{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:GAFAQCPVYJJ5CPH6OL6PT34MXK","short_pith_number":"pith:GAFAQCPV","canonical_record":{"source":{"id":"2011.13538","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2020-11-27T03:22:50Z","cross_cats_sorted":[],"title_canon_sha256":"9e9df815f4093460dda6716e6af39aa4dfa9211a3de469bf6a50d61752eeb381","abstract_canon_sha256":"6b815467208babff4ae96f6533859e5eea4820ebe83c7000e993ee48d9aaf7d6"},"schema_version":"1.0"},"canonical_sha256":"300a0809f5c253d13cfe72fcf9ef8cba94210a52e1fc6f2eb82f090f5d3ed116","source":{"kind":"arxiv","id":"2011.13538","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2011.13538","created_at":"2026-07-05T01:54:55Z"},{"alias_kind":"arxiv_version","alias_value":"2011.13538v1","created_at":"2026-07-05T01:54:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2011.13538","created_at":"2026-07-05T01:54:55Z"},{"alias_kind":"pith_short_12","alias_value":"GAFAQCPVYJJ5","created_at":"2026-07-05T01:54:55Z"},{"alias_kind":"pith_short_16","alias_value":"GAFAQCPVYJJ5CPH6","created_at":"2026-07-05T01:54:55Z"},{"alias_kind":"pith_short_8","alias_value":"GAFAQCPV","created_at":"2026-07-05T01:54:55Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:GAFAQCPVYJJ5CPH6OL6PT34MXK","target":"record","payload":{"canonical_record":{"source":{"id":"2011.13538","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2020-11-27T03:22:50Z","cross_cats_sorted":[],"title_canon_sha256":"9e9df815f4093460dda6716e6af39aa4dfa9211a3de469bf6a50d61752eeb381","abstract_canon_sha256":"6b815467208babff4ae96f6533859e5eea4820ebe83c7000e993ee48d9aaf7d6"},"schema_version":"1.0"},"canonical_sha256":"300a0809f5c253d13cfe72fcf9ef8cba94210a52e1fc6f2eb82f090f5d3ed116","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:54:55.255330Z","signature_b64":"dRYM7NKWX6HG8fi3H2pOkkV4drYtfWprbWEjSWt+MqUAX9JHNM/J7KYfcTme4hpraLSlv/XIbUwT/KKKP+AvBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"300a0809f5c253d13cfe72fcf9ef8cba94210a52e1fc6f2eb82f090f5d3ed116","last_reissued_at":"2026-07-05T01:54:55.254955Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:54:55.254955Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2011.13538","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:54:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ix+jWcBY5aDSWanyIh07PB2rPNAwhl+F6VWBqttZyTJfiqeRHISzPMnB55GleHQVcODGHpgHrHrq0t29X9OrAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T07:12:43.878625Z"},"content_sha256":"61dc6487f4d77469e7ed3a366c0427e8f80897fbeed5a2c4c65d093efeaff4f8","schema_version":"1.0","event_id":"sha256:61dc6487f4d77469e7ed3a366c0427e8f80897fbeed5a2c4c65d093efeaff4f8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:GAFAQCPVYJJ5CPH6OL6PT34MXK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Rethinking Uncertainty in Deep Learning: Whether and How it Improves Robustness","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Ce Ju, Kam Woh Ng, Lixin Fan, Qiang Yang, Yilun Jin","submitted_at":"2020-11-27T03:22:50Z","abstract_excerpt":"Deep neural networks (DNNs) are known to be prone to adversarial attacks, for which many remedies are proposed. While adversarial training (AT) is regarded as the most robust defense, it suffers from poor performance both on clean examples and under other types of attacks, e.g. attacks with larger perturbations. Meanwhile, regularizers that encourage uncertain outputs, such as entropy maximization (EntM) and label smoothing (LS) can maintain accuracy on clean examples and improve performance under weak attacks, yet their ability to defend against strong attacks is still in doubt. In this paper"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2011.13538","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2011.13538/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:54:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"k3nQ7E9QoTdUJbDr6xtzz5efvBihrlA2xIVAlcmrMlHa4JPuWJB5QV95b8e97xb+db5yf8CZeoTqpi3pKrPADA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T07:12:43.879641Z"},"content_sha256":"019eca766c36ce7c82dabfa6c918b5f9a766be1431e425c1049783706572b643","schema_version":"1.0","event_id":"sha256:019eca766c36ce7c82dabfa6c918b5f9a766be1431e425c1049783706572b643"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GAFAQCPVYJJ5CPH6OL6PT34MXK/bundle.json","state_url":"https://pith.science/pith/GAFAQCPVYJJ5CPH6OL6PT34MXK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GAFAQCPVYJJ5CPH6OL6PT34MXK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T07:12:43Z","links":{"resolver":"https://pith.science/pith/GAFAQCPVYJJ5CPH6OL6PT34MXK","bundle":"https://pith.science/pith/GAFAQCPVYJJ5CPH6OL6PT34MXK/bundle.json","state":"https://pith.science/pith/GAFAQCPVYJJ5CPH6OL6PT34MXK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GAFAQCPVYJJ5CPH6OL6PT34MXK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:GAFAQCPVYJJ5CPH6OL6PT34MXK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6b815467208babff4ae96f6533859e5eea4820ebe83c7000e993ee48d9aaf7d6","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2020-11-27T03:22:50Z","title_canon_sha256":"9e9df815f4093460dda6716e6af39aa4dfa9211a3de469bf6a50d61752eeb381"},"schema_version":"1.0","source":{"id":"2011.13538","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2011.13538","created_at":"2026-07-05T01:54:55Z"},{"alias_kind":"arxiv_version","alias_value":"2011.13538v1","created_at":"2026-07-05T01:54:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2011.13538","created_at":"2026-07-05T01:54:55Z"},{"alias_kind":"pith_short_12","alias_value":"GAFAQCPVYJJ5","created_at":"2026-07-05T01:54:55Z"},{"alias_kind":"pith_short_16","alias_value":"GAFAQCPVYJJ5CPH6","created_at":"2026-07-05T01:54:55Z"},{"alias_kind":"pith_short_8","alias_value":"GAFAQCPV","created_at":"2026-07-05T01:54:55Z"}],"graph_snapshots":[{"event_id":"sha256:019eca766c36ce7c82dabfa6c918b5f9a766be1431e425c1049783706572b643","target":"graph","created_at":"2026-07-05T01:54:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2011.13538/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) are known to be prone to adversarial attacks, for which many remedies are proposed. While adversarial training (AT) is regarded as the most robust defense, it suffers from poor performance both on clean examples and under other types of attacks, e.g. attacks with larger perturbations. Meanwhile, regularizers that encourage uncertain outputs, such as entropy maximization (EntM) and label smoothing (LS) can maintain accuracy on clean examples and improve performance under weak attacks, yet their ability to defend against strong attacks is still in doubt. In this paper","authors_text":"Ce Ju, Kam Woh Ng, Lixin Fan, Qiang Yang, Yilun Jin","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2020-11-27T03:22:50Z","title":"Rethinking Uncertainty in Deep Learning: Whether and How it Improves Robustness"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2011.13538","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:61dc6487f4d77469e7ed3a366c0427e8f80897fbeed5a2c4c65d093efeaff4f8","target":"record","created_at":"2026-07-05T01:54:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6b815467208babff4ae96f6533859e5eea4820ebe83c7000e993ee48d9aaf7d6","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2020-11-27T03:22:50Z","title_canon_sha256":"9e9df815f4093460dda6716e6af39aa4dfa9211a3de469bf6a50d61752eeb381"},"schema_version":"1.0","source":{"id":"2011.13538","kind":"arxiv","version":1}},"canonical_sha256":"300a0809f5c253d13cfe72fcf9ef8cba94210a52e1fc6f2eb82f090f5d3ed116","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"300a0809f5c253d13cfe72fcf9ef8cba94210a52e1fc6f2eb82f090f5d3ed116","first_computed_at":"2026-07-05T01:54:55.254955Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:54:55.254955Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"dRYM7NKWX6HG8fi3H2pOkkV4drYtfWprbWEjSWt+MqUAX9JHNM/J7KYfcTme4hpraLSlv/XIbUwT/KKKP+AvBw==","signature_status":"signed_v1","signed_at":"2026-07-05T01:54:55.255330Z","signed_message":"canonical_sha256_bytes"},"source_id":"2011.13538","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:61dc6487f4d77469e7ed3a366c0427e8f80897fbeed5a2c4c65d093efeaff4f8","sha256:019eca766c36ce7c82dabfa6c918b5f9a766be1431e425c1049783706572b643"],"state_sha256":"403a33198c30cc889ce1313042fd51e961feb29b264e4595226c2232ab9fd454"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3tknbK+N+vAojV/wQoX3PF8lB28NdWW5dEe3yfhtoY2VCwNgkoQoQdkWIlnkCdEh/jbtmpqauj9oF0MNEqFWCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T07:12:43.898048Z","bundle_sha256":"8b2d4147b63b04cc3c212ef6ab54f60f500437836f16cc1405caa3dd9a94e989"}}