{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:GLEUD2RXTRDRP5J4Z2YMX3TSR5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"db43f7fa00782d4fac636c663ddc5cb7dacfe5ae9b6d6da6991f5189c86b96cc","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-10-25T12:49:36Z","title_canon_sha256":"10dbfec4c6c774db6a743b1523f36715987a237377bcbb22d58d62a328d82559"},"schema_version":"1.0","source":{"id":"2210.14229","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.14229","created_at":"2026-07-05T05:10:28Z"},{"alias_kind":"arxiv_version","alias_value":"2210.14229v1","created_at":"2026-07-05T05:10:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.14229","created_at":"2026-07-05T05:10:28Z"},{"alias_kind":"pith_short_12","alias_value":"GLEUD2RXTRDR","created_at":"2026-07-05T05:10:28Z"},{"alias_kind":"pith_short_16","alias_value":"GLEUD2RXTRDRP5J4","created_at":"2026-07-05T05:10:28Z"},{"alias_kind":"pith_short_8","alias_value":"GLEUD2RX","created_at":"2026-07-05T05:10:28Z"}],"graph_snapshots":[{"event_id":"sha256:99c964d281f0e1155cd60ba4e57f93e282e97617c51c710af49d7d26f2206a03","target":"graph","created_at":"2026-07-05T05:10:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.14229/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The information bottleneck (IB) method is a feasible defense solution against adversarial attacks in deep learning. However, this method suffers from the spurious correlation, which leads to the limitation of its further improvement of adversarial robustness. In this paper, we incorporate the causal inference into the IB framework to alleviate such a problem. Specifically, we divide the features obtained by the IB method into robust features (content information) and non-robust features (style information) via the instrumental variables to estimate the causal effects. With the utilization of s","authors_text":"Huan Hua, Huilin Yin, Jun Yan, Wancheng Ge, Weiquan Huang, Xi Fang","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-10-25T12:49:36Z","title":"Causal Information Bottleneck Boosts Adversarial Robustness of Deep Neural Network"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.14229","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1968057379d60885634f2f70b1f142766c0b8356d0ea562bba79b5d549a651e7","target":"record","created_at":"2026-07-05T05:10:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"db43f7fa00782d4fac636c663ddc5cb7dacfe5ae9b6d6da6991f5189c86b96cc","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-10-25T12:49:36Z","title_canon_sha256":"10dbfec4c6c774db6a743b1523f36715987a237377bcbb22d58d62a328d82559"},"schema_version":"1.0","source":{"id":"2210.14229","kind":"arxiv","version":1}},"canonical_sha256":"32c941ea379c4717f53cceb0cbee728f76a5d3c1d929ffdebc1a76fb40bd87f1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"32c941ea379c4717f53cceb0cbee728f76a5d3c1d929ffdebc1a76fb40bd87f1","first_computed_at":"2026-07-05T05:10:28.745306Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:10:28.745306Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MEiCCguZb5AIGCtkmbOOVQFctziMVvyhhHU68/kC9EeeEPVL0oXCPEAyidWymk4/i6U3s+JMf1pkMmhwe8UZBw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:10:28.745773Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.14229","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1968057379d60885634f2f70b1f142766c0b8356d0ea562bba79b5d549a651e7","sha256:99c964d281f0e1155cd60ba4e57f93e282e97617c51c710af49d7d26f2206a03"],"state_sha256":"4d4e95f1efec145e5d52961674ac8e388aa46fedd5b7b2b56d500a7c93f1b110"}