{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:3IY6NARPFA6VK3AV6E4AUVPTSO","short_pith_number":"pith:3IY6NARP","canonical_record":{"source":{"id":"2010.01610","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2020-10-04T15:54:03Z","cross_cats_sorted":[],"title_canon_sha256":"1989150eddd46d86f3fa2e1ef2bb7ea9e697f73b93f514dd7c174f53aa3f8bde","abstract_canon_sha256":"ca07c881a99648c8ad4c3c8b37542e27e7db35fc194ade70b5c8988d8fa7477f"},"schema_version":"1.0"},"canonical_sha256":"da31e6822f283d556c15f1380a55f393a20db351d7dffb29dce950e7d78781ed","source":{"kind":"arxiv","id":"2010.01610","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.01610","created_at":"2026-07-05T01:43:42Z"},{"alias_kind":"arxiv_version","alias_value":"2010.01610v2","created_at":"2026-07-05T01:43:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.01610","created_at":"2026-07-05T01:43:42Z"},{"alias_kind":"pith_short_12","alias_value":"3IY6NARPFA6V","created_at":"2026-07-05T01:43:42Z"},{"alias_kind":"pith_short_16","alias_value":"3IY6NARPFA6VK3AV","created_at":"2026-07-05T01:43:42Z"},{"alias_kind":"pith_short_8","alias_value":"3IY6NARP","created_at":"2026-07-05T01:43:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:3IY6NARPFA6VK3AV6E4AUVPTSO","target":"record","payload":{"canonical_record":{"source":{"id":"2010.01610","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2020-10-04T15:54:03Z","cross_cats_sorted":[],"title_canon_sha256":"1989150eddd46d86f3fa2e1ef2bb7ea9e697f73b93f514dd7c174f53aa3f8bde","abstract_canon_sha256":"ca07c881a99648c8ad4c3c8b37542e27e7db35fc194ade70b5c8988d8fa7477f"},"schema_version":"1.0"},"canonical_sha256":"da31e6822f283d556c15f1380a55f393a20db351d7dffb29dce950e7d78781ed","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:43:42.172525Z","signature_b64":"vf9tsd/pyqtKohxRPi5Nig/lQzLndWHK0lTAge/2tWfelKIe0hsTHg5rsUY3KQvBswCRKTgKO9/T0IFv+YGyAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"da31e6822f283d556c15f1380a55f393a20db351d7dffb29dce950e7d78781ed","last_reissued_at":"2026-07-05T01:43:42.172171Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:43:42.172171Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2010.01610","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:43:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5foPRe5VGzRWrO+qjlFFIyvbjdnYHXUtOEYe/kCnE/XtE6mdx8J/9S2TgvlKQYz5iiINEknSoUYXLSGmKmn4Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T11:14:37.777136Z"},"content_sha256":"d761c64250df740f5b2630923e6b4e27dbbd41e7f3d0aa0e6ea65ccce0a4108f","schema_version":"1.0","event_id":"sha256:d761c64250df740f5b2630923e6b4e27dbbd41e7f3d0aa0e6ea65ccce0a4108f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:3IY6NARPFA6VK3AV6E4AUVPTSO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Attack and Defense of Structured Prediction Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Kewei Tu, Liwen Zhang, Wenjuan Han, Yong Jiang","submitted_at":"2020-10-04T15:54:03Z","abstract_excerpt":"Building an effective adversarial attacker and elaborating on countermeasures for adversarial attacks for natural language processing (NLP) have attracted a lot of research in recent years. However, most of the existing approaches focus on classification problems. In this paper, we investigate attacks and defenses for structured prediction tasks in NLP. Besides the difficulty of perturbing discrete words and the sentence fluency problem faced by attackers in any NLP tasks, there is a specific challenge to attackers of structured prediction models: the structured output of structured prediction"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.01610","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2010.01610/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:43:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/v2isIZeBdP7kVoaHmcf0cKtHqtPJLOOtfKZJ0ds1g6EdgLmsAZkIL5Rufc+Al8ZuqaReQktLunbBpYS/FBSAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T11:14:37.777621Z"},"content_sha256":"199654278884d8ceb75943995c76f1f436476ce23e64c5df201d7184d3f14682","schema_version":"1.0","event_id":"sha256:199654278884d8ceb75943995c76f1f436476ce23e64c5df201d7184d3f14682"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3IY6NARPFA6VK3AV6E4AUVPTSO/bundle.json","state_url":"https://pith.science/pith/3IY6NARPFA6VK3AV6E4AUVPTSO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3IY6NARPFA6VK3AV6E4AUVPTSO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T11:14:37Z","links":{"resolver":"https://pith.science/pith/3IY6NARPFA6VK3AV6E4AUVPTSO","bundle":"https://pith.science/pith/3IY6NARPFA6VK3AV6E4AUVPTSO/bundle.json","state":"https://pith.science/pith/3IY6NARPFA6VK3AV6E4AUVPTSO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3IY6NARPFA6VK3AV6E4AUVPTSO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:3IY6NARPFA6VK3AV6E4AUVPTSO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ca07c881a99648c8ad4c3c8b37542e27e7db35fc194ade70b5c8988d8fa7477f","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2020-10-04T15:54:03Z","title_canon_sha256":"1989150eddd46d86f3fa2e1ef2bb7ea9e697f73b93f514dd7c174f53aa3f8bde"},"schema_version":"1.0","source":{"id":"2010.01610","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.01610","created_at":"2026-07-05T01:43:42Z"},{"alias_kind":"arxiv_version","alias_value":"2010.01610v2","created_at":"2026-07-05T01:43:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.01610","created_at":"2026-07-05T01:43:42Z"},{"alias_kind":"pith_short_12","alias_value":"3IY6NARPFA6V","created_at":"2026-07-05T01:43:42Z"},{"alias_kind":"pith_short_16","alias_value":"3IY6NARPFA6VK3AV","created_at":"2026-07-05T01:43:42Z"},{"alias_kind":"pith_short_8","alias_value":"3IY6NARP","created_at":"2026-07-05T01:43:42Z"}],"graph_snapshots":[{"event_id":"sha256:199654278884d8ceb75943995c76f1f436476ce23e64c5df201d7184d3f14682","target":"graph","created_at":"2026-07-05T01:43:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2010.01610/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Building an effective adversarial attacker and elaborating on countermeasures for adversarial attacks for natural language processing (NLP) have attracted a lot of research in recent years. However, most of the existing approaches focus on classification problems. In this paper, we investigate attacks and defenses for structured prediction tasks in NLP. Besides the difficulty of perturbing discrete words and the sentence fluency problem faced by attackers in any NLP tasks, there is a specific challenge to attackers of structured prediction models: the structured output of structured prediction","authors_text":"Kewei Tu, Liwen Zhang, Wenjuan Han, Yong Jiang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2020-10-04T15:54:03Z","title":"Adversarial Attack and Defense of Structured Prediction Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.01610","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d761c64250df740f5b2630923e6b4e27dbbd41e7f3d0aa0e6ea65ccce0a4108f","target":"record","created_at":"2026-07-05T01:43:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ca07c881a99648c8ad4c3c8b37542e27e7db35fc194ade70b5c8988d8fa7477f","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2020-10-04T15:54:03Z","title_canon_sha256":"1989150eddd46d86f3fa2e1ef2bb7ea9e697f73b93f514dd7c174f53aa3f8bde"},"schema_version":"1.0","source":{"id":"2010.01610","kind":"arxiv","version":2}},"canonical_sha256":"da31e6822f283d556c15f1380a55f393a20db351d7dffb29dce950e7d78781ed","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"da31e6822f283d556c15f1380a55f393a20db351d7dffb29dce950e7d78781ed","first_computed_at":"2026-07-05T01:43:42.172171Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:43:42.172171Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vf9tsd/pyqtKohxRPi5Nig/lQzLndWHK0lTAge/2tWfelKIe0hsTHg5rsUY3KQvBswCRKTgKO9/T0IFv+YGyAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T01:43:42.172525Z","signed_message":"canonical_sha256_bytes"},"source_id":"2010.01610","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d761c64250df740f5b2630923e6b4e27dbbd41e7f3d0aa0e6ea65ccce0a4108f","sha256:199654278884d8ceb75943995c76f1f436476ce23e64c5df201d7184d3f14682"],"state_sha256":"0bb9301c25e19a54e190ea643c35fcbf75ed0d870e04962dee605f16c4728a41"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JM509Qvr4wcC8pm09GYFfZX4ILne9HzRbGQaGq7odB5sBiAKYnYOLrdAKlk4OYdWzl35twvtvQksa3FaZwTKBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T11:14:37.782149Z","bundle_sha256":"8d411abdbeec759d3f0befdbb4c690432f70019f1ef2dc588d053f5bb0c16c1e"}}