{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2020:A2OP47WKNB7CQ65IUNXDG5NEKA","short_pith_number":"pith:A2OP47WK","schema_version":"1.0","canonical_sha256":"069cfe7eca687e287ba8a36e3375a4500e40f512e150f5b9b7a2525972c59225","source":{"kind":"arxiv","id":"2010.01736","version":2},"attestation_state":"computed","paper":{"title":"Geometry-aware Instance-reweighted Adversarial Training","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Bo Han, Gang Niu, Jianing Zhu, Jingfeng Zhang, Masashi Sugiyama, Mohan Kankanhalli","submitted_at":"2020-10-05T01:33:11Z","abstract_excerpt":"In adversarial machine learning, there was a common belief that robustness and accuracy hurt each other. The belief was challenged by recent studies where we can maintain the robustness and improve the accuracy. However, the other direction, whether we can keep the accuracy while improving the robustness, is conceptually and practically more interesting, since robust accuracy should be lower than standard accuracy for any model. In this paper, we show this direction is also promising. Firstly, we find even over-parameterized deep networks may still have insufficient model capacity, because adv"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2010.01736","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-05T01:33:11Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"2695feed0ca6fbd9b4ad89510e138a0b56456dc3310e0ef906a81e636b1b0984","abstract_canon_sha256":"ba2a3c89919391603681b48e918b865648afc7568450b06a4bebf2d03db7ad2a"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:44:33.988823Z","signature_b64":"ClK81sT/5rnsuK+8idNDRBKFOi5AgoNd6Ut9Re+8gPwOgeDiPTJuZDPCa4dbNGUmRzafgeYmguxKPascWGWCBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"069cfe7eca687e287ba8a36e3375a4500e40f512e150f5b9b7a2525972c59225","last_reissued_at":"2026-07-05T02:44:33.988281Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:44:33.988281Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Geometry-aware Instance-reweighted Adversarial Training","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Bo Han, Gang Niu, Jianing Zhu, Jingfeng Zhang, Masashi Sugiyama, Mohan Kankanhalli","submitted_at":"2020-10-05T01:33:11Z","abstract_excerpt":"In adversarial machine learning, there was a common belief that robustness and accuracy hurt each other. The belief was challenged by recent studies where we can maintain the robustness and improve the accuracy. However, the other direction, whether we can keep the accuracy while improving the robustness, is conceptually and practically more interesting, since robust accuracy should be lower than standard accuracy for any model. In this paper, we show this direction is also promising. Firstly, we find even over-parameterized deep networks may still have insufficient model capacity, because adv"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.01736","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2010.01736/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2010.01736","created_at":"2026-07-05T02:44:33.988347+00:00"},{"alias_kind":"arxiv_version","alias_value":"2010.01736v2","created_at":"2026-07-05T02:44:33.988347+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.01736","created_at":"2026-07-05T02:44:33.988347+00:00"},{"alias_kind":"pith_short_12","alias_value":"A2OP47WKNB7C","created_at":"2026-07-05T02:44:33.988347+00:00"},{"alias_kind":"pith_short_16","alias_value":"A2OP47WKNB7CQ65I","created_at":"2026-07-05T02:44:33.988347+00:00"},{"alias_kind":"pith_short_8","alias_value":"A2OP47WK","created_at":"2026-07-05T02:44:33.988347+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/A2OP47WKNB7CQ65IUNXDG5NEKA","json":"https://pith.science/pith/A2OP47WKNB7CQ65IUNXDG5NEKA.json","graph_json":"https://pith.science/api/pith-number/A2OP47WKNB7CQ65IUNXDG5NEKA/graph.json","events_json":"https://pith.science/api/pith-number/A2OP47WKNB7CQ65IUNXDG5NEKA/events.json","paper":"https://pith.science/paper/A2OP47WK"},"agent_actions":{"view_html":"https://pith.science/pith/A2OP47WKNB7CQ65IUNXDG5NEKA","download_json":"https://pith.science/pith/A2OP47WKNB7CQ65IUNXDG5NEKA.json","view_paper":"https://pith.science/paper/A2OP47WK","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2010.01736&json=true","fetch_graph":"https://pith.science/api/pith-number/A2OP47WKNB7CQ65IUNXDG5NEKA/graph.json","fetch_events":"https://pith.science/api/pith-number/A2OP47WKNB7CQ65IUNXDG5NEKA/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/A2OP47WKNB7CQ65IUNXDG5NEKA/action/timestamp_anchor","attest_storage":"https://pith.science/pith/A2OP47WKNB7CQ65IUNXDG5NEKA/action/storage_attestation","attest_author":"https://pith.science/pith/A2OP47WKNB7CQ65IUNXDG5NEKA/action/author_attestation","sign_citation":"https://pith.science/pith/A2OP47WKNB7CQ65IUNXDG5NEKA/action/citation_signature","submit_replication":"https://pith.science/pith/A2OP47WKNB7CQ65IUNXDG5NEKA/action/replication_record"}},"created_at":"2026-07-05T02:44:33.988347+00:00","updated_at":"2026-07-05T02:44:33.988347+00:00"}