{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:E6B25MA6BAPHFX2XIFX2RDXQRW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d57377ec08f881402acf34d557874e8dedaa2115a49a2fe73ac25e6fc5aa5f41","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-13T02:21:54Z","title_canon_sha256":"7ef22c272096716f16e5009bc06936008bc150c7c33f526454987079ea18c552"},"schema_version":"1.0","source":{"id":"2010.06121","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.06121","created_at":"2026-07-05T02:41:28Z"},{"alias_kind":"arxiv_version","alias_value":"2010.06121v2","created_at":"2026-07-05T02:41:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.06121","created_at":"2026-07-05T02:41:28Z"},{"alias_kind":"pith_short_12","alias_value":"E6B25MA6BAPH","created_at":"2026-07-05T02:41:28Z"},{"alias_kind":"pith_short_16","alias_value":"E6B25MA6BAPHFX2X","created_at":"2026-07-05T02:41:28Z"},{"alias_kind":"pith_short_8","alias_value":"E6B25MA6","created_at":"2026-07-05T02:41:28Z"}],"graph_snapshots":[{"event_id":"sha256:47b390fd17328c35069fa1360f81e1dc4d7ca464147aa0af5a607c5a9f05cdeb","target":"graph","created_at":"2026-07-05T02:41:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2010.06121/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial training algorithms have been proved to be reliable to improve machine learning models' robustness against adversarial examples. However, we find that adversarial training algorithms tend to introduce severe disparity of accuracy and robustness between different groups of data. For instance, a PGD adversarially trained ResNet18 model on CIFAR-10 has 93% clean accuracy and 67% PGD l-infty-8 robust accuracy on the class \"automobile\" but only 65% and 17% on the class \"cat\". This phenomenon happens in balanced datasets and does not exist in naturally trained models when only using clea","authors_text":"Anil K. Jain, Han Xu, Jiliang Tang, Xiaorui Liu, Yaxin Li","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-13T02:21:54Z","title":"To be Robust or to be Fair: Towards Fairness in Adversarial Training"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.06121","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:99102b6807c383fb14b78679d4bd756f3be933c962b2a0019e22f5f50c05a08d","target":"record","created_at":"2026-07-05T02:41:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d57377ec08f881402acf34d557874e8dedaa2115a49a2fe73ac25e6fc5aa5f41","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-13T02:21:54Z","title_canon_sha256":"7ef22c272096716f16e5009bc06936008bc150c7c33f526454987079ea18c552"},"schema_version":"1.0","source":{"id":"2010.06121","kind":"arxiv","version":2}},"canonical_sha256":"2783aeb01e081e72df57416fa88ef08dabb5997014437063024460abc9d1679f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2783aeb01e081e72df57416fa88ef08dabb5997014437063024460abc9d1679f","first_computed_at":"2026-07-05T02:41:28.761519Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:41:28.761519Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Sm6cE/1XbtuAD9HbIdFIZSen6/hVKkVjdqT5s07jpTVOO33GQigN5egRGa2NpOrkdnJRTX/lJY/lMuY/ypWcBw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:41:28.761967Z","signed_message":"canonical_sha256_bytes"},"source_id":"2010.06121","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:99102b6807c383fb14b78679d4bd756f3be933c962b2a0019e22f5f50c05a08d","sha256:47b390fd17328c35069fa1360f81e1dc4d7ca464147aa0af5a607c5a9f05cdeb"],"state_sha256":"1b2a610c94c14d54b5651f3864a8f2426b7dbd247eb305d363607ddc701387a8"}