent work has shown that these largely uninterpretable models exhibit glaring security vulnerabilities in the presence of an adversary. In this work, we develop a powerful untargeted adversarial attack for action recognition systems in both white-box and black-box settings. Action recognition models differ from image-classification models in that their inputs contain a temporal dimension, which we ","authors_text":"Hai Li, Matthew Inkawhich, Nathan Inkawhich, Yiran Chen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-11-28T23:10:47Z","title":"Adversarial Attacks for Optical Flow-Based Action Recognition Classifiers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1811.11875","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:11e906fe6c7d79d99a4323a6c50d013af509f54c3d6ce6344ebbcc8c38f24f93","target":"record","created_at":"2026-05-17T23:59:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4859b0cfa853f57cf6ab89603ce84014c6771bedb708c6bc71f906a9ce3f6d4c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-11-28T23:10:47Z","title_canon_sha256":"372dd0c24f027a9549dd3c8b4eb7456d13f2caec3cbc1ed8cd5ad38142b7fc49"},"schema_version":"1.0","source":{"id":"1811.11875","kind":"arxiv","version":1}},"canonical_sha256":"39e4b18e93547e041e48d09cc98f2626d326952b65804ffc1c1ab3ff93ac685f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"39e4b18e93547e041e48d09cc98f2626d326952b65804ffc1c1ab3ff93ac685f","first_computed_at":"2026-05-17T23:59:37.335756Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:59:37.335756Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SoQ5fHEHMC68QiXUpXa3tt/am88Q8IOf5qGI00Dr/vvWwiUsxPu9xuEmy29vByS5YRayoIobJWg6UJEy0Lq7DQ==","signature_status":"signed_v1","signed_at":"2026-05-17T23:59:37.336611Z","signed_message":"canonical_sha256_bytes"},"source_id":"1811.11875","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:11e906fe6c7d79d99a4323a6c50d013af509f54c3d6ce6344ebbcc8c38f24f93","sha256:407bcb2b6150f327bd4e319242a53a6fed682ccd4077c896f57a3356fbf1f6e9"],"state_sha256":"e5287eef8f8429f9b770d981ce67732c5094322a02c5eb0f3f4794cb5f84e12c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZjHU1nAWPjGwV5gkfwJ2to6I3hRP+8AvRMwEDxydXIESGRHa0JHK9SI8jlMoCVo8T2uN9eIoX+wgWY5CLBXMDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-13T03:50:39.956719Z","bundle_sha256":"411ef0af524f4d1b4938762d6c108ce3739ae247183684941f4b5f64a057ff5b"}}