{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:DMTO57UV24RRPXXR3ZEYMVOVCU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a75a371c8a3e3da4ad72e5197a67fad05d11b29095a30c02bd622a647ea9dd9f","cross_cats_sorted":["stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2020-03-19T17:05:51Z","title_canon_sha256":"4fea0b900cb22e19178add0df44725a485da824d4e3bb30b6fc5ae64e3573960"},"schema_version":"1.0","source":{"id":"2003.08904","kind":"arxiv","version":8}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2003.08904","created_at":"2026-07-05T06:37:09Z"},{"alias_kind":"arxiv_version","alias_value":"2003.08904v8","created_at":"2026-07-05T06:37:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2003.08904","created_at":"2026-07-05T06:37:09Z"},{"alias_kind":"pith_short_12","alias_value":"DMTO57UV24RR","created_at":"2026-07-05T06:37:09Z"},{"alias_kind":"pith_short_16","alias_value":"DMTO57UV24RRPXXR","created_at":"2026-07-05T06:37:09Z"},{"alias_kind":"pith_short_8","alias_value":"DMTO57UV","created_at":"2026-07-05T06:37:09Z"}],"graph_snapshots":[{"event_id":"sha256:32743d3c071837944d233b472899619a2dd09a087820f697f2ea96fe10e37863","target":"graph","created_at":"2026-07-05T06:37:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2003.08904/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent studies have shown that deep neural networks (DNNs) are vulnerable to adversarial attacks, including evasion and backdoor (poisoning) attacks. On the defense side, there have been intensive efforts on improving both empirical and provable robustness against evasion attacks; however, the provable robustness against backdoor attacks still remains largely unexplored. In this paper, we focus on certifying the machine learning model robustness against general threat models, especially backdoor attacks. We first provide a unified framework via randomized smoothing techniques and show how it c","authors_text":"Bojan Karla\\v{s}, Bo Li, Ce Zhang, Maurice Weber, Xiaojun Xu","cross_cats":["stat.ML"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2020-03-19T17:05:51Z","title":"RAB: Provable Robustness Against Backdoor Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2003.08904","kind":"arxiv","version":8},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:be6e75c639c3324dd1d2fdfda02895d02fb42b4ffbdd4b331708e6eba15b92e4","target":"record","created_at":"2026-07-05T06:37:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a75a371c8a3e3da4ad72e5197a67fad05d11b29095a30c02bd622a647ea9dd9f","cross_cats_sorted":["stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2020-03-19T17:05:51Z","title_canon_sha256":"4fea0b900cb22e19178add0df44725a485da824d4e3bb30b6fc5ae64e3573960"},"schema_version":"1.0","source":{"id":"2003.08904","kind":"arxiv","version":8}},"canonical_sha256":"1b26eefe95d72317def1de498655d51507236fd82579d558a18a562cf6045e2b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1b26eefe95d72317def1de498655d51507236fd82579d558a18a562cf6045e2b","first_computed_at":"2026-07-05T06:37:09.123344Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:37:09.123344Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5SZZJSE+CUoukfA5t5/4qAPE1sndcoXaNEsS+py+44CU1CZ+iWLIuzfZhGcrD6GhFDb1h2lEqHMQuDS+AgprBg==","signature_status":"signed_v1","signed_at":"2026-07-05T06:37:09.123690Z","signed_message":"canonical_sha256_bytes"},"source_id":"2003.08904","source_kind":"arxiv","source_version":8}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:be6e75c639c3324dd1d2fdfda02895d02fb42b4ffbdd4b331708e6eba15b92e4","sha256:32743d3c071837944d233b472899619a2dd09a087820f697f2ea96fe10e37863"],"state_sha256":"49350559b7438adedb08b6620aaefe37b5b859ec821433a36b34db3b336a71b6"}