{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:OKZ5QFNBNDOVO3K7NXHURWANSQ","short_pith_number":"pith:OKZ5QFNB","canonical_record":{"source":{"id":"2311.11753","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-20T13:28:42Z","cross_cats_sorted":[],"title_canon_sha256":"956cec7ea3b516a097505548b210460eacd86c08ab8ed9f9eed5609a9f3948ec","abstract_canon_sha256":"c4ab7bffec6f3b9008a260f5670656c2f0c8db4e9cdc2c737f39fa193322d4c1"},"schema_version":"1.0"},"canonical_sha256":"72b3d815a168dd576d5f6dcf48d80d940d5e3256a6237765bf5069cde454fa09","source":{"kind":"arxiv","id":"2311.11753","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.11753","created_at":"2026-07-05T07:14:38Z"},{"alias_kind":"arxiv_version","alias_value":"2311.11753v1","created_at":"2026-07-05T07:14:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.11753","created_at":"2026-07-05T07:14:38Z"},{"alias_kind":"pith_short_12","alias_value":"OKZ5QFNBNDOV","created_at":"2026-07-05T07:14:38Z"},{"alias_kind":"pith_short_16","alias_value":"OKZ5QFNBNDOVO3K7","created_at":"2026-07-05T07:14:38Z"},{"alias_kind":"pith_short_8","alias_value":"OKZ5QFNB","created_at":"2026-07-05T07:14:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:OKZ5QFNBNDOVO3K7NXHURWANSQ","target":"record","payload":{"canonical_record":{"source":{"id":"2311.11753","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-20T13:28:42Z","cross_cats_sorted":[],"title_canon_sha256":"956cec7ea3b516a097505548b210460eacd86c08ab8ed9f9eed5609a9f3948ec","abstract_canon_sha256":"c4ab7bffec6f3b9008a260f5670656c2f0c8db4e9cdc2c737f39fa193322d4c1"},"schema_version":"1.0"},"canonical_sha256":"72b3d815a168dd576d5f6dcf48d80d940d5e3256a6237765bf5069cde454fa09","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:14:38.501091Z","signature_b64":"Kc0cV1VpT8IBMAcXdS7jDR9DxGxqIILM26FACyHRAiXWQ2OF1e9gxnqHWiErBEjkuKQd30LCPtYt0g1i6q87CA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"72b3d815a168dd576d5f6dcf48d80d940d5e3256a6237765bf5069cde454fa09","last_reissued_at":"2026-07-05T07:14:38.500692Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:14:38.500692Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2311.11753","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:14:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ngLIQi5C+ktdp5qSeT00mMbVpUuhTBKVc+zrOsQdJz2bgWi1W50SzmOsFsNaE/wILQPTzvKFygiNs82yoehLCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T19:57:01.945205Z"},"content_sha256":"75f8ce644e7f03b9bf16564f817d357c5ab371cab662d486499f4334c9317ada","schema_version":"1.0","event_id":"sha256:75f8ce644e7f03b9bf16564f817d357c5ab371cab662d486499f4334c9317ada"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:OKZ5QFNBNDOVO3K7NXHURWANSQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"AdvGen: Physical Adversarial Attack on Face Presentation Attack Detection Systems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Anil K. Jain, Anoop M. Namboodiri, Sai Amrit Patnaik, Shivali Chansoriya","submitted_at":"2023-11-20T13:28:42Z","abstract_excerpt":"Evaluating the risk level of adversarial images is essential for safely deploying face authentication models in the real world. Popular approaches for physical-world attacks, such as print or replay attacks, suffer from some limitations, like including physical and geometrical artifacts. Recently, adversarial attacks have gained attraction, which try to digitally deceive the learning strategy of a recognition system using slight modifications to the captured image. While most previous research assumes that the adversarial image could be digitally fed into the authentication systems, this is no"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.11753","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.11753/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:14:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9aOS6j8WBrsxHbHXWQlZHHemGXLCYRKzvhRKdWb2hL3t2Lr5eo4SRFF54XoOqxAPYF/uBVoUb2XvvHZeU3awBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T19:57:01.945780Z"},"content_sha256":"3c2a9f68db10b045227e64b04a8dc615be218be439df4081a3d26650a84eb610","schema_version":"1.0","event_id":"sha256:3c2a9f68db10b045227e64b04a8dc615be218be439df4081a3d26650a84eb610"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OKZ5QFNBNDOVO3K7NXHURWANSQ/bundle.json","state_url":"https://pith.science/pith/OKZ5QFNBNDOVO3K7NXHURWANSQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OKZ5QFNBNDOVO3K7NXHURWANSQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T19:57:01Z","links":{"resolver":"https://pith.science/pith/OKZ5QFNBNDOVO3K7NXHURWANSQ","bundle":"https://pith.science/pith/OKZ5QFNBNDOVO3K7NXHURWANSQ/bundle.json","state":"https://pith.science/pith/OKZ5QFNBNDOVO3K7NXHURWANSQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OKZ5QFNBNDOVO3K7NXHURWANSQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:OKZ5QFNBNDOVO3K7NXHURWANSQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c4ab7bffec6f3b9008a260f5670656c2f0c8db4e9cdc2c737f39fa193322d4c1","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-20T13:28:42Z","title_canon_sha256":"956cec7ea3b516a097505548b210460eacd86c08ab8ed9f9eed5609a9f3948ec"},"schema_version":"1.0","source":{"id":"2311.11753","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.11753","created_at":"2026-07-05T07:14:38Z"},{"alias_kind":"arxiv_version","alias_value":"2311.11753v1","created_at":"2026-07-05T07:14:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.11753","created_at":"2026-07-05T07:14:38Z"},{"alias_kind":"pith_short_12","alias_value":"OKZ5QFNBNDOV","created_at":"2026-07-05T07:14:38Z"},{"alias_kind":"pith_short_16","alias_value":"OKZ5QFNBNDOVO3K7","created_at":"2026-07-05T07:14:38Z"},{"alias_kind":"pith_short_8","alias_value":"OKZ5QFNB","created_at":"2026-07-05T07:14:38Z"}],"graph_snapshots":[{"event_id":"sha256:3c2a9f68db10b045227e64b04a8dc615be218be439df4081a3d26650a84eb610","target":"graph","created_at":"2026-07-05T07:14:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.11753/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Evaluating the risk level of adversarial images is essential for safely deploying face authentication models in the real world. Popular approaches for physical-world attacks, such as print or replay attacks, suffer from some limitations, like including physical and geometrical artifacts. Recently, adversarial attacks have gained attraction, which try to digitally deceive the learning strategy of a recognition system using slight modifications to the captured image. While most previous research assumes that the adversarial image could be digitally fed into the authentication systems, this is no","authors_text":"Anil K. Jain, Anoop M. Namboodiri, Sai Amrit Patnaik, Shivali Chansoriya","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-20T13:28:42Z","title":"AdvGen: Physical Adversarial Attack on Face Presentation Attack Detection Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.11753","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:75f8ce644e7f03b9bf16564f817d357c5ab371cab662d486499f4334c9317ada","target":"record","created_at":"2026-07-05T07:14:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c4ab7bffec6f3b9008a260f5670656c2f0c8db4e9cdc2c737f39fa193322d4c1","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-20T13:28:42Z","title_canon_sha256":"956cec7ea3b516a097505548b210460eacd86c08ab8ed9f9eed5609a9f3948ec"},"schema_version":"1.0","source":{"id":"2311.11753","kind":"arxiv","version":1}},"canonical_sha256":"72b3d815a168dd576d5f6dcf48d80d940d5e3256a6237765bf5069cde454fa09","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"72b3d815a168dd576d5f6dcf48d80d940d5e3256a6237765bf5069cde454fa09","first_computed_at":"2026-07-05T07:14:38.500692Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:14:38.500692Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Kc0cV1VpT8IBMAcXdS7jDR9DxGxqIILM26FACyHRAiXWQ2OF1e9gxnqHWiErBEjkuKQd30LCPtYt0g1i6q87CA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:14:38.501091Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.11753","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:75f8ce644e7f03b9bf16564f817d357c5ab371cab662d486499f4334c9317ada","sha256:3c2a9f68db10b045227e64b04a8dc615be218be439df4081a3d26650a84eb610"],"state_sha256":"06cd4df2fd8f3905016b2b33fbf84174bee6814b0120c7242833a66cf49593f6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3k6a9NcgY4YtvsRAEMVY6pXLYGqqjawfqIF4EOoBoT13oC5TzUf+wpgUNrK1RMYCwvuRMJJ3k79H7OuATFtVDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T19:57:01.950697Z","bundle_sha256":"e88ff5aa58b02b6bdcfd94a80dc394a4cf88f6392f110c82316f2a53a25ac3a8"}}