{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:6NMSPISR5Q3P6PPWMJRLKWTM44","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c80c453dcdf04fd2175c28fb1af171eaa904c21fcc178ab812dbacd462449668","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-12T21:22:21Z","title_canon_sha256":"40eb0131a4f251c9d88eda35933bb42dbcc64a0a1fbec5873a1b1a26d24dc810"},"schema_version":"1.0","source":{"id":"2404.10789","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.10789","created_at":"2026-07-05T08:59:27Z"},{"alias_kind":"arxiv_version","alias_value":"2404.10789v1","created_at":"2026-07-05T08:59:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.10789","created_at":"2026-07-05T08:59:27Z"},{"alias_kind":"pith_short_12","alias_value":"6NMSPISR5Q3P","created_at":"2026-07-05T08:59:27Z"},{"alias_kind":"pith_short_16","alias_value":"6NMSPISR5Q3P6PPW","created_at":"2026-07-05T08:59:27Z"},{"alias_kind":"pith_short_8","alias_value":"6NMSPISR","created_at":"2026-07-05T08:59:27Z"}],"graph_snapshots":[{"event_id":"sha256:d43ba9b7f57a2c1d8b4a2fe6e521a4fca91d336caf91169225325632558bc9e3","target":"graph","created_at":"2026-07-05T08:59:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.10789/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks for classification are vulnerable to adversarial attacks, where small perturbations to input samples lead to incorrect predictions. This susceptibility, combined with the black-box nature of such networks, limits their adoption in critical applications like autonomous driving. Feature-attribution-based explanation methods provide relevance of input features for model predictions on input samples, thus explaining model decisions. However, we observe that both model predictions and feature attributions for input samples are sensitive to noise. We develop a practical method f","authors_text":"Dipkamal Bhusal, Md Tanvirul Alam, Michael Clifford, Monish K. Veerabhadran, Nidhi Rastogi, Sara Rampazzi","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-12T21:22:21Z","title":"PASA: Attack Agnostic Unsupervised Adversarial Detection using Prediction & Attribution Sensitivity Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.10789","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ecd665746e4abd0c4130d6451150901e847e2646d8f3683d4f145b2792c41f7f","target":"record","created_at":"2026-07-05T08:59:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c80c453dcdf04fd2175c28fb1af171eaa904c21fcc178ab812dbacd462449668","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-12T21:22:21Z","title_canon_sha256":"40eb0131a4f251c9d88eda35933bb42dbcc64a0a1fbec5873a1b1a26d24dc810"},"schema_version":"1.0","source":{"id":"2404.10789","kind":"arxiv","version":1}},"canonical_sha256":"f35927a251ec36ff3df66262b55a6ce72b13ff8696aea4c0f4f300c69614a4a3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f35927a251ec36ff3df66262b55a6ce72b13ff8696aea4c0f4f300c69614a4a3","first_computed_at":"2026-07-05T08:59:27.371332Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:59:27.371332Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"I0Z3TaUSfDoM4RDfsfLpzcX1ROOIpps3GjTpeFu5ovSYF5qlBUep/dikVjD3bebmUI+pXVwaCYHL0WUEjjyCBw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:59:27.371879Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.10789","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ecd665746e4abd0c4130d6451150901e847e2646d8f3683d4f145b2792c41f7f","sha256:d43ba9b7f57a2c1d8b4a2fe6e521a4fca91d336caf91169225325632558bc9e3"],"state_sha256":"def36029e97d5ab4e85e1734529b0b1c7db2c04a4966576105d0ffee4431533e"}