{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:FDR42NS3W5NXHRAGV7YBZ3CAXM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"68729882734268bddcda3ad5c70cbf1a421b295156fc887469e8c86373322fe5","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-09-23T21:54:36Z","title_canon_sha256":"8edd4a5754c6429f7aaf7462a6629e166bcc315d3c45b5dc7f361b624e098d3c"},"schema_version":"1.0","source":{"id":"2009.11397","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.11397","created_at":"2026-07-05T02:25:24Z"},{"alias_kind":"arxiv_version","alias_value":"2009.11397v2","created_at":"2026-07-05T02:25:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.11397","created_at":"2026-07-05T02:25:24Z"},{"alias_kind":"pith_short_12","alias_value":"FDR42NS3W5NX","created_at":"2026-07-05T02:25:24Z"},{"alias_kind":"pith_short_16","alias_value":"FDR42NS3W5NXHRAG","created_at":"2026-07-05T02:25:24Z"},{"alias_kind":"pith_short_8","alias_value":"FDR42NS3","created_at":"2026-07-05T02:25:24Z"}],"graph_snapshots":[{"event_id":"sha256:b00f00ad2d79c46582fe310df48719e693f5cf058f2efcc594c66aed10543356","target":"graph","created_at":"2026-07-05T02:25:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2009.11397/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) have proven to be powerful tools for processing unstructured data. However for high-dimensional data, like images, they are inherently vulnerable to adversarial attacks. Small almost invisible perturbations added to the input can be used to fool DNNs. Various attacks, hardening methods and detection methods have been introduced in recent years. Notoriously, Carlini-Wagner (CW) type attacks computed by iterative minimization belong to those that are most difficult to detect. In this work we outline a mathematical proof that the CW attack can be used as a detector its","authors_text":"Hanno Gottschalk, Kira Maag, Mathis Peyron, Matthias Rottmann, Natasa Krejic","cross_cats":["cs.CR","cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-09-23T21:54:36Z","title":"Detection of Iterative Adversarial Attacks via Counter Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.11397","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d763de35733e1a6622c7c23ad0e44cca5636c0e40b1116be5cd26c8303e5f8b3","target":"record","created_at":"2026-07-05T02:25:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"68729882734268bddcda3ad5c70cbf1a421b295156fc887469e8c86373322fe5","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-09-23T21:54:36Z","title_canon_sha256":"8edd4a5754c6429f7aaf7462a6629e166bcc315d3c45b5dc7f361b624e098d3c"},"schema_version":"1.0","source":{"id":"2009.11397","kind":"arxiv","version":2}},"canonical_sha256":"28e3cd365bb75b73c406aff01cec40bb09ee18d348f92cd52ef58a0acd74363d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"28e3cd365bb75b73c406aff01cec40bb09ee18d348f92cd52ef58a0acd74363d","first_computed_at":"2026-07-05T02:25:24.150290Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:25:24.150290Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KJtmFCdlp9iOoe0JKX2JCIBHlssZylqLvYifitQmvyC2wrEAi5t8Lw0rfHblTK44Iz8Bh/fiPgdnknY583EBBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T02:25:24.150780Z","signed_message":"canonical_sha256_bytes"},"source_id":"2009.11397","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d763de35733e1a6622c7c23ad0e44cca5636c0e40b1116be5cd26c8303e5f8b3","sha256:b00f00ad2d79c46582fe310df48719e693f5cf058f2efcc594c66aed10543356"],"state_sha256":"4e596ea59d645c5a6789b4e6c4b8e06335062691586f1582195195da0a48fa3e"}