{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:HHHRR2GYOFJJPO3P7M55VEPPAG","short_pith_number":"pith:HHHRR2GY","canonical_record":{"source":{"id":"1711.04368","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-11-12T22:07:36Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"d32aa69e6a589260cc59b4805f6656c7c9fbfab24f38c8de8fddab23c279af28","abstract_canon_sha256":"9165a7c9258b18c12136477dbd4ec926b695bb5fb9f454d03ce92d952e4819b5"},"schema_version":"1.0"},"canonical_sha256":"39cf18e8d8715297bb6ffb3bda91ef01832882f3b6d2b1875694858b47e05da8","source":{"kind":"arxiv","id":"1711.04368","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1711.04368","created_at":"2026-05-18T00:12:14Z"},{"alias_kind":"arxiv_version","alias_value":"1711.04368v3","created_at":"2026-05-18T00:12:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1711.04368","created_at":"2026-05-18T00:12:14Z"},{"alias_kind":"pith_short_12","alias_value":"HHHRR2GYOFJJ","created_at":"2026-05-18T12:31:18Z"},{"alias_kind":"pith_short_16","alias_value":"HHHRR2GYOFJJPO3P","created_at":"2026-05-18T12:31:18Z"},{"alias_kind":"pith_short_8","alias_value":"HHHRR2GY","created_at":"2026-05-18T12:31:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:HHHRR2GYOFJJPO3P7M55VEPPAG","target":"record","payload":{"canonical_record":{"source":{"id":"1711.04368","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-11-12T22:07:36Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"d32aa69e6a589260cc59b4805f6656c7c9fbfab24f38c8de8fddab23c279af28","abstract_canon_sha256":"9165a7c9258b18c12136477dbd4ec926b695bb5fb9f454d03ce92d952e4819b5"},"schema_version":"1.0"},"canonical_sha256":"39cf18e8d8715297bb6ffb3bda91ef01832882f3b6d2b1875694858b47e05da8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:12:14.069646Z","signature_b64":"VXi1IwN8TLUK6UYl/afb7Kjtfd8nCTa1yWHcVRHRRFy0bazt08qDdExpTKtEEgrk+dPH1aJiLI2lth6wsk4ZBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"39cf18e8d8715297bb6ffb3bda91ef01832882f3b6d2b1875694858b47e05da8","last_reissued_at":"2026-05-18T00:12:14.069137Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:12:14.069137Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1711.04368","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:12:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"O8Ao2w33WDUQIabQ/kNNfUPO1IrPT5gLMH17nfv/yp/6PmrTqxKh4QNbnxXU/rb7jPi/mE2TVwGiQbYmAGE+BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-03T11:05:46.473210Z"},"content_sha256":"ee49627b8dd8d0e178318c3331f2f36295e6895f890122b9830761af197e65bb","schema_version":"1.0","event_id":"sha256:ee49627b8dd8d0e178318c3331f2f36295e6895f890122b9830761af197e65bb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:HHHRR2GYOFJJPO3P7M55VEPPAG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Machine vs Machine: Minimax-Optimal Defense Against Adversarial Examples","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Akshay Mehra, Jihun Hamm","submitted_at":"2017-11-12T22:07:36Z","abstract_excerpt":"Recently, researchers have discovered that the state-of-the-art object classifiers can be fooled easily by small perturbations in the input unnoticeable to human eyes. It is also known that an attacker can generate strong adversarial examples if she knows the classifier parameters. Conversely, a defender can robustify the classifier by retraining if she has access to the adversarial examples. We explain and formulate this adversarial example problem as a two-player continuous zero-sum game, and demonstrate the fallacy of evaluating a defense or an attack as a static problem. To find the best w"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1711.04368","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:12:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zI5+aCLW1bIXFgH0iccwtE+iLnhFn4YmUg+zF79vsbfcA8bJ1JrSQHgrjI9iGi5BLcbd8QbDExDNMtX7g6yUBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-03T11:05:46.473563Z"},"content_sha256":"76e3f96827f3d1cf8bd5c4d67d82963e2130dd99fbdbec4d18d59d13724873aa","schema_version":"1.0","event_id":"sha256:76e3f96827f3d1cf8bd5c4d67d82963e2130dd99fbdbec4d18d59d13724873aa"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HHHRR2GYOFJJPO3P7M55VEPPAG/bundle.json","state_url":"https://pith.science/pith/HHHRR2GYOFJJPO3P7M55VEPPAG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HHHRR2GYOFJJPO3P7M55VEPPAG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-03T11:05:46Z","links":{"resolver":"https://pith.science/pith/HHHRR2GYOFJJPO3P7M55VEPPAG","bundle":"https://pith.science/pith/HHHRR2GYOFJJPO3P7M55VEPPAG/bundle.json","state":"https://pith.science/pith/HHHRR2GYOFJJPO3P7M55VEPPAG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HHHRR2GYOFJJPO3P7M55VEPPAG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:HHHRR2GYOFJJPO3P7M55VEPPAG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9165a7c9258b18c12136477dbd4ec926b695bb5fb9f454d03ce92d952e4819b5","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-11-12T22:07:36Z","title_canon_sha256":"d32aa69e6a589260cc59b4805f6656c7c9fbfab24f38c8de8fddab23c279af28"},"schema_version":"1.0","source":{"id":"1711.04368","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1711.04368","created_at":"2026-05-18T00:12:14Z"},{"alias_kind":"arxiv_version","alias_value":"1711.04368v3","created_at":"2026-05-18T00:12:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1711.04368","created_at":"2026-05-18T00:12:14Z"},{"alias_kind":"pith_short_12","alias_value":"HHHRR2GYOFJJ","created_at":"2026-05-18T12:31:18Z"},{"alias_kind":"pith_short_16","alias_value":"HHHRR2GYOFJJPO3P","created_at":"2026-05-18T12:31:18Z"},{"alias_kind":"pith_short_8","alias_value":"HHHRR2GY","created_at":"2026-05-18T12:31:18Z"}],"graph_snapshots":[{"event_id":"sha256:76e3f96827f3d1cf8bd5c4d67d82963e2130dd99fbdbec4d18d59d13724873aa","target":"graph","created_at":"2026-05-18T00:12:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Recently, researchers have discovered that the state-of-the-art object classifiers can be fooled easily by small perturbations in the input unnoticeable to human eyes. It is also known that an attacker can generate strong adversarial examples if she knows the classifier parameters. Conversely, a defender can robustify the classifier by retraining if she has access to the adversarial examples. We explain and formulate this adversarial example problem as a two-player continuous zero-sum game, and demonstrate the fallacy of evaluating a defense or an attack as a static problem. To find the best w","authors_text":"Akshay Mehra, Jihun Hamm","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-11-12T22:07:36Z","title":"Machine vs Machine: Minimax-Optimal Defense Against Adversarial Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1711.04368","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ee49627b8dd8d0e178318c3331f2f36295e6895f890122b9830761af197e65bb","target":"record","created_at":"2026-05-18T00:12:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9165a7c9258b18c12136477dbd4ec926b695bb5fb9f454d03ce92d952e4819b5","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-11-12T22:07:36Z","title_canon_sha256":"d32aa69e6a589260cc59b4805f6656c7c9fbfab24f38c8de8fddab23c279af28"},"schema_version":"1.0","source":{"id":"1711.04368","kind":"arxiv","version":3}},"canonical_sha256":"39cf18e8d8715297bb6ffb3bda91ef01832882f3b6d2b1875694858b47e05da8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"39cf18e8d8715297bb6ffb3bda91ef01832882f3b6d2b1875694858b47e05da8","first_computed_at":"2026-05-18T00:12:14.069137Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:12:14.069137Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"VXi1IwN8TLUK6UYl/afb7Kjtfd8nCTa1yWHcVRHRRFy0bazt08qDdExpTKtEEgrk+dPH1aJiLI2lth6wsk4ZBQ==","signature_status":"signed_v1","signed_at":"2026-05-18T00:12:14.069646Z","signed_message":"canonical_sha256_bytes"},"source_id":"1711.04368","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ee49627b8dd8d0e178318c3331f2f36295e6895f890122b9830761af197e65bb","sha256:76e3f96827f3d1cf8bd5c4d67d82963e2130dd99fbdbec4d18d59d13724873aa"],"state_sha256":"1fa0de99f29f23c51f7f299a71adad73d0dc8298b7769bb6771a9552beef9778"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/VeW4KVLZmsBPrqsZeiVcmDGh+OJ++lEm/giPbxFkcVI8TqLRryfFNEIsJrQ5ZtcseYbOFsGVMISAKdpI8gOBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-03T11:05:46.475753Z","bundle_sha256":"42a38877881c8f898fb238e892ceef87006de718e3caa60b54ac09b6cc016034"}}