{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:7ODJYDEPXPULMGK3PTFFJYLDGQ","short_pith_number":"pith:7ODJYDEP","canonical_record":{"source":{"id":"2102.12002","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-02-24T00:54:43Z","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"title_canon_sha256":"a6be9408bc0c23ab8248292b7beab8644bab2fa5df1dfc0e75fcbe1a1d72f0c6","abstract_canon_sha256":"7316884aa10b0c32a669df70bcd386fd8bed1e106663b12c6197f77baa333c48"},"schema_version":"1.0"},"canonical_sha256":"fb869c0c8fbbe8b6195b7cca54e1633433342bf7e61fc0368b6b59d82a85fc70","source":{"kind":"arxiv","id":"2102.12002","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2102.12002","created_at":"2026-07-05T03:26:58Z"},{"alias_kind":"arxiv_version","alias_value":"2102.12002v4","created_at":"2026-07-05T03:26:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2102.12002","created_at":"2026-07-05T03:26:58Z"},{"alias_kind":"pith_short_12","alias_value":"7ODJYDEPXPUL","created_at":"2026-07-05T03:26:58Z"},{"alias_kind":"pith_short_16","alias_value":"7ODJYDEPXPULMGK3","created_at":"2026-07-05T03:26:58Z"},{"alias_kind":"pith_short_8","alias_value":"7ODJYDEP","created_at":"2026-07-05T03:26:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:7ODJYDEPXPULMGK3PTFFJYLDGQ","target":"record","payload":{"canonical_record":{"source":{"id":"2102.12002","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-02-24T00:54:43Z","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"title_canon_sha256":"a6be9408bc0c23ab8248292b7beab8644bab2fa5df1dfc0e75fcbe1a1d72f0c6","abstract_canon_sha256":"7316884aa10b0c32a669df70bcd386fd8bed1e106663b12c6197f77baa333c48"},"schema_version":"1.0"},"canonical_sha256":"fb869c0c8fbbe8b6195b7cca54e1633433342bf7e61fc0368b6b59d82a85fc70","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:26:58.912152Z","signature_b64":"MVqTnN3KEEkWywoC6ggeSV5oApNZgNPyuEc4OnMdm1FNuz53a07/6JSkychxwKPuNgnkuiur/E+gRxSPOqAKCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fb869c0c8fbbe8b6195b7cca54e1633433342bf7e61fc0368b6b59d82a85fc70","last_reissued_at":"2026-07-05T03:26:58.911674Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:26:58.911674Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2102.12002","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:26:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7+Yr09yOP5Whms1jkOS4GozHsuGGFzqCL8FxdZzf4FfIDer/06PcDAs0v/omZ2yz7LQbavyuZjAT0sxDmk4pAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T20:59:50.505023Z"},"content_sha256":"3c33f0b1594fd01511e2383aa559cb949575b6541b45cb6f31704e75ead25703","schema_version":"1.0","event_id":"sha256:3c33f0b1594fd01511e2383aa559cb949575b6541b45cb6f31704e75ead25703"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:7ODJYDEPXPULMGK3PTFFJYLDGQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Robustness with Non-uniform Perturbations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Ecenaz Erdemir, Jeffrey Bickford, Luca Melis, Sergul Aydore","submitted_at":"2021-02-24T00:54:43Z","abstract_excerpt":"Robustness of machine learning models is critical for security related applications, where real-world adversaries are uniquely focused on evading neural network based detectors. Prior work mainly focus on crafting adversarial examples (AEs) with small uniform norm-bounded perturbations across features to maintain the requirement of imperceptibility. However, uniform perturbations do not result in realistic AEs in domains such as malware, finance, and social networks. For these types of applications, features typically have some semantically meaningful dependencies. The key idea of our proposed"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2102.12002","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2102.12002/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:26:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DJwjHEMZsAChaS1b5IRoc2ZSCCoRkXPnrnRiAedNfwJVbOvYPkuE4NumeZtADOcSD0tNWJNKVCsV7q93jZnKDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T20:59:50.505437Z"},"content_sha256":"f63894ead765054c330ac235f739ecf09c8482d49476e65b6b671f73f5b1627c","schema_version":"1.0","event_id":"sha256:f63894ead765054c330ac235f739ecf09c8482d49476e65b6b671f73f5b1627c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7ODJYDEPXPULMGK3PTFFJYLDGQ/bundle.json","state_url":"https://pith.science/pith/7ODJYDEPXPULMGK3PTFFJYLDGQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7ODJYDEPXPULMGK3PTFFJYLDGQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T20:59:50Z","links":{"resolver":"https://pith.science/pith/7ODJYDEPXPULMGK3PTFFJYLDGQ","bundle":"https://pith.science/pith/7ODJYDEPXPULMGK3PTFFJYLDGQ/bundle.json","state":"https://pith.science/pith/7ODJYDEPXPULMGK3PTFFJYLDGQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7ODJYDEPXPULMGK3PTFFJYLDGQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:7ODJYDEPXPULMGK3PTFFJYLDGQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7316884aa10b0c32a669df70bcd386fd8bed1e106663b12c6197f77baa333c48","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-02-24T00:54:43Z","title_canon_sha256":"a6be9408bc0c23ab8248292b7beab8644bab2fa5df1dfc0e75fcbe1a1d72f0c6"},"schema_version":"1.0","source":{"id":"2102.12002","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2102.12002","created_at":"2026-07-05T03:26:58Z"},{"alias_kind":"arxiv_version","alias_value":"2102.12002v4","created_at":"2026-07-05T03:26:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2102.12002","created_at":"2026-07-05T03:26:58Z"},{"alias_kind":"pith_short_12","alias_value":"7ODJYDEPXPUL","created_at":"2026-07-05T03:26:58Z"},{"alias_kind":"pith_short_16","alias_value":"7ODJYDEPXPULMGK3","created_at":"2026-07-05T03:26:58Z"},{"alias_kind":"pith_short_8","alias_value":"7ODJYDEP","created_at":"2026-07-05T03:26:58Z"}],"graph_snapshots":[{"event_id":"sha256:f63894ead765054c330ac235f739ecf09c8482d49476e65b6b671f73f5b1627c","target":"graph","created_at":"2026-07-05T03:26:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2102.12002/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Robustness of machine learning models is critical for security related applications, where real-world adversaries are uniquely focused on evading neural network based detectors. Prior work mainly focus on crafting adversarial examples (AEs) with small uniform norm-bounded perturbations across features to maintain the requirement of imperceptibility. However, uniform perturbations do not result in realistic AEs in domains such as malware, finance, and social networks. For these types of applications, features typically have some semantically meaningful dependencies. The key idea of our proposed","authors_text":"Ecenaz Erdemir, Jeffrey Bickford, Luca Melis, Sergul Aydore","cross_cats":["cs.AI","cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-02-24T00:54:43Z","title":"Adversarial Robustness with Non-uniform Perturbations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2102.12002","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3c33f0b1594fd01511e2383aa559cb949575b6541b45cb6f31704e75ead25703","target":"record","created_at":"2026-07-05T03:26:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7316884aa10b0c32a669df70bcd386fd8bed1e106663b12c6197f77baa333c48","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-02-24T00:54:43Z","title_canon_sha256":"a6be9408bc0c23ab8248292b7beab8644bab2fa5df1dfc0e75fcbe1a1d72f0c6"},"schema_version":"1.0","source":{"id":"2102.12002","kind":"arxiv","version":4}},"canonical_sha256":"fb869c0c8fbbe8b6195b7cca54e1633433342bf7e61fc0368b6b59d82a85fc70","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fb869c0c8fbbe8b6195b7cca54e1633433342bf7e61fc0368b6b59d82a85fc70","first_computed_at":"2026-07-05T03:26:58.911674Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:26:58.911674Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MVqTnN3KEEkWywoC6ggeSV5oApNZgNPyuEc4OnMdm1FNuz53a07/6JSkychxwKPuNgnkuiur/E+gRxSPOqAKCA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:26:58.912152Z","signed_message":"canonical_sha256_bytes"},"source_id":"2102.12002","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3c33f0b1594fd01511e2383aa559cb949575b6541b45cb6f31704e75ead25703","sha256:f63894ead765054c330ac235f739ecf09c8482d49476e65b6b671f73f5b1627c"],"state_sha256":"6fea80572ec206d7081294c0e53036f49e5940a15f4c8a1697c77fd7a6089b43"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WXHCwcqjHqpWK2L8SqWbqO/zdG6RvZRW4vOLpVqHy6v1pzDoumIKbtzWR2DKB4e7Jm85Bf7uzFC3JwYJ5tusCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T20:59:50.507450Z","bundle_sha256":"d2b60659ad24d950fa11c5625157bdc7f26e22dff5c03a2e6a16e1211a3d5abf"}}