{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:CQQALJTHQ5SE6TX647ZV3F4YDO","short_pith_number":"pith:CQQALJTH","canonical_record":{"source":{"id":"2004.10162","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-04-21T17:17:09Z","cross_cats_sorted":["cs.CV","stat.ML"],"title_canon_sha256":"647d47567ae265f29cb81511873901ff903821286e7bcffb22e7fd7f91dc856f","abstract_canon_sha256":"3b805af1371f5deef7d1eddda21214eb3bcd601d9f8163932776575a85390262"},"schema_version":"1.0"},"canonical_sha256":"142005a66787644f4efee7f35d97981b8d76e2c36199b7416c79bdd12805c11b","source":{"kind":"arxiv","id":"2004.10162","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2004.10162","created_at":"2026-07-05T00:56:58Z"},{"alias_kind":"arxiv_version","alias_value":"2004.10162v1","created_at":"2026-07-05T00:56:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2004.10162","created_at":"2026-07-05T00:56:58Z"},{"alias_kind":"pith_short_12","alias_value":"CQQALJTHQ5SE","created_at":"2026-07-05T00:56:58Z"},{"alias_kind":"pith_short_16","alias_value":"CQQALJTHQ5SE6TX6","created_at":"2026-07-05T00:56:58Z"},{"alias_kind":"pith_short_8","alias_value":"CQQALJTH","created_at":"2026-07-05T00:56:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:CQQALJTHQ5SE6TX647ZV3F4YDO","target":"record","payload":{"canonical_record":{"source":{"id":"2004.10162","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-04-21T17:17:09Z","cross_cats_sorted":["cs.CV","stat.ML"],"title_canon_sha256":"647d47567ae265f29cb81511873901ff903821286e7bcffb22e7fd7f91dc856f","abstract_canon_sha256":"3b805af1371f5deef7d1eddda21214eb3bcd601d9f8163932776575a85390262"},"schema_version":"1.0"},"canonical_sha256":"142005a66787644f4efee7f35d97981b8d76e2c36199b7416c79bdd12805c11b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:56:58.012788Z","signature_b64":"e6SZGjdclg2MnXziKv4GPLwoJ8NIWtUB4J1TlF5hEJCUTtcUaPGIBHlWqDDDdwJKw3ihtu30tVxsKqSb5XbvBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"142005a66787644f4efee7f35d97981b8d76e2c36199b7416c79bdd12805c11b","last_reissued_at":"2026-07-05T00:56:58.012213Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:56:58.012213Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2004.10162","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:56:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4AdCr89f2GTfGT/0zseFKbFqwUri6HyvGQj2JAYVhdrwlLPU4JRTepJRstw94d/mW8nZqRG6bl2PZUpwP0NtCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T08:45:09.094093Z"},"content_sha256":"027b224c8d6f8847952ac7b7011ecf704a84c724040751972925a8a813e1ff45","schema_version":"1.0","event_id":"sha256:027b224c8d6f8847952ac7b7011ecf704a84c724040751972925a8a813e1ff45"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:CQQALJTHQ5SE6TX647ZV3F4YDO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"EMPIR: Ensembles of Mixed Precision Deep Networks for Increased Robustness against Adversarial Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","stat.ML"],"primary_cat":"cs.LG","authors_text":"Anand Raghunathan, Balaraman Ravindran, Sanchari Sen","submitted_at":"2020-04-21T17:17:09Z","abstract_excerpt":"Ensuring robustness of Deep Neural Networks (DNNs) is crucial to their adoption in safety-critical applications such as self-driving cars, drones, and healthcare. Notably, DNNs are vulnerable to adversarial attacks in which small input perturbations can produce catastrophic misclassifications. In this work, we propose EMPIR, ensembles of quantized DNN models with different numerical precisions, as a new approach to increase robustness against adversarial attacks. EMPIR is based on the observation that quantized neural networks often demonstrate much higher robustness to adversarial attacks tha"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2004.10162","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2004.10162/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:56:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"22PzZHjpjHNyFgKaaMD7rvE4UPkK+l3gjAngK1fLVzCXOtJhEs2WepXwqWZBMz91n1j2PYvU/56IBCWE+ttbBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T08:45:09.094611Z"},"content_sha256":"9fcba3d8cd1627f5401084092387b414b154e08d387fddcb4f04d279aa4aa6e6","schema_version":"1.0","event_id":"sha256:9fcba3d8cd1627f5401084092387b414b154e08d387fddcb4f04d279aa4aa6e6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CQQALJTHQ5SE6TX647ZV3F4YDO/bundle.json","state_url":"https://pith.science/pith/CQQALJTHQ5SE6TX647ZV3F4YDO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CQQALJTHQ5SE6TX647ZV3F4YDO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T08:45:09Z","links":{"resolver":"https://pith.science/pith/CQQALJTHQ5SE6TX647ZV3F4YDO","bundle":"https://pith.science/pith/CQQALJTHQ5SE6TX647ZV3F4YDO/bundle.json","state":"https://pith.science/pith/CQQALJTHQ5SE6TX647ZV3F4YDO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CQQALJTHQ5SE6TX647ZV3F4YDO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:CQQALJTHQ5SE6TX647ZV3F4YDO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3b805af1371f5deef7d1eddda21214eb3bcd601d9f8163932776575a85390262","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-04-21T17:17:09Z","title_canon_sha256":"647d47567ae265f29cb81511873901ff903821286e7bcffb22e7fd7f91dc856f"},"schema_version":"1.0","source":{"id":"2004.10162","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2004.10162","created_at":"2026-07-05T00:56:58Z"},{"alias_kind":"arxiv_version","alias_value":"2004.10162v1","created_at":"2026-07-05T00:56:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2004.10162","created_at":"2026-07-05T00:56:58Z"},{"alias_kind":"pith_short_12","alias_value":"CQQALJTHQ5SE","created_at":"2026-07-05T00:56:58Z"},{"alias_kind":"pith_short_16","alias_value":"CQQALJTHQ5SE6TX6","created_at":"2026-07-05T00:56:58Z"},{"alias_kind":"pith_short_8","alias_value":"CQQALJTH","created_at":"2026-07-05T00:56:58Z"}],"graph_snapshots":[{"event_id":"sha256:9fcba3d8cd1627f5401084092387b414b154e08d387fddcb4f04d279aa4aa6e6","target":"graph","created_at":"2026-07-05T00:56:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2004.10162/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Ensuring robustness of Deep Neural Networks (DNNs) is crucial to their adoption in safety-critical applications such as self-driving cars, drones, and healthcare. Notably, DNNs are vulnerable to adversarial attacks in which small input perturbations can produce catastrophic misclassifications. In this work, we propose EMPIR, ensembles of quantized DNN models with different numerical precisions, as a new approach to increase robustness against adversarial attacks. EMPIR is based on the observation that quantized neural networks often demonstrate much higher robustness to adversarial attacks tha","authors_text":"Anand Raghunathan, Balaraman Ravindran, Sanchari Sen","cross_cats":["cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-04-21T17:17:09Z","title":"EMPIR: Ensembles of Mixed Precision Deep Networks for Increased Robustness against Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2004.10162","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:027b224c8d6f8847952ac7b7011ecf704a84c724040751972925a8a813e1ff45","target":"record","created_at":"2026-07-05T00:56:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3b805af1371f5deef7d1eddda21214eb3bcd601d9f8163932776575a85390262","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-04-21T17:17:09Z","title_canon_sha256":"647d47567ae265f29cb81511873901ff903821286e7bcffb22e7fd7f91dc856f"},"schema_version":"1.0","source":{"id":"2004.10162","kind":"arxiv","version":1}},"canonical_sha256":"142005a66787644f4efee7f35d97981b8d76e2c36199b7416c79bdd12805c11b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"142005a66787644f4efee7f35d97981b8d76e2c36199b7416c79bdd12805c11b","first_computed_at":"2026-07-05T00:56:58.012213Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:56:58.012213Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"e6SZGjdclg2MnXziKv4GPLwoJ8NIWtUB4J1TlF5hEJCUTtcUaPGIBHlWqDDDdwJKw3ihtu30tVxsKqSb5XbvBg==","signature_status":"signed_v1","signed_at":"2026-07-05T00:56:58.012788Z","signed_message":"canonical_sha256_bytes"},"source_id":"2004.10162","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:027b224c8d6f8847952ac7b7011ecf704a84c724040751972925a8a813e1ff45","sha256:9fcba3d8cd1627f5401084092387b414b154e08d387fddcb4f04d279aa4aa6e6"],"state_sha256":"468e8a97d45d080dadca7b4fe99de3abef1e7b5e858f7e057cc22b7e879ab9e1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Gj3MM2qEJxlTtV783xpn5qyZHZozaFnxqctK/lsvkLDEffmK/wAWvIKuhvFY/wgDgmH7l/XMRqZETRhaDWr9CQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T08:45:09.099763Z","bundle_sha256":"51c3cf015b64f23d2250baa672dc4189dc104fd446319afeb7d4feb8e48b2f11"}}