{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:HYH2Q5ZZSKZGOGUEGTORYVV4OF","short_pith_number":"pith:HYH2Q5ZZ","canonical_record":{"source":{"id":"2002.11242","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-26T01:04:38Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"9a1920d581462e2a0dcfc9d72885f9a1ab963cc6c1d9843c3b1d252d17cc041c","abstract_canon_sha256":"1f3300964e0cb6811fe3ad82f496eb1a0fdd7f6c5ac9f7bd7f65274765612eb7"},"schema_version":"1.0"},"canonical_sha256":"3e0fa8773992b2671a8434dd1c56bc716915e66d75e381f2bb9ddd0d1cfe750c","source":{"kind":"arxiv","id":"2002.11242","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.11242","created_at":"2026-07-05T01:33:06Z"},{"alias_kind":"arxiv_version","alias_value":"2002.11242v2","created_at":"2026-07-05T01:33:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.11242","created_at":"2026-07-05T01:33:06Z"},{"alias_kind":"pith_short_12","alias_value":"HYH2Q5ZZSKZG","created_at":"2026-07-05T01:33:06Z"},{"alias_kind":"pith_short_16","alias_value":"HYH2Q5ZZSKZGOGUE","created_at":"2026-07-05T01:33:06Z"},{"alias_kind":"pith_short_8","alias_value":"HYH2Q5ZZ","created_at":"2026-07-05T01:33:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:HYH2Q5ZZSKZGOGUEGTORYVV4OF","target":"record","payload":{"canonical_record":{"source":{"id":"2002.11242","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-26T01:04:38Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"9a1920d581462e2a0dcfc9d72885f9a1ab963cc6c1d9843c3b1d252d17cc041c","abstract_canon_sha256":"1f3300964e0cb6811fe3ad82f496eb1a0fdd7f6c5ac9f7bd7f65274765612eb7"},"schema_version":"1.0"},"canonical_sha256":"3e0fa8773992b2671a8434dd1c56bc716915e66d75e381f2bb9ddd0d1cfe750c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:33:06.586798Z","signature_b64":"8njHxGM4i1ldgK1v3EZ/l1B25rv9+VaV0IQr0fuN6wwwTjAr7+sM7PIiXq3NsRpTZNDAc85cHit9NJ1EWHAkDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3e0fa8773992b2671a8434dd1c56bc716915e66d75e381f2bb9ddd0d1cfe750c","last_reissued_at":"2026-07-05T01:33:06.586292Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:33:06.586292Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2002.11242","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:33:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HA+bM9teBN7XBP3gv2NPVNAtrBYf0/5t5zMqQPLy1y6qhqTPtsYgsV52a+mssqmOUqI9ywrNys2r1poJ/xrcAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T09:27:51.389436Z"},"content_sha256":"07da895e5cef203521a6040eed8b776a4314bd147019b7e556d7f273ef3bcd7c","schema_version":"1.0","event_id":"sha256:07da895e5cef203521a6040eed8b776a4314bd147019b7e556d7f273ef3bcd7c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:HYH2Q5ZZSKZGOGUEGTORYVV4OF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Attacks Which Do Not Kill Training Make Adversarial Learning Stronger","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Bo Han, Gang Niu, Jingfeng Zhang, Lizhen Cui, Masashi Sugiyama, Mohan Kankanhalli, Xilie Xu","submitted_at":"2020-02-26T01:04:38Z","abstract_excerpt":"Adversarial training based on the minimax formulation is necessary for obtaining adversarial robustness of trained models. However, it is conservative or even pessimistic so that it sometimes hurts the natural generalization. In this paper, we raise a fundamental question---do we have to trade off natural generalization for adversarial robustness? We argue that adversarial training is to employ confident adversarial data for updating the current model. We propose a novel approach of friendly adversarial training (FAT): rather than employing most adversarial data maximizing the loss, we search "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.11242","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2002.11242/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:33:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1HfXe9yvfpvdfM5ZzmcaRfBB7Ty3WoX61JGOjaD6kCe7npu2FnPYxJwhQsCiQfcyOo3Y7WWqY1rgxBBp7ZbBDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T09:27:51.389810Z"},"content_sha256":"b8922bdf4d89dbe79b5bf925eed5dc1776c51f45b04824897321046983e33553","schema_version":"1.0","event_id":"sha256:b8922bdf4d89dbe79b5bf925eed5dc1776c51f45b04824897321046983e33553"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HYH2Q5ZZSKZGOGUEGTORYVV4OF/bundle.json","state_url":"https://pith.science/pith/HYH2Q5ZZSKZGOGUEGTORYVV4OF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HYH2Q5ZZSKZGOGUEGTORYVV4OF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T09:27:51Z","links":{"resolver":"https://pith.science/pith/HYH2Q5ZZSKZGOGUEGTORYVV4OF","bundle":"https://pith.science/pith/HYH2Q5ZZSKZGOGUEGTORYVV4OF/bundle.json","state":"https://pith.science/pith/HYH2Q5ZZSKZGOGUEGTORYVV4OF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HYH2Q5ZZSKZGOGUEGTORYVV4OF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:HYH2Q5ZZSKZGOGUEGTORYVV4OF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1f3300964e0cb6811fe3ad82f496eb1a0fdd7f6c5ac9f7bd7f65274765612eb7","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-26T01:04:38Z","title_canon_sha256":"9a1920d581462e2a0dcfc9d72885f9a1ab963cc6c1d9843c3b1d252d17cc041c"},"schema_version":"1.0","source":{"id":"2002.11242","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.11242","created_at":"2026-07-05T01:33:06Z"},{"alias_kind":"arxiv_version","alias_value":"2002.11242v2","created_at":"2026-07-05T01:33:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.11242","created_at":"2026-07-05T01:33:06Z"},{"alias_kind":"pith_short_12","alias_value":"HYH2Q5ZZSKZG","created_at":"2026-07-05T01:33:06Z"},{"alias_kind":"pith_short_16","alias_value":"HYH2Q5ZZSKZGOGUE","created_at":"2026-07-05T01:33:06Z"},{"alias_kind":"pith_short_8","alias_value":"HYH2Q5ZZ","created_at":"2026-07-05T01:33:06Z"}],"graph_snapshots":[{"event_id":"sha256:b8922bdf4d89dbe79b5bf925eed5dc1776c51f45b04824897321046983e33553","target":"graph","created_at":"2026-07-05T01:33:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2002.11242/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial training based on the minimax formulation is necessary for obtaining adversarial robustness of trained models. However, it is conservative or even pessimistic so that it sometimes hurts the natural generalization. In this paper, we raise a fundamental question---do we have to trade off natural generalization for adversarial robustness? We argue that adversarial training is to employ confident adversarial data for updating the current model. We propose a novel approach of friendly adversarial training (FAT): rather than employing most adversarial data maximizing the loss, we search ","authors_text":"Bo Han, Gang Niu, Jingfeng Zhang, Lizhen Cui, Masashi Sugiyama, Mohan Kankanhalli, Xilie Xu","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-26T01:04:38Z","title":"Attacks Which Do Not Kill Training Make Adversarial Learning Stronger"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.11242","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:07da895e5cef203521a6040eed8b776a4314bd147019b7e556d7f273ef3bcd7c","target":"record","created_at":"2026-07-05T01:33:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1f3300964e0cb6811fe3ad82f496eb1a0fdd7f6c5ac9f7bd7f65274765612eb7","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-26T01:04:38Z","title_canon_sha256":"9a1920d581462e2a0dcfc9d72885f9a1ab963cc6c1d9843c3b1d252d17cc041c"},"schema_version":"1.0","source":{"id":"2002.11242","kind":"arxiv","version":2}},"canonical_sha256":"3e0fa8773992b2671a8434dd1c56bc716915e66d75e381f2bb9ddd0d1cfe750c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3e0fa8773992b2671a8434dd1c56bc716915e66d75e381f2bb9ddd0d1cfe750c","first_computed_at":"2026-07-05T01:33:06.586292Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:33:06.586292Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8njHxGM4i1ldgK1v3EZ/l1B25rv9+VaV0IQr0fuN6wwwTjAr7+sM7PIiXq3NsRpTZNDAc85cHit9NJ1EWHAkDw==","signature_status":"signed_v1","signed_at":"2026-07-05T01:33:06.586798Z","signed_message":"canonical_sha256_bytes"},"source_id":"2002.11242","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:07da895e5cef203521a6040eed8b776a4314bd147019b7e556d7f273ef3bcd7c","sha256:b8922bdf4d89dbe79b5bf925eed5dc1776c51f45b04824897321046983e33553"],"state_sha256":"230ab66b4f67569ccc39b50e44d2a68b2149f1ef94947eaa6fd94801b56ecdd7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aJiIRDQXgVAPtJyWypGols4NuKRN8wvn1hUPuuUMq+0ZBTGXJAYLchJaBIuRoV0rgt8hj/lPvhO8Au3Y3Y4IDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T09:27:51.391746Z","bundle_sha256":"e4d04febe1f6c1195958205d941bf5af14693b6ca5379fb59e8ca8f11aee7655"}}