{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:7HU2RGUSMCJEHCPBBISTLFK2H3","short_pith_number":"pith:7HU2RGUS","canonical_record":{"source":{"id":"2106.06196","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-06-11T06:55:02Z","cross_cats_sorted":[],"title_canon_sha256":"0a2ab0f7b85cc70bcb0474b7f5d744dd4634ba505bb85605350f2ea07f03d4bd","abstract_canon_sha256":"585bba4e976e2a312bcf4372dda7bc24dceab42519b3d7dcdc916c2f5bc5ae1e"},"schema_version":"1.0"},"canonical_sha256":"f9e9a89a9260924389e10a2535955a3ec660b1ff701ede6e5b32d2115e371043","source":{"kind":"arxiv","id":"2106.06196","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.06196","created_at":"2026-07-05T04:27:06Z"},{"alias_kind":"arxiv_version","alias_value":"2106.06196v2","created_at":"2026-07-05T04:27:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.06196","created_at":"2026-07-05T04:27:06Z"},{"alias_kind":"pith_short_12","alias_value":"7HU2RGUSMCJE","created_at":"2026-07-05T04:27:06Z"},{"alias_kind":"pith_short_16","alias_value":"7HU2RGUSMCJEHCPB","created_at":"2026-07-05T04:27:06Z"},{"alias_kind":"pith_short_8","alias_value":"7HU2RGUS","created_at":"2026-07-05T04:27:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:7HU2RGUSMCJEHCPBBISTLFK2H3","target":"record","payload":{"canonical_record":{"source":{"id":"2106.06196","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-06-11T06:55:02Z","cross_cats_sorted":[],"title_canon_sha256":"0a2ab0f7b85cc70bcb0474b7f5d744dd4634ba505bb85605350f2ea07f03d4bd","abstract_canon_sha256":"585bba4e976e2a312bcf4372dda7bc24dceab42519b3d7dcdc916c2f5bc5ae1e"},"schema_version":"1.0"},"canonical_sha256":"f9e9a89a9260924389e10a2535955a3ec660b1ff701ede6e5b32d2115e371043","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:27:06.016665Z","signature_b64":"NzDY/s0D2n2WaEw7U45Qr3vPpooL+jVNKkOyGsFO4FxtIT+ei19JV7q1Z0IBATcUcqvQ3maInbU6oC5knIJ3Cg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f9e9a89a9260924389e10a2535955a3ec660b1ff701ede6e5b32d2115e371043","last_reissued_at":"2026-07-05T04:27:06.016164Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:27:06.016164Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2106.06196","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:27:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+voVkXM6G10+sE5Ns9Elu4+lc9oyb7CxStPpTWM7SIPDLqZOOcNbhjQt3AHe1M6gTgsAVhCTgGv+Nq1io5gPBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T06:14:01.852189Z"},"content_sha256":"32d5267f80b1c175f49d5170ba95428bd217924066daa09b7c15a9be990d7cff","schema_version":"1.0","event_id":"sha256:32d5267f80b1c175f49d5170ba95428bd217924066daa09b7c15a9be990d7cff"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:7HU2RGUSMCJEHCPBBISTLFK2H3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"CausalAdv: Adversarial Robustness through the Lens of Causality","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Bernhard Sch\\\"olkopf, Bo Han, Gang Niu, Kun Zhang, Mingming Gong, Tongliang Liu, Xinmei Tian, Yonggang Zhang","submitted_at":"2021-06-11T06:55:02Z","abstract_excerpt":"The adversarial vulnerability of deep neural networks has attracted significant attention in machine learning. As causal reasoning has an instinct for modelling distribution change, it is essential to incorporate causality into analyzing this specific type of distribution change induced by adversarial attacks. However, causal formulations of the intuition of adversarial attacks and the development of robust DNNs are still lacking in the literature. To bridge this gap, we construct a causal graph to model the generation process of adversarial examples and define the adversarial distribution to "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.06196","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2106.06196/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:27:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tpi0uDUJzpv2LxAQWNfPDGiungyfyTz+xeWqQhWG+T8rshgsTkLhv6Nz0Roy0g+/uFWF0pMlB8HC25OdwXd/CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T06:14:01.852742Z"},"content_sha256":"c201047483934a9e5de151fbd681027c33edca493e353f6c292857196210cf72","schema_version":"1.0","event_id":"sha256:c201047483934a9e5de151fbd681027c33edca493e353f6c292857196210cf72"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7HU2RGUSMCJEHCPBBISTLFK2H3/bundle.json","state_url":"https://pith.science/pith/7HU2RGUSMCJEHCPBBISTLFK2H3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7HU2RGUSMCJEHCPBBISTLFK2H3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T06:14:01Z","links":{"resolver":"https://pith.science/pith/7HU2RGUSMCJEHCPBBISTLFK2H3","bundle":"https://pith.science/pith/7HU2RGUSMCJEHCPBBISTLFK2H3/bundle.json","state":"https://pith.science/pith/7HU2RGUSMCJEHCPBBISTLFK2H3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7HU2RGUSMCJEHCPBBISTLFK2H3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:7HU2RGUSMCJEHCPBBISTLFK2H3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"585bba4e976e2a312bcf4372dda7bc24dceab42519b3d7dcdc916c2f5bc5ae1e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-06-11T06:55:02Z","title_canon_sha256":"0a2ab0f7b85cc70bcb0474b7f5d744dd4634ba505bb85605350f2ea07f03d4bd"},"schema_version":"1.0","source":{"id":"2106.06196","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.06196","created_at":"2026-07-05T04:27:06Z"},{"alias_kind":"arxiv_version","alias_value":"2106.06196v2","created_at":"2026-07-05T04:27:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.06196","created_at":"2026-07-05T04:27:06Z"},{"alias_kind":"pith_short_12","alias_value":"7HU2RGUSMCJE","created_at":"2026-07-05T04:27:06Z"},{"alias_kind":"pith_short_16","alias_value":"7HU2RGUSMCJEHCPB","created_at":"2026-07-05T04:27:06Z"},{"alias_kind":"pith_short_8","alias_value":"7HU2RGUS","created_at":"2026-07-05T04:27:06Z"}],"graph_snapshots":[{"event_id":"sha256:c201047483934a9e5de151fbd681027c33edca493e353f6c292857196210cf72","target":"graph","created_at":"2026-07-05T04:27:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.06196/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The adversarial vulnerability of deep neural networks has attracted significant attention in machine learning. As causal reasoning has an instinct for modelling distribution change, it is essential to incorporate causality into analyzing this specific type of distribution change induced by adversarial attacks. However, causal formulations of the intuition of adversarial attacks and the development of robust DNNs are still lacking in the literature. To bridge this gap, we construct a causal graph to model the generation process of adversarial examples and define the adversarial distribution to ","authors_text":"Bernhard Sch\\\"olkopf, Bo Han, Gang Niu, Kun Zhang, Mingming Gong, Tongliang Liu, Xinmei Tian, Yonggang Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-06-11T06:55:02Z","title":"CausalAdv: Adversarial Robustness through the Lens of Causality"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.06196","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:32d5267f80b1c175f49d5170ba95428bd217924066daa09b7c15a9be990d7cff","target":"record","created_at":"2026-07-05T04:27:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"585bba4e976e2a312bcf4372dda7bc24dceab42519b3d7dcdc916c2f5bc5ae1e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-06-11T06:55:02Z","title_canon_sha256":"0a2ab0f7b85cc70bcb0474b7f5d744dd4634ba505bb85605350f2ea07f03d4bd"},"schema_version":"1.0","source":{"id":"2106.06196","kind":"arxiv","version":2}},"canonical_sha256":"f9e9a89a9260924389e10a2535955a3ec660b1ff701ede6e5b32d2115e371043","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f9e9a89a9260924389e10a2535955a3ec660b1ff701ede6e5b32d2115e371043","first_computed_at":"2026-07-05T04:27:06.016164Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:27:06.016164Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NzDY/s0D2n2WaEw7U45Qr3vPpooL+jVNKkOyGsFO4FxtIT+ei19JV7q1Z0IBATcUcqvQ3maInbU6oC5knIJ3Cg==","signature_status":"signed_v1","signed_at":"2026-07-05T04:27:06.016665Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.06196","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:32d5267f80b1c175f49d5170ba95428bd217924066daa09b7c15a9be990d7cff","sha256:c201047483934a9e5de151fbd681027c33edca493e353f6c292857196210cf72"],"state_sha256":"6c2878a966947010db0d7b54558f8041d0fcdc2ae0fb7805bd2fb89fb7c57cdd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"85U3+PodmSAQJZ92/gDLk0J+uW8LdUL2PUCmHRSO5si5erFMN0AdDCsWho5tQmhFlXc+V+d7r3/z+Qcsmv7cAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T06:14:01.856200Z","bundle_sha256":"fce57a2ec68d1cb1d452150748c4a6b0bac5ae90981696a765e4a06c2b330b8a"}}