{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:5NP33HU5VAUNKXZ3NJBSODWHVV","short_pith_number":"pith:5NP33HU5","canonical_record":{"source":{"id":"2309.01620","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-09-04T14:08:34Z","cross_cats_sorted":[],"title_canon_sha256":"4823342ba012a8c9d3dd33aec6b7ac1378754e738120f942f6b915a55e8c027c","abstract_canon_sha256":"2210d6c7014f56072f2c90ea79bd2cae29c34cfe31be495267c7323dd98caa5e"},"schema_version":"1.0"},"canonical_sha256":"eb5fbd9e9da828d55f3b6a43270ec7ad71f6b968a6e3e417fdbbd0ea8f36f964","source":{"kind":"arxiv","id":"2309.01620","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.01620","created_at":"2026-07-05T06:47:40Z"},{"alias_kind":"arxiv_version","alias_value":"2309.01620v1","created_at":"2026-07-05T06:47:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.01620","created_at":"2026-07-05T06:47:40Z"},{"alias_kind":"pith_short_12","alias_value":"5NP33HU5VAUN","created_at":"2026-07-05T06:47:40Z"},{"alias_kind":"pith_short_16","alias_value":"5NP33HU5VAUNKXZ3","created_at":"2026-07-05T06:47:40Z"},{"alias_kind":"pith_short_8","alias_value":"5NP33HU5","created_at":"2026-07-05T06:47:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:5NP33HU5VAUNKXZ3NJBSODWHVV","target":"record","payload":{"canonical_record":{"source":{"id":"2309.01620","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-09-04T14:08:34Z","cross_cats_sorted":[],"title_canon_sha256":"4823342ba012a8c9d3dd33aec6b7ac1378754e738120f942f6b915a55e8c027c","abstract_canon_sha256":"2210d6c7014f56072f2c90ea79bd2cae29c34cfe31be495267c7323dd98caa5e"},"schema_version":"1.0"},"canonical_sha256":"eb5fbd9e9da828d55f3b6a43270ec7ad71f6b968a6e3e417fdbbd0ea8f36f964","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:47:40.694387Z","signature_b64":"414aCm5WJuMbIY2wsyNy+GTQABfOLqkS98pp4BU0BbIqSMiKtSD3xG/bg+c2cYUEnJpkNGSege6K9SlJHC5sAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"eb5fbd9e9da828d55f3b6a43270ec7ad71f6b968a6e3e417fdbbd0ea8f36f964","last_reissued_at":"2026-07-05T06:47:40.693980Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:47:40.693980Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.01620","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:47:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yf20VztAjVd7+6sORITWOeB5RoXhbajWrEWsFIvfOtdQCPTe6HM53FG5Mhr2Ya4e39ctZeBqL+bQLBaMhMwLAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T19:46:56.691761Z"},"content_sha256":"210819fe8be9229045ce590775b9e176954fab0b52cf6bfad9f4213414aef535","schema_version":"1.0","event_id":"sha256:210819fe8be9229045ce590775b9e176954fab0b52cf6bfad9f4213414aef535"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:5NP33HU5VAUNKXZ3NJBSODWHVV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Hindering Adversarial Attacks with Multiple Encrypted Patch Embeddings","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"AprilPyone MaungMaung, Hitoshi Kiya, Isao Echizen","submitted_at":"2023-09-04T14:08:34Z","abstract_excerpt":"In this paper, we propose a new key-based defense focusing on both efficiency and robustness. Although the previous key-based defense seems effective in defending against adversarial examples, carefully designed adaptive attacks can bypass the previous defense, and it is difficult to train the previous defense on large datasets like ImageNet. We build upon the previous defense with two major improvements: (1) efficient training and (2) optional randomization. The proposed defense utilizes one or more secret patch embeddings and classifier heads with a pre-trained isotropic network. When more t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.01620","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.01620/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:47:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Dtj3KBiIsvIycaSPaitqS9hxUTLGNlpnhEU4sS9dy8dxBlupRYCp+cBAT6YJxjSluCRMpFnL1Jjr20xfrIvUCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T19:46:56.692290Z"},"content_sha256":"9ae922e629531a58ff5d170da14c637d3409a8b85f1d96d8bd661dbe3a489937","schema_version":"1.0","event_id":"sha256:9ae922e629531a58ff5d170da14c637d3409a8b85f1d96d8bd661dbe3a489937"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5NP33HU5VAUNKXZ3NJBSODWHVV/bundle.json","state_url":"https://pith.science/pith/5NP33HU5VAUNKXZ3NJBSODWHVV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5NP33HU5VAUNKXZ3NJBSODWHVV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T19:46:56Z","links":{"resolver":"https://pith.science/pith/5NP33HU5VAUNKXZ3NJBSODWHVV","bundle":"https://pith.science/pith/5NP33HU5VAUNKXZ3NJBSODWHVV/bundle.json","state":"https://pith.science/pith/5NP33HU5VAUNKXZ3NJBSODWHVV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5NP33HU5VAUNKXZ3NJBSODWHVV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:5NP33HU5VAUNKXZ3NJBSODWHVV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2210d6c7014f56072f2c90ea79bd2cae29c34cfe31be495267c7323dd98caa5e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-09-04T14:08:34Z","title_canon_sha256":"4823342ba012a8c9d3dd33aec6b7ac1378754e738120f942f6b915a55e8c027c"},"schema_version":"1.0","source":{"id":"2309.01620","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.01620","created_at":"2026-07-05T06:47:40Z"},{"alias_kind":"arxiv_version","alias_value":"2309.01620v1","created_at":"2026-07-05T06:47:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.01620","created_at":"2026-07-05T06:47:40Z"},{"alias_kind":"pith_short_12","alias_value":"5NP33HU5VAUN","created_at":"2026-07-05T06:47:40Z"},{"alias_kind":"pith_short_16","alias_value":"5NP33HU5VAUNKXZ3","created_at":"2026-07-05T06:47:40Z"},{"alias_kind":"pith_short_8","alias_value":"5NP33HU5","created_at":"2026-07-05T06:47:40Z"}],"graph_snapshots":[{"event_id":"sha256:9ae922e629531a58ff5d170da14c637d3409a8b85f1d96d8bd661dbe3a489937","target":"graph","created_at":"2026-07-05T06:47:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.01620/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this paper, we propose a new key-based defense focusing on both efficiency and robustness. Although the previous key-based defense seems effective in defending against adversarial examples, carefully designed adaptive attacks can bypass the previous defense, and it is difficult to train the previous defense on large datasets like ImageNet. We build upon the previous defense with two major improvements: (1) efficient training and (2) optional randomization. The proposed defense utilizes one or more secret patch embeddings and classifier heads with a pre-trained isotropic network. When more t","authors_text":"AprilPyone MaungMaung, Hitoshi Kiya, Isao Echizen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-09-04T14:08:34Z","title":"Hindering Adversarial Attacks with Multiple Encrypted Patch Embeddings"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.01620","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:210819fe8be9229045ce590775b9e176954fab0b52cf6bfad9f4213414aef535","target":"record","created_at":"2026-07-05T06:47:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2210d6c7014f56072f2c90ea79bd2cae29c34cfe31be495267c7323dd98caa5e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-09-04T14:08:34Z","title_canon_sha256":"4823342ba012a8c9d3dd33aec6b7ac1378754e738120f942f6b915a55e8c027c"},"schema_version":"1.0","source":{"id":"2309.01620","kind":"arxiv","version":1}},"canonical_sha256":"eb5fbd9e9da828d55f3b6a43270ec7ad71f6b968a6e3e417fdbbd0ea8f36f964","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"eb5fbd9e9da828d55f3b6a43270ec7ad71f6b968a6e3e417fdbbd0ea8f36f964","first_computed_at":"2026-07-05T06:47:40.693980Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:47:40.693980Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"414aCm5WJuMbIY2wsyNy+GTQABfOLqkS98pp4BU0BbIqSMiKtSD3xG/bg+c2cYUEnJpkNGSege6K9SlJHC5sAw==","signature_status":"signed_v1","signed_at":"2026-07-05T06:47:40.694387Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.01620","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:210819fe8be9229045ce590775b9e176954fab0b52cf6bfad9f4213414aef535","sha256:9ae922e629531a58ff5d170da14c637d3409a8b85f1d96d8bd661dbe3a489937"],"state_sha256":"4f9d6ad0c8599c44886375bede4ab98fdcfb0d1fe92a9690d2df97e54f586427"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PT+VWnugsq5CRp56XA4VeaPCtl5BwWRZCz2aCgzXYEhif96xj+o/OV8K+tsBa3llc4QqVNmc4A1+96Sac4vRAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T19:46:56.696624Z","bundle_sha256":"7513658a76cf515eddaae25c7f2aa5ac536a18e3d99df737fa04b7a45e8f235a"}}