{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:6TPS35M7326QL7GVGLYXRWDUER","short_pith_number":"pith:6TPS35M7","canonical_record":{"source":{"id":"2310.18762","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-10-28T17:18:38Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"94237fe4de4b348b4dda43e7b529a8d80927e742b88e8d5110ff9ee140deafe1","abstract_canon_sha256":"576ca0d531b9435b15f00b4bdf2efe6a1a5bac9fafc725b20ce22fa74e7a6dcd"},"schema_version":"1.0"},"canonical_sha256":"f4df2df59fdebd05fcd532f178d874247f7c596c2a339ee560c8909307fcf158","source":{"kind":"arxiv","id":"2310.18762","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.18762","created_at":"2026-07-05T07:06:40Z"},{"alias_kind":"arxiv_version","alias_value":"2310.18762v1","created_at":"2026-07-05T07:06:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.18762","created_at":"2026-07-05T07:06:40Z"},{"alias_kind":"pith_short_12","alias_value":"6TPS35M7326Q","created_at":"2026-07-05T07:06:40Z"},{"alias_kind":"pith_short_16","alias_value":"6TPS35M7326QL7GV","created_at":"2026-07-05T07:06:40Z"},{"alias_kind":"pith_short_8","alias_value":"6TPS35M7","created_at":"2026-07-05T07:06:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:6TPS35M7326QL7GVGLYXRWDUER","target":"record","payload":{"canonical_record":{"source":{"id":"2310.18762","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-10-28T17:18:38Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"94237fe4de4b348b4dda43e7b529a8d80927e742b88e8d5110ff9ee140deafe1","abstract_canon_sha256":"576ca0d531b9435b15f00b4bdf2efe6a1a5bac9fafc725b20ce22fa74e7a6dcd"},"schema_version":"1.0"},"canonical_sha256":"f4df2df59fdebd05fcd532f178d874247f7c596c2a339ee560c8909307fcf158","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:06:40.693376Z","signature_b64":"L41RovfNRC+wyWG375JzORXRNl+ekgFUEeMAbb6TiWySubqU0G50AEzgBJgQfKijJiQ0e8SPIJBTXulsK2MFDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f4df2df59fdebd05fcd532f178d874247f7c596c2a339ee560c8909307fcf158","last_reissued_at":"2026-07-05T07:06:40.692881Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:06:40.692881Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.18762","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:06:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aaQPSWpkIxjAYl3I/a3hL8pLyQXg1PDU7eEkWg2b6XMJYuuW2SscUIi1f1DDgd+lIJRaf4Mb/+EzHfNxaQ+QDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T09:31:29.692918Z"},"content_sha256":"11f0c7bc70815de682bd9af963bc084d7ad5ab22ef544bc86ae8653fb2191d6e","schema_version":"1.0","event_id":"sha256:11f0c7bc70815de682bd9af963bc084d7ad5ab22ef544bc86ae8653fb2191d6e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:6TPS35M7326QL7GVGLYXRWDUER","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Purify++: Improving Diffusion-Purification with Advanced Diffusion Models and Control of Randomness","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Boya Zhang, Weijian Luo, Zhihua Zhang","submitted_at":"2023-10-28T17:18:38Z","abstract_excerpt":"Adversarial attacks can mislead neural network classifiers. The defense against adversarial attacks is important for AI safety. Adversarial purification is a family of approaches that defend adversarial attacks with suitable pre-processing. Diffusion models have been shown to be effective for adversarial purification. Despite their success, many aspects of diffusion purification still remain unexplored. In this paper, we investigate and improve upon three limiting designs of diffusion purification: the use of an improved diffusion model, advanced numerical simulation techniques, and optimal co"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.18762","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.18762/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:06:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PBYBrdl9mdVTuCoaJHmIyCFHd7s+4MhNSdewSDfUzj/Rdh0ZLAMaIGgl8yQSJlDCStiS2Tt63lb+8LhRdHUqDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T09:31:29.693465Z"},"content_sha256":"46cd6befc2593010cce75ec7f4798eb639352be4502951e4f9b67d785d0985ec","schema_version":"1.0","event_id":"sha256:46cd6befc2593010cce75ec7f4798eb639352be4502951e4f9b67d785d0985ec"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6TPS35M7326QL7GVGLYXRWDUER/bundle.json","state_url":"https://pith.science/pith/6TPS35M7326QL7GVGLYXRWDUER/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6TPS35M7326QL7GVGLYXRWDUER/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T09:31:29Z","links":{"resolver":"https://pith.science/pith/6TPS35M7326QL7GVGLYXRWDUER","bundle":"https://pith.science/pith/6TPS35M7326QL7GVGLYXRWDUER/bundle.json","state":"https://pith.science/pith/6TPS35M7326QL7GVGLYXRWDUER/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6TPS35M7326QL7GVGLYXRWDUER/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:6TPS35M7326QL7GVGLYXRWDUER","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"576ca0d531b9435b15f00b4bdf2efe6a1a5bac9fafc725b20ce22fa74e7a6dcd","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-10-28T17:18:38Z","title_canon_sha256":"94237fe4de4b348b4dda43e7b529a8d80927e742b88e8d5110ff9ee140deafe1"},"schema_version":"1.0","source":{"id":"2310.18762","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.18762","created_at":"2026-07-05T07:06:40Z"},{"alias_kind":"arxiv_version","alias_value":"2310.18762v1","created_at":"2026-07-05T07:06:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.18762","created_at":"2026-07-05T07:06:40Z"},{"alias_kind":"pith_short_12","alias_value":"6TPS35M7326Q","created_at":"2026-07-05T07:06:40Z"},{"alias_kind":"pith_short_16","alias_value":"6TPS35M7326QL7GV","created_at":"2026-07-05T07:06:40Z"},{"alias_kind":"pith_short_8","alias_value":"6TPS35M7","created_at":"2026-07-05T07:06:40Z"}],"graph_snapshots":[{"event_id":"sha256:46cd6befc2593010cce75ec7f4798eb639352be4502951e4f9b67d785d0985ec","target":"graph","created_at":"2026-07-05T07:06:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.18762/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial attacks can mislead neural network classifiers. The defense against adversarial attacks is important for AI safety. Adversarial purification is a family of approaches that defend adversarial attacks with suitable pre-processing. Diffusion models have been shown to be effective for adversarial purification. Despite their success, many aspects of diffusion purification still remain unexplored. In this paper, we investigate and improve upon three limiting designs of diffusion purification: the use of an improved diffusion model, advanced numerical simulation techniques, and optimal co","authors_text":"Boya Zhang, Weijian Luo, Zhihua Zhang","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-10-28T17:18:38Z","title":"Purify++: Improving Diffusion-Purification with Advanced Diffusion Models and Control of Randomness"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.18762","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:11f0c7bc70815de682bd9af963bc084d7ad5ab22ef544bc86ae8653fb2191d6e","target":"record","created_at":"2026-07-05T07:06:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"576ca0d531b9435b15f00b4bdf2efe6a1a5bac9fafc725b20ce22fa74e7a6dcd","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-10-28T17:18:38Z","title_canon_sha256":"94237fe4de4b348b4dda43e7b529a8d80927e742b88e8d5110ff9ee140deafe1"},"schema_version":"1.0","source":{"id":"2310.18762","kind":"arxiv","version":1}},"canonical_sha256":"f4df2df59fdebd05fcd532f178d874247f7c596c2a339ee560c8909307fcf158","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f4df2df59fdebd05fcd532f178d874247f7c596c2a339ee560c8909307fcf158","first_computed_at":"2026-07-05T07:06:40.692881Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:06:40.692881Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"L41RovfNRC+wyWG375JzORXRNl+ekgFUEeMAbb6TiWySubqU0G50AEzgBJgQfKijJiQ0e8SPIJBTXulsK2MFDw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:06:40.693376Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.18762","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:11f0c7bc70815de682bd9af963bc084d7ad5ab22ef544bc86ae8653fb2191d6e","sha256:46cd6befc2593010cce75ec7f4798eb639352be4502951e4f9b67d785d0985ec"],"state_sha256":"a8988f66cf84092d41daf4a3e88fd09ee1b745bfee9087a9ec5c33d1034978cf"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"URKenrHcA8kSCvQwJNIRGcXkhoEfKc4fIyUJvPpBj52U8rvPfq4JBHUuv/Ajb84y2qfGjdFVi2E8GYSLvlM8CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T09:31:29.697095Z","bundle_sha256":"9b0659714ea5d7c52073b11dce997561092152c72d8380b25977d550abc3a8bc"}}