{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:CMVMXG5GZWA2XVISAGMG25WGRP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3e180c79d86e32be4797fb42daf8d993e2e2b6323d7c4a79f37d25bf4e085798","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-28T06:58:05Z","title_canon_sha256":"41c081d2d6711fb5dc6f1486765f7e8afffe38d877a85caa7a6d15d9439daf02"},"schema_version":"1.0","source":{"id":"2506.02016","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.02016","created_at":"2026-07-05T11:14:30Z"},{"alias_kind":"arxiv_version","alias_value":"2506.02016v1","created_at":"2026-07-05T11:14:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.02016","created_at":"2026-07-05T11:14:30Z"},{"alias_kind":"pith_short_12","alias_value":"CMVMXG5GZWA2","created_at":"2026-07-05T11:14:30Z"},{"alias_kind":"pith_short_16","alias_value":"CMVMXG5GZWA2XVIS","created_at":"2026-07-05T11:14:30Z"},{"alias_kind":"pith_short_8","alias_value":"CMVMXG5G","created_at":"2026-07-05T11:14:30Z"}],"graph_snapshots":[{"event_id":"sha256:efb8f0dd74eac04defc5b330b485c81675b4fbd44ac92fd0db9ff2f5ad1709fa","target":"graph","created_at":"2026-07-05T11:14:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.02016/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial attacks have received increasing attention and it has been widely recognized that classical DNNs have weak adversarial robustness. The most commonly used adversarial defense method, adversarial training, improves the adversarial accuracy of DNNs by generating adversarial examples and retraining the model. However, adversarial training requires a significant computational overhead. In this paper, inspired by existing studies focusing on the clustering properties of DNN output features at each layer and the Progressive Feedforward Collapse phenomenon, we propose a method for adversar","authors_text":"Bin Yan, Dongyang Li, Lei Li, Linyuan Wang, Nuolin Sun","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-28T06:58:05Z","title":"Are classical deep neural networks weakly adversarially robust?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.02016","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:038e0976fe57bb091805de1524fe2e04e31f80135a17d4f97a340723337078ce","target":"record","created_at":"2026-07-05T11:14:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3e180c79d86e32be4797fb42daf8d993e2e2b6323d7c4a79f37d25bf4e085798","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-05-28T06:58:05Z","title_canon_sha256":"41c081d2d6711fb5dc6f1486765f7e8afffe38d877a85caa7a6d15d9439daf02"},"schema_version":"1.0","source":{"id":"2506.02016","kind":"arxiv","version":1}},"canonical_sha256":"132acb9ba6cd81abd51201986d76c68bc8ab32ca17130e20208f8825743b8ceb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"132acb9ba6cd81abd51201986d76c68bc8ab32ca17130e20208f8825743b8ceb","first_computed_at":"2026-07-05T11:14:30.994981Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:14:30.994981Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"eEKOkiu265lCD8IwZT7V1wPTgrC1rqOkM/2GDB59Eq7tw28RKO681hdIBiRAWBLasM9SVLy5B7JSVYj0nLdTCw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:14:30.995368Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.02016","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:038e0976fe57bb091805de1524fe2e04e31f80135a17d4f97a340723337078ce","sha256:efb8f0dd74eac04defc5b330b485c81675b4fbd44ac92fd0db9ff2f5ad1709fa"],"state_sha256":"255e937e6fda4a640d4fa806b1f37443e22185ad04793895d4c842dd32763d76"}