{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:2J5LWBXTYQLAPQSI67TYZ4YWRX","short_pith_number":"pith:2J5LWBXT","canonical_record":{"source":{"id":"2210.09852","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-10-18T13:34:16Z","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"title_canon_sha256":"94dc902c7273a9fa1cc258ae6f7d1890280fe623a1402d8d57be4472371d39b7","abstract_canon_sha256":"1dc5c77d7fe6b12e1fc0cb97e94c5a10281c34f4790c74d6ef7cb730f8164784"},"schema_version":"1.0"},"canonical_sha256":"d27abb06f3c41607c248f7e78cf3168dda642621f8f409d909b38a53af0b82b3","source":{"kind":"arxiv","id":"2210.09852","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.09852","created_at":"2026-07-05T05:08:00Z"},{"alias_kind":"arxiv_version","alias_value":"2210.09852v1","created_at":"2026-07-05T05:08:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.09852","created_at":"2026-07-05T05:08:00Z"},{"alias_kind":"pith_short_12","alias_value":"2J5LWBXTYQLA","created_at":"2026-07-05T05:08:00Z"},{"alias_kind":"pith_short_16","alias_value":"2J5LWBXTYQLAPQSI","created_at":"2026-07-05T05:08:00Z"},{"alias_kind":"pith_short_8","alias_value":"2J5LWBXT","created_at":"2026-07-05T05:08:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:2J5LWBXTYQLAPQSI67TYZ4YWRX","target":"record","payload":{"canonical_record":{"source":{"id":"2210.09852","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-10-18T13:34:16Z","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"title_canon_sha256":"94dc902c7273a9fa1cc258ae6f7d1890280fe623a1402d8d57be4472371d39b7","abstract_canon_sha256":"1dc5c77d7fe6b12e1fc0cb97e94c5a10281c34f4790c74d6ef7cb730f8164784"},"schema_version":"1.0"},"canonical_sha256":"d27abb06f3c41607c248f7e78cf3168dda642621f8f409d909b38a53af0b82b3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:08:00.167096Z","signature_b64":"i9yKoEUZ+CIJrgituLyMAOrdpyk3Qks00evvs+yBQcxS1oAr8VvuU/zNQA/OkId1FasF1EzlS5nFCM5KfWRaDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d27abb06f3c41607c248f7e78cf3168dda642621f8f409d909b38a53af0b82b3","last_reissued_at":"2026-07-05T05:08:00.166667Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:08:00.166667Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2210.09852","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:08:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"t1SDszBCNj7nE5mLozR+Pi4x03SRpVI4QIQ4aC+/tO+IEwZ/MsxAa7RqYQpizW/KSGUC0dwC33f9MU7TVr/jBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T17:56:06.606854Z"},"content_sha256":"79ecf4b32e484048379a9064a5798aafb0115075d9baf8b83c464b7134df6619","schema_version":"1.0","event_id":"sha256:79ecf4b32e484048379a9064a5798aafb0115075d9baf8b83c464b7134df6619"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:2J5LWBXTYQLAPQSI67TYZ4YWRX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Scaling Adversarial Training to Large Perturbation Bounds","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.CV","stat.ML"],"primary_cat":"cs.LG","authors_text":"Gaurang Sriramanan, R.Venkatesh Babu, Samyak Jain, Sravanti Addepalli","submitted_at":"2022-10-18T13:34:16Z","abstract_excerpt":"The vulnerability of Deep Neural Networks to Adversarial Attacks has fuelled research towards building robust models. While most Adversarial Training algorithms aim at defending attacks constrained within low magnitude Lp norm bounds, real-world adversaries are not limited by such constraints. In this work, we aim to achieve adversarial robustness within larger bounds, against perturbations that may be perceptible, but do not change human (or Oracle) prediction. The presence of images that flip Oracle predictions and those that do not makes this a challenging setting for adversarial robustness"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.09852","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2210.09852/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:08:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SBxktJ9s4uCj60wSoxmp7/6MFIZCenKmzWmedsX4dxPsaizra7OsIpdfBGIPE+Vyb9Jk3R3NP75FD/B/pFDVAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T17:56:06.607410Z"},"content_sha256":"56fe214690305e5efaf2a5ec4ea86c12c37363295800d485dda0885fc5812041","schema_version":"1.0","event_id":"sha256:56fe214690305e5efaf2a5ec4ea86c12c37363295800d485dda0885fc5812041"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2J5LWBXTYQLAPQSI67TYZ4YWRX/bundle.json","state_url":"https://pith.science/pith/2J5LWBXTYQLAPQSI67TYZ4YWRX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2J5LWBXTYQLAPQSI67TYZ4YWRX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T17:56:06Z","links":{"resolver":"https://pith.science/pith/2J5LWBXTYQLAPQSI67TYZ4YWRX","bundle":"https://pith.science/pith/2J5LWBXTYQLAPQSI67TYZ4YWRX/bundle.json","state":"https://pith.science/pith/2J5LWBXTYQLAPQSI67TYZ4YWRX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2J5LWBXTYQLAPQSI67TYZ4YWRX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:2J5LWBXTYQLAPQSI67TYZ4YWRX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1dc5c77d7fe6b12e1fc0cb97e94c5a10281c34f4790c74d6ef7cb730f8164784","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-10-18T13:34:16Z","title_canon_sha256":"94dc902c7273a9fa1cc258ae6f7d1890280fe623a1402d8d57be4472371d39b7"},"schema_version":"1.0","source":{"id":"2210.09852","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.09852","created_at":"2026-07-05T05:08:00Z"},{"alias_kind":"arxiv_version","alias_value":"2210.09852v1","created_at":"2026-07-05T05:08:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.09852","created_at":"2026-07-05T05:08:00Z"},{"alias_kind":"pith_short_12","alias_value":"2J5LWBXTYQLA","created_at":"2026-07-05T05:08:00Z"},{"alias_kind":"pith_short_16","alias_value":"2J5LWBXTYQLAPQSI","created_at":"2026-07-05T05:08:00Z"},{"alias_kind":"pith_short_8","alias_value":"2J5LWBXT","created_at":"2026-07-05T05:08:00Z"}],"graph_snapshots":[{"event_id":"sha256:56fe214690305e5efaf2a5ec4ea86c12c37363295800d485dda0885fc5812041","target":"graph","created_at":"2026-07-05T05:08:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.09852/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The vulnerability of Deep Neural Networks to Adversarial Attacks has fuelled research towards building robust models. While most Adversarial Training algorithms aim at defending attacks constrained within low magnitude Lp norm bounds, real-world adversaries are not limited by such constraints. In this work, we aim to achieve adversarial robustness within larger bounds, against perturbations that may be perceptible, but do not change human (or Oracle) prediction. The presence of images that flip Oracle predictions and those that do not makes this a challenging setting for adversarial robustness","authors_text":"Gaurang Sriramanan, R.Venkatesh Babu, Samyak Jain, Sravanti Addepalli","cross_cats":["cs.CR","cs.CV","stat.ML"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-10-18T13:34:16Z","title":"Scaling Adversarial Training to Large Perturbation Bounds"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.09852","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:79ecf4b32e484048379a9064a5798aafb0115075d9baf8b83c464b7134df6619","target":"record","created_at":"2026-07-05T05:08:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1dc5c77d7fe6b12e1fc0cb97e94c5a10281c34f4790c74d6ef7cb730f8164784","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-10-18T13:34:16Z","title_canon_sha256":"94dc902c7273a9fa1cc258ae6f7d1890280fe623a1402d8d57be4472371d39b7"},"schema_version":"1.0","source":{"id":"2210.09852","kind":"arxiv","version":1}},"canonical_sha256":"d27abb06f3c41607c248f7e78cf3168dda642621f8f409d909b38a53af0b82b3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d27abb06f3c41607c248f7e78cf3168dda642621f8f409d909b38a53af0b82b3","first_computed_at":"2026-07-05T05:08:00.166667Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:08:00.166667Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"i9yKoEUZ+CIJrgituLyMAOrdpyk3Qks00evvs+yBQcxS1oAr8VvuU/zNQA/OkId1FasF1EzlS5nFCM5KfWRaDw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:08:00.167096Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.09852","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:79ecf4b32e484048379a9064a5798aafb0115075d9baf8b83c464b7134df6619","sha256:56fe214690305e5efaf2a5ec4ea86c12c37363295800d485dda0885fc5812041"],"state_sha256":"e677b2e758b4dae6908f289b2f2b17b3ab62b94d7940697ea1a6af8d95c46f5e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rdWF8brNQLxORnFbL8RD4+04K3y5E+xVLAdt7jlxhriDtqWzHvrAGiuuNk2IbA3l5DCmQ/yAgMJdOFmJU3NiDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T17:56:06.613855Z","bundle_sha256":"dababa02442cca4c0760379bc6e44e3dc4cce40dd6f170b8f50a715312ccea3f"}}