{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2017:5U6C7V3EGAXEIVH4GTV25WQWRB","short_pith_number":"pith:5U6C7V3E","schema_version":"1.0","canonical_sha256":"ed3c2fd764302e4454fc34ebaeda168853e73ec800db955b3b339d0ad592d25c","source":{"kind":"arxiv","id":"1709.10207","version":2},"attestation_state":"computed","paper":{"title":"Provably Minimally-Distorted Adversarial Examples","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Clark Barrett, David L. Dill, Guy Katz, Nicholas Carlini","submitted_at":"2017-09-29T00:57:12Z","abstract_excerpt":"The ability to deploy neural networks in real-world, safety-critical systems is severely limited by the presence of adversarial examples: slightly perturbed inputs that are misclassified by the network. In recent years, several techniques have been proposed for increasing robustness to adversarial examples --- and yet most of these have been quickly shown to be vulnerable to future attacks. For example, over half of the defenses proposed by papers accepted at ICLR 2018 have already been broken. We propose to address this difficulty through formal verification techniques. We show how to constru"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"1709.10207","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-09-29T00:57:12Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"8de692fbc504a3a65dc13fdc7ad28bc5ae2b3073d8b9ff881d9fd885f6f930b1","abstract_canon_sha256":"9effa2d10fa03564265bdc02a6680b18bc706f81d3287e56eee6253e65e9b306"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:22:58.502166Z","signature_b64":"PltTYjSdQ1yc8kTxb+RGeJufGPd5ywBiVzrduryPynkQPhNpoEUDzOiSiS4fLDo+uWnMPZzOmqkQ0vg9Lt6xAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ed3c2fd764302e4454fc34ebaeda168853e73ec800db955b3b339d0ad592d25c","last_reissued_at":"2026-05-18T00:22:58.501646Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:22:58.501646Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Provably Minimally-Distorted Adversarial Examples","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Clark Barrett, David L. Dill, Guy Katz, Nicholas Carlini","submitted_at":"2017-09-29T00:57:12Z","abstract_excerpt":"The ability to deploy neural networks in real-world, safety-critical systems is severely limited by the presence of adversarial examples: slightly perturbed inputs that are misclassified by the network. In recent years, several techniques have been proposed for increasing robustness to adversarial examples --- and yet most of these have been quickly shown to be vulnerable to future attacks. For example, over half of the defenses proposed by papers accepted at ICLR 2018 have already been broken. We propose to address this difficulty through formal verification techniques. We show how to constru"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1709.10207","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"1709.10207","created_at":"2026-05-18T00:22:58.501723+00:00"},{"alias_kind":"arxiv_version","alias_value":"1709.10207v2","created_at":"2026-05-18T00:22:58.501723+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1709.10207","created_at":"2026-05-18T00:22:58.501723+00:00"},{"alias_kind":"pith_short_12","alias_value":"5U6C7V3EGAXE","created_at":"2026-05-18T12:31:00.734936+00:00"},{"alias_kind":"pith_short_16","alias_value":"5U6C7V3EGAXEIVH4","created_at":"2026-05-18T12:31:00.734936+00:00"},{"alias_kind":"pith_short_8","alias_value":"5U6C7V3E","created_at":"2026-05-18T12:31:00.734936+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/5U6C7V3EGAXEIVH4GTV25WQWRB","json":"https://pith.science/pith/5U6C7V3EGAXEIVH4GTV25WQWRB.json","graph_json":"https://pith.science/api/pith-number/5U6C7V3EGAXEIVH4GTV25WQWRB/graph.json","events_json":"https://pith.science/api/pith-number/5U6C7V3EGAXEIVH4GTV25WQWRB/events.json","paper":"https://pith.science/paper/5U6C7V3E"},"agent_actions":{"view_html":"https://pith.science/pith/5U6C7V3EGAXEIVH4GTV25WQWRB","download_json":"https://pith.science/pith/5U6C7V3EGAXEIVH4GTV25WQWRB.json","view_paper":"https://pith.science/paper/5U6C7V3E","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=1709.10207&json=true","fetch_graph":"https://pith.science/api/pith-number/5U6C7V3EGAXEIVH4GTV25WQWRB/graph.json","fetch_events":"https://pith.science/api/pith-number/5U6C7V3EGAXEIVH4GTV25WQWRB/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/5U6C7V3EGAXEIVH4GTV25WQWRB/action/timestamp_anchor","attest_storage":"https://pith.science/pith/5U6C7V3EGAXEIVH4GTV25WQWRB/action/storage_attestation","attest_author":"https://pith.science/pith/5U6C7V3EGAXEIVH4GTV25WQWRB/action/author_attestation","sign_citation":"https://pith.science/pith/5U6C7V3EGAXEIVH4GTV25WQWRB/action/citation_signature","submit_replication":"https://pith.science/pith/5U6C7V3EGAXEIVH4GTV25WQWRB/action/replication_record"}},"created_at":"2026-05-18T00:22:58.501723+00:00","updated_at":"2026-05-18T00:22:58.501723+00:00"}