{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:EADS3Q6YXOWHSZTTGEYOPTLKUQ","short_pith_number":"pith:EADS3Q6Y","canonical_record":{"source":{"id":"2211.00322","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-01T08:18:07Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"ec8baa20149b0bea4a59593bdb7a546e2c9c9b9df14104b55c08070310b33aff","abstract_canon_sha256":"7811a3217e52d102b020bb36c620244dad77359f2331566e16b08c8f0fdec00f"},"schema_version":"1.0"},"canonical_sha256":"20072dc3d8bbac7966733130e7cd6aa41bd9875cab5c3351612f7c24d4e95c7a","source":{"kind":"arxiv","id":"2211.00322","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.00322","created_at":"2026-07-05T05:12:21Z"},{"alias_kind":"arxiv_version","alias_value":"2211.00322v1","created_at":"2026-07-05T05:12:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.00322","created_at":"2026-07-05T05:12:21Z"},{"alias_kind":"pith_short_12","alias_value":"EADS3Q6YXOWH","created_at":"2026-07-05T05:12:21Z"},{"alias_kind":"pith_short_16","alias_value":"EADS3Q6YXOWHSZTT","created_at":"2026-07-05T05:12:21Z"},{"alias_kind":"pith_short_8","alias_value":"EADS3Q6Y","created_at":"2026-07-05T05:12:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:EADS3Q6YXOWHSZTTGEYOPTLKUQ","target":"record","payload":{"canonical_record":{"source":{"id":"2211.00322","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-01T08:18:07Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"ec8baa20149b0bea4a59593bdb7a546e2c9c9b9df14104b55c08070310b33aff","abstract_canon_sha256":"7811a3217e52d102b020bb36c620244dad77359f2331566e16b08c8f0fdec00f"},"schema_version":"1.0"},"canonical_sha256":"20072dc3d8bbac7966733130e7cd6aa41bd9875cab5c3351612f7c24d4e95c7a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:12:21.228070Z","signature_b64":"AANq0Xr/ELfbF9MdDWNxWXRB7Auiv4xOs5FVeoRHtuhKqJibpPVCxfEb8kJnK7gFtDjg/6sZOVqij4ed5wVOBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"20072dc3d8bbac7966733130e7cd6aa41bd9875cab5c3351612f7c24d4e95c7a","last_reissued_at":"2026-07-05T05:12:21.227596Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:12:21.227596Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2211.00322","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:12:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VYa8z+3FncfN0YSSZ5wZE399GV2lGhgdKF67C77hjG8ddUP6h1jrzqGugamYJpLJ2AGh5dbyZeIG4GQRsYaRAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T08:59:57.309786Z"},"content_sha256":"0bd6137c3773b6dc80fff02f4a302725b02fd095aa9c4dd81907c5dcfb0e4920","schema_version":"1.0","event_id":"sha256:0bd6137c3773b6dc80fff02f4a302725b02fd095aa9c4dd81907c5dcfb0e4920"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:EADS3Q6YXOWHSZTTGEYOPTLKUQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DensePure: Understanding Diffusion Models towards Adversarial Robustness","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Anima Anandkumar, Bo Li, Chaowei Xiao, Dawn Song, Jiongxiao Wang, Kun Jin, Mingyan Liu, Weili Nie, Zhongzhu Chen","submitted_at":"2022-11-01T08:18:07Z","abstract_excerpt":"Diffusion models have been recently employed to improve certified robustness through the process of denoising. However, the theoretical understanding of why diffusion models are able to improve the certified robustness is still lacking, preventing from further improvement. In this study, we close this gap by analyzing the fundamental properties of diffusion models and establishing the conditions under which they can enhance certified robustness. This deeper understanding allows us to propose a new method DensePure, designed to improve the certified robustness of a pretrained model (i.e. classi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.00322","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2211.00322/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:12:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dvA3Ym/q/XuClSPXD3csPRIWwZp9FiUT7qQD6dPE8ZwFoIrwKeeLAOBBVHTiGiwalwLPaw6/BpNtJMJXuwHpDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T08:59:57.310689Z"},"content_sha256":"f1c1ac7aa3b478fcff605ceb2e0e205a3e3ac6682b9e0dc2acc0f62b7626b380","schema_version":"1.0","event_id":"sha256:f1c1ac7aa3b478fcff605ceb2e0e205a3e3ac6682b9e0dc2acc0f62b7626b380"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EADS3Q6YXOWHSZTTGEYOPTLKUQ/bundle.json","state_url":"https://pith.science/pith/EADS3Q6YXOWHSZTTGEYOPTLKUQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EADS3Q6YXOWHSZTTGEYOPTLKUQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T08:59:57Z","links":{"resolver":"https://pith.science/pith/EADS3Q6YXOWHSZTTGEYOPTLKUQ","bundle":"https://pith.science/pith/EADS3Q6YXOWHSZTTGEYOPTLKUQ/bundle.json","state":"https://pith.science/pith/EADS3Q6YXOWHSZTTGEYOPTLKUQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EADS3Q6YXOWHSZTTGEYOPTLKUQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:EADS3Q6YXOWHSZTTGEYOPTLKUQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7811a3217e52d102b020bb36c620244dad77359f2331566e16b08c8f0fdec00f","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-01T08:18:07Z","title_canon_sha256":"ec8baa20149b0bea4a59593bdb7a546e2c9c9b9df14104b55c08070310b33aff"},"schema_version":"1.0","source":{"id":"2211.00322","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.00322","created_at":"2026-07-05T05:12:21Z"},{"alias_kind":"arxiv_version","alias_value":"2211.00322v1","created_at":"2026-07-05T05:12:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.00322","created_at":"2026-07-05T05:12:21Z"},{"alias_kind":"pith_short_12","alias_value":"EADS3Q6YXOWH","created_at":"2026-07-05T05:12:21Z"},{"alias_kind":"pith_short_16","alias_value":"EADS3Q6YXOWHSZTT","created_at":"2026-07-05T05:12:21Z"},{"alias_kind":"pith_short_8","alias_value":"EADS3Q6Y","created_at":"2026-07-05T05:12:21Z"}],"graph_snapshots":[{"event_id":"sha256:f1c1ac7aa3b478fcff605ceb2e0e205a3e3ac6682b9e0dc2acc0f62b7626b380","target":"graph","created_at":"2026-07-05T05:12:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2211.00322/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Diffusion models have been recently employed to improve certified robustness through the process of denoising. However, the theoretical understanding of why diffusion models are able to improve the certified robustness is still lacking, preventing from further improvement. In this study, we close this gap by analyzing the fundamental properties of diffusion models and establishing the conditions under which they can enhance certified robustness. This deeper understanding allows us to propose a new method DensePure, designed to improve the certified robustness of a pretrained model (i.e. classi","authors_text":"Anima Anandkumar, Bo Li, Chaowei Xiao, Dawn Song, Jiongxiao Wang, Kun Jin, Mingyan Liu, Weili Nie, Zhongzhu Chen","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-01T08:18:07Z","title":"DensePure: Understanding Diffusion Models towards Adversarial Robustness"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.00322","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0bd6137c3773b6dc80fff02f4a302725b02fd095aa9c4dd81907c5dcfb0e4920","target":"record","created_at":"2026-07-05T05:12:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7811a3217e52d102b020bb36c620244dad77359f2331566e16b08c8f0fdec00f","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-01T08:18:07Z","title_canon_sha256":"ec8baa20149b0bea4a59593bdb7a546e2c9c9b9df14104b55c08070310b33aff"},"schema_version":"1.0","source":{"id":"2211.00322","kind":"arxiv","version":1}},"canonical_sha256":"20072dc3d8bbac7966733130e7cd6aa41bd9875cab5c3351612f7c24d4e95c7a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"20072dc3d8bbac7966733130e7cd6aa41bd9875cab5c3351612f7c24d4e95c7a","first_computed_at":"2026-07-05T05:12:21.227596Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:12:21.227596Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"AANq0Xr/ELfbF9MdDWNxWXRB7Auiv4xOs5FVeoRHtuhKqJibpPVCxfEb8kJnK7gFtDjg/6sZOVqij4ed5wVOBw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:12:21.228070Z","signed_message":"canonical_sha256_bytes"},"source_id":"2211.00322","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0bd6137c3773b6dc80fff02f4a302725b02fd095aa9c4dd81907c5dcfb0e4920","sha256:f1c1ac7aa3b478fcff605ceb2e0e205a3e3ac6682b9e0dc2acc0f62b7626b380"],"state_sha256":"d9edf854e4277ef15e66b922f3785959836fdb3383886956c77aaacafccdd549"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NdnEwEW+/V5EjHJylSDTpta0WH5HpgAmgcqiPO/XFnoMqxYeD/qMtjZ/HzypRhjtDIpejsVAxhdjdSI55G3vBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T08:59:57.324325Z","bundle_sha256":"7b79ebd6ba77a9f730a1e10f4e58baf736d21f44ea60537b5d03d285ab4d4139"}}