{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:DDGOMVPR3KQW4AGUNIZEWUH6EG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"87ea619402c8bf7e4355fd44b7cb81821d3d480c831ef1cfb343968673043986","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-01-24T01:04:25Z","title_canon_sha256":"b3d28018ef7a8873106eacd8705d64a5cf1ff4e858a9e9224dfa92a8a0f35a63"},"schema_version":"1.0","source":{"id":"2101.09617","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2101.09617","created_at":"2026-07-05T05:12:07Z"},{"alias_kind":"arxiv_version","alias_value":"2101.09617v2","created_at":"2026-07-05T05:12:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2101.09617","created_at":"2026-07-05T05:12:07Z"},{"alias_kind":"pith_short_12","alias_value":"DDGOMVPR3KQW","created_at":"2026-07-05T05:12:07Z"},{"alias_kind":"pith_short_16","alias_value":"DDGOMVPR3KQW4AGU","created_at":"2026-07-05T05:12:07Z"},{"alias_kind":"pith_short_8","alias_value":"DDGOMVPR","created_at":"2026-07-05T05:12:07Z"}],"graph_snapshots":[{"event_id":"sha256:d39d88838590a6c813774094583f6fec946f306ee68ad2f1a591f3131654ed40","target":"graph","created_at":"2026-07-05T05:12:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2101.09617/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) have achieved remarkable performance across a wide range of applications, while they are vulnerable to adversarial examples, which motivates the evaluation and benchmark of model robustness. However, current evaluations usually use simple metrics to study the performance of defenses, which are far from understanding the limitation and weaknesses of these defense methods. Thus, most proposed defenses are quickly shown to be attacked successfully, which results in the ``arm race'' phenomenon between attack and defense. To mitigate this problem, we establish a model ro","authors_text":"Aishan Liu, Gang Xiao, Jiakai Wang, Jian Dong, Jun Guo, Wei Bao, Wenjun Wu, Xianglong Liu, Xinghai Gao, Yuqing Ma","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-01-24T01:04:25Z","title":"A Comprehensive Evaluation Framework for Deep Model Robustness"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2101.09617","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ada03288c10d9e18280915c47bd51c3205c91b4eab7a50fd80f0406a9b406fc9","target":"record","created_at":"2026-07-05T05:12:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"87ea619402c8bf7e4355fd44b7cb81821d3d480c831ef1cfb343968673043986","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-01-24T01:04:25Z","title_canon_sha256":"b3d28018ef7a8873106eacd8705d64a5cf1ff4e858a9e9224dfa92a8a0f35a63"},"schema_version":"1.0","source":{"id":"2101.09617","kind":"arxiv","version":2}},"canonical_sha256":"18cce655f1daa16e00d46a324b50fe218eced6240c4526c480e7fedf5ae756b2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"18cce655f1daa16e00d46a324b50fe218eced6240c4526c480e7fedf5ae756b2","first_computed_at":"2026-07-05T05:12:07.658739Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:12:07.658739Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RQcSZXwZkRurz/Vqr84ygGsFl9Ho/McPmfaaKm1aFgXRObdgvCWAA7sXzF9QBqLfBBT9JGZgyJheyRAU4MKmBA==","signature_status":"signed_v1","signed_at":"2026-07-05T05:12:07.659282Z","signed_message":"canonical_sha256_bytes"},"source_id":"2101.09617","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ada03288c10d9e18280915c47bd51c3205c91b4eab7a50fd80f0406a9b406fc9","sha256:d39d88838590a6c813774094583f6fec946f306ee68ad2f1a591f3131654ed40"],"state_sha256":"37d058acf4dc94f5c94c90aedc6908ceaa66f1c5fa95e5df4639c8a26841dc45"}