{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:HDZX7V2ZCL6JRQOR2D5FNHAYWY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a39500ac0159b1e1d2c967544001f6b7f1cd620c467ba6a94aae68a6cdc52215","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-06-02T09:43:34Z","title_canon_sha256":"a1722ebf2cc23f0fe555397afb8a993e1f86cc685bf5c0213a8f1d63abddc869"},"schema_version":"1.0","source":{"id":"2406.00685","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.00685","created_at":"2026-07-05T08:26:29Z"},{"alias_kind":"arxiv_version","alias_value":"2406.00685v1","created_at":"2026-07-05T08:26:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.00685","created_at":"2026-07-05T08:26:29Z"},{"alias_kind":"pith_short_12","alias_value":"HDZX7V2ZCL6J","created_at":"2026-07-05T08:26:29Z"},{"alias_kind":"pith_short_16","alias_value":"HDZX7V2ZCL6JRQOR","created_at":"2026-07-05T08:26:29Z"},{"alias_kind":"pith_short_8","alias_value":"HDZX7V2Z","created_at":"2026-07-05T08:26:29Z"}],"graph_snapshots":[{"event_id":"sha256:d8dc2f7cde24c9a409dce6e8ac0cefe65ced4725dfae16635ed4fc24581f189d","target":"graph","created_at":"2026-07-05T08:26:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.00685/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial training (AT) trains models using adversarial examples (AEs), which are natural images modified with specific perturbations to mislead the model. These perturbations are constrained by a predefined perturbation budget $\\epsilon$ and are equally applied to each pixel within an image. However, in this paper, we discover that not all pixels contribute equally to the accuracy on AEs (i.e., robustness) and accuracy on natural images (i.e., accuracy). Motivated by this finding, we propose Pixel-reweighted AdveRsarial Training (PART), a new framework that partially reduces $\\epsilon$ for ","authors_text":"Dawei Zhou, Feng Liu, Jiacheng Zhang, Jingfeng Zhang, Tongliang Liu","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-06-02T09:43:34Z","title":"Improving Accuracy-robustness Trade-off via Pixel Reweighted Adversarial Training"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.00685","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:353bfdd8479e4aad3112ba2901ed41429813abea755e508743b742b3b402054d","target":"record","created_at":"2026-07-05T08:26:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a39500ac0159b1e1d2c967544001f6b7f1cd620c467ba6a94aae68a6cdc52215","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-06-02T09:43:34Z","title_canon_sha256":"a1722ebf2cc23f0fe555397afb8a993e1f86cc685bf5c0213a8f1d63abddc869"},"schema_version":"1.0","source":{"id":"2406.00685","kind":"arxiv","version":1}},"canonical_sha256":"38f37fd75912fc98c1d1d0fa569c18b60ccd139c991b9bb57d7d1f8ff7c9bb6f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"38f37fd75912fc98c1d1d0fa569c18b60ccd139c991b9bb57d7d1f8ff7c9bb6f","first_computed_at":"2026-07-05T08:26:29.117698Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:26:29.117698Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jteg9feGiV18FdkWt4MhaYmISp3L4a9PmjIzAagK3LvbF34JTTGnwZ6cdlr58ACC0QG6esxPBJcvuKE8UzZ7Ag==","signature_status":"signed_v1","signed_at":"2026-07-05T08:26:29.118250Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.00685","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:353bfdd8479e4aad3112ba2901ed41429813abea755e508743b742b3b402054d","sha256:d8dc2f7cde24c9a409dce6e8ac0cefe65ced4725dfae16635ed4fc24581f189d"],"state_sha256":"bfa8e32b29d7352e08069f6a69d0ed555d0a0216a3fbb895c71bf2c2f71a3e1e"}