{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:KWM3EUV6TZ76LJ43C2GSIBGWH4","short_pith_number":"pith:KWM3EUV6","canonical_record":{"source":{"id":"2104.10868","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-04-22T05:10:55Z","cross_cats_sorted":[],"title_canon_sha256":"64e21e88c214c0174eb2d66405f184a62dc5cf2227c95b5296889dc66bdc9b47","abstract_canon_sha256":"8a64c6c9eed1ac44900766f44f33df269b98e21714c71d3b66d0bcf7a4f2e19c"},"schema_version":"1.0"},"canonical_sha256":"5599b252be9e7fe5a79b168d2404d63f255a3d0ea8f89699a2aac2eb8be28a50","source":{"kind":"arxiv","id":"2104.10868","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.10868","created_at":"2026-07-05T03:01:24Z"},{"alias_kind":"arxiv_version","alias_value":"2104.10868v3","created_at":"2026-07-05T03:01:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.10868","created_at":"2026-07-05T03:01:24Z"},{"alias_kind":"pith_short_12","alias_value":"KWM3EUV6TZ76","created_at":"2026-07-05T03:01:24Z"},{"alias_kind":"pith_short_16","alias_value":"KWM3EUV6TZ76LJ43","created_at":"2026-07-05T03:01:24Z"},{"alias_kind":"pith_short_8","alias_value":"KWM3EUV6","created_at":"2026-07-05T03:01:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:KWM3EUV6TZ76LJ43C2GSIBGWH4","target":"record","payload":{"canonical_record":{"source":{"id":"2104.10868","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-04-22T05:10:55Z","cross_cats_sorted":[],"title_canon_sha256":"64e21e88c214c0174eb2d66405f184a62dc5cf2227c95b5296889dc66bdc9b47","abstract_canon_sha256":"8a64c6c9eed1ac44900766f44f33df269b98e21714c71d3b66d0bcf7a4f2e19c"},"schema_version":"1.0"},"canonical_sha256":"5599b252be9e7fe5a79b168d2404d63f255a3d0ea8f89699a2aac2eb8be28a50","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:01:24.086653Z","signature_b64":"QWE02WUhs8AuSBUac8n7jipcmoof4Gqp6fnKiNyfhsyk8lkY9hdjvUefPW4RnKMK58kPQyoryoNV9eFIGy9vDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5599b252be9e7fe5a79b168d2404d63f255a3d0ea8f89699a2aac2eb8be28a50","last_reissued_at":"2026-07-05T03:01:24.086303Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:01:24.086303Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2104.10868","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:01:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RJM/wX+ZN2d2fEU0w3xjBq2Sxh9kxK1WCGA2IToWjEjQejmS/uobtqBW9o+rMbxcfaUzh1D8hgW0vAygXAmJDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T03:54:20.401487Z"},"content_sha256":"1b1c7ac614386a5c55413f5c5f2e4392a369e8a3c33aaa4b584f2403b8ba0f61","schema_version":"1.0","event_id":"sha256:1b1c7ac614386a5c55413f5c5f2e4392a369e8a3c33aaa4b584f2403b8ba0f61"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:KWM3EUV6TZ76LJ43C2GSIBGWH4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards Adversarial Patch Analysis and Certified Defense against Crowd Counting","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Ang Li, Binghui Wang, Pan Zhou, Qiming Wu, Xiaoqing Ye, Zhikang Zou","submitted_at":"2021-04-22T05:10:55Z","abstract_excerpt":"Crowd counting has drawn much attention due to its importance in safety-critical surveillance systems. Especially, deep neural network (DNN) methods have significantly reduced estimation errors for crowd counting missions. Recent studies have demonstrated that DNNs are vulnerable to adversarial attacks, i.e., normal images with human-imperceptible perturbations could mislead DNNs to make false predictions. In this work, we propose a robust attack strategy called Adversarial Patch Attack with Momentum (APAM) to systematically evaluate the robustness of crowd counting models, where the attacker'"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.10868","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2104.10868/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:01:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"m6pjwmGapqEKtOJScqbYTOUY645I20F4IfkcbHaV9VbCbtVUzyhK0LtasNvREtd/6JZwdvzjD/qArd+zYavgDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T03:54:20.401859Z"},"content_sha256":"d66525f2cca3f134439ccc8d3e8607bd5947d8c0ee7aa77dddc4e61b095dd453","schema_version":"1.0","event_id":"sha256:d66525f2cca3f134439ccc8d3e8607bd5947d8c0ee7aa77dddc4e61b095dd453"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KWM3EUV6TZ76LJ43C2GSIBGWH4/bundle.json","state_url":"https://pith.science/pith/KWM3EUV6TZ76LJ43C2GSIBGWH4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KWM3EUV6TZ76LJ43C2GSIBGWH4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T03:54:20Z","links":{"resolver":"https://pith.science/pith/KWM3EUV6TZ76LJ43C2GSIBGWH4","bundle":"https://pith.science/pith/KWM3EUV6TZ76LJ43C2GSIBGWH4/bundle.json","state":"https://pith.science/pith/KWM3EUV6TZ76LJ43C2GSIBGWH4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KWM3EUV6TZ76LJ43C2GSIBGWH4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:KWM3EUV6TZ76LJ43C2GSIBGWH4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8a64c6c9eed1ac44900766f44f33df269b98e21714c71d3b66d0bcf7a4f2e19c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-04-22T05:10:55Z","title_canon_sha256":"64e21e88c214c0174eb2d66405f184a62dc5cf2227c95b5296889dc66bdc9b47"},"schema_version":"1.0","source":{"id":"2104.10868","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.10868","created_at":"2026-07-05T03:01:24Z"},{"alias_kind":"arxiv_version","alias_value":"2104.10868v3","created_at":"2026-07-05T03:01:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.10868","created_at":"2026-07-05T03:01:24Z"},{"alias_kind":"pith_short_12","alias_value":"KWM3EUV6TZ76","created_at":"2026-07-05T03:01:24Z"},{"alias_kind":"pith_short_16","alias_value":"KWM3EUV6TZ76LJ43","created_at":"2026-07-05T03:01:24Z"},{"alias_kind":"pith_short_8","alias_value":"KWM3EUV6","created_at":"2026-07-05T03:01:24Z"}],"graph_snapshots":[{"event_id":"sha256:d66525f2cca3f134439ccc8d3e8607bd5947d8c0ee7aa77dddc4e61b095dd453","target":"graph","created_at":"2026-07-05T03:01:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2104.10868/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Crowd counting has drawn much attention due to its importance in safety-critical surveillance systems. Especially, deep neural network (DNN) methods have significantly reduced estimation errors for crowd counting missions. Recent studies have demonstrated that DNNs are vulnerable to adversarial attacks, i.e., normal images with human-imperceptible perturbations could mislead DNNs to make false predictions. In this work, we propose a robust attack strategy called Adversarial Patch Attack with Momentum (APAM) to systematically evaluate the robustness of crowd counting models, where the attacker'","authors_text":"Ang Li, Binghui Wang, Pan Zhou, Qiming Wu, Xiaoqing Ye, Zhikang Zou","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-04-22T05:10:55Z","title":"Towards Adversarial Patch Analysis and Certified Defense against Crowd Counting"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.10868","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1b1c7ac614386a5c55413f5c5f2e4392a369e8a3c33aaa4b584f2403b8ba0f61","target":"record","created_at":"2026-07-05T03:01:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8a64c6c9eed1ac44900766f44f33df269b98e21714c71d3b66d0bcf7a4f2e19c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-04-22T05:10:55Z","title_canon_sha256":"64e21e88c214c0174eb2d66405f184a62dc5cf2227c95b5296889dc66bdc9b47"},"schema_version":"1.0","source":{"id":"2104.10868","kind":"arxiv","version":3}},"canonical_sha256":"5599b252be9e7fe5a79b168d2404d63f255a3d0ea8f89699a2aac2eb8be28a50","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5599b252be9e7fe5a79b168d2404d63f255a3d0ea8f89699a2aac2eb8be28a50","first_computed_at":"2026-07-05T03:01:24.086303Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:01:24.086303Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"QWE02WUhs8AuSBUac8n7jipcmoof4Gqp6fnKiNyfhsyk8lkY9hdjvUefPW4RnKMK58kPQyoryoNV9eFIGy9vDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:01:24.086653Z","signed_message":"canonical_sha256_bytes"},"source_id":"2104.10868","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1b1c7ac614386a5c55413f5c5f2e4392a369e8a3c33aaa4b584f2403b8ba0f61","sha256:d66525f2cca3f134439ccc8d3e8607bd5947d8c0ee7aa77dddc4e61b095dd453"],"state_sha256":"44a2c0348157a7baf4f804388b22029e9995a3f35f5b54ecaa2a230af1b52e77"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iKJADtjrxcl2GjNnmZP4FbVFl4aT+6pV5maUWL3e8mBeDuHp9NFX9SHqXJmXEq/nrm9CsGgoL3bQWv/OPR7EDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T03:54:20.403789Z","bundle_sha256":"fd66965603684bc14f1f2d0ed62eb6c85b85f1e5b06aebb38b431c635cb0d90a"}}