{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:F67LUWYMLPDZL2HLY3SWFLUFUT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0e2cfec27e066a8de8bcc690214f1264b20b932a9fe62aa6ada58ff68db43dbc","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2021-04-20T15:57:07Z","title_canon_sha256":"0764af6344878a5dbe44292d476b1683b0ccbc781cc0e2bfbce827a805df515b"},"schema_version":"1.0","source":{"id":"2104.10076","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.10076","created_at":"2026-07-05T03:50:48Z"},{"alias_kind":"arxiv_version","alias_value":"2104.10076v2","created_at":"2026-07-05T03:50:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.10076","created_at":"2026-07-05T03:50:48Z"},{"alias_kind":"pith_short_12","alias_value":"F67LUWYMLPDZ","created_at":"2026-07-05T03:50:48Z"},{"alias_kind":"pith_short_16","alias_value":"F67LUWYMLPDZL2HL","created_at":"2026-07-05T03:50:48Z"},{"alias_kind":"pith_short_8","alias_value":"F67LUWYM","created_at":"2026-07-05T03:50:48Z"}],"graph_snapshots":[{"event_id":"sha256:edb1288af07cafb9910d2d4fa6d60d14492fdec968e0f0c6e2e3ef4cd0d23501","target":"graph","created_at":"2026-07-05T03:50:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2104.10076/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning with deep neural networks (DNNs) has become one of the foundation techniques in many safety-critical systems, such as autonomous vehicles and medical diagnosis systems. DNN-based systems, however, are known to be vulnerable to adversarial examples (AEs) that are maliciously perturbed variants of legitimate inputs. While there has been a vast body of research to defend against AE attacks in the literature, the performances of existing defense techniques are still far from satisfactory, especially for adaptive attacks, wherein attackers are knowledgeable about the defense mechan","authors_text":"Qiang Xu, Qiuxia Lai, Ruiyuan Gao, Yijun Yang, Yu Li","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2021-04-20T15:57:07Z","title":"MixDefense: A Defense-in-Depth Framework for Adversarial Example Detection Based on Statistical and Semantic Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.10076","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:865446bf5d1be9353369fcb783b0fc1d0ccd306308cc6fd92637b1d66f9221ce","target":"record","created_at":"2026-07-05T03:50:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0e2cfec27e066a8de8bcc690214f1264b20b932a9fe62aa6ada58ff68db43dbc","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2021-04-20T15:57:07Z","title_canon_sha256":"0764af6344878a5dbe44292d476b1683b0ccbc781cc0e2bfbce827a805df515b"},"schema_version":"1.0","source":{"id":"2104.10076","kind":"arxiv","version":2}},"canonical_sha256":"2fbeba5b0c5bc795e8ebc6e562ae85a4e6116df573eb6543be3c3639c3c7ff75","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2fbeba5b0c5bc795e8ebc6e562ae85a4e6116df573eb6543be3c3639c3c7ff75","first_computed_at":"2026-07-05T03:50:48.479206Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:50:48.479206Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"A+S+RivpzbIvoPUAm9EUmOF2ZyKEk39bSEiEEe6pZ4kih6iNMxBOj9gc1+gr/yCwiuQaXFxOzKOHaw0B5O0eBw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:50:48.479663Z","signed_message":"canonical_sha256_bytes"},"source_id":"2104.10076","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:865446bf5d1be9353369fcb783b0fc1d0ccd306308cc6fd92637b1d66f9221ce","sha256:edb1288af07cafb9910d2d4fa6d60d14492fdec968e0f0c6e2e3ef4cd0d23501"],"state_sha256":"edbe91cb27e82bdf5c6232a042dfd60f83287c7a76bf8fab489a4acaf5a34931"}