{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:F7UD5LG6ARJCSK4YOORBZREOEA","short_pith_number":"pith:F7UD5LG6","canonical_record":{"source":{"id":"1902.04818","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-02-13T09:51:34Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"0c3bb97b8449148dafa6899fb1bcee19e24894a0b6e4a0efd9444481160b2b7e","abstract_canon_sha256":"98eda39c0796b6a37fbff8b12b728c930efe4d126e157009a6896e3dd82f6597"},"schema_version":"1.0"},"canonical_sha256":"2fe83eacde0452292b9873a21cc48e2030763d4d337cbf91f382704f57a089cd","source":{"kind":"arxiv","id":"1902.04818","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1902.04818","created_at":"2026-05-17T23:46:41Z"},{"alias_kind":"arxiv_version","alias_value":"1902.04818v2","created_at":"2026-05-17T23:46:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1902.04818","created_at":"2026-05-17T23:46:41Z"},{"alias_kind":"pith_short_12","alias_value":"F7UD5LG6ARJC","created_at":"2026-05-18T12:33:15Z"},{"alias_kind":"pith_short_16","alias_value":"F7UD5LG6ARJCSK4Y","created_at":"2026-05-18T12:33:15Z"},{"alias_kind":"pith_short_8","alias_value":"F7UD5LG6","created_at":"2026-05-18T12:33:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:F7UD5LG6ARJCSK4YOORBZREOEA","target":"record","payload":{"canonical_record":{"source":{"id":"1902.04818","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-02-13T09:51:34Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"0c3bb97b8449148dafa6899fb1bcee19e24894a0b6e4a0efd9444481160b2b7e","abstract_canon_sha256":"98eda39c0796b6a37fbff8b12b728c930efe4d126e157009a6896e3dd82f6597"},"schema_version":"1.0"},"canonical_sha256":"2fe83eacde0452292b9873a21cc48e2030763d4d337cbf91f382704f57a089cd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:46:41.078543Z","signature_b64":"xBVlGuZy79CB6cD49slj/vwwTXOlo0PdU12iYegoLHCXKKBHh68gaEYh85A/l4lXMxCR9Vt2pUPqefewcbfJCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2fe83eacde0452292b9873a21cc48e2030763d4d337cbf91f382704f57a089cd","last_reissued_at":"2026-05-17T23:46:41.077751Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:46:41.077751Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1902.04818","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:46:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mWNHVxEqHLvUN5zhVcfpuwowD2fY+KZain8FzdE6+VpVEVSJTNMgACin8ByiHgUvu6/EueXKVIJS14kBTLB8AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T22:02:26.702228Z"},"content_sha256":"7e2d0d7df4ab046b15b0e6bd76633e4db96d1b8178852d53155715f7220b165b","schema_version":"1.0","event_id":"sha256:7e2d0d7df4ab046b15b0e6bd76633e4db96d1b8178852d53155715f7220b165b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:F7UD5LG6ARJCSK4YOORBZREOEA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Odds are Odd: A Statistical Test for Detecting Adversarial Examples","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Kevin Roth, Thomas Hofmann, Yannic Kilcher","submitted_at":"2019-02-13T09:51:34Z","abstract_excerpt":"We investigate conditions under which test statistics exist that can reliably detect examples, which have been adversarially manipulated in a white-box attack. These statistics can be easily computed and calibrated by randomly corrupting inputs. They exploit certain anomalies that adversarial attacks introduce, in particular if they follow the paradigm of choosing perturbations optimally under p-norm constraints. Access to the log-odds is the only requirement to defend models. We justify our approach empirically, but also provide conditions under which detectability via the suggested test stat"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1902.04818","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:46:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Pl2ish9avpFcY8WA3kviXHSfsOR0g7/eSBOUffDs5t2MAD2Mx1tE9oKXnQmHyQ9xZe0ECqaZhQFKF6jCjdoyAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T22:02:26.702893Z"},"content_sha256":"d647a360bda64149b5aa0b8954dbd67108bade99597bb17b374f2070da26bcc2","schema_version":"1.0","event_id":"sha256:d647a360bda64149b5aa0b8954dbd67108bade99597bb17b374f2070da26bcc2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/F7UD5LG6ARJCSK4YOORBZREOEA/bundle.json","state_url":"https://pith.science/pith/F7UD5LG6ARJCSK4YOORBZREOEA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/F7UD5LG6ARJCSK4YOORBZREOEA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-25T22:02:26Z","links":{"resolver":"https://pith.science/pith/F7UD5LG6ARJCSK4YOORBZREOEA","bundle":"https://pith.science/pith/F7UD5LG6ARJCSK4YOORBZREOEA/bundle.json","state":"https://pith.science/pith/F7UD5LG6ARJCSK4YOORBZREOEA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/F7UD5LG6ARJCSK4YOORBZREOEA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:F7UD5LG6ARJCSK4YOORBZREOEA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"98eda39c0796b6a37fbff8b12b728c930efe4d126e157009a6896e3dd82f6597","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-02-13T09:51:34Z","title_canon_sha256":"0c3bb97b8449148dafa6899fb1bcee19e24894a0b6e4a0efd9444481160b2b7e"},"schema_version":"1.0","source":{"id":"1902.04818","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1902.04818","created_at":"2026-05-17T23:46:41Z"},{"alias_kind":"arxiv_version","alias_value":"1902.04818v2","created_at":"2026-05-17T23:46:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1902.04818","created_at":"2026-05-17T23:46:41Z"},{"alias_kind":"pith_short_12","alias_value":"F7UD5LG6ARJC","created_at":"2026-05-18T12:33:15Z"},{"alias_kind":"pith_short_16","alias_value":"F7UD5LG6ARJCSK4Y","created_at":"2026-05-18T12:33:15Z"},{"alias_kind":"pith_short_8","alias_value":"F7UD5LG6","created_at":"2026-05-18T12:33:15Z"}],"graph_snapshots":[{"event_id":"sha256:d647a360bda64149b5aa0b8954dbd67108bade99597bb17b374f2070da26bcc2","target":"graph","created_at":"2026-05-17T23:46:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"We investigate conditions under which test statistics exist that can reliably detect examples, which have been adversarially manipulated in a white-box attack. These statistics can be easily computed and calibrated by randomly corrupting inputs. They exploit certain anomalies that adversarial attacks introduce, in particular if they follow the paradigm of choosing perturbations optimally under p-norm constraints. Access to the log-odds is the only requirement to defend models. We justify our approach empirically, but also provide conditions under which detectability via the suggested test stat","authors_text":"Kevin Roth, Thomas Hofmann, Yannic Kilcher","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-02-13T09:51:34Z","title":"The Odds are Odd: A Statistical Test for Detecting Adversarial Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1902.04818","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7e2d0d7df4ab046b15b0e6bd76633e4db96d1b8178852d53155715f7220b165b","target":"record","created_at":"2026-05-17T23:46:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"98eda39c0796b6a37fbff8b12b728c930efe4d126e157009a6896e3dd82f6597","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-02-13T09:51:34Z","title_canon_sha256":"0c3bb97b8449148dafa6899fb1bcee19e24894a0b6e4a0efd9444481160b2b7e"},"schema_version":"1.0","source":{"id":"1902.04818","kind":"arxiv","version":2}},"canonical_sha256":"2fe83eacde0452292b9873a21cc48e2030763d4d337cbf91f382704f57a089cd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2fe83eacde0452292b9873a21cc48e2030763d4d337cbf91f382704f57a089cd","first_computed_at":"2026-05-17T23:46:41.077751Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:46:41.077751Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xBVlGuZy79CB6cD49slj/vwwTXOlo0PdU12iYegoLHCXKKBHh68gaEYh85A/l4lXMxCR9Vt2pUPqefewcbfJCg==","signature_status":"signed_v1","signed_at":"2026-05-17T23:46:41.078543Z","signed_message":"canonical_sha256_bytes"},"source_id":"1902.04818","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7e2d0d7df4ab046b15b0e6bd76633e4db96d1b8178852d53155715f7220b165b","sha256:d647a360bda64149b5aa0b8954dbd67108bade99597bb17b374f2070da26bcc2"],"state_sha256":"633f605e2ef755e1e088c7d701183adcd6b2a29b51410002e3a0f8cd12c9c35c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"39AFFYn/95jW2tyArlouwdo2aL7zQ8G1wKgAMAFUnaVA5fdekV9HmKFhOKm29FfeS/SBhDr5XQTEJaltQCd+Bg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-25T22:02:26.706256Z","bundle_sha256":"411834a14d810e65adffa42a941b78eca85ca9dc290459ce81be624841070edf"}}