{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:5AS3L6PITW2T6RPVPQEC6X2N2M","short_pith_number":"pith:5AS3L6PI","canonical_record":{"source":{"id":"2306.09124","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-06-15T13:33:27Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"54a163a3c349a234f143d3bf82466cec9c648c51212bb284dd01ed3ce0df7036","abstract_canon_sha256":"c95284ed220cbe23dfbcf99d02da976635a4219257e8148df50841c2f91a3e1a"},"schema_version":"1.0"},"canonical_sha256":"e825b5f9e89db53f45f57c082f5f4dd30f5a68896c579cf0eeeb7ddefe2894fb","source":{"kind":"arxiv","id":"2306.09124","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.09124","created_at":"2026-07-05T08:44:46Z"},{"alias_kind":"arxiv_version","alias_value":"2306.09124v4","created_at":"2026-07-05T08:44:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.09124","created_at":"2026-07-05T08:44:46Z"},{"alias_kind":"pith_short_12","alias_value":"5AS3L6PITW2T","created_at":"2026-07-05T08:44:46Z"},{"alias_kind":"pith_short_16","alias_value":"5AS3L6PITW2T6RPV","created_at":"2026-07-05T08:44:46Z"},{"alias_kind":"pith_short_8","alias_value":"5AS3L6PI","created_at":"2026-07-05T08:44:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:5AS3L6PITW2T6RPVPQEC6X2N2M","target":"record","payload":{"canonical_record":{"source":{"id":"2306.09124","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-06-15T13:33:27Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"54a163a3c349a234f143d3bf82466cec9c648c51212bb284dd01ed3ce0df7036","abstract_canon_sha256":"c95284ed220cbe23dfbcf99d02da976635a4219257e8148df50841c2f91a3e1a"},"schema_version":"1.0"},"canonical_sha256":"e825b5f9e89db53f45f57c082f5f4dd30f5a68896c579cf0eeeb7ddefe2894fb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:44:46.572692Z","signature_b64":"9VhtaxBhfRvvqmpcfvohx99EKenXWXtiQKrvhtwztY3cUfS0zJGuohu6TMmxwFb+uJO8aXLagj7lyliEqv7DDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e825b5f9e89db53f45f57c082f5f4dd30f5a68896c579cf0eeeb7ddefe2894fb","last_reissued_at":"2026-07-05T08:44:46.572205Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:44:46.572205Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.09124","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:44:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eJOzkCcBqmm+4RNid17TP0GaWXqNMoFLbqgjDlSL/rz8QAtPutg40TCip8Poe0CSEai2ChNYLpGI2dHdl9h8BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-12T08:46:48.403078Z"},"content_sha256":"e1f40defd8ec7da1aefee6ddd1eb8a70234ec2dd1ec39e0f4b5f8f5ce16fc450","schema_version":"1.0","event_id":"sha256:e1f40defd8ec7da1aefee6ddd1eb8a70234ec2dd1ec39e0f4b5f8f5ce16fc450"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:5AS3L6PITW2T6RPVPQEC6X2N2M","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DIFFender: Diffusion-Based Adversarial Defense against Patch Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Caixin Kang, Hang Su, Shouwei Ruan, Xingxing Wei, Yinpeng Dong, Yubo Chen, Zhengyi Wang","submitted_at":"2023-06-15T13:33:27Z","abstract_excerpt":"Adversarial attacks, particularly patch attacks, pose significant threats to the robustness and reliability of deep learning models. Developing reliable defenses against patch attacks is crucial for real-world applications. This paper introduces DIFFender, a novel defense framework that harnesses the capabilities of a text-guided diffusion model to combat patch attacks. Central to our approach is the discovery of the Adversarial Anomaly Perception (AAP) phenomenon, which empowers the diffusion model to detect and localize adversarial patches through the analysis of distributional discrepancies"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.09124","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.09124/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:44:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tdiXj9jxDcCuWmZWo7UK1ROaBffBCVtLtqrRs886j8FpGyedfJHP6/Yo0eKWB2OvJOLTB92k7txf9n1aB5CZAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-12T08:46:48.403475Z"},"content_sha256":"3cf6d5ca2b1f796d16f61442d31f7a363e2cf3ec29af9152245660c78d2962f1","schema_version":"1.0","event_id":"sha256:3cf6d5ca2b1f796d16f61442d31f7a363e2cf3ec29af9152245660c78d2962f1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5AS3L6PITW2T6RPVPQEC6X2N2M/bundle.json","state_url":"https://pith.science/pith/5AS3L6PITW2T6RPVPQEC6X2N2M/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5AS3L6PITW2T6RPVPQEC6X2N2M/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-12T08:46:48Z","links":{"resolver":"https://pith.science/pith/5AS3L6PITW2T6RPVPQEC6X2N2M","bundle":"https://pith.science/pith/5AS3L6PITW2T6RPVPQEC6X2N2M/bundle.json","state":"https://pith.science/pith/5AS3L6PITW2T6RPVPQEC6X2N2M/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5AS3L6PITW2T6RPVPQEC6X2N2M/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:5AS3L6PITW2T6RPVPQEC6X2N2M","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c95284ed220cbe23dfbcf99d02da976635a4219257e8148df50841c2f91a3e1a","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-06-15T13:33:27Z","title_canon_sha256":"54a163a3c349a234f143d3bf82466cec9c648c51212bb284dd01ed3ce0df7036"},"schema_version":"1.0","source":{"id":"2306.09124","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.09124","created_at":"2026-07-05T08:44:46Z"},{"alias_kind":"arxiv_version","alias_value":"2306.09124v4","created_at":"2026-07-05T08:44:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.09124","created_at":"2026-07-05T08:44:46Z"},{"alias_kind":"pith_short_12","alias_value":"5AS3L6PITW2T","created_at":"2026-07-05T08:44:46Z"},{"alias_kind":"pith_short_16","alias_value":"5AS3L6PITW2T6RPV","created_at":"2026-07-05T08:44:46Z"},{"alias_kind":"pith_short_8","alias_value":"5AS3L6PI","created_at":"2026-07-05T08:44:46Z"}],"graph_snapshots":[{"event_id":"sha256:3cf6d5ca2b1f796d16f61442d31f7a363e2cf3ec29af9152245660c78d2962f1","target":"graph","created_at":"2026-07-05T08:44:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.09124/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial attacks, particularly patch attacks, pose significant threats to the robustness and reliability of deep learning models. Developing reliable defenses against patch attacks is crucial for real-world applications. This paper introduces DIFFender, a novel defense framework that harnesses the capabilities of a text-guided diffusion model to combat patch attacks. Central to our approach is the discovery of the Adversarial Anomaly Perception (AAP) phenomenon, which empowers the diffusion model to detect and localize adversarial patches through the analysis of distributional discrepancies","authors_text":"Caixin Kang, Hang Su, Shouwei Ruan, Xingxing Wei, Yinpeng Dong, Yubo Chen, Zhengyi Wang","cross_cats":["cs.AI","cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-06-15T13:33:27Z","title":"DIFFender: Diffusion-Based Adversarial Defense against Patch Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.09124","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e1f40defd8ec7da1aefee6ddd1eb8a70234ec2dd1ec39e0f4b5f8f5ce16fc450","target":"record","created_at":"2026-07-05T08:44:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c95284ed220cbe23dfbcf99d02da976635a4219257e8148df50841c2f91a3e1a","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-06-15T13:33:27Z","title_canon_sha256":"54a163a3c349a234f143d3bf82466cec9c648c51212bb284dd01ed3ce0df7036"},"schema_version":"1.0","source":{"id":"2306.09124","kind":"arxiv","version":4}},"canonical_sha256":"e825b5f9e89db53f45f57c082f5f4dd30f5a68896c579cf0eeeb7ddefe2894fb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e825b5f9e89db53f45f57c082f5f4dd30f5a68896c579cf0eeeb7ddefe2894fb","first_computed_at":"2026-07-05T08:44:46.572205Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:44:46.572205Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"9VhtaxBhfRvvqmpcfvohx99EKenXWXtiQKrvhtwztY3cUfS0zJGuohu6TMmxwFb+uJO8aXLagj7lyliEqv7DDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:44:46.572692Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.09124","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e1f40defd8ec7da1aefee6ddd1eb8a70234ec2dd1ec39e0f4b5f8f5ce16fc450","sha256:3cf6d5ca2b1f796d16f61442d31f7a363e2cf3ec29af9152245660c78d2962f1"],"state_sha256":"3ee65d25e3856c2217af6e2fdea829c9e22e1a9cae423dca500de97e0f7c0306"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dRhLlQNB8BQDkYWqI070Uzu5ytAHdVP5U5K5ltFxfFwrfiTiev5cbGOwK3L0X6wGZZK+T4Fq6xwwzudjzxsMDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-12T08:46:48.405807Z","bundle_sha256":"dc1ea7822027246dd41f675c8c0f1dc8644b19aeae26b939f41874f8f86acd99"}}