{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2021:HTWOMVORM6W626OSN5IDMBT3VQ","short_pith_number":"pith:HTWOMVOR","schema_version":"1.0","canonical_sha256":"3cece655d167aded79d26f5036067bac3af4d392f1852051c84122481e58eaa4","source":{"kind":"arxiv","id":"2110.14068","version":4},"attestation_state":"computed","paper":{"title":"Drawing Robust Scratch Tickets: Subnetworks with Inborn Robustness Are Found within Randomly Initialized Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"David Cox, Qixuan Yu, Shang Wu, Xu Ouyang, Yang Zhang, Yingyan Celine Lin, Yonggan Fu","submitted_at":"2021-10-26T22:52:56Z","abstract_excerpt":"Deep Neural Networks (DNNs) are known to be vulnerable to adversarial attacks, i.e., an imperceptible perturbation to the input can mislead DNNs trained on clean images into making erroneous predictions. To tackle this, adversarial training is currently the most effective defense method, by augmenting the training set with adversarial samples generated on the fly. Interestingly, we discover for the first time that there exist subnetworks with inborn robustness, matching or surpassing the robust accuracy of the adversarially trained networks with comparable model sizes, within randomly initiali"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2110.14068","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-10-26T22:52:56Z","cross_cats_sorted":[],"title_canon_sha256":"f8c73c1402eaa3e5560f5a227e5bc19946f58fddff6ea2b30df45e43bdfb8e49","abstract_canon_sha256":"9e2878255f683558430e42c7b4703030b47d08c53e5f9373f7821ba90a7e042a"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:56:45.340571Z","signature_b64":"vjwn6IjSCip4x562tJQI816cYCL0psBWfFkRj7sOWO23IIntqI/vtZOham/a8Aw8FY62uikRdGNnaM64Uf75Dg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3cece655d167aded79d26f5036067bac3af4d392f1852051c84122481e58eaa4","last_reissued_at":"2026-07-05T09:56:45.340150Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:56:45.340150Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Drawing Robust Scratch Tickets: Subnetworks with Inborn Robustness Are Found within Randomly Initialized Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"David Cox, Qixuan Yu, Shang Wu, Xu Ouyang, Yang Zhang, Yingyan Celine Lin, Yonggan Fu","submitted_at":"2021-10-26T22:52:56Z","abstract_excerpt":"Deep Neural Networks (DNNs) are known to be vulnerable to adversarial attacks, i.e., an imperceptible perturbation to the input can mislead DNNs trained on clean images into making erroneous predictions. To tackle this, adversarial training is currently the most effective defense method, by augmenting the training set with adversarial samples generated on the fly. Interestingly, we discover for the first time that there exist subnetworks with inborn robustness, matching or surpassing the robust accuracy of the adversarially trained networks with comparable model sizes, within randomly initiali"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.14068","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2110.14068/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2110.14068","created_at":"2026-07-05T09:56:45.340206+00:00"},{"alias_kind":"arxiv_version","alias_value":"2110.14068v4","created_at":"2026-07-05T09:56:45.340206+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.14068","created_at":"2026-07-05T09:56:45.340206+00:00"},{"alias_kind":"pith_short_12","alias_value":"HTWOMVORM6W6","created_at":"2026-07-05T09:56:45.340206+00:00"},{"alias_kind":"pith_short_16","alias_value":"HTWOMVORM6W626OS","created_at":"2026-07-05T09:56:45.340206+00:00"},{"alias_kind":"pith_short_8","alias_value":"HTWOMVOR","created_at":"2026-07-05T09:56:45.340206+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/HTWOMVORM6W626OSN5IDMBT3VQ","json":"https://pith.science/pith/HTWOMVORM6W626OSN5IDMBT3VQ.json","graph_json":"https://pith.science/api/pith-number/HTWOMVORM6W626OSN5IDMBT3VQ/graph.json","events_json":"https://pith.science/api/pith-number/HTWOMVORM6W626OSN5IDMBT3VQ/events.json","paper":"https://pith.science/paper/HTWOMVOR"},"agent_actions":{"view_html":"https://pith.science/pith/HTWOMVORM6W626OSN5IDMBT3VQ","download_json":"https://pith.science/pith/HTWOMVORM6W626OSN5IDMBT3VQ.json","view_paper":"https://pith.science/paper/HTWOMVOR","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2110.14068&json=true","fetch_graph":"https://pith.science/api/pith-number/HTWOMVORM6W626OSN5IDMBT3VQ/graph.json","fetch_events":"https://pith.science/api/pith-number/HTWOMVORM6W626OSN5IDMBT3VQ/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/HTWOMVORM6W626OSN5IDMBT3VQ/action/timestamp_anchor","attest_storage":"https://pith.science/pith/HTWOMVORM6W626OSN5IDMBT3VQ/action/storage_attestation","attest_author":"https://pith.science/pith/HTWOMVORM6W626OSN5IDMBT3VQ/action/author_attestation","sign_citation":"https://pith.science/pith/HTWOMVORM6W626OSN5IDMBT3VQ/action/citation_signature","submit_replication":"https://pith.science/pith/HTWOMVORM6W626OSN5IDMBT3VQ/action/replication_record"}},"created_at":"2026-07-05T09:56:45.340206+00:00","updated_at":"2026-07-05T09:56:45.340206+00:00"}