{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:DOCGAYFKVW4QG6WTAZGGDYNJHW","short_pith_number":"pith:DOCGAYFK","canonical_record":{"source":{"id":"2202.09039","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-02-18T06:15:49Z","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"title_canon_sha256":"20316fd1d79d4a61002c3fb80169e255cd5727b2ef2ac2951bbabeb26604ea6f","abstract_canon_sha256":"848ba2942ab8e458e4e4c9d40ec988d753b5000ce8f9558ff9bfc4366cdcd498"},"schema_version":"1.0"},"canonical_sha256":"1b846060aaadb9037ad3064c61e1a93d8dd1fde8a606537b9bf06f90a5704019","source":{"kind":"arxiv","id":"2202.09039","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.09039","created_at":"2026-07-05T03:58:09Z"},{"alias_kind":"arxiv_version","alias_value":"2202.09039v1","created_at":"2026-07-05T03:58:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.09039","created_at":"2026-07-05T03:58:09Z"},{"alias_kind":"pith_short_12","alias_value":"DOCGAYFKVW4Q","created_at":"2026-07-05T03:58:09Z"},{"alias_kind":"pith_short_16","alias_value":"DOCGAYFKVW4QG6WT","created_at":"2026-07-05T03:58:09Z"},{"alias_kind":"pith_short_8","alias_value":"DOCGAYFK","created_at":"2026-07-05T03:58:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:DOCGAYFKVW4QG6WTAZGGDYNJHW","target":"record","payload":{"canonical_record":{"source":{"id":"2202.09039","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-02-18T06:15:49Z","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"title_canon_sha256":"20316fd1d79d4a61002c3fb80169e255cd5727b2ef2ac2951bbabeb26604ea6f","abstract_canon_sha256":"848ba2942ab8e458e4e4c9d40ec988d753b5000ce8f9558ff9bfc4366cdcd498"},"schema_version":"1.0"},"canonical_sha256":"1b846060aaadb9037ad3064c61e1a93d8dd1fde8a606537b9bf06f90a5704019","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:58:09.112191Z","signature_b64":"wGbLvQFFQmkJkXaQz+gpojZjQIgWKjUv2iz0eOG4YhcSa3+oTi/FFsxRvN00UZVsJxWGaAuMizJ2hXx8TboRCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1b846060aaadb9037ad3064c61e1a93d8dd1fde8a606537b9bf06f90a5704019","last_reissued_at":"2026-07-05T03:58:09.111816Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:58:09.111816Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2202.09039","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:58:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8Wd/1yM/aFt1FI+zZqHy6zzCwHt4aSAYv0O+YKf6d7qF+3JrK2hFcV7Eaomu9nZA2AKfYZ2PYXB0FeRV7tVVCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-17T01:53:19.097590Z"},"content_sha256":"d1e6ddab871b24e8ab98e3ed2722b7ed38d112273d20dfbf50651e83817cc31a","schema_version":"1.0","event_id":"sha256:d1e6ddab871b24e8ab98e3ed2722b7ed38d112273d20dfbf50651e83817cc31a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:DOCGAYFKVW4QG6WTAZGGDYNJHW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Critical Checkpoints for Evaluating Defence Models Against Adversarial Attack and Robustness","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Kanak Tekwani, Manojkumar Parmar","submitted_at":"2022-02-18T06:15:49Z","abstract_excerpt":"From past couple of years there is a cycle of researchers proposing a defence model for adversaries in machine learning which is arguably defensible to most of the existing attacks in restricted condition (they evaluate on some bounded inputs or datasets). And then shortly another set of researcher finding the vulnerabilities in that defence model and breaking it by proposing a stronger attack model. Some common flaws are been noticed in the past defence models that were broken in very short time. Defence models being broken so easily is a point of concern as decision of many crucial activitie"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.09039","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2202.09039/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:58:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qY8OE8+6JMSqqoSC+jotqnvihC5gpdlwxER+UakFs4lebKK96IOpkdGVV+8V1LXOk2bDqm7rJsosJxX2zBy4Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-17T01:53:19.097946Z"},"content_sha256":"497ed8f72918ea39ca26a56e448f8cad161feb40dd368a0bbc8920b1eb6fe7c5","schema_version":"1.0","event_id":"sha256:497ed8f72918ea39ca26a56e448f8cad161feb40dd368a0bbc8920b1eb6fe7c5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DOCGAYFKVW4QG6WTAZGGDYNJHW/bundle.json","state_url":"https://pith.science/pith/DOCGAYFKVW4QG6WTAZGGDYNJHW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DOCGAYFKVW4QG6WTAZGGDYNJHW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-17T01:53:19Z","links":{"resolver":"https://pith.science/pith/DOCGAYFKVW4QG6WTAZGGDYNJHW","bundle":"https://pith.science/pith/DOCGAYFKVW4QG6WTAZGGDYNJHW/bundle.json","state":"https://pith.science/pith/DOCGAYFKVW4QG6WTAZGGDYNJHW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DOCGAYFKVW4QG6WTAZGGDYNJHW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:DOCGAYFKVW4QG6WTAZGGDYNJHW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"848ba2942ab8e458e4e4c9d40ec988d753b5000ce8f9558ff9bfc4366cdcd498","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-02-18T06:15:49Z","title_canon_sha256":"20316fd1d79d4a61002c3fb80169e255cd5727b2ef2ac2951bbabeb26604ea6f"},"schema_version":"1.0","source":{"id":"2202.09039","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.09039","created_at":"2026-07-05T03:58:09Z"},{"alias_kind":"arxiv_version","alias_value":"2202.09039v1","created_at":"2026-07-05T03:58:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.09039","created_at":"2026-07-05T03:58:09Z"},{"alias_kind":"pith_short_12","alias_value":"DOCGAYFKVW4Q","created_at":"2026-07-05T03:58:09Z"},{"alias_kind":"pith_short_16","alias_value":"DOCGAYFKVW4QG6WT","created_at":"2026-07-05T03:58:09Z"},{"alias_kind":"pith_short_8","alias_value":"DOCGAYFK","created_at":"2026-07-05T03:58:09Z"}],"graph_snapshots":[{"event_id":"sha256:497ed8f72918ea39ca26a56e448f8cad161feb40dd368a0bbc8920b1eb6fe7c5","target":"graph","created_at":"2026-07-05T03:58:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.09039/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"From past couple of years there is a cycle of researchers proposing a defence model for adversaries in machine learning which is arguably defensible to most of the existing attacks in restricted condition (they evaluate on some bounded inputs or datasets). And then shortly another set of researcher finding the vulnerabilities in that defence model and breaking it by proposing a stronger attack model. Some common flaws are been noticed in the past defence models that were broken in very short time. Defence models being broken so easily is a point of concern as decision of many crucial activitie","authors_text":"Kanak Tekwani, Manojkumar Parmar","cross_cats":["cs.AI","cs.CV","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-02-18T06:15:49Z","title":"Critical Checkpoints for Evaluating Defence Models Against Adversarial Attack and Robustness"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.09039","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d1e6ddab871b24e8ab98e3ed2722b7ed38d112273d20dfbf50651e83817cc31a","target":"record","created_at":"2026-07-05T03:58:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"848ba2942ab8e458e4e4c9d40ec988d753b5000ce8f9558ff9bfc4366cdcd498","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-02-18T06:15:49Z","title_canon_sha256":"20316fd1d79d4a61002c3fb80169e255cd5727b2ef2ac2951bbabeb26604ea6f"},"schema_version":"1.0","source":{"id":"2202.09039","kind":"arxiv","version":1}},"canonical_sha256":"1b846060aaadb9037ad3064c61e1a93d8dd1fde8a606537b9bf06f90a5704019","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1b846060aaadb9037ad3064c61e1a93d8dd1fde8a606537b9bf06f90a5704019","first_computed_at":"2026-07-05T03:58:09.111816Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:58:09.111816Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"wGbLvQFFQmkJkXaQz+gpojZjQIgWKjUv2iz0eOG4YhcSa3+oTi/FFsxRvN00UZVsJxWGaAuMizJ2hXx8TboRCw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:58:09.112191Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.09039","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d1e6ddab871b24e8ab98e3ed2722b7ed38d112273d20dfbf50651e83817cc31a","sha256:497ed8f72918ea39ca26a56e448f8cad161feb40dd368a0bbc8920b1eb6fe7c5"],"state_sha256":"4731596e7f63e6dec6b854dc3d539ebc8dd9060700744b5b14a935677850a406"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SHQyjYN6BfAxyg/Qch8dYfeXSeyRpTcuFUWmv9cYayFXSnKb+h0mpChRGjK5PV6C3bGiMyvpBUP2V+Z81SzSCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-17T01:53:19.100455Z","bundle_sha256":"82e4071e7429d83d61e377ad0873a741c8ca0415113bfb8c72e3e98210b453a5"}}