{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:FXDX7CR52Y6RUU3BKVEUGW3MGE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"97e10171515a2907ed27de1763a18412a90f13b0704ac5c42c70014ff726e195","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-06-18T06:57:58Z","title_canon_sha256":"90f71c22286e83d1445205dc9d33a47f7fd1e39ce486ed4fafcb7f8ffbd34642"},"schema_version":"1.0","source":{"id":"2106.09947","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.09947","created_at":"2026-07-05T05:04:59Z"},{"alias_kind":"arxiv_version","alias_value":"2106.09947v3","created_at":"2026-07-05T05:04:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.09947","created_at":"2026-07-05T05:04:59Z"},{"alias_kind":"pith_short_12","alias_value":"FXDX7CR52Y6R","created_at":"2026-07-05T05:04:59Z"},{"alias_kind":"pith_short_16","alias_value":"FXDX7CR52Y6RUU3B","created_at":"2026-07-05T05:04:59Z"},{"alias_kind":"pith_short_8","alias_value":"FXDX7CR5","created_at":"2026-07-05T05:04:59Z"}],"graph_snapshots":[{"event_id":"sha256:885c083a8e9ff8fe3355bef99405a3419c2804c9e9a028fce87a9756fef10b87","target":"graph","created_at":"2026-07-05T05:04:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.09947/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Evaluating robustness of machine-learning models to adversarial examples is a challenging problem. Many defenses have been shown to provide a false sense of robustness by causing gradient-based attacks to fail, and they have been broken under more rigorous evaluations. Although guidelines and best practices have been suggested to improve current adversarial robustness evaluations, the lack of automatic testing and debugging tools makes it difficult to apply these recommendations in a systematic manner. In this work, we overcome these limitations by: (i) categorizing attack failures based on ho","authors_text":"Ambra Demontis, Angelo Sotgiu, Battista Biggio, Fabio Roli, Luca Demetrio, Maura Pintor, Nicholas Carlini","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-06-18T06:57:58Z","title":"Indicators of Attack Failure: Debugging and Improving Optimization of Adversarial Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.09947","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c4d88529ec3d1f81a71395a082963ed96409419251407e49b05cdd4e36dbb56f","target":"record","created_at":"2026-07-05T05:04:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"97e10171515a2907ed27de1763a18412a90f13b0704ac5c42c70014ff726e195","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-06-18T06:57:58Z","title_canon_sha256":"90f71c22286e83d1445205dc9d33a47f7fd1e39ce486ed4fafcb7f8ffbd34642"},"schema_version":"1.0","source":{"id":"2106.09947","kind":"arxiv","version":3}},"canonical_sha256":"2dc77f8a3dd63d1a53615549435b6c31033b06cba8a76f41a493fb13b750e603","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2dc77f8a3dd63d1a53615549435b6c31033b06cba8a76f41a493fb13b750e603","first_computed_at":"2026-07-05T05:04:59.960264Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:04:59.960264Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vKlHuhukGjSnQ+E8EZE+E+/sS1GmiRDizKpgaoou211o1ahrZX0rknkhlyZNdBgr1AOEVcrLe5y6pjR0Gkz6Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:04:59.960686Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.09947","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c4d88529ec3d1f81a71395a082963ed96409419251407e49b05cdd4e36dbb56f","sha256:885c083a8e9ff8fe3355bef99405a3419c2804c9e9a028fce87a9756fef10b87"],"state_sha256":"83e6a2f80a147cebab402b6d77d620a6ed08562da89de97910a1ad1865802796"}