{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:64DODCHCT3Z53CC5VSLQXSIVQF","short_pith_number":"pith:64DODCHC","canonical_record":{"source":{"id":"1808.03601","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-10T15:59:31Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"7b8c4b1ae1fff3a68c84306a8b5b309b17ecb80366ae5266ec6b5f0204ad8a5b","abstract_canon_sha256":"04320c1a179d00a882c95c23474ab213ea58e9aed5af9eacb345a4e000e1b2b0"},"schema_version":"1.0"},"canonical_sha256":"f706e188e29ef3dd885dac970bc9158169b70407b509f5b034c287af1277d4b6","source":{"kind":"arxiv","id":"1808.03601","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1808.03601","created_at":"2026-05-18T00:08:24Z"},{"alias_kind":"arxiv_version","alias_value":"1808.03601v1","created_at":"2026-05-18T00:08:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1808.03601","created_at":"2026-05-18T00:08:24Z"},{"alias_kind":"pith_short_12","alias_value":"64DODCHCT3Z5","created_at":"2026-05-18T12:32:08Z"},{"alias_kind":"pith_short_16","alias_value":"64DODCHCT3Z53CC5","created_at":"2026-05-18T12:32:08Z"},{"alias_kind":"pith_short_8","alias_value":"64DODCHC","created_at":"2026-05-18T12:32:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:64DODCHCT3Z53CC5VSLQXSIVQF","target":"record","payload":{"canonical_record":{"source":{"id":"1808.03601","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-10T15:59:31Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"7b8c4b1ae1fff3a68c84306a8b5b309b17ecb80366ae5266ec6b5f0204ad8a5b","abstract_canon_sha256":"04320c1a179d00a882c95c23474ab213ea58e9aed5af9eacb345a4e000e1b2b0"},"schema_version":"1.0"},"canonical_sha256":"f706e188e29ef3dd885dac970bc9158169b70407b509f5b034c287af1277d4b6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:08:24.586627Z","signature_b64":"gv29OsQH/L1BnJsBb4wCiYl5ldRSLL/BDBxOpGXPtqfTRnRV+7sy0exdPl+U+cTo4m6Ni0a3kQVDSFcEe1iPDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f706e188e29ef3dd885dac970bc9158169b70407b509f5b034c287af1277d4b6","last_reissued_at":"2026-05-18T00:08:24.586006Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:08:24.586006Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1808.03601","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:08:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vNi8ihYK7p95arHOtvnep2seZHMO13DGFF2F+vBMHjsHuZJhpG4rVEIoQtlInCeFYmTyc91dH/BQW0I+nrN/Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-02T04:19:48.540218Z"},"content_sha256":"0107ba631976203e032e363d52f438f8b8c98b337dd74026af32abde4b74e307","schema_version":"1.0","event_id":"sha256:0107ba631976203e032e363d52f438f8b8c98b337dd74026af32abde4b74e307"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:64DODCHCT3Z53CC5VSLQXSIVQF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Using Randomness to Improve Robustness of Machine-Learning Models Against Evasion Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","stat.ML"],"primary_cat":"cs.CR","authors_text":"Fan Yang, Zhiyuan Chen","submitted_at":"2018-08-10T15:59:31Z","abstract_excerpt":"Machine learning models have been widely used in security applications such as intrusion detection, spam filtering, and virus or malware detection. However, it is well-known that adversaries are always trying to adapt their attacks to evade detection. For example, an email spammer may guess what features spam detection models use and modify or remove those features to avoid detection. There has been some work on making machine learning models more robust to such attacks. However, one simple but promising approach called {\\em randomization} is underexplored. This paper proposes a novel randomiz"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1808.03601","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:08:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"h13+Ht3jn940cVQomFWkVG6T03szZJSBish7bxnYlC1Nxx1DORUH6deJIW26RaFISrwjyH2WFJxUQte8W+4VAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-02T04:19:48.540840Z"},"content_sha256":"9e88a5a7a468d2e25f15032689efae2d08d05ef97483fae745cd6c44a87b765a","schema_version":"1.0","event_id":"sha256:9e88a5a7a468d2e25f15032689efae2d08d05ef97483fae745cd6c44a87b765a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/64DODCHCT3Z53CC5VSLQXSIVQF/bundle.json","state_url":"https://pith.science/pith/64DODCHCT3Z53CC5VSLQXSIVQF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/64DODCHCT3Z53CC5VSLQXSIVQF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-02T04:19:48Z","links":{"resolver":"https://pith.science/pith/64DODCHCT3Z53CC5VSLQXSIVQF","bundle":"https://pith.science/pith/64DODCHCT3Z53CC5VSLQXSIVQF/bundle.json","state":"https://pith.science/pith/64DODCHCT3Z53CC5VSLQXSIVQF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/64DODCHCT3Z53CC5VSLQXSIVQF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:64DODCHCT3Z53CC5VSLQXSIVQF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"04320c1a179d00a882c95c23474ab213ea58e9aed5af9eacb345a4e000e1b2b0","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-10T15:59:31Z","title_canon_sha256":"7b8c4b1ae1fff3a68c84306a8b5b309b17ecb80366ae5266ec6b5f0204ad8a5b"},"schema_version":"1.0","source":{"id":"1808.03601","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1808.03601","created_at":"2026-05-18T00:08:24Z"},{"alias_kind":"arxiv_version","alias_value":"1808.03601v1","created_at":"2026-05-18T00:08:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1808.03601","created_at":"2026-05-18T00:08:24Z"},{"alias_kind":"pith_short_12","alias_value":"64DODCHCT3Z5","created_at":"2026-05-18T12:32:08Z"},{"alias_kind":"pith_short_16","alias_value":"64DODCHCT3Z53CC5","created_at":"2026-05-18T12:32:08Z"},{"alias_kind":"pith_short_8","alias_value":"64DODCHC","created_at":"2026-05-18T12:32:08Z"}],"graph_snapshots":[{"event_id":"sha256:9e88a5a7a468d2e25f15032689efae2d08d05ef97483fae745cd6c44a87b765a","target":"graph","created_at":"2026-05-18T00:08:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Machine learning models have been widely used in security applications such as intrusion detection, spam filtering, and virus or malware detection. However, it is well-known that adversaries are always trying to adapt their attacks to evade detection. For example, an email spammer may guess what features spam detection models use and modify or remove those features to avoid detection. There has been some work on making machine learning models more robust to such attacks. However, one simple but promising approach called {\\em randomization} is underexplored. This paper proposes a novel randomiz","authors_text":"Fan Yang, Zhiyuan Chen","cross_cats":["cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-10T15:59:31Z","title":"Using Randomness to Improve Robustness of Machine-Learning Models Against Evasion Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1808.03601","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0107ba631976203e032e363d52f438f8b8c98b337dd74026af32abde4b74e307","target":"record","created_at":"2026-05-18T00:08:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"04320c1a179d00a882c95c23474ab213ea58e9aed5af9eacb345a4e000e1b2b0","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-10T15:59:31Z","title_canon_sha256":"7b8c4b1ae1fff3a68c84306a8b5b309b17ecb80366ae5266ec6b5f0204ad8a5b"},"schema_version":"1.0","source":{"id":"1808.03601","kind":"arxiv","version":1}},"canonical_sha256":"f706e188e29ef3dd885dac970bc9158169b70407b509f5b034c287af1277d4b6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f706e188e29ef3dd885dac970bc9158169b70407b509f5b034c287af1277d4b6","first_computed_at":"2026-05-18T00:08:24.586006Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:08:24.586006Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gv29OsQH/L1BnJsBb4wCiYl5ldRSLL/BDBxOpGXPtqfTRnRV+7sy0exdPl+U+cTo4m6Ni0a3kQVDSFcEe1iPDw==","signature_status":"signed_v1","signed_at":"2026-05-18T00:08:24.586627Z","signed_message":"canonical_sha256_bytes"},"source_id":"1808.03601","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0107ba631976203e032e363d52f438f8b8c98b337dd74026af32abde4b74e307","sha256:9e88a5a7a468d2e25f15032689efae2d08d05ef97483fae745cd6c44a87b765a"],"state_sha256":"ee376fb7abe47a20fabca35cd8cf13761563c39fd506913fc88e858e73c5c543"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zgPyX5wrL+evYKQ4Db/TUVuTEjfpo60vi5lUlfrNc5xnBFho2Cz54ueseXdj4RmU43UXwl0lieotuFibtKgOCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-02T04:19:48.543592Z","bundle_sha256":"3229a6b4cb5aa0e1923a4fe08d4b1084bb45d571345c72ad06d9f86eb4ed991e"}}