{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:2RNNJLJFNIJ5OHUS2D4DHEJV25","short_pith_number":"pith:2RNNJLJF","canonical_record":{"source":{"id":"2107.07043","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-09T12:12:36Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"caa21c628dec870f63f6f9b40357acfa39bc7673b0bcdc8a9fc2640c0b4aa665","abstract_canon_sha256":"43a19de64d63b6433068c5c0363bb715536b8e07df239521f8ded2094ab03970"},"schema_version":"1.0"},"canonical_sha256":"d45ad4ad256a13d71e92d0f8339135d760dd20bb8ede616f94ac34e49cac52c9","source":{"kind":"arxiv","id":"2107.07043","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.07043","created_at":"2026-07-05T02:58:10Z"},{"alias_kind":"arxiv_version","alias_value":"2107.07043v1","created_at":"2026-07-05T02:58:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.07043","created_at":"2026-07-05T02:58:10Z"},{"alias_kind":"pith_short_12","alias_value":"2RNNJLJFNIJ5","created_at":"2026-07-05T02:58:10Z"},{"alias_kind":"pith_short_16","alias_value":"2RNNJLJFNIJ5OHUS","created_at":"2026-07-05T02:58:10Z"},{"alias_kind":"pith_short_8","alias_value":"2RNNJLJF","created_at":"2026-07-05T02:58:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:2RNNJLJFNIJ5OHUS2D4DHEJV25","target":"record","payload":{"canonical_record":{"source":{"id":"2107.07043","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-09T12:12:36Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"caa21c628dec870f63f6f9b40357acfa39bc7673b0bcdc8a9fc2640c0b4aa665","abstract_canon_sha256":"43a19de64d63b6433068c5c0363bb715536b8e07df239521f8ded2094ab03970"},"schema_version":"1.0"},"canonical_sha256":"d45ad4ad256a13d71e92d0f8339135d760dd20bb8ede616f94ac34e49cac52c9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:58:10.004925Z","signature_b64":"37KYVqNFHBLVoC1g/3Oq5raHwR3/ZX1uTFivf8mALycc0NhQWDnLCBQbGEmj4ThNd0dZ0wIHkLW4PH5dIi7zBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d45ad4ad256a13d71e92d0f8339135d760dd20bb8ede616f94ac34e49cac52c9","last_reissued_at":"2026-07-05T02:58:10.004546Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:58:10.004546Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2107.07043","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:58:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"a7qLAUmyHuzGc71sbhVxMGWz7yNliMxXSE8hEwNY2kOO/m2N5bUe9DYP5TeAOcZLZc9Ib2gKe7HbH9JisqPVBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T12:49:32.669421Z"},"content_sha256":"3d785fe587fdaece7aebdaac25875f21c84ee608cc6dbfefd90409ddc4db759d","schema_version":"1.0","event_id":"sha256:3d785fe587fdaece7aebdaac25875f21c84ee608cc6dbfefd90409ddc4db759d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:2RNNJLJFNIJ5OHUS2D4DHEJV25","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"GGT: Graph-Guided Testing for Adversarial Sample Detection of Deep Neural Network","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Jingyang Xiang, Qi Xuan, Renxuan Wang, Shouling Ji, Xiaoniu Yang, Xin Xia, Yue Yu, Zuohui Chen","submitted_at":"2021-07-09T12:12:36Z","abstract_excerpt":"Deep Neural Networks (DNN) are known to be vulnerable to adversarial samples, the detection of which is crucial for the wide application of these DNN models. Recently, a number of deep testing methods in software engineering were proposed to find the vulnerability of DNN systems, and one of them, i.e., Model Mutation Testing (MMT), was used to successfully detect various adversarial samples generated by different kinds of adversarial attacks. However, the mutated models in MMT are always huge in number (e.g., over 100 models) and lack diversity (e.g., can be easily circumvented by high-confide"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.07043","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2107.07043/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:58:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3EnY6EwZMHqXDvBigisg408CAxEB4yTDPKnYmsVNkf3B1xcV38vMuXHW0j6IERRkwN443VePbDhDD0ASNX53DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T12:49:32.669935Z"},"content_sha256":"6e03c4aea3c1681b35c0de4e328ead9c82ae609648c89b2211299c991f9574eb","schema_version":"1.0","event_id":"sha256:6e03c4aea3c1681b35c0de4e328ead9c82ae609648c89b2211299c991f9574eb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2RNNJLJFNIJ5OHUS2D4DHEJV25/bundle.json","state_url":"https://pith.science/pith/2RNNJLJFNIJ5OHUS2D4DHEJV25/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2RNNJLJFNIJ5OHUS2D4DHEJV25/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T12:49:32Z","links":{"resolver":"https://pith.science/pith/2RNNJLJFNIJ5OHUS2D4DHEJV25","bundle":"https://pith.science/pith/2RNNJLJFNIJ5OHUS2D4DHEJV25/bundle.json","state":"https://pith.science/pith/2RNNJLJFNIJ5OHUS2D4DHEJV25/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2RNNJLJFNIJ5OHUS2D4DHEJV25/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:2RNNJLJFNIJ5OHUS2D4DHEJV25","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"43a19de64d63b6433068c5c0363bb715536b8e07df239521f8ded2094ab03970","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-09T12:12:36Z","title_canon_sha256":"caa21c628dec870f63f6f9b40357acfa39bc7673b0bcdc8a9fc2640c0b4aa665"},"schema_version":"1.0","source":{"id":"2107.07043","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.07043","created_at":"2026-07-05T02:58:10Z"},{"alias_kind":"arxiv_version","alias_value":"2107.07043v1","created_at":"2026-07-05T02:58:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.07043","created_at":"2026-07-05T02:58:10Z"},{"alias_kind":"pith_short_12","alias_value":"2RNNJLJFNIJ5","created_at":"2026-07-05T02:58:10Z"},{"alias_kind":"pith_short_16","alias_value":"2RNNJLJFNIJ5OHUS","created_at":"2026-07-05T02:58:10Z"},{"alias_kind":"pith_short_8","alias_value":"2RNNJLJF","created_at":"2026-07-05T02:58:10Z"}],"graph_snapshots":[{"event_id":"sha256:6e03c4aea3c1681b35c0de4e328ead9c82ae609648c89b2211299c991f9574eb","target":"graph","created_at":"2026-07-05T02:58:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2107.07043/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep Neural Networks (DNN) are known to be vulnerable to adversarial samples, the detection of which is crucial for the wide application of these DNN models. Recently, a number of deep testing methods in software engineering were proposed to find the vulnerability of DNN systems, and one of them, i.e., Model Mutation Testing (MMT), was used to successfully detect various adversarial samples generated by different kinds of adversarial attacks. However, the mutated models in MMT are always huge in number (e.g., over 100 models) and lack diversity (e.g., can be easily circumvented by high-confide","authors_text":"Jingyang Xiang, Qi Xuan, Renxuan Wang, Shouling Ji, Xiaoniu Yang, Xin Xia, Yue Yu, Zuohui Chen","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-09T12:12:36Z","title":"GGT: Graph-Guided Testing for Adversarial Sample Detection of Deep Neural Network"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.07043","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3d785fe587fdaece7aebdaac25875f21c84ee608cc6dbfefd90409ddc4db759d","target":"record","created_at":"2026-07-05T02:58:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"43a19de64d63b6433068c5c0363bb715536b8e07df239521f8ded2094ab03970","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-09T12:12:36Z","title_canon_sha256":"caa21c628dec870f63f6f9b40357acfa39bc7673b0bcdc8a9fc2640c0b4aa665"},"schema_version":"1.0","source":{"id":"2107.07043","kind":"arxiv","version":1}},"canonical_sha256":"d45ad4ad256a13d71e92d0f8339135d760dd20bb8ede616f94ac34e49cac52c9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d45ad4ad256a13d71e92d0f8339135d760dd20bb8ede616f94ac34e49cac52c9","first_computed_at":"2026-07-05T02:58:10.004546Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:58:10.004546Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"37KYVqNFHBLVoC1g/3Oq5raHwR3/ZX1uTFivf8mALycc0NhQWDnLCBQbGEmj4ThNd0dZ0wIHkLW4PH5dIi7zBw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:58:10.004925Z","signed_message":"canonical_sha256_bytes"},"source_id":"2107.07043","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3d785fe587fdaece7aebdaac25875f21c84ee608cc6dbfefd90409ddc4db759d","sha256:6e03c4aea3c1681b35c0de4e328ead9c82ae609648c89b2211299c991f9574eb"],"state_sha256":"af34ed78fdf981abb379400b6fb285715452d1ff774e19f15f0bb3405b885503"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hLLYWYKNp4zpMXrW0HDxnXMr9aOMQTQX36zlNwvgtBjNNzTDSGaibsf0AqO6GF6MNqCwQDrW6jrWs8cUwbWtAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T12:49:32.674150Z","bundle_sha256":"49a6ce4f55306cf6061270e258ed3b712a6eeb667fe11b5a00cd33f0cee2e3dc"}}