{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:RTJ6I37543RGUJBKBCHDZZRNNN","short_pith_number":"pith:RTJ6I375","canonical_record":{"source":{"id":"1905.04016","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-05-10T09:00:53Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"3519162ee953bef8591128c5cb0dd1b1f4e5c727926389a80ddbff93f59bd4bf","abstract_canon_sha256":"57b9592a23fe1ab1cbb4bfb23da0e264f37dc735a2a886f0d204060203754712"},"schema_version":"1.0"},"canonical_sha256":"8cd3e46ffde6e26a242a088e3ce62d6b53cb4e6d3b467307d778923f9f2285c9","source":{"kind":"arxiv","id":"1905.04016","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1905.04016","created_at":"2026-05-17T23:46:34Z"},{"alias_kind":"arxiv_version","alias_value":"1905.04016v1","created_at":"2026-05-17T23:46:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1905.04016","created_at":"2026-05-17T23:46:34Z"},{"alias_kind":"pith_short_12","alias_value":"RTJ6I37543RG","created_at":"2026-05-18T12:33:27Z"},{"alias_kind":"pith_short_16","alias_value":"RTJ6I37543RGUJBK","created_at":"2026-05-18T12:33:27Z"},{"alias_kind":"pith_short_8","alias_value":"RTJ6I375","created_at":"2026-05-18T12:33:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:RTJ6I37543RGUJBKBCHDZZRNNN","target":"record","payload":{"canonical_record":{"source":{"id":"1905.04016","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-05-10T09:00:53Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"3519162ee953bef8591128c5cb0dd1b1f4e5c727926389a80ddbff93f59bd4bf","abstract_canon_sha256":"57b9592a23fe1ab1cbb4bfb23da0e264f37dc735a2a886f0d204060203754712"},"schema_version":"1.0"},"canonical_sha256":"8cd3e46ffde6e26a242a088e3ce62d6b53cb4e6d3b467307d778923f9f2285c9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:46:34.867188Z","signature_b64":"oUrjqLE9mZtm+2DT1PcyA8KiOjhJLHsriZbZoc2LMfR6QMxQNDLwumL4mg1bw0lwTp3Hu7o0WkNfK2LFIyhjAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8cd3e46ffde6e26a242a088e3ce62d6b53cb4e6d3b467307d778923f9f2285c9","last_reissued_at":"2026-05-17T23:46:34.866695Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:46:34.866695Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1905.04016","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:46:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"28XIY+eJm++KVDNSHyi10ZkKNSS7W/52AburobYTJHTIViFYBqVDa8a8qhnTBQxi/KRQ+LmYudd8o6q/Fns/Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T18:25:05.567500Z"},"content_sha256":"fd16912e55c5544c4e4b03d828c2f9865d19d680500dad30c10a81f3bd80e755","schema_version":"1.0","event_id":"sha256:fd16912e55c5544c4e4b03d828c2f9865d19d680500dad30c10a81f3bd80e755"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:RTJ6I37543RGUJBKBCHDZZRNNN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Exact Adversarial Attack to Image Captioning via Structured Output Learning with Latent Variables","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Baoyuan Wu, Fumin Shen, Heng Tao Shen, Wei Liu, Yanbo Fan, Yan Xu, Yong Zhang","submitted_at":"2019-05-10T09:00:53Z","abstract_excerpt":"In this work, we study the robustness of a CNN+RNN based image captioning system being subjected to adversarial noises. We propose to fool an image captioning system to generate some targeted partial captions for an image polluted by adversarial noises, even the targeted captions are totally irrelevant to the image content. A partial caption indicates that the words at some locations in this caption are observed, while words at other locations are not restricted.It is the first work to study exact adversarial attacks of targeted partial captions. Due to the sequential dependencies among words "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1905.04016","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:46:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dAs54l0WWijUX1cCt3WdyhfCp1eXc9a88Jy5Zc/YJY0dyvRUXhArGrQfUsY1XFD1e5ER3bAtGvSPqpcCEliqAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T18:25:05.568203Z"},"content_sha256":"3a1f4eef773e8a48e65d1a2d78a0a4adc878ac7ad51e11d5c0cb95fbc9859ce2","schema_version":"1.0","event_id":"sha256:3a1f4eef773e8a48e65d1a2d78a0a4adc878ac7ad51e11d5c0cb95fbc9859ce2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RTJ6I37543RGUJBKBCHDZZRNNN/bundle.json","state_url":"https://pith.science/pith/RTJ6I37543RGUJBKBCHDZZRNNN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RTJ6I37543RGUJBKBCHDZZRNNN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-30T18:25:05Z","links":{"resolver":"https://pith.science/pith/RTJ6I37543RGUJBKBCHDZZRNNN","bundle":"https://pith.science/pith/RTJ6I37543RGUJBKBCHDZZRNNN/bundle.json","state":"https://pith.science/pith/RTJ6I37543RGUJBKBCHDZZRNNN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RTJ6I37543RGUJBKBCHDZZRNNN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:RTJ6I37543RGUJBKBCHDZZRNNN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"57b9592a23fe1ab1cbb4bfb23da0e264f37dc735a2a886f0d204060203754712","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-05-10T09:00:53Z","title_canon_sha256":"3519162ee953bef8591128c5cb0dd1b1f4e5c727926389a80ddbff93f59bd4bf"},"schema_version":"1.0","source":{"id":"1905.04016","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1905.04016","created_at":"2026-05-17T23:46:34Z"},{"alias_kind":"arxiv_version","alias_value":"1905.04016v1","created_at":"2026-05-17T23:46:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1905.04016","created_at":"2026-05-17T23:46:34Z"},{"alias_kind":"pith_short_12","alias_value":"RTJ6I37543RG","created_at":"2026-05-18T12:33:27Z"},{"alias_kind":"pith_short_16","alias_value":"RTJ6I37543RGUJBK","created_at":"2026-05-18T12:33:27Z"},{"alias_kind":"pith_short_8","alias_value":"RTJ6I375","created_at":"2026-05-18T12:33:27Z"}],"graph_snapshots":[{"event_id":"sha256:3a1f4eef773e8a48e65d1a2d78a0a4adc878ac7ad51e11d5c0cb95fbc9859ce2","target":"graph","created_at":"2026-05-17T23:46:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"In this work, we study the robustness of a CNN+RNN based image captioning system being subjected to adversarial noises. We propose to fool an image captioning system to generate some targeted partial captions for an image polluted by adversarial noises, even the targeted captions are totally irrelevant to the image content. A partial caption indicates that the words at some locations in this caption are observed, while words at other locations are not restricted.It is the first work to study exact adversarial attacks of targeted partial captions. Due to the sequential dependencies among words ","authors_text":"Baoyuan Wu, Fumin Shen, Heng Tao Shen, Wei Liu, Yanbo Fan, Yan Xu, Yong Zhang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-05-10T09:00:53Z","title":"Exact Adversarial Attack to Image Captioning via Structured Output Learning with Latent Variables"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1905.04016","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fd16912e55c5544c4e4b03d828c2f9865d19d680500dad30c10a81f3bd80e755","target":"record","created_at":"2026-05-17T23:46:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"57b9592a23fe1ab1cbb4bfb23da0e264f37dc735a2a886f0d204060203754712","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-05-10T09:00:53Z","title_canon_sha256":"3519162ee953bef8591128c5cb0dd1b1f4e5c727926389a80ddbff93f59bd4bf"},"schema_version":"1.0","source":{"id":"1905.04016","kind":"arxiv","version":1}},"canonical_sha256":"8cd3e46ffde6e26a242a088e3ce62d6b53cb4e6d3b467307d778923f9f2285c9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8cd3e46ffde6e26a242a088e3ce62d6b53cb4e6d3b467307d778923f9f2285c9","first_computed_at":"2026-05-17T23:46:34.866695Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:46:34.866695Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"oUrjqLE9mZtm+2DT1PcyA8KiOjhJLHsriZbZoc2LMfR6QMxQNDLwumL4mg1bw0lwTp3Hu7o0WkNfK2LFIyhjAQ==","signature_status":"signed_v1","signed_at":"2026-05-17T23:46:34.867188Z","signed_message":"canonical_sha256_bytes"},"source_id":"1905.04016","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fd16912e55c5544c4e4b03d828c2f9865d19d680500dad30c10a81f3bd80e755","sha256:3a1f4eef773e8a48e65d1a2d78a0a4adc878ac7ad51e11d5c0cb95fbc9859ce2"],"state_sha256":"78a06b0390b70860bde0ca1bd35ad74ee4621fc116450cef137094a7b0e24fe0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"j8SHlIRAFTJmp0VplrT5O8eQ0p1ySLxV3coiAA8ZF6CBZZwYtkharzdG2n97knJkCI0/wlvEX8Zev/Tdv7J6CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-30T18:25:05.571890Z","bundle_sha256":"9d55e3fe700c3b21f5128b15f380ceb1a911b1c6861975adb16821403e4e179c"}}