{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:HSDGCAH3EXJ4VHGBBTA62IBBMB","short_pith_number":"pith:HSDGCAH3","canonical_record":{"source":{"id":"2303.11611","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-21T06:10:47Z","cross_cats_sorted":[],"title_canon_sha256":"924ab5ae241afef675f01fbfeb6cb1067f14ec676f8591c2b17b24fd82d8562c","abstract_canon_sha256":"508719ed0d226655f20b6aacb97fa855bc2e4a3a41ef794b359fc83e9b2a09a7"},"schema_version":"1.0"},"canonical_sha256":"3c866100fb25d3ca9cc10cc1ed2021606e223f5d0494cc41c37534be1af04464","source":{"kind":"arxiv","id":"2303.11611","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.11611","created_at":"2026-07-05T07:25:22Z"},{"alias_kind":"arxiv_version","alias_value":"2303.11611v2","created_at":"2026-07-05T07:25:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.11611","created_at":"2026-07-05T07:25:22Z"},{"alias_kind":"pith_short_12","alias_value":"HSDGCAH3EXJ4","created_at":"2026-07-05T07:25:22Z"},{"alias_kind":"pith_short_16","alias_value":"HSDGCAH3EXJ4VHGB","created_at":"2026-07-05T07:25:22Z"},{"alias_kind":"pith_short_8","alias_value":"HSDGCAH3","created_at":"2026-07-05T07:25:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:HSDGCAH3EXJ4VHGBBTA62IBBMB","target":"record","payload":{"canonical_record":{"source":{"id":"2303.11611","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-21T06:10:47Z","cross_cats_sorted":[],"title_canon_sha256":"924ab5ae241afef675f01fbfeb6cb1067f14ec676f8591c2b17b24fd82d8562c","abstract_canon_sha256":"508719ed0d226655f20b6aacb97fa855bc2e4a3a41ef794b359fc83e9b2a09a7"},"schema_version":"1.0"},"canonical_sha256":"3c866100fb25d3ca9cc10cc1ed2021606e223f5d0494cc41c37534be1af04464","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:25:22.562857Z","signature_b64":"L39zSIUKlQ4DBJP80vh68VRlynyxv2D9IGU7g6qppPf7lepRdbkTnZVYZHiihAXeYsVDW1KpaARhhWQ9A7YRDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3c866100fb25d3ca9cc10cc1ed2021606e223f5d0494cc41c37534be1af04464","last_reissued_at":"2026-07-05T07:25:22.562389Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:25:22.562389Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2303.11611","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:25:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"20Ng6fYsDJq/n4mR5RW0PGUMWUZ2MBf+Wiz9evVUVBde9qKEDqjXtZkHDmMFENb3LlyvBDSsHMGy6sLCct5bAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T16:05:26.220410Z"},"content_sha256":"cef05b846c7ca3d63178f76e30a6941b4f845c203504fb0a3fd9d0b6b9a08e86","schema_version":"1.0","event_id":"sha256:cef05b846c7ca3d63178f76e30a6941b4f845c203504fb0a3fd9d0b6b9a08e86"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:HSDGCAH3EXJ4VHGBBTA62IBBMB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Out of Thin Air: Exploring Data-Free Adversarial Robustness Distillation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Dingkang Yang, Kaixun Jiang, Lizhe Qi, Pinxue Guo, Wenqiang Zhang, Yuzheng Wang, Zhaoyu Chen","submitted_at":"2023-03-21T06:10:47Z","abstract_excerpt":"Adversarial Robustness Distillation (ARD) is a promising task to solve the issue of limited adversarial robustness of small capacity models while optimizing the expensive computational costs of Adversarial Training (AT). Despite the good robust performance, the existing ARD methods are still impractical to deploy in natural high-security scenes due to these methods rely entirely on original or publicly available data with a similar distribution. In fact, these data are almost always private, specific, and distinctive for scenes that require high robustness. To tackle these issues, we propose a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.11611","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2303.11611/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:25:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7gq9XufFgNsmVKMb7aKvbA9dZi6zhJY9/YNGCTfVrugsoWbkEazJSXxUAWVGvCMsLDhMj6o1qUgR7Bd8avjkDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T16:05:26.220921Z"},"content_sha256":"299a0d4d8f1dfbf69b682472d3cdbe6f638cd89b2efb16f0986a2444dc6abd55","schema_version":"1.0","event_id":"sha256:299a0d4d8f1dfbf69b682472d3cdbe6f638cd89b2efb16f0986a2444dc6abd55"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HSDGCAH3EXJ4VHGBBTA62IBBMB/bundle.json","state_url":"https://pith.science/pith/HSDGCAH3EXJ4VHGBBTA62IBBMB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HSDGCAH3EXJ4VHGBBTA62IBBMB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T16:05:26Z","links":{"resolver":"https://pith.science/pith/HSDGCAH3EXJ4VHGBBTA62IBBMB","bundle":"https://pith.science/pith/HSDGCAH3EXJ4VHGBBTA62IBBMB/bundle.json","state":"https://pith.science/pith/HSDGCAH3EXJ4VHGBBTA62IBBMB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HSDGCAH3EXJ4VHGBBTA62IBBMB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:HSDGCAH3EXJ4VHGBBTA62IBBMB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"508719ed0d226655f20b6aacb97fa855bc2e4a3a41ef794b359fc83e9b2a09a7","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-21T06:10:47Z","title_canon_sha256":"924ab5ae241afef675f01fbfeb6cb1067f14ec676f8591c2b17b24fd82d8562c"},"schema_version":"1.0","source":{"id":"2303.11611","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.11611","created_at":"2026-07-05T07:25:22Z"},{"alias_kind":"arxiv_version","alias_value":"2303.11611v2","created_at":"2026-07-05T07:25:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.11611","created_at":"2026-07-05T07:25:22Z"},{"alias_kind":"pith_short_12","alias_value":"HSDGCAH3EXJ4","created_at":"2026-07-05T07:25:22Z"},{"alias_kind":"pith_short_16","alias_value":"HSDGCAH3EXJ4VHGB","created_at":"2026-07-05T07:25:22Z"},{"alias_kind":"pith_short_8","alias_value":"HSDGCAH3","created_at":"2026-07-05T07:25:22Z"}],"graph_snapshots":[{"event_id":"sha256:299a0d4d8f1dfbf69b682472d3cdbe6f638cd89b2efb16f0986a2444dc6abd55","target":"graph","created_at":"2026-07-05T07:25:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2303.11611/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial Robustness Distillation (ARD) is a promising task to solve the issue of limited adversarial robustness of small capacity models while optimizing the expensive computational costs of Adversarial Training (AT). Despite the good robust performance, the existing ARD methods are still impractical to deploy in natural high-security scenes due to these methods rely entirely on original or publicly available data with a similar distribution. In fact, these data are almost always private, specific, and distinctive for scenes that require high robustness. To tackle these issues, we propose a","authors_text":"Dingkang Yang, Kaixun Jiang, Lizhe Qi, Pinxue Guo, Wenqiang Zhang, Yuzheng Wang, Zhaoyu Chen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-21T06:10:47Z","title":"Out of Thin Air: Exploring Data-Free Adversarial Robustness Distillation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.11611","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cef05b846c7ca3d63178f76e30a6941b4f845c203504fb0a3fd9d0b6b9a08e86","target":"record","created_at":"2026-07-05T07:25:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"508719ed0d226655f20b6aacb97fa855bc2e4a3a41ef794b359fc83e9b2a09a7","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-21T06:10:47Z","title_canon_sha256":"924ab5ae241afef675f01fbfeb6cb1067f14ec676f8591c2b17b24fd82d8562c"},"schema_version":"1.0","source":{"id":"2303.11611","kind":"arxiv","version":2}},"canonical_sha256":"3c866100fb25d3ca9cc10cc1ed2021606e223f5d0494cc41c37534be1af04464","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3c866100fb25d3ca9cc10cc1ed2021606e223f5d0494cc41c37534be1af04464","first_computed_at":"2026-07-05T07:25:22.562389Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:25:22.562389Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"L39zSIUKlQ4DBJP80vh68VRlynyxv2D9IGU7g6qppPf7lepRdbkTnZVYZHiihAXeYsVDW1KpaARhhWQ9A7YRDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:25:22.562857Z","signed_message":"canonical_sha256_bytes"},"source_id":"2303.11611","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cef05b846c7ca3d63178f76e30a6941b4f845c203504fb0a3fd9d0b6b9a08e86","sha256:299a0d4d8f1dfbf69b682472d3cdbe6f638cd89b2efb16f0986a2444dc6abd55"],"state_sha256":"a1b645dbf7b94691fbb1258a098da1db7400a9bdbc1ad55a6117a735c55f05db"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BNuutp1+hvIqdcgMKqzERMYrIrFPLw57Qo2AgR83nDHYmaKoLyLQxK0EgNSwewpPJHTaY3wjvgemhMoxKbC9BQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T16:05:26.225413Z","bundle_sha256":"c2dcda9f7cd8a2a493a4bf38f6d8063d33d293ed17c278a45716755a846b9b50"}}