{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:7LFDT27J4GQYWXH5P4I3TQ4EIN","short_pith_number":"pith:7LFDT27J","canonical_record":{"source":{"id":"1910.12163","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-10-27T01:57:16Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"dc8df800c5829e38f9530cf43608e5deec04b817f44b74b324a7afeef581adcf","abstract_canon_sha256":"a683d5b13ec3b7893396e2a1b76b2fa8ef044a7393b53d9c69e63ede81e0fdc2"},"schema_version":"1.0"},"canonical_sha256":"faca39ebe9e1a18b5cfd7f11b9c3844366fb7aab780626253d544dd204796f71","source":{"kind":"arxiv","id":"1910.12163","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1910.12163","created_at":"2026-07-05T00:15:13Z"},{"alias_kind":"arxiv_version","alias_value":"1910.12163v1","created_at":"2026-07-05T00:15:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1910.12163","created_at":"2026-07-05T00:15:13Z"},{"alias_kind":"pith_short_12","alias_value":"7LFDT27J4GQY","created_at":"2026-07-05T00:15:13Z"},{"alias_kind":"pith_short_16","alias_value":"7LFDT27J4GQYWXH5","created_at":"2026-07-05T00:15:13Z"},{"alias_kind":"pith_short_8","alias_value":"7LFDT27J","created_at":"2026-07-05T00:15:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:7LFDT27J4GQYWXH5P4I3TQ4EIN","target":"record","payload":{"canonical_record":{"source":{"id":"1910.12163","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-10-27T01:57:16Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"dc8df800c5829e38f9530cf43608e5deec04b817f44b74b324a7afeef581adcf","abstract_canon_sha256":"a683d5b13ec3b7893396e2a1b76b2fa8ef044a7393b53d9c69e63ede81e0fdc2"},"schema_version":"1.0"},"canonical_sha256":"faca39ebe9e1a18b5cfd7f11b9c3844366fb7aab780626253d544dd204796f71","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:15:13.565253Z","signature_b64":"LRTvwEfbLwHLp2YTyPy6+Mqp7fV+fBB7Hq2YSv0kDqjh6MZffZVMHTjY7rNZQV1t/+S1iH63J+G4m04MSmQ/BQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"faca39ebe9e1a18b5cfd7f11b9c3844366fb7aab780626253d544dd204796f71","last_reissued_at":"2026-07-05T00:15:13.564890Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:15:13.564890Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1910.12163","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:15:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5OnrqFE+rhpBRnCfTfTF0C21hsM3316woM0c0QJPlFUj/T11cADluATq1JcMcykaEOX4pKbGEJWWS3L9YVhHBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T03:46:17.503375Z"},"content_sha256":"e703f100909cde4468ba3b940aeb9c9a19e0fe1d53c05cd004021caa31a58d8f","schema_version":"1.0","event_id":"sha256:e703f100909cde4468ba3b940aeb9c9a19e0fe1d53c05cd004021caa31a58d8f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:7LFDT27J4GQYWXH5P4I3TQ4EIN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Understanding and Quantifying Adversarial Examples Existence in Linear Classification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"stat.ML","authors_text":"A. Adam Ding, Xupeng Shi","submitted_at":"2019-10-27T01:57:16Z","abstract_excerpt":"State-of-art deep neural networks (DNN) are vulnerable to attacks by adversarial examples: a carefully designed small perturbation to the input, that is imperceptible to human, can mislead DNN. To understand the root cause of adversarial examples, we quantify the probability of adversarial example existence for linear classifiers. Previous mathematical definition of adversarial examples only involves the overall perturbation amount, and we propose a more practical relevant definition of strong adversarial examples that separately limits the perturbation along the signal direction also. We show"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1910.12163","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1910.12163/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:15:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"68EsobaZrKI/IoiNsJldcS4f5zXkjl0MV7NLSI/vX61qnin8GMQR2GjhUX24oh/3ip0AxQB6ca588uQeXfYhDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T03:46:17.503897Z"},"content_sha256":"22dd0f6e29a449462f08b7789a9d52f3f77e2386400af541535a5e9fbd1240ee","schema_version":"1.0","event_id":"sha256:22dd0f6e29a449462f08b7789a9d52f3f77e2386400af541535a5e9fbd1240ee"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7LFDT27J4GQYWXH5P4I3TQ4EIN/bundle.json","state_url":"https://pith.science/pith/7LFDT27J4GQYWXH5P4I3TQ4EIN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7LFDT27J4GQYWXH5P4I3TQ4EIN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T03:46:17Z","links":{"resolver":"https://pith.science/pith/7LFDT27J4GQYWXH5P4I3TQ4EIN","bundle":"https://pith.science/pith/7LFDT27J4GQYWXH5P4I3TQ4EIN/bundle.json","state":"https://pith.science/pith/7LFDT27J4GQYWXH5P4I3TQ4EIN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7LFDT27J4GQYWXH5P4I3TQ4EIN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:7LFDT27J4GQYWXH5P4I3TQ4EIN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a683d5b13ec3b7893396e2a1b76b2fa8ef044a7393b53d9c69e63ede81e0fdc2","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-10-27T01:57:16Z","title_canon_sha256":"dc8df800c5829e38f9530cf43608e5deec04b817f44b74b324a7afeef581adcf"},"schema_version":"1.0","source":{"id":"1910.12163","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1910.12163","created_at":"2026-07-05T00:15:13Z"},{"alias_kind":"arxiv_version","alias_value":"1910.12163v1","created_at":"2026-07-05T00:15:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1910.12163","created_at":"2026-07-05T00:15:13Z"},{"alias_kind":"pith_short_12","alias_value":"7LFDT27J4GQY","created_at":"2026-07-05T00:15:13Z"},{"alias_kind":"pith_short_16","alias_value":"7LFDT27J4GQYWXH5","created_at":"2026-07-05T00:15:13Z"},{"alias_kind":"pith_short_8","alias_value":"7LFDT27J","created_at":"2026-07-05T00:15:13Z"}],"graph_snapshots":[{"event_id":"sha256:22dd0f6e29a449462f08b7789a9d52f3f77e2386400af541535a5e9fbd1240ee","target":"graph","created_at":"2026-07-05T00:15:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1910.12163/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"State-of-art deep neural networks (DNN) are vulnerable to attacks by adversarial examples: a carefully designed small perturbation to the input, that is imperceptible to human, can mislead DNN. To understand the root cause of adversarial examples, we quantify the probability of adversarial example existence for linear classifiers. Previous mathematical definition of adversarial examples only involves the overall perturbation amount, and we propose a more practical relevant definition of strong adversarial examples that separately limits the perturbation along the signal direction also. We show","authors_text":"A. Adam Ding, Xupeng Shi","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-10-27T01:57:16Z","title":"Understanding and Quantifying Adversarial Examples Existence in Linear Classification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1910.12163","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e703f100909cde4468ba3b940aeb9c9a19e0fe1d53c05cd004021caa31a58d8f","target":"record","created_at":"2026-07-05T00:15:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a683d5b13ec3b7893396e2a1b76b2fa8ef044a7393b53d9c69e63ede81e0fdc2","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-10-27T01:57:16Z","title_canon_sha256":"dc8df800c5829e38f9530cf43608e5deec04b817f44b74b324a7afeef581adcf"},"schema_version":"1.0","source":{"id":"1910.12163","kind":"arxiv","version":1}},"canonical_sha256":"faca39ebe9e1a18b5cfd7f11b9c3844366fb7aab780626253d544dd204796f71","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"faca39ebe9e1a18b5cfd7f11b9c3844366fb7aab780626253d544dd204796f71","first_computed_at":"2026-07-05T00:15:13.564890Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:15:13.564890Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LRTvwEfbLwHLp2YTyPy6+Mqp7fV+fBB7Hq2YSv0kDqjh6MZffZVMHTjY7rNZQV1t/+S1iH63J+G4m04MSmQ/BQ==","signature_status":"signed_v1","signed_at":"2026-07-05T00:15:13.565253Z","signed_message":"canonical_sha256_bytes"},"source_id":"1910.12163","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e703f100909cde4468ba3b940aeb9c9a19e0fe1d53c05cd004021caa31a58d8f","sha256:22dd0f6e29a449462f08b7789a9d52f3f77e2386400af541535a5e9fbd1240ee"],"state_sha256":"d35f49893e20cd7e6f98fb12a33affbf0af059976a4a4cf7341254fa956b832d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fys497u2VeAnBNZvSqTVO4Ep2r0xhgjKY42Xagk328NUiLPmdj/0j8O9mwX5ZtXhztGqAjCWT1eiMmK9FijzAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T03:46:17.509277Z","bundle_sha256":"ac2d7225e045541b3698cd49defa12fea99afbe0d3f6b81228c8fb3e9f79a331"}}