{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:I2IOGTGI6UAEZXJXHOHDSLG3ES","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ff15e17c0cfd265b14a067527557fef81e0f94e21c44c9088ff0b9941fe5c37e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-01-29T02:08:21Z","title_canon_sha256":"354c27003a941b9b9756663ff35ad95961278d6d4a0ff14c2d0694baf81311ed"},"schema_version":"1.0","source":{"id":"1801.09344","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1801.09344","created_at":"2026-07-05T01:48:04Z"},{"alias_kind":"arxiv_version","alias_value":"1801.09344v2","created_at":"2026-07-05T01:48:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1801.09344","created_at":"2026-07-05T01:48:04Z"},{"alias_kind":"pith_short_12","alias_value":"I2IOGTGI6UAE","created_at":"2026-07-05T01:48:04Z"},{"alias_kind":"pith_short_16","alias_value":"I2IOGTGI6UAEZXJX","created_at":"2026-07-05T01:48:04Z"},{"alias_kind":"pith_short_8","alias_value":"I2IOGTGI","created_at":"2026-07-05T01:48:04Z"}],"graph_snapshots":[{"event_id":"sha256:f9513290c9fc7ba6bce44d332e7a4dee7ca8cfa27b9c6f6b3c822fd0fec7d31a","target":"graph","created_at":"2026-07-05T01:48:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1801.09344/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While neural networks have achieved high accuracy on standard image classification benchmarks, their accuracy drops to nearly zero in the presence of small adversarial perturbations to test inputs. Defenses based on regularization and adversarial training have been proposed, but often followed by new, stronger attacks that defeat these defenses. Can we somehow end this arms race? In this work, we study this problem for neural networks with one hidden layer. We first propose a method based on a semidefinite relaxation that outputs a certificate that for a given network and test input, no attack","authors_text":"Aditi Raghunathan, Jacob Steinhardt, Percy Liang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-01-29T02:08:21Z","title":"Certified Defenses against Adversarial Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1801.09344","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a7734677fa6e0d0b24f857878c8418d4800bc7c159073abdfdb8f1443691465a","target":"record","created_at":"2026-07-05T01:48:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ff15e17c0cfd265b14a067527557fef81e0f94e21c44c9088ff0b9941fe5c37e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-01-29T02:08:21Z","title_canon_sha256":"354c27003a941b9b9756663ff35ad95961278d6d4a0ff14c2d0694baf81311ed"},"schema_version":"1.0","source":{"id":"1801.09344","kind":"arxiv","version":2}},"canonical_sha256":"4690e34cc8f5004cdd373b8e392cdb249e4380403580e5825f05dc817b108d75","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4690e34cc8f5004cdd373b8e392cdb249e4380403580e5825f05dc817b108d75","first_computed_at":"2026-07-05T01:48:04.437156Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:48:04.437156Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"b8d+vcLMAqVljaRStELSDhI4XH7IARPZObFXiOAp53dYWGLcjjP+vyqdpyOM6mQyDDjqPSdS3k8uXACYRxpeDw==","signature_status":"signed_v1","signed_at":"2026-07-05T01:48:04.437678Z","signed_message":"canonical_sha256_bytes"},"source_id":"1801.09344","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a7734677fa6e0d0b24f857878c8418d4800bc7c159073abdfdb8f1443691465a","sha256:f9513290c9fc7ba6bce44d332e7a4dee7ca8cfa27b9c6f6b3c822fd0fec7d31a"],"state_sha256":"1d1b071798464e4547ee5a79932b0b3a671b352789b450e6fa4b9821949d2669"}