{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:3U5IQKC24GW7PBKMOTZ6MRBHVQ","short_pith_number":"pith:3U5IQKC2","canonical_record":{"source":{"id":"1908.07667","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-21T01:34:08Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"bfabf935568fb2844166ac1e945c9cf777e1a5805114a334bf3f88f4b78bf7c9","abstract_canon_sha256":"84d607f0ac1bda98822681f26e54a3d039f0ce7f1855fe9cf0483ff56dac0c4e"},"schema_version":"1.0"},"canonical_sha256":"dd3a88285ae1adf7854c74f3e64427ac298b16dcc0f4339f4beb20b2dbd42d20","source":{"kind":"arxiv","id":"1908.07667","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.07667","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"arxiv_version","alias_value":"1908.07667v2","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.07667","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"pith_short_12","alias_value":"3U5IQKC24GW7","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"pith_short_16","alias_value":"3U5IQKC24GW7PBKM","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"pith_short_8","alias_value":"3U5IQKC2","created_at":"2026-07-05T00:15:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:3U5IQKC24GW7PBKMOTZ6MRBHVQ","target":"record","payload":{"canonical_record":{"source":{"id":"1908.07667","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-21T01:34:08Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"bfabf935568fb2844166ac1e945c9cf777e1a5805114a334bf3f88f4b78bf7c9","abstract_canon_sha256":"84d607f0ac1bda98822681f26e54a3d039f0ce7f1855fe9cf0483ff56dac0c4e"},"schema_version":"1.0"},"canonical_sha256":"dd3a88285ae1adf7854c74f3e64427ac298b16dcc0f4339f4beb20b2dbd42d20","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:15:08.128065Z","signature_b64":"SlTFiLdxtfktjip90wrbkAnHoLi2pF8H1dp2ECvgdnWBq2A+XwgOsVdjtux1Ak37mjbXYXMJngRHJK0a/G4kBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dd3a88285ae1adf7854c74f3e64427ac298b16dcc0f4339f4beb20b2dbd42d20","last_reissued_at":"2026-07-05T00:15:08.127600Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:15:08.127600Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1908.07667","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:15:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VY+f92591jyQ/Z+t7OdNRsSR7uisCYmFimCLozdWMG4ksQdSEO7I7VwblJXWiUUmpkkwkiCkrBzzA5F6VU8EDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T07:16:23.987207Z"},"content_sha256":"bfc33496e910c839ab99fc7874c975505bbf8d3fe7c3d0f4c565c037a42cd3ad","schema_version":"1.0","event_id":"sha256:bfc33496e910c839ab99fc7874c975505bbf8d3fe7c3d0f4c565c037a42cd3ad"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:3U5IQKC24GW7PBKMOTZ6MRBHVQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Denoising and Verification Cross-Layer Ensemble Against Black-box Adversarial Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Ka-Ho Chow, Ling Liu, Wenqi Wei, Yanzhao Wu","submitted_at":"2019-08-21T01:34:08Z","abstract_excerpt":"Deep neural networks (DNNs) have demonstrated impressive performance on many challenging machine learning tasks. However, DNNs are vulnerable to adversarial inputs generated by adding maliciously crafted perturbations to the benign inputs. As a growing number of attacks have been reported to generate adversarial inputs of varying sophistication, the defense-attack arms race has been accelerated. In this paper, we present MODEF, a cross-layer model diversity ensemble framework. MODEF intelligently combines unsupervised model denoising ensemble with supervised model verification ensemble by quan"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.07667","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1908.07667/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:15:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EPP5v8bOetI2bMQaQqbOHTeBR9Ux7+EQ4ZROaOMQhP1F8obbCvSLrAXNIG6tbAV02KQGgvwqZERRi4v1rms3AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T07:16:23.987703Z"},"content_sha256":"ca7c0d6245daf410b1500914d020bda9da061e1db61647f28a34882625a73eac","schema_version":"1.0","event_id":"sha256:ca7c0d6245daf410b1500914d020bda9da061e1db61647f28a34882625a73eac"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3U5IQKC24GW7PBKMOTZ6MRBHVQ/bundle.json","state_url":"https://pith.science/pith/3U5IQKC24GW7PBKMOTZ6MRBHVQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3U5IQKC24GW7PBKMOTZ6MRBHVQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T07:16:23Z","links":{"resolver":"https://pith.science/pith/3U5IQKC24GW7PBKMOTZ6MRBHVQ","bundle":"https://pith.science/pith/3U5IQKC24GW7PBKMOTZ6MRBHVQ/bundle.json","state":"https://pith.science/pith/3U5IQKC24GW7PBKMOTZ6MRBHVQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3U5IQKC24GW7PBKMOTZ6MRBHVQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:3U5IQKC24GW7PBKMOTZ6MRBHVQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"84d607f0ac1bda98822681f26e54a3d039f0ce7f1855fe9cf0483ff56dac0c4e","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-21T01:34:08Z","title_canon_sha256":"bfabf935568fb2844166ac1e945c9cf777e1a5805114a334bf3f88f4b78bf7c9"},"schema_version":"1.0","source":{"id":"1908.07667","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.07667","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"arxiv_version","alias_value":"1908.07667v2","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.07667","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"pith_short_12","alias_value":"3U5IQKC24GW7","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"pith_short_16","alias_value":"3U5IQKC24GW7PBKM","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"pith_short_8","alias_value":"3U5IQKC2","created_at":"2026-07-05T00:15:08Z"}],"graph_snapshots":[{"event_id":"sha256:ca7c0d6245daf410b1500914d020bda9da061e1db61647f28a34882625a73eac","target":"graph","created_at":"2026-07-05T00:15:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1908.07667/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) have demonstrated impressive performance on many challenging machine learning tasks. However, DNNs are vulnerable to adversarial inputs generated by adding maliciously crafted perturbations to the benign inputs. As a growing number of attacks have been reported to generate adversarial inputs of varying sophistication, the defense-attack arms race has been accelerated. In this paper, we present MODEF, a cross-layer model diversity ensemble framework. MODEF intelligently combines unsupervised model denoising ensemble with supervised model verification ensemble by quan","authors_text":"Ka-Ho Chow, Ling Liu, Wenqi Wei, Yanzhao Wu","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-21T01:34:08Z","title":"Denoising and Verification Cross-Layer Ensemble Against Black-box Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.07667","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bfc33496e910c839ab99fc7874c975505bbf8d3fe7c3d0f4c565c037a42cd3ad","target":"record","created_at":"2026-07-05T00:15:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"84d607f0ac1bda98822681f26e54a3d039f0ce7f1855fe9cf0483ff56dac0c4e","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-21T01:34:08Z","title_canon_sha256":"bfabf935568fb2844166ac1e945c9cf777e1a5805114a334bf3f88f4b78bf7c9"},"schema_version":"1.0","source":{"id":"1908.07667","kind":"arxiv","version":2}},"canonical_sha256":"dd3a88285ae1adf7854c74f3e64427ac298b16dcc0f4339f4beb20b2dbd42d20","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dd3a88285ae1adf7854c74f3e64427ac298b16dcc0f4339f4beb20b2dbd42d20","first_computed_at":"2026-07-05T00:15:08.127600Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:15:08.127600Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SlTFiLdxtfktjip90wrbkAnHoLi2pF8H1dp2ECvgdnWBq2A+XwgOsVdjtux1Ak37mjbXYXMJngRHJK0a/G4kBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T00:15:08.128065Z","signed_message":"canonical_sha256_bytes"},"source_id":"1908.07667","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bfc33496e910c839ab99fc7874c975505bbf8d3fe7c3d0f4c565c037a42cd3ad","sha256:ca7c0d6245daf410b1500914d020bda9da061e1db61647f28a34882625a73eac"],"state_sha256":"e9ea07f67a19f2eed14a041329029e4970c4810135eb54dadb83c7c12219d26d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eR+VSPnBZIz//LBX0IcDI5rfWCRt/puxadZr1q3IwqyKxmkif2PwR07OT788WmOzROAIvLp0T33CX6AysYrXBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T07:16:23.992614Z","bundle_sha256":"291f086284de44ae881cb65ff5bbc32385e99ee4903122661c3f8d31eaab1e12"}}