{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:DT474ENRU5HQQCVAGULTAPEMDP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d01f4eef4dec262ab0f823a0def518e2687692f1e1907e3ab6bc129ac7b2831b","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-11-27T04:26:35Z","title_canon_sha256":"8ff367648918d9e1cb555384752eb54da5e335cdeb29149f9af77275e1b68f01"},"schema_version":"1.0","source":{"id":"1911.11946","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.11946","created_at":"2026-07-05T00:27:45Z"},{"alias_kind":"arxiv_version","alias_value":"1911.11946v2","created_at":"2026-07-05T00:27:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.11946","created_at":"2026-07-05T00:27:45Z"},{"alias_kind":"pith_short_12","alias_value":"DT474ENRU5HQ","created_at":"2026-07-05T00:27:45Z"},{"alias_kind":"pith_short_16","alias_value":"DT474ENRU5HQQCVA","created_at":"2026-07-05T00:27:45Z"},{"alias_kind":"pith_short_8","alias_value":"DT474ENR","created_at":"2026-07-05T00:27:45Z"}],"graph_snapshots":[{"event_id":"sha256:d960372a7aec1940034e0a25568d59c6971612054b0049ff6c9af740bdcc1c32","target":"graph","created_at":"2026-07-05T00:27:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1911.11946/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep Neural Networks (DNNs) are known to be susceptible to adversarial examples. Adversarial examples are maliciously crafted inputs that are designed to fool a model, but appear normal to human beings. Recent work has shown that pixel discretization can be used to make classifiers for MNIST highly robust to adversarial examples. However, pixel discretization fails to provide significant protection on more complex datasets. In this paper, we take the first step towards reconciling these contrary findings. Focusing on the observation that discrete pixelization in MNIST makes the background comp","authors_text":"Amir Rahmati, Atul Prakash, Kevin Eykholt, Pratik Vaishnavi, Tianji Cong","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-11-27T04:26:35Z","title":"Can Attention Masks Improve Adversarial Robustness?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.11946","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:84d4a66c8eacb7183b6728f4e01c7d3a8078ac146b70ae201140e4808d6d1ed6","target":"record","created_at":"2026-07-05T00:27:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d01f4eef4dec262ab0f823a0def518e2687692f1e1907e3ab6bc129ac7b2831b","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-11-27T04:26:35Z","title_canon_sha256":"8ff367648918d9e1cb555384752eb54da5e335cdeb29149f9af77275e1b68f01"},"schema_version":"1.0","source":{"id":"1911.11946","kind":"arxiv","version":2}},"canonical_sha256":"1cf9fe11b1a74f080aa03517303c8c1be1b60bd9761d8376d034cd4e5bdf727e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1cf9fe11b1a74f080aa03517303c8c1be1b60bd9761d8376d034cd4e5bdf727e","first_computed_at":"2026-07-05T00:27:45.598761Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:27:45.598761Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zLXTXqn/74pV6buF0gfNnU/yr0utNsuyQyzvKpZ0MLN3RLg3IhmmMKEZ/u5Z4KUzcPUO/EewYhaSjdsKvzScDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T00:27:45.599213Z","signed_message":"canonical_sha256_bytes"},"source_id":"1911.11946","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:84d4a66c8eacb7183b6728f4e01c7d3a8078ac146b70ae201140e4808d6d1ed6","sha256:d960372a7aec1940034e0a25568d59c6971612054b0049ff6c9af740bdcc1c32"],"state_sha256":"22fefb1f7d7c87ff3049ff41fb30e87bb8f4b23308566e43646749e1315c0c38"}