{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:HZUHY5MSYU73J4GUXPBZVOS2CQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5756f28dd09f6609f433dbb512a8e49f285993115b61a0090f5738f484dab605","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-05-18T15:20:18Z","title_canon_sha256":"a4821dccf2a645bc1405604533c3306680e44283fbb5dc5f757ba5657bc77f0b"},"schema_version":"1.0","source":{"id":"2205.08989","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.08989","created_at":"2026-07-05T09:45:05Z"},{"alias_kind":"arxiv_version","alias_value":"2205.08989v2","created_at":"2026-07-05T09:45:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.08989","created_at":"2026-07-05T09:45:05Z"},{"alias_kind":"pith_short_12","alias_value":"HZUHY5MSYU73","created_at":"2026-07-05T09:45:05Z"},{"alias_kind":"pith_short_16","alias_value":"HZUHY5MSYU73J4GU","created_at":"2026-07-05T09:45:05Z"},{"alias_kind":"pith_short_8","alias_value":"HZUHY5MS","created_at":"2026-07-05T09:45:05Z"}],"graph_snapshots":[{"event_id":"sha256:147c32e78981a54b5fcbe695804d3fe96e2b1966755fa63613f8520d41e36fb9","target":"graph","created_at":"2026-07-05T09:45:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2205.08989/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Patch attacks against object detectors have been of recent interest due to their being physically realizable and more closely aligned with practical systems. In response to this threat, many new defenses have been proposed that train a patch segmenter model to detect and remove the patch before the image is passed to the downstream model. We unify these approaches with a flexible framework, OODSmoother, which characterizes the properties of approaches that aim to remove adversarial patches. This framework naturally guides us to design 1) a novel adaptive attack that breaks existing patch attac","authors_text":"Atul Prakash, Jihye Choi, Neal Mangaokar, Ryan Feng, Somesh Jha","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-05-18T15:20:18Z","title":"Defending Object Detectors against Patch Attacks with Out-of-Distribution Smoothing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.08989","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f459d322d2c81c8d6ca789d214cb4fd7c7ada843ee3aa17a60941cdbcf420193","target":"record","created_at":"2026-07-05T09:45:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5756f28dd09f6609f433dbb512a8e49f285993115b61a0090f5738f484dab605","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-05-18T15:20:18Z","title_canon_sha256":"a4821dccf2a645bc1405604533c3306680e44283fbb5dc5f757ba5657bc77f0b"},"schema_version":"1.0","source":{"id":"2205.08989","kind":"arxiv","version":2}},"canonical_sha256":"3e687c7592c53fb4f0d4bbc39aba5a1432cccca62f6a47c9cfdfe514c42d5f98","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3e687c7592c53fb4f0d4bbc39aba5a1432cccca62f6a47c9cfdfe514c42d5f98","first_computed_at":"2026-07-05T09:45:05.239141Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:45:05.239141Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"3SSDKTjTfFPLDRbTjitT1WgQLohILgL9cV1spY11nD/YPelkZ0Xqo28Yb6bUKvsKgL6OFIe9gdf+7wiIkWs9Bg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:45:05.239562Z","signed_message":"canonical_sha256_bytes"},"source_id":"2205.08989","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f459d322d2c81c8d6ca789d214cb4fd7c7ada843ee3aa17a60941cdbcf420193","sha256:147c32e78981a54b5fcbe695804d3fe96e2b1966755fa63613f8520d41e36fb9"],"state_sha256":"53e72e11937e43db4b0d5171d6559057387388989f049b85c60b1aef98b4a82f"}