{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:AAPKDSHYGLNH5NQS256KTMWBNS","short_pith_number":"pith:AAPKDSHY","canonical_record":{"source":{"id":"2103.03000","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2021-03-04T12:48:28Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c4a6b9132498c230e1b4cabc758facfc304bd19ad76a81d2b30f214b252f0534","abstract_canon_sha256":"8dcf82ad0ca90673cc127c6827f0aee198fb560aa3c6172b19ef5e4e368ee451"},"schema_version":"1.0"},"canonical_sha256":"001ea1c8f832da7eb612d77ca9b2c16ca45e9acee9a3f5026759b90ea7ad01db","source":{"kind":"arxiv","id":"2103.03000","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.03000","created_at":"2026-07-05T02:45:36Z"},{"alias_kind":"arxiv_version","alias_value":"2103.03000v2","created_at":"2026-07-05T02:45:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.03000","created_at":"2026-07-05T02:45:36Z"},{"alias_kind":"pith_short_12","alias_value":"AAPKDSHYGLNH","created_at":"2026-07-05T02:45:36Z"},{"alias_kind":"pith_short_16","alias_value":"AAPKDSHYGLNH5NQS","created_at":"2026-07-05T02:45:36Z"},{"alias_kind":"pith_short_8","alias_value":"AAPKDSHY","created_at":"2026-07-05T02:45:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:AAPKDSHYGLNH5NQS256KTMWBNS","target":"record","payload":{"canonical_record":{"source":{"id":"2103.03000","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2021-03-04T12:48:28Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c4a6b9132498c230e1b4cabc758facfc304bd19ad76a81d2b30f214b252f0534","abstract_canon_sha256":"8dcf82ad0ca90673cc127c6827f0aee198fb560aa3c6172b19ef5e4e368ee451"},"schema_version":"1.0"},"canonical_sha256":"001ea1c8f832da7eb612d77ca9b2c16ca45e9acee9a3f5026759b90ea7ad01db","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:45:36.884849Z","signature_b64":"3ODjD+lwxQiFhnn8RnkiLiwt+kzW09F6G4bFIqNShq5ps9fiv3sTUWHeX+/EEXBK4AmBmnOLmpoD/tRpu2CPBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"001ea1c8f832da7eb612d77ca9b2c16ca45e9acee9a3f5026759b90ea7ad01db","last_reissued_at":"2026-07-05T02:45:36.884246Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:45:36.884246Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2103.03000","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:45:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"INZPkjYDdTe1stsklY0dIqTXOG89K4zHjpid2bQMeZZrd+QkWKA9RtUBn97AhGXgGxPyR1B0I9XgCzGwpj88Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T21:17:02.166788Z"},"content_sha256":"845d24bd398021f8727b2db4eed4aed289972e5253fd4312a098b9913bcc7063","schema_version":"1.0","event_id":"sha256:845d24bd398021f8727b2db4eed4aed289972e5253fd4312a098b9913bcc7063"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:AAPKDSHYGLNH5NQS256KTMWBNS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SpectralDefense: Detecting Adversarial Attacks on CNNs in the Fourier Domain","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Franz-Josef Pfreundt, Janis Keuper, Margret Keuper, Paula Harder","submitted_at":"2021-03-04T12:48:28Z","abstract_excerpt":"Despite the success of convolutional neural networks (CNNs) in many computer vision and image analysis tasks, they remain vulnerable against so-called adversarial attacks: Small, crafted perturbations in the input images can lead to false predictions. A possible defense is to detect adversarial examples. In this work, we show how analysis in the Fourier domain of input images and feature maps can be used to distinguish benign test samples from adversarial images. We propose two novel detection methods: Our first method employs the magnitude spectrum of the input images to detect an adversarial"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.03000","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2103.03000/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:45:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yh/K6UtmINqiLZasZrP2OEM7kqjczavOuRgjWPsYF/xQeWkJsXfEzW+R+6XtwsrUlZ4GVxYJOBwyn52qpQr1BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T21:17:02.167292Z"},"content_sha256":"365712cab1981266ec788f9bdffce92bee79528d763647637ccb577d59436a1b","schema_version":"1.0","event_id":"sha256:365712cab1981266ec788f9bdffce92bee79528d763647637ccb577d59436a1b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AAPKDSHYGLNH5NQS256KTMWBNS/bundle.json","state_url":"https://pith.science/pith/AAPKDSHYGLNH5NQS256KTMWBNS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AAPKDSHYGLNH5NQS256KTMWBNS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T21:17:02Z","links":{"resolver":"https://pith.science/pith/AAPKDSHYGLNH5NQS256KTMWBNS","bundle":"https://pith.science/pith/AAPKDSHYGLNH5NQS256KTMWBNS/bundle.json","state":"https://pith.science/pith/AAPKDSHYGLNH5NQS256KTMWBNS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AAPKDSHYGLNH5NQS256KTMWBNS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:AAPKDSHYGLNH5NQS256KTMWBNS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8dcf82ad0ca90673cc127c6827f0aee198fb560aa3c6172b19ef5e4e368ee451","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2021-03-04T12:48:28Z","title_canon_sha256":"c4a6b9132498c230e1b4cabc758facfc304bd19ad76a81d2b30f214b252f0534"},"schema_version":"1.0","source":{"id":"2103.03000","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.03000","created_at":"2026-07-05T02:45:36Z"},{"alias_kind":"arxiv_version","alias_value":"2103.03000v2","created_at":"2026-07-05T02:45:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.03000","created_at":"2026-07-05T02:45:36Z"},{"alias_kind":"pith_short_12","alias_value":"AAPKDSHYGLNH","created_at":"2026-07-05T02:45:36Z"},{"alias_kind":"pith_short_16","alias_value":"AAPKDSHYGLNH5NQS","created_at":"2026-07-05T02:45:36Z"},{"alias_kind":"pith_short_8","alias_value":"AAPKDSHY","created_at":"2026-07-05T02:45:36Z"}],"graph_snapshots":[{"event_id":"sha256:365712cab1981266ec788f9bdffce92bee79528d763647637ccb577d59436a1b","target":"graph","created_at":"2026-07-05T02:45:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2103.03000/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Despite the success of convolutional neural networks (CNNs) in many computer vision and image analysis tasks, they remain vulnerable against so-called adversarial attacks: Small, crafted perturbations in the input images can lead to false predictions. A possible defense is to detect adversarial examples. In this work, we show how analysis in the Fourier domain of input images and feature maps can be used to distinguish benign test samples from adversarial images. We propose two novel detection methods: Our first method employs the magnitude spectrum of the input images to detect an adversarial","authors_text":"Franz-Josef Pfreundt, Janis Keuper, Margret Keuper, Paula Harder","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2021-03-04T12:48:28Z","title":"SpectralDefense: Detecting Adversarial Attacks on CNNs in the Fourier Domain"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.03000","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:845d24bd398021f8727b2db4eed4aed289972e5253fd4312a098b9913bcc7063","target":"record","created_at":"2026-07-05T02:45:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8dcf82ad0ca90673cc127c6827f0aee198fb560aa3c6172b19ef5e4e368ee451","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2021-03-04T12:48:28Z","title_canon_sha256":"c4a6b9132498c230e1b4cabc758facfc304bd19ad76a81d2b30f214b252f0534"},"schema_version":"1.0","source":{"id":"2103.03000","kind":"arxiv","version":2}},"canonical_sha256":"001ea1c8f832da7eb612d77ca9b2c16ca45e9acee9a3f5026759b90ea7ad01db","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"001ea1c8f832da7eb612d77ca9b2c16ca45e9acee9a3f5026759b90ea7ad01db","first_computed_at":"2026-07-05T02:45:36.884246Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:45:36.884246Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"3ODjD+lwxQiFhnn8RnkiLiwt+kzW09F6G4bFIqNShq5ps9fiv3sTUWHeX+/EEXBK4AmBmnOLmpoD/tRpu2CPBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T02:45:36.884849Z","signed_message":"canonical_sha256_bytes"},"source_id":"2103.03000","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:845d24bd398021f8727b2db4eed4aed289972e5253fd4312a098b9913bcc7063","sha256:365712cab1981266ec788f9bdffce92bee79528d763647637ccb577d59436a1b"],"state_sha256":"575a3b6429faebc296254213bf99a8fd6aa8568f86dfaed695125be36d4df938"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0P4YmR2FqCcNCmE8itFYX8pW+VwMW1CU02+JyKNzx0DZG9d6Klhj1l+jUF/kkBbrg2K5SXwPu/30agtKFxQbBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T21:17:02.170930Z","bundle_sha256":"90c01456a5438a92e02ca4d52f85b3922ac56abd26d3dc3134fe2f1c8146f1b0"}}