{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:B5MFEOBI2CDLG7BS3D6AE2QH5F","short_pith_number":"pith:B5MFEOBI","canonical_record":{"source":{"id":"2004.11488","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-04-23T23:19:00Z","cross_cats_sorted":["cs.CV","stat.ML"],"title_canon_sha256":"fc559e2551e00d7403ea26099956ef459d12e32db327156de93bdfae9a873487","abstract_canon_sha256":"451c4e5afeeadc9b4c5a28e8f4667fda7404c8e221cf7c070ccdc09bc85e5136"},"schema_version":"1.0"},"canonical_sha256":"0f58523828d086b37c32d8fc026a07e979c639a1ae24dc6cd9dbbde64b7b405d","source":{"kind":"arxiv","id":"2004.11488","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2004.11488","created_at":"2026-07-05T01:41:07Z"},{"alias_kind":"arxiv_version","alias_value":"2004.11488v2","created_at":"2026-07-05T01:41:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2004.11488","created_at":"2026-07-05T01:41:07Z"},{"alias_kind":"pith_short_12","alias_value":"B5MFEOBI2CDL","created_at":"2026-07-05T01:41:07Z"},{"alias_kind":"pith_short_16","alias_value":"B5MFEOBI2CDLG7BS","created_at":"2026-07-05T01:41:07Z"},{"alias_kind":"pith_short_8","alias_value":"B5MFEOBI","created_at":"2026-07-05T01:41:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:B5MFEOBI2CDLG7BS3D6AE2QH5F","target":"record","payload":{"canonical_record":{"source":{"id":"2004.11488","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-04-23T23:19:00Z","cross_cats_sorted":["cs.CV","stat.ML"],"title_canon_sha256":"fc559e2551e00d7403ea26099956ef459d12e32db327156de93bdfae9a873487","abstract_canon_sha256":"451c4e5afeeadc9b4c5a28e8f4667fda7404c8e221cf7c070ccdc09bc85e5136"},"schema_version":"1.0"},"canonical_sha256":"0f58523828d086b37c32d8fc026a07e979c639a1ae24dc6cd9dbbde64b7b405d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:41:07.855951Z","signature_b64":"+FeP+lJ2J8YFtkMGrgtH/ZX5+iDoBQ4FQmRAraM4NpiWyptnRx/I3bYVml5uAHUzhizOKO4igdmvCJMwXmG0BA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0f58523828d086b37c32d8fc026a07e979c639a1ae24dc6cd9dbbde64b7b405d","last_reissued_at":"2026-07-05T01:41:07.855541Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:41:07.855541Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2004.11488","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:41:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yPAyCrKqPbN2T1bS68+s4GW3LlWV6JCBq5fBOVZ80odZ1If1TLOPzwXLVPkLeILyYm8HrNQTIzPOi6R7K6WzCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T12:53:20.092061Z"},"content_sha256":"46ba9dec427c4dfc30616e7a8698902be6a77ca7f3784a67b26680ad41fd1095","schema_version":"1.0","event_id":"sha256:46ba9dec427c4dfc30616e7a8698902be6a77ca7f3784a67b26680ad41fd1095"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:B5MFEOBI2CDLG7BS3D6AE2QH5F","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Attacks and Defenses: An Interpretation Perspective","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","stat.ML"],"primary_cat":"cs.LG","authors_text":"Huan Liu, Mengnan Du, Ninghao Liu, Ruocheng Guo, Xia Hu","submitted_at":"2020-04-23T23:19:00Z","abstract_excerpt":"Despite the recent advances in a wide spectrum of applications, machine learning models, especially deep neural networks, have been shown to be vulnerable to adversarial attacks. Attackers add carefully-crafted perturbations to input, where the perturbations are almost imperceptible to humans, but can cause models to make wrong predictions. Techniques to protect models against adversarial input are called adversarial defense methods. Although many approaches have been proposed to study adversarial attacks and defenses in different scenarios, an intriguing and crucial challenge remains that how"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2004.11488","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2004.11488/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:41:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5RUa8sn2DHnQfu7V7Ah5lXtTlOXTIovGrBNPcgb/MiIcHBF1b1o1SLiJEozNCPBSB225JVN/i2Mq7K2przBkDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T12:53:20.092558Z"},"content_sha256":"6a3b49d9deb02305a9495de787a1329646007313f5151e6efc64cbca94ea4da3","schema_version":"1.0","event_id":"sha256:6a3b49d9deb02305a9495de787a1329646007313f5151e6efc64cbca94ea4da3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/B5MFEOBI2CDLG7BS3D6AE2QH5F/bundle.json","state_url":"https://pith.science/pith/B5MFEOBI2CDLG7BS3D6AE2QH5F/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/B5MFEOBI2CDLG7BS3D6AE2QH5F/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T12:53:20Z","links":{"resolver":"https://pith.science/pith/B5MFEOBI2CDLG7BS3D6AE2QH5F","bundle":"https://pith.science/pith/B5MFEOBI2CDLG7BS3D6AE2QH5F/bundle.json","state":"https://pith.science/pith/B5MFEOBI2CDLG7BS3D6AE2QH5F/state.json","well_known_bundle":"https://pith.science/.well-known/pith/B5MFEOBI2CDLG7BS3D6AE2QH5F/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:B5MFEOBI2CDLG7BS3D6AE2QH5F","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"451c4e5afeeadc9b4c5a28e8f4667fda7404c8e221cf7c070ccdc09bc85e5136","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-04-23T23:19:00Z","title_canon_sha256":"fc559e2551e00d7403ea26099956ef459d12e32db327156de93bdfae9a873487"},"schema_version":"1.0","source":{"id":"2004.11488","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2004.11488","created_at":"2026-07-05T01:41:07Z"},{"alias_kind":"arxiv_version","alias_value":"2004.11488v2","created_at":"2026-07-05T01:41:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2004.11488","created_at":"2026-07-05T01:41:07Z"},{"alias_kind":"pith_short_12","alias_value":"B5MFEOBI2CDL","created_at":"2026-07-05T01:41:07Z"},{"alias_kind":"pith_short_16","alias_value":"B5MFEOBI2CDLG7BS","created_at":"2026-07-05T01:41:07Z"},{"alias_kind":"pith_short_8","alias_value":"B5MFEOBI","created_at":"2026-07-05T01:41:07Z"}],"graph_snapshots":[{"event_id":"sha256:6a3b49d9deb02305a9495de787a1329646007313f5151e6efc64cbca94ea4da3","target":"graph","created_at":"2026-07-05T01:41:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2004.11488/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Despite the recent advances in a wide spectrum of applications, machine learning models, especially deep neural networks, have been shown to be vulnerable to adversarial attacks. Attackers add carefully-crafted perturbations to input, where the perturbations are almost imperceptible to humans, but can cause models to make wrong predictions. Techniques to protect models against adversarial input are called adversarial defense methods. Although many approaches have been proposed to study adversarial attacks and defenses in different scenarios, an intriguing and crucial challenge remains that how","authors_text":"Huan Liu, Mengnan Du, Ninghao Liu, Ruocheng Guo, Xia Hu","cross_cats":["cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-04-23T23:19:00Z","title":"Adversarial Attacks and Defenses: An Interpretation Perspective"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2004.11488","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:46ba9dec427c4dfc30616e7a8698902be6a77ca7f3784a67b26680ad41fd1095","target":"record","created_at":"2026-07-05T01:41:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"451c4e5afeeadc9b4c5a28e8f4667fda7404c8e221cf7c070ccdc09bc85e5136","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-04-23T23:19:00Z","title_canon_sha256":"fc559e2551e00d7403ea26099956ef459d12e32db327156de93bdfae9a873487"},"schema_version":"1.0","source":{"id":"2004.11488","kind":"arxiv","version":2}},"canonical_sha256":"0f58523828d086b37c32d8fc026a07e979c639a1ae24dc6cd9dbbde64b7b405d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0f58523828d086b37c32d8fc026a07e979c639a1ae24dc6cd9dbbde64b7b405d","first_computed_at":"2026-07-05T01:41:07.855541Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:41:07.855541Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+FeP+lJ2J8YFtkMGrgtH/ZX5+iDoBQ4FQmRAraM4NpiWyptnRx/I3bYVml5uAHUzhizOKO4igdmvCJMwXmG0BA==","signature_status":"signed_v1","signed_at":"2026-07-05T01:41:07.855951Z","signed_message":"canonical_sha256_bytes"},"source_id":"2004.11488","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:46ba9dec427c4dfc30616e7a8698902be6a77ca7f3784a67b26680ad41fd1095","sha256:6a3b49d9deb02305a9495de787a1329646007313f5151e6efc64cbca94ea4da3"],"state_sha256":"a26e931282775c28452b930bf1f9eaacdbd1e929a7fba0ac1f3488781b2b3c27"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Yh1uSybRffvs2kQjN+YBt7A+evlUbPxQMo9JZjOZef/7cy3mk7infBZ1Jt6+BLhca9Fxqj0tCoRtm3uuwfhvBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T12:53:20.096481Z","bundle_sha256":"e31f589ea5c0ab55d4d0e12ae9a171a8b72a4ee4cd04dcab8d6dbf857aea37bc"}}