{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:DAB5YYTGVA662KFSQYSQRRDSWO","short_pith_number":"pith:DAB5YYTG","canonical_record":{"source":{"id":"1909.06723","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-09-15T03:35:18Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"03295714cffd49583dd13410047eeb8812d6c2a453e2520408885f7db6303536","abstract_canon_sha256":"230859e8a5a6212e14e6efb4839b93511a92a018cb9461bc95480e8f6d10ec38"},"schema_version":"1.0"},"canonical_sha256":"1803dc6266a83ded28b2862508c472b3bf03b441dca331b2d53653c5396604bb","source":{"kind":"arxiv","id":"1909.06723","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.06723","created_at":"2026-07-05T02:49:09Z"},{"alias_kind":"arxiv_version","alias_value":"1909.06723v4","created_at":"2026-07-05T02:49:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.06723","created_at":"2026-07-05T02:49:09Z"},{"alias_kind":"pith_short_12","alias_value":"DAB5YYTGVA66","created_at":"2026-07-05T02:49:09Z"},{"alias_kind":"pith_short_16","alias_value":"DAB5YYTGVA662KFS","created_at":"2026-07-05T02:49:09Z"},{"alias_kind":"pith_short_8","alias_value":"DAB5YYTG","created_at":"2026-07-05T02:49:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:DAB5YYTGVA662KFSQYSQRRDSWO","target":"record","payload":{"canonical_record":{"source":{"id":"1909.06723","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-09-15T03:35:18Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"03295714cffd49583dd13410047eeb8812d6c2a453e2520408885f7db6303536","abstract_canon_sha256":"230859e8a5a6212e14e6efb4839b93511a92a018cb9461bc95480e8f6d10ec38"},"schema_version":"1.0"},"canonical_sha256":"1803dc6266a83ded28b2862508c472b3bf03b441dca331b2d53653c5396604bb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:49:09.250272Z","signature_b64":"QO3NzDmYBVU3mXRrlo8p5m86UkQ/Zw9V9BkmovEPGqiV2fLhnW/WOhaudp9WLx5ucrSbTQMebB1ehwWhadw6Aw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1803dc6266a83ded28b2862508c472b3bf03b441dca331b2d53653c5396604bb","last_reissued_at":"2026-07-05T02:49:09.249767Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:49:09.249767Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1909.06723","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:49:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rMkF9A/qQhBSUSY02nvAmN9heDZJ3d5F+MU5QRkT53PdUJOaf2Nfl6mXDEv2fN5MTkP4bB5C42TsWiIfk2KgBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:07:54.106585Z"},"content_sha256":"13a4a4306949c6876bf23614bd96f8f976e84e631f8f7d8318731682b28cf524","schema_version":"1.0","event_id":"sha256:13a4a4306949c6876bf23614bd96f8f976e84e631f8f7d8318731682b28cf524"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:DAB5YYTGVA662KFSQYSQRRDSWO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Natural Language Adversarial Defense through Synonym Encoding","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CL","authors_text":"Hao Jin, Kun He, Xiaosen Wang, Yichen Yang","submitted_at":"2019-09-15T03:35:18Z","abstract_excerpt":"In the area of natural language processing, deep learning models are recently known to be vulnerable to various types of adversarial perturbations, but relatively few works are done on the defense side. Especially, there exists few effective defense method against the successful synonym substitution based attacks that preserve the syntactic structure and semantic information of the original text while fooling the deep learning models. We contribute in this direction and propose a novel adversarial defense method called Synonym Encoding Method (SEM). Specifically, SEM inserts an encoder before "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.06723","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1909.06723/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:49:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"I0hljgsGq97z3C+uOp6bktOt4EmyIF1SYvPzlat7x3DSoxZjPWDxE6b+4LZNqPamau2pZFyDP9csiMyv8TpACg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:07:54.107140Z"},"content_sha256":"84bb27bc62efe3456a77c984ae697f63402614adb22c16008d63d10bad1e04fc","schema_version":"1.0","event_id":"sha256:84bb27bc62efe3456a77c984ae697f63402614adb22c16008d63d10bad1e04fc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DAB5YYTGVA662KFSQYSQRRDSWO/bundle.json","state_url":"https://pith.science/pith/DAB5YYTGVA662KFSQYSQRRDSWO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DAB5YYTGVA662KFSQYSQRRDSWO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T18:07:54Z","links":{"resolver":"https://pith.science/pith/DAB5YYTGVA662KFSQYSQRRDSWO","bundle":"https://pith.science/pith/DAB5YYTGVA662KFSQYSQRRDSWO/bundle.json","state":"https://pith.science/pith/DAB5YYTGVA662KFSQYSQRRDSWO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DAB5YYTGVA662KFSQYSQRRDSWO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:DAB5YYTGVA662KFSQYSQRRDSWO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"230859e8a5a6212e14e6efb4839b93511a92a018cb9461bc95480e8f6d10ec38","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-09-15T03:35:18Z","title_canon_sha256":"03295714cffd49583dd13410047eeb8812d6c2a453e2520408885f7db6303536"},"schema_version":"1.0","source":{"id":"1909.06723","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.06723","created_at":"2026-07-05T02:49:09Z"},{"alias_kind":"arxiv_version","alias_value":"1909.06723v4","created_at":"2026-07-05T02:49:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.06723","created_at":"2026-07-05T02:49:09Z"},{"alias_kind":"pith_short_12","alias_value":"DAB5YYTGVA66","created_at":"2026-07-05T02:49:09Z"},{"alias_kind":"pith_short_16","alias_value":"DAB5YYTGVA662KFS","created_at":"2026-07-05T02:49:09Z"},{"alias_kind":"pith_short_8","alias_value":"DAB5YYTG","created_at":"2026-07-05T02:49:09Z"}],"graph_snapshots":[{"event_id":"sha256:84bb27bc62efe3456a77c984ae697f63402614adb22c16008d63d10bad1e04fc","target":"graph","created_at":"2026-07-05T02:49:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1909.06723/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In the area of natural language processing, deep learning models are recently known to be vulnerable to various types of adversarial perturbations, but relatively few works are done on the defense side. Especially, there exists few effective defense method against the successful synonym substitution based attacks that preserve the syntactic structure and semantic information of the original text while fooling the deep learning models. We contribute in this direction and propose a novel adversarial defense method called Synonym Encoding Method (SEM). Specifically, SEM inserts an encoder before ","authors_text":"Hao Jin, Kun He, Xiaosen Wang, Yichen Yang","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-09-15T03:35:18Z","title":"Natural Language Adversarial Defense through Synonym Encoding"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.06723","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:13a4a4306949c6876bf23614bd96f8f976e84e631f8f7d8318731682b28cf524","target":"record","created_at":"2026-07-05T02:49:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"230859e8a5a6212e14e6efb4839b93511a92a018cb9461bc95480e8f6d10ec38","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-09-15T03:35:18Z","title_canon_sha256":"03295714cffd49583dd13410047eeb8812d6c2a453e2520408885f7db6303536"},"schema_version":"1.0","source":{"id":"1909.06723","kind":"arxiv","version":4}},"canonical_sha256":"1803dc6266a83ded28b2862508c472b3bf03b441dca331b2d53653c5396604bb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1803dc6266a83ded28b2862508c472b3bf03b441dca331b2d53653c5396604bb","first_computed_at":"2026-07-05T02:49:09.249767Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:49:09.249767Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"QO3NzDmYBVU3mXRrlo8p5m86UkQ/Zw9V9BkmovEPGqiV2fLhnW/WOhaudp9WLx5ucrSbTQMebB1ehwWhadw6Aw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:49:09.250272Z","signed_message":"canonical_sha256_bytes"},"source_id":"1909.06723","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:13a4a4306949c6876bf23614bd96f8f976e84e631f8f7d8318731682b28cf524","sha256:84bb27bc62efe3456a77c984ae697f63402614adb22c16008d63d10bad1e04fc"],"state_sha256":"e9083d409d2b42591873e2a9e2f6e1cbcefe0158eea1dbde2e9aca6921a3d037"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"r2HlvKNZPh3WGDVbyKQ6q1LPZ2SnCFnbp60tCc7CjPv4bHL/zpEpkVFkWfZVP7K4FTiN6rDUyuFEyyUwOm3vAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T18:07:54.112066Z","bundle_sha256":"7f2d64dc7c1ff6d01917e2083e4da76bdadd30b5f3b759a8b06d4861a24986d2"}}