{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:GKFMRMNVMI5TCH3LYEFKLFMOGI","short_pith_number":"pith:GKFMRMNV","canonical_record":{"source":{"id":"2110.08042","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2021-10-15T12:12:41Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"14c582cb8dfd4066d344d19cf96a0af5c3b9591aa87100a30017cc663cc2a9bd","abstract_canon_sha256":"05425c97bda0ab2d2775f6a9149b482d5cf1db4b12743eab3df47a26ae11f763"},"schema_version":"1.0"},"canonical_sha256":"328ac8b1b5623b311f6bc10aa5958e320d3368b2554475ac68f50ef636ba957f","source":{"kind":"arxiv","id":"2110.08042","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.08042","created_at":"2026-07-05T03:22:59Z"},{"alias_kind":"arxiv_version","alias_value":"2110.08042v1","created_at":"2026-07-05T03:22:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.08042","created_at":"2026-07-05T03:22:59Z"},{"alias_kind":"pith_short_12","alias_value":"GKFMRMNVMI5T","created_at":"2026-07-05T03:22:59Z"},{"alias_kind":"pith_short_16","alias_value":"GKFMRMNVMI5TCH3L","created_at":"2026-07-05T03:22:59Z"},{"alias_kind":"pith_short_8","alias_value":"GKFMRMNV","created_at":"2026-07-05T03:22:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:GKFMRMNVMI5TCH3LYEFKLFMOGI","target":"record","payload":{"canonical_record":{"source":{"id":"2110.08042","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2021-10-15T12:12:41Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"14c582cb8dfd4066d344d19cf96a0af5c3b9591aa87100a30017cc663cc2a9bd","abstract_canon_sha256":"05425c97bda0ab2d2775f6a9149b482d5cf1db4b12743eab3df47a26ae11f763"},"schema_version":"1.0"},"canonical_sha256":"328ac8b1b5623b311f6bc10aa5958e320d3368b2554475ac68f50ef636ba957f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:22:59.865985Z","signature_b64":"I695fOhvvqq3ZiUPndDy+5Ev1WI5C1r6Sn9hnuqJL3SGWVwPQZ3A8UJz9QdQiViUERg4wHAg9Nl8HHoWU2IBCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"328ac8b1b5623b311f6bc10aa5958e320d3368b2554475ac68f50ef636ba957f","last_reissued_at":"2026-07-05T03:22:59.865579Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:22:59.865579Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2110.08042","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:22:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Q8jq3RyNsNrSLRyRg+CcfZOTSSiTGTasYMPSAtvZbHWA3nzXvPmdFBspLG2PSDOfQkaqBQTE0vIa/wIn8tTYCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T12:48:36.795917Z"},"content_sha256":"c92e04e2d909b6363cb2bc6c48b7f0c234764398936e6a75846b4b0a9bfc797a","schema_version":"1.0","event_id":"sha256:c92e04e2d909b6363cb2bc6c48b7f0c234764398936e6a75846b4b0a9bfc797a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:GKFMRMNVMI5TCH3LYEFKLFMOGI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Attacks on ML Defense Models Competition","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Chao Li, Chuanbiao Song, Daquan Lin, Hang Su, Hui Xue, Jiadong Lin, Jiayu Tang, Jiequan Cui, Jun Zhu, Lianli Gao, Pengguang Chen, Qi-An Fu, Qilong Zhang, Tianyu Pang, Wenzhao Xiang, Xiaofeng Mao, Xiaogang Xu, Xiao Yang, Xitong Gao, Yang Guo, Ye Liu, Yinpeng Dong, Yuan He, Yuefeng Chen, Yunrui Yu, Zhennan Wu, Zhe Zhao, Zihao Wang","submitted_at":"2021-10-15T12:12:41Z","abstract_excerpt":"Due to the vulnerability of deep neural networks (DNNs) to adversarial examples, a large number of defense techniques have been proposed to alleviate this problem in recent years. However, the progress of building more robust models is usually hampered by the incomplete or incorrect robustness evaluation. To accelerate the research on reliable evaluation of adversarial robustness of the current defense models in image classification, the TSAIL group at Tsinghua University and the Alibaba Security group organized this competition along with a CVPR 2021 workshop on adversarial machine learning ("},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.08042","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2110.08042/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:22:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KzRkNBphukWkoEgeVu5xejl7a0INpqf0JmDKGZZGRK5c8WIbGPli7ykhcvl346A1cz+b9FXjNXI3wG1cc+CsBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T12:48:36.796542Z"},"content_sha256":"695a1c758c96a46425fc0c4eb354af20a6059b4b5ad3a33e08a148f3822892ec","schema_version":"1.0","event_id":"sha256:695a1c758c96a46425fc0c4eb354af20a6059b4b5ad3a33e08a148f3822892ec"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GKFMRMNVMI5TCH3LYEFKLFMOGI/bundle.json","state_url":"https://pith.science/pith/GKFMRMNVMI5TCH3LYEFKLFMOGI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GKFMRMNVMI5TCH3LYEFKLFMOGI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T12:48:36Z","links":{"resolver":"https://pith.science/pith/GKFMRMNVMI5TCH3LYEFKLFMOGI","bundle":"https://pith.science/pith/GKFMRMNVMI5TCH3LYEFKLFMOGI/bundle.json","state":"https://pith.science/pith/GKFMRMNVMI5TCH3LYEFKLFMOGI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GKFMRMNVMI5TCH3LYEFKLFMOGI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:GKFMRMNVMI5TCH3LYEFKLFMOGI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"05425c97bda0ab2d2775f6a9149b482d5cf1db4b12743eab3df47a26ae11f763","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2021-10-15T12:12:41Z","title_canon_sha256":"14c582cb8dfd4066d344d19cf96a0af5c3b9591aa87100a30017cc663cc2a9bd"},"schema_version":"1.0","source":{"id":"2110.08042","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.08042","created_at":"2026-07-05T03:22:59Z"},{"alias_kind":"arxiv_version","alias_value":"2110.08042v1","created_at":"2026-07-05T03:22:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.08042","created_at":"2026-07-05T03:22:59Z"},{"alias_kind":"pith_short_12","alias_value":"GKFMRMNVMI5T","created_at":"2026-07-05T03:22:59Z"},{"alias_kind":"pith_short_16","alias_value":"GKFMRMNVMI5TCH3L","created_at":"2026-07-05T03:22:59Z"},{"alias_kind":"pith_short_8","alias_value":"GKFMRMNV","created_at":"2026-07-05T03:22:59Z"}],"graph_snapshots":[{"event_id":"sha256:695a1c758c96a46425fc0c4eb354af20a6059b4b5ad3a33e08a148f3822892ec","target":"graph","created_at":"2026-07-05T03:22:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2110.08042/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Due to the vulnerability of deep neural networks (DNNs) to adversarial examples, a large number of defense techniques have been proposed to alleviate this problem in recent years. However, the progress of building more robust models is usually hampered by the incomplete or incorrect robustness evaluation. To accelerate the research on reliable evaluation of adversarial robustness of the current defense models in image classification, the TSAIL group at Tsinghua University and the Alibaba Security group organized this competition along with a CVPR 2021 workshop on adversarial machine learning (","authors_text":"Chao Li, Chuanbiao Song, Daquan Lin, Hang Su, Hui Xue, Jiadong Lin, Jiayu Tang, Jiequan Cui, Jun Zhu, Lianli Gao, Pengguang Chen, Qi-An Fu, Qilong Zhang, Tianyu Pang, Wenzhao Xiang, Xiaofeng Mao, Xiaogang Xu, Xiao Yang, Xitong Gao, Yang Guo, Ye Liu, Yinpeng Dong, Yuan He, Yuefeng Chen, Yunrui Yu, Zhennan Wu, Zhe Zhao, Zihao Wang","cross_cats":["cs.AI","cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2021-10-15T12:12:41Z","title":"Adversarial Attacks on ML Defense Models Competition"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.08042","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c92e04e2d909b6363cb2bc6c48b7f0c234764398936e6a75846b4b0a9bfc797a","target":"record","created_at":"2026-07-05T03:22:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"05425c97bda0ab2d2775f6a9149b482d5cf1db4b12743eab3df47a26ae11f763","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2021-10-15T12:12:41Z","title_canon_sha256":"14c582cb8dfd4066d344d19cf96a0af5c3b9591aa87100a30017cc663cc2a9bd"},"schema_version":"1.0","source":{"id":"2110.08042","kind":"arxiv","version":1}},"canonical_sha256":"328ac8b1b5623b311f6bc10aa5958e320d3368b2554475ac68f50ef636ba957f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"328ac8b1b5623b311f6bc10aa5958e320d3368b2554475ac68f50ef636ba957f","first_computed_at":"2026-07-05T03:22:59.865579Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:22:59.865579Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"I695fOhvvqq3ZiUPndDy+5Ev1WI5C1r6Sn9hnuqJL3SGWVwPQZ3A8UJz9QdQiViUERg4wHAg9Nl8HHoWU2IBCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:22:59.865985Z","signed_message":"canonical_sha256_bytes"},"source_id":"2110.08042","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c92e04e2d909b6363cb2bc6c48b7f0c234764398936e6a75846b4b0a9bfc797a","sha256:695a1c758c96a46425fc0c4eb354af20a6059b4b5ad3a33e08a148f3822892ec"],"state_sha256":"d90c76f06479893b9968df839ae2fffec46a465d5d525654b8baa58deadf020c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Z3hYknucQJoyj743P+xnEjZ8wkqEGiUT7oB2ai5EDlYk0oKwmahEDvVIjlBVJBbVd+A6gVaTO5CUzNASNgwpAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T12:48:36.800209Z","bundle_sha256":"5b1366e99d6cff5283bb555bf88ca08b54fb353fdff70ee0bfb2582e51e9293a"}}