{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2024:HTMED7SMTTXYGKUTKZNH347H7V","short_pith_number":"pith:HTMED7SM","schema_version":"1.0","canonical_sha256":"3cd841fe4c9cef832a93565a7df3e7fd52c9ce06948601a3a9de4e81b9ace11c","source":{"kind":"arxiv","id":"2403.09101","version":1},"attestation_state":"computed","paper":{"title":"Soften to Defend: Towards Adversarial Robustness via Self-Guided Label Refinement","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Canghong Jin, Daiwei Yu, Lina Wei, Sixian Chan, Yun Zhang, Zhuorong Li","submitted_at":"2024-03-14T04:48:31Z","abstract_excerpt":"Adversarial training (AT) is currently one of the most effective ways to obtain the robustness of deep neural networks against adversarial attacks. However, most AT methods suffer from robust overfitting, i.e., a significant generalization gap in adversarial robustness between the training and testing curves. In this paper, we first identify a connection between robust overfitting and the excessive memorization of noisy labels in AT from a view of gradient norm. As such label noise is mainly caused by a distribution mismatch and improper label assignments, we are motivated to propose a label r"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2403.09101","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-03-14T04:48:31Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"55ae80e255c2fe46482e6da16103224fb9c21d20b3821321bdd64fb7da470258","abstract_canon_sha256":"c0d73f6f2c764331bbfa2e497a978893fc86c2b095eeed7a81dc1d8d9366b367"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:56:05.479760Z","signature_b64":"poQaoTSjbi7ofaRa7Nvnl7THPEkKKOR1Rdtp/v70Gu5iC+kB7QOkDSS/22FfbwWlbyZZ5Cve5MItKzd3J4d6Cw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3cd841fe4c9cef832a93565a7df3e7fd52c9ce06948601a3a9de4e81b9ace11c","last_reissued_at":"2026-07-05T07:56:05.479283Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:56:05.479283Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Soften to Defend: Towards Adversarial Robustness via Self-Guided Label Refinement","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Canghong Jin, Daiwei Yu, Lina Wei, Sixian Chan, Yun Zhang, Zhuorong Li","submitted_at":"2024-03-14T04:48:31Z","abstract_excerpt":"Adversarial training (AT) is currently one of the most effective ways to obtain the robustness of deep neural networks against adversarial attacks. However, most AT methods suffer from robust overfitting, i.e., a significant generalization gap in adversarial robustness between the training and testing curves. In this paper, we first identify a connection between robust overfitting and the excessive memorization of noisy labels in AT from a view of gradient norm. As such label noise is mainly caused by a distribution mismatch and improper label assignments, we are motivated to propose a label r"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.09101","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.09101/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2403.09101","created_at":"2026-07-05T07:56:05.479341+00:00"},{"alias_kind":"arxiv_version","alias_value":"2403.09101v1","created_at":"2026-07-05T07:56:05.479341+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.09101","created_at":"2026-07-05T07:56:05.479341+00:00"},{"alias_kind":"pith_short_12","alias_value":"HTMED7SMTTXY","created_at":"2026-07-05T07:56:05.479341+00:00"},{"alias_kind":"pith_short_16","alias_value":"HTMED7SMTTXYGKUT","created_at":"2026-07-05T07:56:05.479341+00:00"},{"alias_kind":"pith_short_8","alias_value":"HTMED7SM","created_at":"2026-07-05T07:56:05.479341+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/HTMED7SMTTXYGKUTKZNH347H7V","json":"https://pith.science/pith/HTMED7SMTTXYGKUTKZNH347H7V.json","graph_json":"https://pith.science/api/pith-number/HTMED7SMTTXYGKUTKZNH347H7V/graph.json","events_json":"https://pith.science/api/pith-number/HTMED7SMTTXYGKUTKZNH347H7V/events.json","paper":"https://pith.science/paper/HTMED7SM"},"agent_actions":{"view_html":"https://pith.science/pith/HTMED7SMTTXYGKUTKZNH347H7V","download_json":"https://pith.science/pith/HTMED7SMTTXYGKUTKZNH347H7V.json","view_paper":"https://pith.science/paper/HTMED7SM","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2403.09101&json=true","fetch_graph":"https://pith.science/api/pith-number/HTMED7SMTTXYGKUTKZNH347H7V/graph.json","fetch_events":"https://pith.science/api/pith-number/HTMED7SMTTXYGKUTKZNH347H7V/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/HTMED7SMTTXYGKUTKZNH347H7V/action/timestamp_anchor","attest_storage":"https://pith.science/pith/HTMED7SMTTXYGKUTKZNH347H7V/action/storage_attestation","attest_author":"https://pith.science/pith/HTMED7SMTTXYGKUTKZNH347H7V/action/author_attestation","sign_citation":"https://pith.science/pith/HTMED7SMTTXYGKUTKZNH347H7V/action/citation_signature","submit_replication":"https://pith.science/pith/HTMED7SMTTXYGKUTKZNH347H7V/action/replication_record"}},"created_at":"2026-07-05T07:56:05.479341+00:00","updated_at":"2026-07-05T07:56:05.479341+00:00"}