{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:HH46T4HM5DSU55XVUKAJOW2AM3","short_pith_number":"pith:HH46T4HM","canonical_record":{"source":{"id":"1703.09202","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2017-03-27T17:45:07Z","cross_cats_sorted":["cs.LG","q-bio.NC"],"title_canon_sha256":"7c7cf9ea3b5ebade999bfd2a31539b29ad86e01ba30496379489674b969ac890","abstract_canon_sha256":"bac7e0877dc827c677993ea3b89ea74ec0ce9fa998e336ab592191186925f585"},"schema_version":"1.0"},"canonical_sha256":"39f9e9f0ece8e54ef6f5a280975b4066cf61d387f8cde79a1af1843d5aa617d9","source":{"kind":"arxiv","id":"1703.09202","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1703.09202","created_at":"2026-05-18T00:47:53Z"},{"alias_kind":"arxiv_version","alias_value":"1703.09202v1","created_at":"2026-05-18T00:47:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1703.09202","created_at":"2026-05-18T00:47:53Z"},{"alias_kind":"pith_short_12","alias_value":"HH46T4HM5DSU","created_at":"2026-05-18T12:31:18Z"},{"alias_kind":"pith_short_16","alias_value":"HH46T4HM5DSU55XV","created_at":"2026-05-18T12:31:18Z"},{"alias_kind":"pith_short_8","alias_value":"HH46T4HM","created_at":"2026-05-18T12:31:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:HH46T4HM5DSU55XVUKAJOW2AM3","target":"record","payload":{"canonical_record":{"source":{"id":"1703.09202","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2017-03-27T17:45:07Z","cross_cats_sorted":["cs.LG","q-bio.NC"],"title_canon_sha256":"7c7cf9ea3b5ebade999bfd2a31539b29ad86e01ba30496379489674b969ac890","abstract_canon_sha256":"bac7e0877dc827c677993ea3b89ea74ec0ce9fa998e336ab592191186925f585"},"schema_version":"1.0"},"canonical_sha256":"39f9e9f0ece8e54ef6f5a280975b4066cf61d387f8cde79a1af1843d5aa617d9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:47:53.970527Z","signature_b64":"glMN8kV4EQttq2Nfbo+WdkgwLa3/8cV4n84La7CZLU+7A3ODAPSAdiV9D5pDQmLrJu4dof89IgWeAh7kUoypBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"39f9e9f0ece8e54ef6f5a280975b4066cf61d387f8cde79a1af1843d5aa617d9","last_reissued_at":"2026-05-18T00:47:53.969808Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:47:53.969808Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1703.09202","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:47:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bOO+Q2fmAGys/pi2F3fP8fEGc5Mw+XccR/shpdSKYT8pvH4gV2GCRGO+fwrGWO9FuAgARU8FYmuZOUZXWWQQCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-26T01:22:59.075654Z"},"content_sha256":"8b2f721aa0758efc7f315b94fd2f100d458d677cf19240560df0085eefebc91a","schema_version":"1.0","event_id":"sha256:8b2f721aa0758efc7f315b94fd2f100d458d677cf19240560df0085eefebc91a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:HH46T4HM5DSU55XVUKAJOW2AM3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Biologically inspired protection of deep networks from adversarial attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","q-bio.NC"],"primary_cat":"stat.ML","authors_text":"Aran Nayebi, Surya Ganguli","submitted_at":"2017-03-27T17:45:07Z","abstract_excerpt":"Inspired by biophysical principles underlying nonlinear dendritic computation in neural circuits, we develop a scheme to train deep neural networks to make them robust to adversarial attacks. Our scheme generates highly nonlinear, saturated neural networks that achieve state of the art performance on gradient based adversarial examples on MNIST, despite never being exposed to adversarially chosen examples during training. Moreover, these networks exhibit unprecedented robustness to targeted, iterative schemes for generating adversarial examples, including second-order methods. We further ident"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1703.09202","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:47:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UDfVhQJP/vPGDmjr4hPiWlatqVUxQkkTNecvP+qNVeS89V+huBvyGR7YUzaiJH9HryzDMVvvco2NH+6HBg+lDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-26T01:22:59.076257Z"},"content_sha256":"79aec62f19b04e54e176247567172e3a1992f9ab9a8acb6041182347f7c3c385","schema_version":"1.0","event_id":"sha256:79aec62f19b04e54e176247567172e3a1992f9ab9a8acb6041182347f7c3c385"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HH46T4HM5DSU55XVUKAJOW2AM3/bundle.json","state_url":"https://pith.science/pith/HH46T4HM5DSU55XVUKAJOW2AM3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HH46T4HM5DSU55XVUKAJOW2AM3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-26T01:22:59Z","links":{"resolver":"https://pith.science/pith/HH46T4HM5DSU55XVUKAJOW2AM3","bundle":"https://pith.science/pith/HH46T4HM5DSU55XVUKAJOW2AM3/bundle.json","state":"https://pith.science/pith/HH46T4HM5DSU55XVUKAJOW2AM3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HH46T4HM5DSU55XVUKAJOW2AM3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:HH46T4HM5DSU55XVUKAJOW2AM3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bac7e0877dc827c677993ea3b89ea74ec0ce9fa998e336ab592191186925f585","cross_cats_sorted":["cs.LG","q-bio.NC"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2017-03-27T17:45:07Z","title_canon_sha256":"7c7cf9ea3b5ebade999bfd2a31539b29ad86e01ba30496379489674b969ac890"},"schema_version":"1.0","source":{"id":"1703.09202","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1703.09202","created_at":"2026-05-18T00:47:53Z"},{"alias_kind":"arxiv_version","alias_value":"1703.09202v1","created_at":"2026-05-18T00:47:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1703.09202","created_at":"2026-05-18T00:47:53Z"},{"alias_kind":"pith_short_12","alias_value":"HH46T4HM5DSU","created_at":"2026-05-18T12:31:18Z"},{"alias_kind":"pith_short_16","alias_value":"HH46T4HM5DSU55XV","created_at":"2026-05-18T12:31:18Z"},{"alias_kind":"pith_short_8","alias_value":"HH46T4HM","created_at":"2026-05-18T12:31:18Z"}],"graph_snapshots":[{"event_id":"sha256:79aec62f19b04e54e176247567172e3a1992f9ab9a8acb6041182347f7c3c385","target":"graph","created_at":"2026-05-18T00:47:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Inspired by biophysical principles underlying nonlinear dendritic computation in neural circuits, we develop a scheme to train deep neural networks to make them robust to adversarial attacks. Our scheme generates highly nonlinear, saturated neural networks that achieve state of the art performance on gradient based adversarial examples on MNIST, despite never being exposed to adversarially chosen examples during training. Moreover, these networks exhibit unprecedented robustness to targeted, iterative schemes for generating adversarial examples, including second-order methods. We further ident","authors_text":"Aran Nayebi, Surya Ganguli","cross_cats":["cs.LG","q-bio.NC"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2017-03-27T17:45:07Z","title":"Biologically inspired protection of deep networks from adversarial attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1703.09202","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8b2f721aa0758efc7f315b94fd2f100d458d677cf19240560df0085eefebc91a","target":"record","created_at":"2026-05-18T00:47:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bac7e0877dc827c677993ea3b89ea74ec0ce9fa998e336ab592191186925f585","cross_cats_sorted":["cs.LG","q-bio.NC"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2017-03-27T17:45:07Z","title_canon_sha256":"7c7cf9ea3b5ebade999bfd2a31539b29ad86e01ba30496379489674b969ac890"},"schema_version":"1.0","source":{"id":"1703.09202","kind":"arxiv","version":1}},"canonical_sha256":"39f9e9f0ece8e54ef6f5a280975b4066cf61d387f8cde79a1af1843d5aa617d9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"39f9e9f0ece8e54ef6f5a280975b4066cf61d387f8cde79a1af1843d5aa617d9","first_computed_at":"2026-05-18T00:47:53.969808Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:47:53.969808Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"glMN8kV4EQttq2Nfbo+WdkgwLa3/8cV4n84La7CZLU+7A3ODAPSAdiV9D5pDQmLrJu4dof89IgWeAh7kUoypBA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:47:53.970527Z","signed_message":"canonical_sha256_bytes"},"source_id":"1703.09202","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8b2f721aa0758efc7f315b94fd2f100d458d677cf19240560df0085eefebc91a","sha256:79aec62f19b04e54e176247567172e3a1992f9ab9a8acb6041182347f7c3c385"],"state_sha256":"313579fa581096263bd9e858303b5d2ded57748ce575cc36792417a70fc75064"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"botWeJ7FFGLmsGlPvzTg1HisMzij0zBVkfhoh0hQuv+07aLHbvSbVo9N7nCYYIqlYRFPYtoepYfjbxGrtjLzDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-26T01:22:59.078829Z","bundle_sha256":"1b73a4d339a82a8702de49737f69b7d111344fdfc42f2eee25a6afc7efe70493"}}