{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:6DGRN642EFUDBJWF2VSH7MQYQY","short_pith_number":"pith:6DGRN642","canonical_record":{"source":{"id":"2303.11135","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-03-20T14:12:55Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"73590c25de5a08dadc270c2cc2386cb4eb3deff62dc1f4e85d6b7c67ca1feb32","abstract_canon_sha256":"3b427a259bb81b2a762fcfab3700b924f7ee0a2b9639621f39cda1909f4f1b24"},"schema_version":"1.0"},"canonical_sha256":"f0cd16fb9a216830a6c5d5647fb2188633c7120b9ab52315d3faada837d52b09","source":{"kind":"arxiv","id":"2303.11135","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.11135","created_at":"2026-07-05T05:52:40Z"},{"alias_kind":"arxiv_version","alias_value":"2303.11135v1","created_at":"2026-07-05T05:52:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.11135","created_at":"2026-07-05T05:52:40Z"},{"alias_kind":"pith_short_12","alias_value":"6DGRN642EFUD","created_at":"2026-07-05T05:52:40Z"},{"alias_kind":"pith_short_16","alias_value":"6DGRN642EFUDBJWF","created_at":"2026-07-05T05:52:40Z"},{"alias_kind":"pith_short_8","alias_value":"6DGRN642","created_at":"2026-07-05T05:52:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:6DGRN642EFUDBJWF2VSH7MQYQY","target":"record","payload":{"canonical_record":{"source":{"id":"2303.11135","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-03-20T14:12:55Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"73590c25de5a08dadc270c2cc2386cb4eb3deff62dc1f4e85d6b7c67ca1feb32","abstract_canon_sha256":"3b427a259bb81b2a762fcfab3700b924f7ee0a2b9639621f39cda1909f4f1b24"},"schema_version":"1.0"},"canonical_sha256":"f0cd16fb9a216830a6c5d5647fb2188633c7120b9ab52315d3faada837d52b09","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:52:40.741197Z","signature_b64":"5PvugpkdtrEx7lyAMIcuoxrIeJHYLHwZLyasA+N+09ImCeTabvGQLnHk/yy8hJMiUVoyCJW+qfdN859i38k6Dg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f0cd16fb9a216830a6c5d5647fb2188633c7120b9ab52315d3faada837d52b09","last_reissued_at":"2026-07-05T05:52:40.740754Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:52:40.740754Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2303.11135","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:52:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3A639ZXs3Zby5SbPTqdsUQ/juB8SH0PEP1Z36l2cvk3HmSTB5R8OGzLnITZmG1ovjSxAs05aZ6DC2CtuCxX4CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T07:37:58.578860Z"},"content_sha256":"cbec8c95a72144dc704f590a3e2b8fc67259b41142cd28165ba995297000e1e4","schema_version":"1.0","event_id":"sha256:cbec8c95a72144dc704f590a3e2b8fc67259b41142cd28165ba995297000e1e4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:6DGRN642EFUDBJWF2VSH7MQYQY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TWINS: A Fine-Tuning Framework for Improved Transferability of Adversarial Robustness and Generalization","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.LG","authors_text":"Antoni B. Chan, Xiangyang Ji, Yi Xu, Ziquan Liu","submitted_at":"2023-03-20T14:12:55Z","abstract_excerpt":"Recent years have seen the ever-increasing importance of pre-trained models and their downstream training in deep learning research and applications. At the same time, the defense for adversarial examples has been mainly investigated in the context of training from random initialization on simple classification tasks. To better exploit the potential of pre-trained models in adversarial robustness, this paper focuses on the fine-tuning of an adversarially pre-trained model in various classification tasks. Existing research has shown that since the robust pre-trained model has already learned a "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.11135","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2303.11135/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:52:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9GI3g1JNNCBM3foMCHmXj+5QOjkqU72XQdAT4OqhCPJOj0mFR88KpXqCbpAOzoa4aAfuYPLYLimjx9QMdi+xAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T07:37:58.579360Z"},"content_sha256":"490f64d1b372b69db399b812147e22ba67ad1ac6746bc61804c84aa9309799b8","schema_version":"1.0","event_id":"sha256:490f64d1b372b69db399b812147e22ba67ad1ac6746bc61804c84aa9309799b8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6DGRN642EFUDBJWF2VSH7MQYQY/bundle.json","state_url":"https://pith.science/pith/6DGRN642EFUDBJWF2VSH7MQYQY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6DGRN642EFUDBJWF2VSH7MQYQY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T07:37:58Z","links":{"resolver":"https://pith.science/pith/6DGRN642EFUDBJWF2VSH7MQYQY","bundle":"https://pith.science/pith/6DGRN642EFUDBJWF2VSH7MQYQY/bundle.json","state":"https://pith.science/pith/6DGRN642EFUDBJWF2VSH7MQYQY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6DGRN642EFUDBJWF2VSH7MQYQY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:6DGRN642EFUDBJWF2VSH7MQYQY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3b427a259bb81b2a762fcfab3700b924f7ee0a2b9639621f39cda1909f4f1b24","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-03-20T14:12:55Z","title_canon_sha256":"73590c25de5a08dadc270c2cc2386cb4eb3deff62dc1f4e85d6b7c67ca1feb32"},"schema_version":"1.0","source":{"id":"2303.11135","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.11135","created_at":"2026-07-05T05:52:40Z"},{"alias_kind":"arxiv_version","alias_value":"2303.11135v1","created_at":"2026-07-05T05:52:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.11135","created_at":"2026-07-05T05:52:40Z"},{"alias_kind":"pith_short_12","alias_value":"6DGRN642EFUD","created_at":"2026-07-05T05:52:40Z"},{"alias_kind":"pith_short_16","alias_value":"6DGRN642EFUDBJWF","created_at":"2026-07-05T05:52:40Z"},{"alias_kind":"pith_short_8","alias_value":"6DGRN642","created_at":"2026-07-05T05:52:40Z"}],"graph_snapshots":[{"event_id":"sha256:490f64d1b372b69db399b812147e22ba67ad1ac6746bc61804c84aa9309799b8","target":"graph","created_at":"2026-07-05T05:52:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2303.11135/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent years have seen the ever-increasing importance of pre-trained models and their downstream training in deep learning research and applications. At the same time, the defense for adversarial examples has been mainly investigated in the context of training from random initialization on simple classification tasks. To better exploit the potential of pre-trained models in adversarial robustness, this paper focuses on the fine-tuning of an adversarially pre-trained model in various classification tasks. Existing research has shown that since the robust pre-trained model has already learned a ","authors_text":"Antoni B. Chan, Xiangyang Ji, Yi Xu, Ziquan Liu","cross_cats":["cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-03-20T14:12:55Z","title":"TWINS: A Fine-Tuning Framework for Improved Transferability of Adversarial Robustness and Generalization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.11135","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cbec8c95a72144dc704f590a3e2b8fc67259b41142cd28165ba995297000e1e4","target":"record","created_at":"2026-07-05T05:52:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3b427a259bb81b2a762fcfab3700b924f7ee0a2b9639621f39cda1909f4f1b24","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-03-20T14:12:55Z","title_canon_sha256":"73590c25de5a08dadc270c2cc2386cb4eb3deff62dc1f4e85d6b7c67ca1feb32"},"schema_version":"1.0","source":{"id":"2303.11135","kind":"arxiv","version":1}},"canonical_sha256":"f0cd16fb9a216830a6c5d5647fb2188633c7120b9ab52315d3faada837d52b09","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f0cd16fb9a216830a6c5d5647fb2188633c7120b9ab52315d3faada837d52b09","first_computed_at":"2026-07-05T05:52:40.740754Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:52:40.740754Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5PvugpkdtrEx7lyAMIcuoxrIeJHYLHwZLyasA+N+09ImCeTabvGQLnHk/yy8hJMiUVoyCJW+qfdN859i38k6Dg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:52:40.741197Z","signed_message":"canonical_sha256_bytes"},"source_id":"2303.11135","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cbec8c95a72144dc704f590a3e2b8fc67259b41142cd28165ba995297000e1e4","sha256:490f64d1b372b69db399b812147e22ba67ad1ac6746bc61804c84aa9309799b8"],"state_sha256":"19a345fe5a4b19f1dde30e86a6c02388a0e6522abafcc663a48ffb04e63c34fb"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cMbTBqmjzcHMBr/PYwZov+/poBVfGfytQwJwy92pzDz4xMKpulkMrun8rUjMJYOXx21xlQjo764y9mVxrP+wDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T07:37:58.582941Z","bundle_sha256":"ad05a52b62369a270bf3e04a8f4fa12d676b9323feb5757e0fa760da50130138"}}