{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:YHMNLKEAOR56CICL7SJKDCKMCP","short_pith_number":"pith:YHMNLKEA","canonical_record":{"source":{"id":"2310.03166","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-04T21:20:44Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"5f766e19b42026aae026027bcafe6ab69c57f691b89913fa1f9146703e1ea9c5","abstract_canon_sha256":"a195469d9414d91dccf73880f5ae3c10911b2bd6a2b882c8f09dd9d9b846f3b5"},"schema_version":"1.0"},"canonical_sha256":"c1d8d5a880747be1204bfc92a1894c13eaf64d59b7a4548594fe57972c367c3c","source":{"kind":"arxiv","id":"2310.03166","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.03166","created_at":"2026-07-05T07:00:45Z"},{"alias_kind":"arxiv_version","alias_value":"2310.03166v2","created_at":"2026-07-05T07:00:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.03166","created_at":"2026-07-05T07:00:45Z"},{"alias_kind":"pith_short_12","alias_value":"YHMNLKEAOR56","created_at":"2026-07-05T07:00:45Z"},{"alias_kind":"pith_short_16","alias_value":"YHMNLKEAOR56CICL","created_at":"2026-07-05T07:00:45Z"},{"alias_kind":"pith_short_8","alias_value":"YHMNLKEA","created_at":"2026-07-05T07:00:45Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:YHMNLKEAOR56CICL7SJKDCKMCP","target":"record","payload":{"canonical_record":{"source":{"id":"2310.03166","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-04T21:20:44Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"5f766e19b42026aae026027bcafe6ab69c57f691b89913fa1f9146703e1ea9c5","abstract_canon_sha256":"a195469d9414d91dccf73880f5ae3c10911b2bd6a2b882c8f09dd9d9b846f3b5"},"schema_version":"1.0"},"canonical_sha256":"c1d8d5a880747be1204bfc92a1894c13eaf64d59b7a4548594fe57972c367c3c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:00:45.758908Z","signature_b64":"+67pLwNVL5oMyHEk7MunqvLZ7m64FyiHIrsN6c5qKl3t4IYoUsGKzHgSebbsSZ+PA0DulHj1M+h7lic1FAV4BA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c1d8d5a880747be1204bfc92a1894c13eaf64d59b7a4548594fe57972c367c3c","last_reissued_at":"2026-07-05T07:00:45.758495Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:00:45.758495Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.03166","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:00:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jjJDHgwE0n86+re1/TiGvn3ktxQbLm5cHU6vUflwiKkOVNwLXijYyxyz8O/7RrjfHY9svIu/PxKaS5v0HxD8Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T03:04:13.251232Z"},"content_sha256":"3e55cf49e608b7bc3557b329e804d5b575e4b222c80cbf33c4fca469e790da65","schema_version":"1.0","event_id":"sha256:3e55cf49e608b7bc3557b329e804d5b575e4b222c80cbf33c4fca469e790da65"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:YHMNLKEAOR56CICL7SJKDCKMCP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Raze to the Ground: Query-Efficient Adversarial HTML Attacks on Machine-Learning Phishing Webpage Detectors","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Battista Biggio, Biagio Montaruli, Davide Balzarotti, Luca Compagna, Luca Demetrio, Maura Pintor","submitted_at":"2023-10-04T21:20:44Z","abstract_excerpt":"Machine-learning phishing webpage detectors (ML-PWD) have been shown to suffer from adversarial manipulations of the HTML code of the input webpage. Nevertheless, the attacks recently proposed have demonstrated limited effectiveness due to their lack of optimizing the usage of the adopted manipulations, and they focus solely on specific elements of the HTML code. In this work, we overcome these limitations by first designing a novel set of fine-grained manipulations which allow to modify the HTML code of the input phishing webpage without compromising its maliciousness and visual appearance, i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.03166","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.03166/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:00:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XOrk2UbeTFxryzWn0kcV9MZ+al7YKK0wFO0iVAcUiwXrdSYta1aOf4pepNJwyAQL3PSPToVf+1vrEukLdub4DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T03:04:13.251839Z"},"content_sha256":"9c80d202ac4213322728eac0ac36228ef3a0389c3f29aae62fd9dd010ccdc5fc","schema_version":"1.0","event_id":"sha256:9c80d202ac4213322728eac0ac36228ef3a0389c3f29aae62fd9dd010ccdc5fc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YHMNLKEAOR56CICL7SJKDCKMCP/bundle.json","state_url":"https://pith.science/pith/YHMNLKEAOR56CICL7SJKDCKMCP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YHMNLKEAOR56CICL7SJKDCKMCP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T03:04:13Z","links":{"resolver":"https://pith.science/pith/YHMNLKEAOR56CICL7SJKDCKMCP","bundle":"https://pith.science/pith/YHMNLKEAOR56CICL7SJKDCKMCP/bundle.json","state":"https://pith.science/pith/YHMNLKEAOR56CICL7SJKDCKMCP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YHMNLKEAOR56CICL7SJKDCKMCP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:YHMNLKEAOR56CICL7SJKDCKMCP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a195469d9414d91dccf73880f5ae3c10911b2bd6a2b882c8f09dd9d9b846f3b5","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-04T21:20:44Z","title_canon_sha256":"5f766e19b42026aae026027bcafe6ab69c57f691b89913fa1f9146703e1ea9c5"},"schema_version":"1.0","source":{"id":"2310.03166","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.03166","created_at":"2026-07-05T07:00:45Z"},{"alias_kind":"arxiv_version","alias_value":"2310.03166v2","created_at":"2026-07-05T07:00:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.03166","created_at":"2026-07-05T07:00:45Z"},{"alias_kind":"pith_short_12","alias_value":"YHMNLKEAOR56","created_at":"2026-07-05T07:00:45Z"},{"alias_kind":"pith_short_16","alias_value":"YHMNLKEAOR56CICL","created_at":"2026-07-05T07:00:45Z"},{"alias_kind":"pith_short_8","alias_value":"YHMNLKEA","created_at":"2026-07-05T07:00:45Z"}],"graph_snapshots":[{"event_id":"sha256:9c80d202ac4213322728eac0ac36228ef3a0389c3f29aae62fd9dd010ccdc5fc","target":"graph","created_at":"2026-07-05T07:00:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.03166/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine-learning phishing webpage detectors (ML-PWD) have been shown to suffer from adversarial manipulations of the HTML code of the input webpage. Nevertheless, the attacks recently proposed have demonstrated limited effectiveness due to their lack of optimizing the usage of the adopted manipulations, and they focus solely on specific elements of the HTML code. In this work, we overcome these limitations by first designing a novel set of fine-grained manipulations which allow to modify the HTML code of the input phishing webpage without compromising its maliciousness and visual appearance, i","authors_text":"Battista Biggio, Biagio Montaruli, Davide Balzarotti, Luca Compagna, Luca Demetrio, Maura Pintor","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-04T21:20:44Z","title":"Raze to the Ground: Query-Efficient Adversarial HTML Attacks on Machine-Learning Phishing Webpage Detectors"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.03166","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3e55cf49e608b7bc3557b329e804d5b575e4b222c80cbf33c4fca469e790da65","target":"record","created_at":"2026-07-05T07:00:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a195469d9414d91dccf73880f5ae3c10911b2bd6a2b882c8f09dd9d9b846f3b5","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-04T21:20:44Z","title_canon_sha256":"5f766e19b42026aae026027bcafe6ab69c57f691b89913fa1f9146703e1ea9c5"},"schema_version":"1.0","source":{"id":"2310.03166","kind":"arxiv","version":2}},"canonical_sha256":"c1d8d5a880747be1204bfc92a1894c13eaf64d59b7a4548594fe57972c367c3c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c1d8d5a880747be1204bfc92a1894c13eaf64d59b7a4548594fe57972c367c3c","first_computed_at":"2026-07-05T07:00:45.758495Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:00:45.758495Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+67pLwNVL5oMyHEk7MunqvLZ7m64FyiHIrsN6c5qKl3t4IYoUsGKzHgSebbsSZ+PA0DulHj1M+h7lic1FAV4BA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:00:45.758908Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.03166","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3e55cf49e608b7bc3557b329e804d5b575e4b222c80cbf33c4fca469e790da65","sha256:9c80d202ac4213322728eac0ac36228ef3a0389c3f29aae62fd9dd010ccdc5fc"],"state_sha256":"b17de2249e240d3a0997696746408f1a9687a7de0d3750c2fb7ad2cc9c499dfc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PFE7g8czrQGhCHigAQ01tIWJiCo86uYcjnHZ6VbalQxzbWBBdbRwm7uhDR/MPtt5J9lcd62iJCRdsNiwSpuEBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T03:04:13.255330Z","bundle_sha256":"ee546572d5b9fef8852664e4802d19ddee42dc53a909eece0821efbd1beb0e7e"}}