{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:2OUKUJ36MRKUFVKT4VQRV524P5","short_pith_number":"pith:2OUKUJ36","canonical_record":{"source":{"id":"2104.09425","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-04-19T16:17:12Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"b76cafc86c2cd184df1f35d3abfb9f736dbf7cdd26fce010c4f6f07c0f7e3f8e","abstract_canon_sha256":"7ee4a7232eca21bc58aebc9a70d44bf0022fb1ae12f2f7acebe60a5ba2e82b1b"},"schema_version":"1.0"},"canonical_sha256":"d3a8aa277e645542d553e5611af75c7f71993914b82105976d1a35e5aaef6de9","source":{"kind":"arxiv","id":"2104.09425","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.09425","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"arxiv_version","alias_value":"2104.09425v3","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.09425","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"pith_short_12","alias_value":"2OUKUJ36MRKU","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"pith_short_16","alias_value":"2OUKUJ36MRKUFVKT","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"pith_short_8","alias_value":"2OUKUJ36","created_at":"2026-07-05T04:01:41Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:2OUKUJ36MRKUFVKT4VQRV524P5","target":"record","payload":{"canonical_record":{"source":{"id":"2104.09425","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-04-19T16:17:12Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"b76cafc86c2cd184df1f35d3abfb9f736dbf7cdd26fce010c4f6f07c0f7e3f8e","abstract_canon_sha256":"7ee4a7232eca21bc58aebc9a70d44bf0022fb1ae12f2f7acebe60a5ba2e82b1b"},"schema_version":"1.0"},"canonical_sha256":"d3a8aa277e645542d553e5611af75c7f71993914b82105976d1a35e5aaef6de9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:01:41.345480Z","signature_b64":"ZdO31v4YLALCMj4JPCYf9jEW/uKRFgVw2kRlBeXaoahUjy1bDWBkYLqBhluUkL/UH+aJ6DlTxElfUqr3dgVEDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d3a8aa277e645542d553e5611af75c7f71993914b82105976d1a35e5aaef6de9","last_reissued_at":"2026-07-05T04:01:41.345017Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:01:41.345017Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2104.09425","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:01:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qcOQmCcKKBe8YZ58n63nUjjzjxVUfwlXJA+JeNapr3XJHLx4lw+L4f3N5z6tkKsEp+aT5N+VLcCKeoI0jFvABQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T15:45:42.418642Z"},"content_sha256":"9ddb47d18296bc4cefd856e4a0159eb3a627118ba60c13e0a854c6b23d3ecf2a","schema_version":"1.0","event_id":"sha256:9ddb47d18296bc4cefd856e4a0159eb3a627118ba60c13e0a854c6b23d3ecf2a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:2OUKUJ36MRKUFVKT4VQRV524P5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Robust Learning Meets Generative Models: Can Proxy Distributions Improve Adversarial Robustness?","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Chong Xiang, Mung Chiang, Prateek Mittal, Saeed Mahloujifar, Sihui Dai, Tinashe Handina, Vikash Sehwag","submitted_at":"2021-04-19T16:17:12Z","abstract_excerpt":"While additional training data improves the robustness of deep neural networks against adversarial examples, it presents the challenge of curating a large number of specific real-world samples. We circumvent this challenge by using additional data from proxy distributions learned by advanced generative models. We first seek to formally understand the transfer of robustness from classifiers trained on proxy distributions to the real data distribution. We prove that the difference between the robustness of a classifier on the two distributions is upper bounded by the conditional Wasserstein dist"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.09425","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2104.09425/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:01:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oR6L45pR0gmgOgvzPzVIRDBks4xvPKxn29OOnOzssmjbe8Zv/mI5sQMIA42l13ZTOn1Wx2GX4zj2PMPaD582CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T15:45:42.419178Z"},"content_sha256":"fbcb349d3d5a8ef98090074aeababbdf330c97652dee502e788103ed21f5b61f","schema_version":"1.0","event_id":"sha256:fbcb349d3d5a8ef98090074aeababbdf330c97652dee502e788103ed21f5b61f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2OUKUJ36MRKUFVKT4VQRV524P5/bundle.json","state_url":"https://pith.science/pith/2OUKUJ36MRKUFVKT4VQRV524P5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2OUKUJ36MRKUFVKT4VQRV524P5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T15:45:42Z","links":{"resolver":"https://pith.science/pith/2OUKUJ36MRKUFVKT4VQRV524P5","bundle":"https://pith.science/pith/2OUKUJ36MRKUFVKT4VQRV524P5/bundle.json","state":"https://pith.science/pith/2OUKUJ36MRKUFVKT4VQRV524P5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2OUKUJ36MRKUFVKT4VQRV524P5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:2OUKUJ36MRKUFVKT4VQRV524P5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7ee4a7232eca21bc58aebc9a70d44bf0022fb1ae12f2f7acebe60a5ba2e82b1b","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-04-19T16:17:12Z","title_canon_sha256":"b76cafc86c2cd184df1f35d3abfb9f736dbf7cdd26fce010c4f6f07c0f7e3f8e"},"schema_version":"1.0","source":{"id":"2104.09425","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.09425","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"arxiv_version","alias_value":"2104.09425v3","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.09425","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"pith_short_12","alias_value":"2OUKUJ36MRKU","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"pith_short_16","alias_value":"2OUKUJ36MRKUFVKT","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"pith_short_8","alias_value":"2OUKUJ36","created_at":"2026-07-05T04:01:41Z"}],"graph_snapshots":[{"event_id":"sha256:fbcb349d3d5a8ef98090074aeababbdf330c97652dee502e788103ed21f5b61f","target":"graph","created_at":"2026-07-05T04:01:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2104.09425/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While additional training data improves the robustness of deep neural networks against adversarial examples, it presents the challenge of curating a large number of specific real-world samples. We circumvent this challenge by using additional data from proxy distributions learned by advanced generative models. We first seek to formally understand the transfer of robustness from classifiers trained on proxy distributions to the real data distribution. We prove that the difference between the robustness of a classifier on the two distributions is upper bounded by the conditional Wasserstein dist","authors_text":"Chong Xiang, Mung Chiang, Prateek Mittal, Saeed Mahloujifar, Sihui Dai, Tinashe Handina, Vikash Sehwag","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-04-19T16:17:12Z","title":"Robust Learning Meets Generative Models: Can Proxy Distributions Improve Adversarial Robustness?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.09425","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9ddb47d18296bc4cefd856e4a0159eb3a627118ba60c13e0a854c6b23d3ecf2a","target":"record","created_at":"2026-07-05T04:01:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7ee4a7232eca21bc58aebc9a70d44bf0022fb1ae12f2f7acebe60a5ba2e82b1b","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-04-19T16:17:12Z","title_canon_sha256":"b76cafc86c2cd184df1f35d3abfb9f736dbf7cdd26fce010c4f6f07c0f7e3f8e"},"schema_version":"1.0","source":{"id":"2104.09425","kind":"arxiv","version":3}},"canonical_sha256":"d3a8aa277e645542d553e5611af75c7f71993914b82105976d1a35e5aaef6de9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d3a8aa277e645542d553e5611af75c7f71993914b82105976d1a35e5aaef6de9","first_computed_at":"2026-07-05T04:01:41.345017Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:01:41.345017Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZdO31v4YLALCMj4JPCYf9jEW/uKRFgVw2kRlBeXaoahUjy1bDWBkYLqBhluUkL/UH+aJ6DlTxElfUqr3dgVEDg==","signature_status":"signed_v1","signed_at":"2026-07-05T04:01:41.345480Z","signed_message":"canonical_sha256_bytes"},"source_id":"2104.09425","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9ddb47d18296bc4cefd856e4a0159eb3a627118ba60c13e0a854c6b23d3ecf2a","sha256:fbcb349d3d5a8ef98090074aeababbdf330c97652dee502e788103ed21f5b61f"],"state_sha256":"a7a5567696c53ff93bffb1821f1fd9edaeddd162dacaf06dc11eb221ad39e874"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Bf+MrA8xRRUhMjPQy4Y/T7eKfqj2ynSOf2VtoqIMPo3jUjXtEAaUMcDbnbii3fiWaF1mHSNZeTsErAB0H0hvCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T15:45:42.424445Z","bundle_sha256":"34d5e7cb204f92fdd6002273ce496a90c8ef454b9e913a96e572b5dd15bc0522"}}