{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:BLQ32D5TNOHYYML4UMNFGGZQXB","short_pith_number":"pith:BLQ32D5T","canonical_record":{"source":{"id":"2210.05118","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-10-11T03:16:56Z","cross_cats_sorted":["cs.CV","stat.ML"],"title_canon_sha256":"a2f54033be4bca5f2c420e16f130038afa762344691ea233334bf02279ac3c3a","abstract_canon_sha256":"b948ec0dd7e51fa3b06a5f328326005e315debc49ec0aced767c3de659a58034"},"schema_version":"1.0"},"canonical_sha256":"0ae1bd0fb36b8f8c317ca31a531b30b87f8af31c1e35e4006f32f2995f44b725","source":{"kind":"arxiv","id":"2210.05118","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.05118","created_at":"2026-07-05T05:05:13Z"},{"alias_kind":"arxiv_version","alias_value":"2210.05118v1","created_at":"2026-07-05T05:05:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.05118","created_at":"2026-07-05T05:05:13Z"},{"alias_kind":"pith_short_12","alias_value":"BLQ32D5TNOHY","created_at":"2026-07-05T05:05:13Z"},{"alias_kind":"pith_short_16","alias_value":"BLQ32D5TNOHYYML4","created_at":"2026-07-05T05:05:13Z"},{"alias_kind":"pith_short_8","alias_value":"BLQ32D5T","created_at":"2026-07-05T05:05:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:BLQ32D5TNOHYYML4UMNFGGZQXB","target":"record","payload":{"canonical_record":{"source":{"id":"2210.05118","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-10-11T03:16:56Z","cross_cats_sorted":["cs.CV","stat.ML"],"title_canon_sha256":"a2f54033be4bca5f2c420e16f130038afa762344691ea233334bf02279ac3c3a","abstract_canon_sha256":"b948ec0dd7e51fa3b06a5f328326005e315debc49ec0aced767c3de659a58034"},"schema_version":"1.0"},"canonical_sha256":"0ae1bd0fb36b8f8c317ca31a531b30b87f8af31c1e35e4006f32f2995f44b725","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:05:13.102159Z","signature_b64":"PVsv1zOvHZ1Z1TE1+hiE5waXUvbhwM46neycd8vVvcwTfVB8QlxXC7BgvDqCwSATk6E3xd4xosIFBDAXvjy+DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0ae1bd0fb36b8f8c317ca31a531b30b87f8af31c1e35e4006f32f2995f44b725","last_reissued_at":"2026-07-05T05:05:13.101814Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:05:13.101814Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2210.05118","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:05:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jlPW47KB7BXV+VAXbeew+ubmLdIdfPyyv1nBs+aWQhJJWY9Ebdk6p/o0N4zqVWyqpSltNSDLe5dkEEiklJ5aCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T10:55:30.575367Z"},"content_sha256":"a12afaaa389beb4254dd92684b596b8bba814d1f2360fbf1b28cf0c91acab887","schema_version":"1.0","event_id":"sha256:a12afaaa389beb4254dd92684b596b8bba814d1f2360fbf1b28cf0c91acab887"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:BLQ32D5TNOHYYML4UMNFGGZQXB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Boosting Adversarial Robustness From The Perspective of Effective Margin Regularization","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CV","stat.ML"],"primary_cat":"cs.LG","authors_text":"Antoni B. Chan, Ziquan Liu","submitted_at":"2022-10-11T03:16:56Z","abstract_excerpt":"The adversarial vulnerability of deep neural networks (DNNs) has been actively investigated in the past several years. This paper investigates the scale-variant property of cross-entropy loss, which is the most commonly used loss function in classification tasks, and its impact on the effective margin and adversarial robustness of deep neural networks. Since the loss function is not invariant to logit scaling, increasing the effective weight norm will make the loss approach zero and its gradient vanish while the effective margin is not adequately maximized. On typical DNNs, we demonstrate that"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.05118","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2210.05118/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:05:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2ZejjJhLOHlEbtos5sYc4z9oVhuLvIACu5fb6bMONkhfxC4l8+dI7V0LKLMJWZReInYXo9m7IOmtyUv9MMQFDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T10:55:30.575938Z"},"content_sha256":"1f27f71ecf7780b188c4fe5e74c235740bc1db589d57192a4fb512ba83d3e4bc","schema_version":"1.0","event_id":"sha256:1f27f71ecf7780b188c4fe5e74c235740bc1db589d57192a4fb512ba83d3e4bc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BLQ32D5TNOHYYML4UMNFGGZQXB/bundle.json","state_url":"https://pith.science/pith/BLQ32D5TNOHYYML4UMNFGGZQXB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BLQ32D5TNOHYYML4UMNFGGZQXB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T10:55:30Z","links":{"resolver":"https://pith.science/pith/BLQ32D5TNOHYYML4UMNFGGZQXB","bundle":"https://pith.science/pith/BLQ32D5TNOHYYML4UMNFGGZQXB/bundle.json","state":"https://pith.science/pith/BLQ32D5TNOHYYML4UMNFGGZQXB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BLQ32D5TNOHYYML4UMNFGGZQXB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:BLQ32D5TNOHYYML4UMNFGGZQXB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b948ec0dd7e51fa3b06a5f328326005e315debc49ec0aced767c3de659a58034","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-10-11T03:16:56Z","title_canon_sha256":"a2f54033be4bca5f2c420e16f130038afa762344691ea233334bf02279ac3c3a"},"schema_version":"1.0","source":{"id":"2210.05118","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.05118","created_at":"2026-07-05T05:05:13Z"},{"alias_kind":"arxiv_version","alias_value":"2210.05118v1","created_at":"2026-07-05T05:05:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.05118","created_at":"2026-07-05T05:05:13Z"},{"alias_kind":"pith_short_12","alias_value":"BLQ32D5TNOHY","created_at":"2026-07-05T05:05:13Z"},{"alias_kind":"pith_short_16","alias_value":"BLQ32D5TNOHYYML4","created_at":"2026-07-05T05:05:13Z"},{"alias_kind":"pith_short_8","alias_value":"BLQ32D5T","created_at":"2026-07-05T05:05:13Z"}],"graph_snapshots":[{"event_id":"sha256:1f27f71ecf7780b188c4fe5e74c235740bc1db589d57192a4fb512ba83d3e4bc","target":"graph","created_at":"2026-07-05T05:05:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.05118/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The adversarial vulnerability of deep neural networks (DNNs) has been actively investigated in the past several years. This paper investigates the scale-variant property of cross-entropy loss, which is the most commonly used loss function in classification tasks, and its impact on the effective margin and adversarial robustness of deep neural networks. Since the loss function is not invariant to logit scaling, increasing the effective weight norm will make the loss approach zero and its gradient vanish while the effective margin is not adequately maximized. On typical DNNs, we demonstrate that","authors_text":"Antoni B. Chan, Ziquan Liu","cross_cats":["cs.CV","stat.ML"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-10-11T03:16:56Z","title":"Boosting Adversarial Robustness From The Perspective of Effective Margin Regularization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.05118","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a12afaaa389beb4254dd92684b596b8bba814d1f2360fbf1b28cf0c91acab887","target":"record","created_at":"2026-07-05T05:05:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b948ec0dd7e51fa3b06a5f328326005e315debc49ec0aced767c3de659a58034","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-10-11T03:16:56Z","title_canon_sha256":"a2f54033be4bca5f2c420e16f130038afa762344691ea233334bf02279ac3c3a"},"schema_version":"1.0","source":{"id":"2210.05118","kind":"arxiv","version":1}},"canonical_sha256":"0ae1bd0fb36b8f8c317ca31a531b30b87f8af31c1e35e4006f32f2995f44b725","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0ae1bd0fb36b8f8c317ca31a531b30b87f8af31c1e35e4006f32f2995f44b725","first_computed_at":"2026-07-05T05:05:13.101814Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:05:13.101814Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PVsv1zOvHZ1Z1TE1+hiE5waXUvbhwM46neycd8vVvcwTfVB8QlxXC7BgvDqCwSATk6E3xd4xosIFBDAXvjy+DA==","signature_status":"signed_v1","signed_at":"2026-07-05T05:05:13.102159Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.05118","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a12afaaa389beb4254dd92684b596b8bba814d1f2360fbf1b28cf0c91acab887","sha256:1f27f71ecf7780b188c4fe5e74c235740bc1db589d57192a4fb512ba83d3e4bc"],"state_sha256":"240a675e69dcc2ec0dcb18a78d06c2762810438986d2ff4e00a045d267c35401"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5j5WDIqfH5NWqMbPsrHsdnb8bzuSGx/eGtMd9tLaKVbv/sgePE9GlsHdHhw67L/bTuGacwCWDyjXoam2EYhZBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T10:55:30.579868Z","bundle_sha256":"ec947962ce69b357814ba2bdc177a9853df9ecfa3ad4a14bba50d10b552f9779"}}