{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:6CQH4QBLJM7BRJUCUZEQOS3HKC","short_pith_number":"pith:6CQH4QBL","canonical_record":{"source":{"id":"2010.12989","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-24T21:20:35Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"010c7cb6f873acc859761686fa81620b12a58ebb7022ae8182fc0bec2adfa12e","abstract_canon_sha256":"d11b71f0941cfc1f9764da3c1054ad7509d4b616990a6430590f48d220b99721"},"schema_version":"1.0"},"canonical_sha256":"f0a07e402b4b3e18a682a649074b6750b3a545e93dd4c11a7bdf87f7eca6f543","source":{"kind":"arxiv","id":"2010.12989","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.12989","created_at":"2026-07-05T01:45:50Z"},{"alias_kind":"arxiv_version","alias_value":"2010.12989v1","created_at":"2026-07-05T01:45:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.12989","created_at":"2026-07-05T01:45:50Z"},{"alias_kind":"pith_short_12","alias_value":"6CQH4QBLJM7B","created_at":"2026-07-05T01:45:50Z"},{"alias_kind":"pith_short_16","alias_value":"6CQH4QBLJM7BRJUC","created_at":"2026-07-05T01:45:50Z"},{"alias_kind":"pith_short_8","alias_value":"6CQH4QBL","created_at":"2026-07-05T01:45:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:6CQH4QBLJM7BRJUCUZEQOS3HKC","target":"record","payload":{"canonical_record":{"source":{"id":"2010.12989","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-24T21:20:35Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"010c7cb6f873acc859761686fa81620b12a58ebb7022ae8182fc0bec2adfa12e","abstract_canon_sha256":"d11b71f0941cfc1f9764da3c1054ad7509d4b616990a6430590f48d220b99721"},"schema_version":"1.0"},"canonical_sha256":"f0a07e402b4b3e18a682a649074b6750b3a545e93dd4c11a7bdf87f7eca6f543","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:45:50.562910Z","signature_b64":"aIIXEQOEj3gay4dfoIgtTP7SqY5RTBTBCzmMrUXTxw1fonneKDTXD/iqSQCEpamruIpf3WFG38D4I/pp+ESvAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f0a07e402b4b3e18a682a649074b6750b3a545e93dd4c11a7bdf87f7eca6f543","last_reissued_at":"2026-07-05T01:45:50.562551Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:45:50.562551Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2010.12989","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:45:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"X0Tl7WmosNSabHx1juCVUe66AuFKyIwqpbRKvUOWZQlsQYtu3BosQ0l/0PVuTWPDbOz9A0y/TpLljPg70Ro1AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T03:46:43.616747Z"},"content_sha256":"2cb166266f03013c45485d5ebb3ac85d0b81278464ac10e959f791ef51bfeb32","schema_version":"1.0","event_id":"sha256:2cb166266f03013c45485d5ebb3ac85d0b81278464ac10e959f791ef51bfeb32"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:6CQH4QBLJM7BRJUCUZEQOS3HKC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Are Adversarial Examples Created Equal? A Learnable Weighted Minimax Risk for Robustness under Non-uniform Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Chen Zhu, Furong Huang, Huimin Zeng, Tom Goldstein","submitted_at":"2020-10-24T21:20:35Z","abstract_excerpt":"Adversarial Training is proved to be an efficient method to defend against adversarial examples, being one of the few defenses that withstand strong attacks. However, traditional defense mechanisms assume a uniform attack over the examples according to the underlying data distribution, which is apparently unrealistic as the attacker could choose to focus on more vulnerable examples. We present a weighted minimax risk optimization that defends against non-uniform attacks, achieving robustness against adversarial examples under perturbed test data distributions. Our modified risk considers impor"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.12989","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2010.12989/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:45:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"d2pxGn13kC4NacuftjJWMXIg7yaBcHNcHO/ek9jlWuWH8JeT1VL+umzUIQSRRBMbgCO63x0I2FaVQJG89XDKCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T03:46:43.617168Z"},"content_sha256":"c730e60531621737229761696ef209758c936ae9a6168987b0e2f1e10fee4865","schema_version":"1.0","event_id":"sha256:c730e60531621737229761696ef209758c936ae9a6168987b0e2f1e10fee4865"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6CQH4QBLJM7BRJUCUZEQOS3HKC/bundle.json","state_url":"https://pith.science/pith/6CQH4QBLJM7BRJUCUZEQOS3HKC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6CQH4QBLJM7BRJUCUZEQOS3HKC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T03:46:43Z","links":{"resolver":"https://pith.science/pith/6CQH4QBLJM7BRJUCUZEQOS3HKC","bundle":"https://pith.science/pith/6CQH4QBLJM7BRJUCUZEQOS3HKC/bundle.json","state":"https://pith.science/pith/6CQH4QBLJM7BRJUCUZEQOS3HKC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6CQH4QBLJM7BRJUCUZEQOS3HKC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:6CQH4QBLJM7BRJUCUZEQOS3HKC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d11b71f0941cfc1f9764da3c1054ad7509d4b616990a6430590f48d220b99721","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-24T21:20:35Z","title_canon_sha256":"010c7cb6f873acc859761686fa81620b12a58ebb7022ae8182fc0bec2adfa12e"},"schema_version":"1.0","source":{"id":"2010.12989","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.12989","created_at":"2026-07-05T01:45:50Z"},{"alias_kind":"arxiv_version","alias_value":"2010.12989v1","created_at":"2026-07-05T01:45:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.12989","created_at":"2026-07-05T01:45:50Z"},{"alias_kind":"pith_short_12","alias_value":"6CQH4QBLJM7B","created_at":"2026-07-05T01:45:50Z"},{"alias_kind":"pith_short_16","alias_value":"6CQH4QBLJM7BRJUC","created_at":"2026-07-05T01:45:50Z"},{"alias_kind":"pith_short_8","alias_value":"6CQH4QBL","created_at":"2026-07-05T01:45:50Z"}],"graph_snapshots":[{"event_id":"sha256:c730e60531621737229761696ef209758c936ae9a6168987b0e2f1e10fee4865","target":"graph","created_at":"2026-07-05T01:45:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2010.12989/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial Training is proved to be an efficient method to defend against adversarial examples, being one of the few defenses that withstand strong attacks. However, traditional defense mechanisms assume a uniform attack over the examples according to the underlying data distribution, which is apparently unrealistic as the attacker could choose to focus on more vulnerable examples. We present a weighted minimax risk optimization that defends against non-uniform attacks, achieving robustness against adversarial examples under perturbed test data distributions. Our modified risk considers impor","authors_text":"Chen Zhu, Furong Huang, Huimin Zeng, Tom Goldstein","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-24T21:20:35Z","title":"Are Adversarial Examples Created Equal? A Learnable Weighted Minimax Risk for Robustness under Non-uniform Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.12989","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2cb166266f03013c45485d5ebb3ac85d0b81278464ac10e959f791ef51bfeb32","target":"record","created_at":"2026-07-05T01:45:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d11b71f0941cfc1f9764da3c1054ad7509d4b616990a6430590f48d220b99721","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-24T21:20:35Z","title_canon_sha256":"010c7cb6f873acc859761686fa81620b12a58ebb7022ae8182fc0bec2adfa12e"},"schema_version":"1.0","source":{"id":"2010.12989","kind":"arxiv","version":1}},"canonical_sha256":"f0a07e402b4b3e18a682a649074b6750b3a545e93dd4c11a7bdf87f7eca6f543","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f0a07e402b4b3e18a682a649074b6750b3a545e93dd4c11a7bdf87f7eca6f543","first_computed_at":"2026-07-05T01:45:50.562551Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:45:50.562551Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"aIIXEQOEj3gay4dfoIgtTP7SqY5RTBTBCzmMrUXTxw1fonneKDTXD/iqSQCEpamruIpf3WFG38D4I/pp+ESvAg==","signature_status":"signed_v1","signed_at":"2026-07-05T01:45:50.562910Z","signed_message":"canonical_sha256_bytes"},"source_id":"2010.12989","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2cb166266f03013c45485d5ebb3ac85d0b81278464ac10e959f791ef51bfeb32","sha256:c730e60531621737229761696ef209758c936ae9a6168987b0e2f1e10fee4865"],"state_sha256":"fc823ad9a30a816a9157828011be9e2c63e9e8dc7d6fa793f77429700084dcb0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zXxeP1MTj2yaxfjyWwPEuBBgkzZVLvKvI7DyRplr5zB4UzktBR6qc3GfNAIxvXS+WoMye7+cWndZwGDqUJwEDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T03:46:43.619933Z","bundle_sha256":"68e3a97e07cb99036505d6e1cb91fee1d683b23a2fef81abdfa445729254e430"}}