{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:44QSIQJ2K32UILGATEYJFXTD2C","short_pith_number":"pith:44QSIQJ2","canonical_record":{"source":{"id":"1910.00470","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-10-01T15:08:34Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"de9768c59a43e4295541de2a70a4cfc0beab9edda69f4b4e73c2a266d77c3e62","abstract_canon_sha256":"151eaecac62cf3cac6d286100c5e1e4de66424e1204e6c2f83aee3c6c6a29321"},"schema_version":"1.0"},"canonical_sha256":"e72124413a56f5442cc0993092de63d0bddb931c1083a11efa5ce44485e1a491","source":{"kind":"arxiv","id":"1910.00470","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1910.00470","created_at":"2026-07-05T00:55:45Z"},{"alias_kind":"arxiv_version","alias_value":"1910.00470v3","created_at":"2026-07-05T00:55:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1910.00470","created_at":"2026-07-05T00:55:45Z"},{"alias_kind":"pith_short_12","alias_value":"44QSIQJ2K32U","created_at":"2026-07-05T00:55:45Z"},{"alias_kind":"pith_short_16","alias_value":"44QSIQJ2K32UILGA","created_at":"2026-07-05T00:55:45Z"},{"alias_kind":"pith_short_8","alias_value":"44QSIQJ2","created_at":"2026-07-05T00:55:45Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:44QSIQJ2K32UILGATEYJFXTD2C","target":"record","payload":{"canonical_record":{"source":{"id":"1910.00470","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-10-01T15:08:34Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"de9768c59a43e4295541de2a70a4cfc0beab9edda69f4b4e73c2a266d77c3e62","abstract_canon_sha256":"151eaecac62cf3cac6d286100c5e1e4de66424e1204e6c2f83aee3c6c6a29321"},"schema_version":"1.0"},"canonical_sha256":"e72124413a56f5442cc0993092de63d0bddb931c1083a11efa5ce44485e1a491","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:55:45.664903Z","signature_b64":"H9RERPfbUn5Vple/wDWj7lvaBPUmF4vrWAaYbFXu1P+aSjuMxoJMWJaQJeQu051qBWEEEwAU+/MlVMyXoB4EAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e72124413a56f5442cc0993092de63d0bddb931c1083a11efa5ce44485e1a491","last_reissued_at":"2026-07-05T00:55:45.664532Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:55:45.664532Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1910.00470","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:55:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lbggjzc/bD8e9AtM8yMtfhbGnyQH51EtUVIohf/ESO5C1aeLjXsQ9xPSzD+/2KIcylEsfm0BKksffhHiJYkBDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T14:00:59.407092Z"},"content_sha256":"aa8be89411a4f2618ad85ada7cb1d3cbb64cae3659eac992ff2122e6495c2412","schema_version":"1.0","event_id":"sha256:aa8be89411a4f2618ad85ada7cb1d3cbb64cae3659eac992ff2122e6495c2412"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:44QSIQJ2K32UILGATEYJFXTD2C","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Deep Neural Rejection against Adversarial Examples","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Ambra Demontis, Angelo Sotgiu, Battista Biggio, Fabio Roli, Giorgio Fumera, Marco Melis, Xiaoyi Feng","submitted_at":"2019-10-01T15:08:34Z","abstract_excerpt":"Despite the impressive performances reported by deep neural networks in different application domains, they remain largely vulnerable to adversarial examples, i.e., input samples that are carefully perturbed to cause misclassification at test time. In this work, we propose a deep neural rejection mechanism to detect adversarial examples, based on the idea of rejecting samples that exhibit anomalous feature representations at different network layers. With respect to competing approaches, our method does not require generating adversarial examples at training time, and it is less computationall"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1910.00470","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1910.00470/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:55:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MU6Zhl1y3nNv5y0oNbX13/UJnFgwSgL1O4aHMdEVJWjZYT0gPwmwxzzKrIdshjaqnUhtMfLDMtNdxVHO9k37AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T14:00:59.407716Z"},"content_sha256":"139e4ee28e2d95b6c416ed5e4231e30f44abe76e38c62ce2e235dd914949efe2","schema_version":"1.0","event_id":"sha256:139e4ee28e2d95b6c416ed5e4231e30f44abe76e38c62ce2e235dd914949efe2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/44QSIQJ2K32UILGATEYJFXTD2C/bundle.json","state_url":"https://pith.science/pith/44QSIQJ2K32UILGATEYJFXTD2C/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/44QSIQJ2K32UILGATEYJFXTD2C/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T14:00:59Z","links":{"resolver":"https://pith.science/pith/44QSIQJ2K32UILGATEYJFXTD2C","bundle":"https://pith.science/pith/44QSIQJ2K32UILGATEYJFXTD2C/bundle.json","state":"https://pith.science/pith/44QSIQJ2K32UILGATEYJFXTD2C/state.json","well_known_bundle":"https://pith.science/.well-known/pith/44QSIQJ2K32UILGATEYJFXTD2C/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:44QSIQJ2K32UILGATEYJFXTD2C","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"151eaecac62cf3cac6d286100c5e1e4de66424e1204e6c2f83aee3c6c6a29321","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-10-01T15:08:34Z","title_canon_sha256":"de9768c59a43e4295541de2a70a4cfc0beab9edda69f4b4e73c2a266d77c3e62"},"schema_version":"1.0","source":{"id":"1910.00470","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1910.00470","created_at":"2026-07-05T00:55:45Z"},{"alias_kind":"arxiv_version","alias_value":"1910.00470v3","created_at":"2026-07-05T00:55:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1910.00470","created_at":"2026-07-05T00:55:45Z"},{"alias_kind":"pith_short_12","alias_value":"44QSIQJ2K32U","created_at":"2026-07-05T00:55:45Z"},{"alias_kind":"pith_short_16","alias_value":"44QSIQJ2K32UILGA","created_at":"2026-07-05T00:55:45Z"},{"alias_kind":"pith_short_8","alias_value":"44QSIQJ2","created_at":"2026-07-05T00:55:45Z"}],"graph_snapshots":[{"event_id":"sha256:139e4ee28e2d95b6c416ed5e4231e30f44abe76e38c62ce2e235dd914949efe2","target":"graph","created_at":"2026-07-05T00:55:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1910.00470/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Despite the impressive performances reported by deep neural networks in different application domains, they remain largely vulnerable to adversarial examples, i.e., input samples that are carefully perturbed to cause misclassification at test time. In this work, we propose a deep neural rejection mechanism to detect adversarial examples, based on the idea of rejecting samples that exhibit anomalous feature representations at different network layers. With respect to competing approaches, our method does not require generating adversarial examples at training time, and it is less computationall","authors_text":"Ambra Demontis, Angelo Sotgiu, Battista Biggio, Fabio Roli, Giorgio Fumera, Marco Melis, Xiaoyi Feng","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-10-01T15:08:34Z","title":"Deep Neural Rejection against Adversarial Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1910.00470","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:aa8be89411a4f2618ad85ada7cb1d3cbb64cae3659eac992ff2122e6495c2412","target":"record","created_at":"2026-07-05T00:55:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"151eaecac62cf3cac6d286100c5e1e4de66424e1204e6c2f83aee3c6c6a29321","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-10-01T15:08:34Z","title_canon_sha256":"de9768c59a43e4295541de2a70a4cfc0beab9edda69f4b4e73c2a266d77c3e62"},"schema_version":"1.0","source":{"id":"1910.00470","kind":"arxiv","version":3}},"canonical_sha256":"e72124413a56f5442cc0993092de63d0bddb931c1083a11efa5ce44485e1a491","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e72124413a56f5442cc0993092de63d0bddb931c1083a11efa5ce44485e1a491","first_computed_at":"2026-07-05T00:55:45.664532Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:55:45.664532Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"H9RERPfbUn5Vple/wDWj7lvaBPUmF4vrWAaYbFXu1P+aSjuMxoJMWJaQJeQu051qBWEEEwAU+/MlVMyXoB4EAg==","signature_status":"signed_v1","signed_at":"2026-07-05T00:55:45.664903Z","signed_message":"canonical_sha256_bytes"},"source_id":"1910.00470","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:aa8be89411a4f2618ad85ada7cb1d3cbb64cae3659eac992ff2122e6495c2412","sha256:139e4ee28e2d95b6c416ed5e4231e30f44abe76e38c62ce2e235dd914949efe2"],"state_sha256":"2acfea4a43139631e8d26a2edec8ee06289f38fd2255d2a6f1f25e92af2c8558"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SFxxl5oj7480PzR4SumHd0dToDhEc+5uvPciolcD08ofeH5oK1tuyNMjyINowqO57hpql7C3RCaYLApvfzM9BQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T14:00:59.448362Z","bundle_sha256":"357ecbd9c06f7b47d5d2acdd881ede3704f3b1a3dea7966678a22895c6deca53"}}