{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:5IMHCQA74BLWW4FABIJB2TGNSQ","short_pith_number":"pith:5IMHCQA7","canonical_record":{"source":{"id":"2302.10980","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-02-21T20:26:39Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"c05b5a4d77c6731ec728ee7bfbe806e4b6815801ce0e9f88ff07449c19572369","abstract_canon_sha256":"833a6a06895276364ad585868a21db87e5f288ea8e23866b5f836a2e6b8ca00b"},"schema_version":"1.0"},"canonical_sha256":"ea1871401fe0576b70a00a121d4ccd941f664422f41f00c80f518b69ac838001","source":{"kind":"arxiv","id":"2302.10980","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.10980","created_at":"2026-07-05T06:32:53Z"},{"alias_kind":"arxiv_version","alias_value":"2302.10980v3","created_at":"2026-07-05T06:32:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.10980","created_at":"2026-07-05T06:32:53Z"},{"alias_kind":"pith_short_12","alias_value":"5IMHCQA74BLW","created_at":"2026-07-05T06:32:53Z"},{"alias_kind":"pith_short_16","alias_value":"5IMHCQA74BLWW4FA","created_at":"2026-07-05T06:32:53Z"},{"alias_kind":"pith_short_8","alias_value":"5IMHCQA7","created_at":"2026-07-05T06:32:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:5IMHCQA74BLWW4FABIJB2TGNSQ","target":"record","payload":{"canonical_record":{"source":{"id":"2302.10980","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-02-21T20:26:39Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"c05b5a4d77c6731ec728ee7bfbe806e4b6815801ce0e9f88ff07449c19572369","abstract_canon_sha256":"833a6a06895276364ad585868a21db87e5f288ea8e23866b5f836a2e6b8ca00b"},"schema_version":"1.0"},"canonical_sha256":"ea1871401fe0576b70a00a121d4ccd941f664422f41f00c80f518b69ac838001","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:32:53.229908Z","signature_b64":"TOjZ2MwPqXQ8Vn3ojmL2QjF2cnhtOvBnkZbz4Vlc+Erc+QVqgzeMd8hvORNg+10Wk/QB+GiYCgEHSOIdTngaBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ea1871401fe0576b70a00a121d4ccd941f664422f41f00c80f518b69ac838001","last_reissued_at":"2026-07-05T06:32:53.229500Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:32:53.229500Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2302.10980","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:32:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ecogzj2ymnU/yFwo2ULuQL7UzGrGNwKekaWqkV37flyeneuYZyboKSAq2259bqAZPnUCP+Qqf+KsjHM/C1/PAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T09:12:53.616789Z"},"content_sha256":"db10bd03306554973e7311d5406cb9d7be617b40d355aaf8b35fbacee4cfb961","schema_version":"1.0","event_id":"sha256:db10bd03306554973e7311d5406cb9d7be617b40d355aaf8b35fbacee4cfb961"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:5IMHCQA74BLWW4FABIJB2TGNSQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MultiRobustBench: Benchmarking Robustness Against Multiple Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Chong Xiang, Pin-Yu Chen, Prateek Mittal, Saeed Mahloujifar, Sihui Dai, Vikash Sehwag","submitted_at":"2023-02-21T20:26:39Z","abstract_excerpt":"The bulk of existing research in defending against adversarial examples focuses on defending against a single (typically bounded Lp-norm) attack, but for a practical setting, machine learning (ML) models should be robust to a wide variety of attacks. In this paper, we present the first unified framework for considering multiple attacks against ML models. Our framework is able to model different levels of learner's knowledge about the test-time adversary, allowing us to model robustness against unforeseen attacks and robustness against unions of attacks. Using our framework, we present the firs"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.10980","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2302.10980/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:32:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7pmpdjm7kfk7cMpbjJPJSj+W4tO+CzT60C7OQZGSfA0Xg2ouvFUDiimNfa6jifEpL7u0XxzeVDM1fKx0MGghAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T09:12:53.617289Z"},"content_sha256":"5634030046241b280084c3906437c07597d1602130df93b29dfeb12c527dfe4e","schema_version":"1.0","event_id":"sha256:5634030046241b280084c3906437c07597d1602130df93b29dfeb12c527dfe4e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5IMHCQA74BLWW4FABIJB2TGNSQ/bundle.json","state_url":"https://pith.science/pith/5IMHCQA74BLWW4FABIJB2TGNSQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5IMHCQA74BLWW4FABIJB2TGNSQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T09:12:53Z","links":{"resolver":"https://pith.science/pith/5IMHCQA74BLWW4FABIJB2TGNSQ","bundle":"https://pith.science/pith/5IMHCQA74BLWW4FABIJB2TGNSQ/bundle.json","state":"https://pith.science/pith/5IMHCQA74BLWW4FABIJB2TGNSQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5IMHCQA74BLWW4FABIJB2TGNSQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:5IMHCQA74BLWW4FABIJB2TGNSQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"833a6a06895276364ad585868a21db87e5f288ea8e23866b5f836a2e6b8ca00b","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-02-21T20:26:39Z","title_canon_sha256":"c05b5a4d77c6731ec728ee7bfbe806e4b6815801ce0e9f88ff07449c19572369"},"schema_version":"1.0","source":{"id":"2302.10980","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.10980","created_at":"2026-07-05T06:32:53Z"},{"alias_kind":"arxiv_version","alias_value":"2302.10980v3","created_at":"2026-07-05T06:32:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.10980","created_at":"2026-07-05T06:32:53Z"},{"alias_kind":"pith_short_12","alias_value":"5IMHCQA74BLW","created_at":"2026-07-05T06:32:53Z"},{"alias_kind":"pith_short_16","alias_value":"5IMHCQA74BLWW4FA","created_at":"2026-07-05T06:32:53Z"},{"alias_kind":"pith_short_8","alias_value":"5IMHCQA7","created_at":"2026-07-05T06:32:53Z"}],"graph_snapshots":[{"event_id":"sha256:5634030046241b280084c3906437c07597d1602130df93b29dfeb12c527dfe4e","target":"graph","created_at":"2026-07-05T06:32:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2302.10980/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The bulk of existing research in defending against adversarial examples focuses on defending against a single (typically bounded Lp-norm) attack, but for a practical setting, machine learning (ML) models should be robust to a wide variety of attacks. In this paper, we present the first unified framework for considering multiple attacks against ML models. Our framework is able to model different levels of learner's knowledge about the test-time adversary, allowing us to model robustness against unforeseen attacks and robustness against unions of attacks. Using our framework, we present the firs","authors_text":"Chong Xiang, Pin-Yu Chen, Prateek Mittal, Saeed Mahloujifar, Sihui Dai, Vikash Sehwag","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-02-21T20:26:39Z","title":"MultiRobustBench: Benchmarking Robustness Against Multiple Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.10980","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:db10bd03306554973e7311d5406cb9d7be617b40d355aaf8b35fbacee4cfb961","target":"record","created_at":"2026-07-05T06:32:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"833a6a06895276364ad585868a21db87e5f288ea8e23866b5f836a2e6b8ca00b","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-02-21T20:26:39Z","title_canon_sha256":"c05b5a4d77c6731ec728ee7bfbe806e4b6815801ce0e9f88ff07449c19572369"},"schema_version":"1.0","source":{"id":"2302.10980","kind":"arxiv","version":3}},"canonical_sha256":"ea1871401fe0576b70a00a121d4ccd941f664422f41f00c80f518b69ac838001","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ea1871401fe0576b70a00a121d4ccd941f664422f41f00c80f518b69ac838001","first_computed_at":"2026-07-05T06:32:53.229500Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:32:53.229500Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TOjZ2MwPqXQ8Vn3ojmL2QjF2cnhtOvBnkZbz4Vlc+Erc+QVqgzeMd8hvORNg+10Wk/QB+GiYCgEHSOIdTngaBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:32:53.229908Z","signed_message":"canonical_sha256_bytes"},"source_id":"2302.10980","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:db10bd03306554973e7311d5406cb9d7be617b40d355aaf8b35fbacee4cfb961","sha256:5634030046241b280084c3906437c07597d1602130df93b29dfeb12c527dfe4e"],"state_sha256":"b2acdde72603545b5d12f0bf45580c047cd6d253f506a9250d9a9ead81aa4b06"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EkB0UFB9MRlsBvBQTP/Jd93I8ei6os8iICKBNODQOMYNWOItxx8Hux5LgN7lozwgEJooRHykHcDXXoAPvUudCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T09:12:53.623480Z","bundle_sha256":"5d62c97b2c769df9af8ab5d2b29af43c04d7a6bed1999e313d61a9feea898656"}}