{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:CAAWSORQAU54JAJ6IDMBB5LYQA","short_pith_number":"pith:CAAWSORQ","canonical_record":{"source":{"id":"2205.15130","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-05-30T14:22:10Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"60ffac157643a8d48536d4d540ac01c8f493fd6f88d7dc2b4971ac83af314915","abstract_canon_sha256":"8f04b494f67d0938febd1a6a6ef6350cc9b4c6837a49877e7b02fcedb3344837"},"schema_version":"1.0"},"canonical_sha256":"1001693a30053bc4813e40d810f578801fbf6429bbc664946fd3603b04135a71","source":{"kind":"arxiv","id":"2205.15130","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.15130","created_at":"2026-07-05T04:27:24Z"},{"alias_kind":"arxiv_version","alias_value":"2205.15130v1","created_at":"2026-07-05T04:27:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.15130","created_at":"2026-07-05T04:27:24Z"},{"alias_kind":"pith_short_12","alias_value":"CAAWSORQAU54","created_at":"2026-07-05T04:27:24Z"},{"alias_kind":"pith_short_16","alias_value":"CAAWSORQAU54JAJ6","created_at":"2026-07-05T04:27:24Z"},{"alias_kind":"pith_short_8","alias_value":"CAAWSORQ","created_at":"2026-07-05T04:27:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:CAAWSORQAU54JAJ6IDMBB5LYQA","target":"record","payload":{"canonical_record":{"source":{"id":"2205.15130","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-05-30T14:22:10Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"60ffac157643a8d48536d4d540ac01c8f493fd6f88d7dc2b4971ac83af314915","abstract_canon_sha256":"8f04b494f67d0938febd1a6a6ef6350cc9b4c6837a49877e7b02fcedb3344837"},"schema_version":"1.0"},"canonical_sha256":"1001693a30053bc4813e40d810f578801fbf6429bbc664946fd3603b04135a71","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:27:24.864287Z","signature_b64":"2VQ3oa4zD3/v+r4j2h4zB01tBHe5u6BxRJEOC7lq5F9V7s+oDNCoYjGdFkjFmHXu3ijWHicL/EMKC+utB7a/BQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1001693a30053bc4813e40d810f578801fbf6429bbc664946fd3603b04135a71","last_reissued_at":"2026-07-05T04:27:24.863799Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:27:24.863799Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2205.15130","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:27:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KKVa1Kz2mOZ5hr9ZHJZXqumXRgvsJ2TiuloxGsIDsecvgNhffeCtKbjJqgEeqfnNYUEa6FTOF5ofK8/tFVBVDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:01:18.989140Z"},"content_sha256":"2c99529c48ca5e6ee3c1b80cc9d85e5e25ac1637f006f9bd8dc9cd37a050795a","schema_version":"1.0","event_id":"sha256:2c99529c48ca5e6ee3c1b80cc9d85e5e25ac1637f006f9bd8dc9cd37a050795a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:CAAWSORQAU54JAJ6IDMBB5LYQA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Why Adversarial Training of ReLU Networks Is Difficult?","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CV"],"primary_cat":"cs.LG","authors_text":"Hao Zhang, Jie Ren, Quanshi Zhang, Wen Shen, Xu Cheng, Yue Xin","submitted_at":"2022-05-30T14:22:10Z","abstract_excerpt":"This paper mathematically derives an analytic solution of the adversarial perturbation on a ReLU network, and theoretically explains the difficulty of adversarial training. Specifically, we formulate the dynamics of the adversarial perturbation generated by the multi-step attack, which shows that the adversarial perturbation tends to strengthen eigenvectors corresponding to a few top-ranked eigenvalues of the Hessian matrix of the loss w.r.t. the input. We also prove that adversarial training tends to strengthen the influence of unconfident input samples with large gradient norms in an exponen"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.15130","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2205.15130/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:27:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mW2R+vgKW+zobBT0WPXzEoFhgROWiAvaAx5jwr3r3eQ22sZnPQFULoxlloGtj+3AwvdYw5hkeYvy/Mr8DPO/AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:01:18.989743Z"},"content_sha256":"8842494564a86d40322f518eba98a83ac15068f25ade6a71dbe4266e5ef4dd98","schema_version":"1.0","event_id":"sha256:8842494564a86d40322f518eba98a83ac15068f25ade6a71dbe4266e5ef4dd98"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CAAWSORQAU54JAJ6IDMBB5LYQA/bundle.json","state_url":"https://pith.science/pith/CAAWSORQAU54JAJ6IDMBB5LYQA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CAAWSORQAU54JAJ6IDMBB5LYQA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T18:01:18Z","links":{"resolver":"https://pith.science/pith/CAAWSORQAU54JAJ6IDMBB5LYQA","bundle":"https://pith.science/pith/CAAWSORQAU54JAJ6IDMBB5LYQA/bundle.json","state":"https://pith.science/pith/CAAWSORQAU54JAJ6IDMBB5LYQA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CAAWSORQAU54JAJ6IDMBB5LYQA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:CAAWSORQAU54JAJ6IDMBB5LYQA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8f04b494f67d0938febd1a6a6ef6350cc9b4c6837a49877e7b02fcedb3344837","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-05-30T14:22:10Z","title_canon_sha256":"60ffac157643a8d48536d4d540ac01c8f493fd6f88d7dc2b4971ac83af314915"},"schema_version":"1.0","source":{"id":"2205.15130","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.15130","created_at":"2026-07-05T04:27:24Z"},{"alias_kind":"arxiv_version","alias_value":"2205.15130v1","created_at":"2026-07-05T04:27:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.15130","created_at":"2026-07-05T04:27:24Z"},{"alias_kind":"pith_short_12","alias_value":"CAAWSORQAU54","created_at":"2026-07-05T04:27:24Z"},{"alias_kind":"pith_short_16","alias_value":"CAAWSORQAU54JAJ6","created_at":"2026-07-05T04:27:24Z"},{"alias_kind":"pith_short_8","alias_value":"CAAWSORQ","created_at":"2026-07-05T04:27:24Z"}],"graph_snapshots":[{"event_id":"sha256:8842494564a86d40322f518eba98a83ac15068f25ade6a71dbe4266e5ef4dd98","target":"graph","created_at":"2026-07-05T04:27:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2205.15130/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This paper mathematically derives an analytic solution of the adversarial perturbation on a ReLU network, and theoretically explains the difficulty of adversarial training. Specifically, we formulate the dynamics of the adversarial perturbation generated by the multi-step attack, which shows that the adversarial perturbation tends to strengthen eigenvectors corresponding to a few top-ranked eigenvalues of the Hessian matrix of the loss w.r.t. the input. We also prove that adversarial training tends to strengthen the influence of unconfident input samples with large gradient norms in an exponen","authors_text":"Hao Zhang, Jie Ren, Quanshi Zhang, Wen Shen, Xu Cheng, Yue Xin","cross_cats":["cs.AI","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-05-30T14:22:10Z","title":"Why Adversarial Training of ReLU Networks Is Difficult?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.15130","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2c99529c48ca5e6ee3c1b80cc9d85e5e25ac1637f006f9bd8dc9cd37a050795a","target":"record","created_at":"2026-07-05T04:27:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8f04b494f67d0938febd1a6a6ef6350cc9b4c6837a49877e7b02fcedb3344837","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-05-30T14:22:10Z","title_canon_sha256":"60ffac157643a8d48536d4d540ac01c8f493fd6f88d7dc2b4971ac83af314915"},"schema_version":"1.0","source":{"id":"2205.15130","kind":"arxiv","version":1}},"canonical_sha256":"1001693a30053bc4813e40d810f578801fbf6429bbc664946fd3603b04135a71","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1001693a30053bc4813e40d810f578801fbf6429bbc664946fd3603b04135a71","first_computed_at":"2026-07-05T04:27:24.863799Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:27:24.863799Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2VQ3oa4zD3/v+r4j2h4zB01tBHe5u6BxRJEOC7lq5F9V7s+oDNCoYjGdFkjFmHXu3ijWHicL/EMKC+utB7a/BQ==","signature_status":"signed_v1","signed_at":"2026-07-05T04:27:24.864287Z","signed_message":"canonical_sha256_bytes"},"source_id":"2205.15130","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2c99529c48ca5e6ee3c1b80cc9d85e5e25ac1637f006f9bd8dc9cd37a050795a","sha256:8842494564a86d40322f518eba98a83ac15068f25ade6a71dbe4266e5ef4dd98"],"state_sha256":"c72b3fe998b77cda21fefc36a7e9bf2121a3c567faee6478b7598386fcb24c4d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vEK73yl2F31oen0bHHjt5SHy4F4N4uI06Ew2GvD7LYnIVv35xCevSM6kVny8YhF6Fak+bSCaf7LPt5feOgRPDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T18:01:18.993891Z","bundle_sha256":"5eeca54d92c4afd5c0661b46c6942e61fda0ae47507a6e206240629ec82dec6f"}}