{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:IDHW5N2VK22PE5UK2EL77VXCGR","short_pith_number":"pith:IDHW5N2V","schema_version":"1.0","canonical_sha256":"40cf6eb75556b4f2768ad117ffd6e2347b5ca10599ae7d3b0121f65d310276bc","source":{"kind":"arxiv","id":"2505.24703","version":1},"attestation_state":"computed","paper":{"title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Chong Xiang, Dennis Jacob, Prateek Mittal","submitted_at":"2025-05-30T15:25:51Z","abstract_excerpt":"Deep learning techniques have enabled vast improvements in computer vision technologies. Nevertheless, these models are vulnerable to adversarial patch attacks which catastrophically impair performance. The physically realizable nature of these attacks calls for certifiable defenses, which feature provable guarantees on robustness. While certifiable defenses have been successfully applied to single-label classification, limited work has been done for multi-label classification. In this work, we present PatchDEMUX, a certifiably robust framework for multi-label classifiers against adversarial p"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2505.24703","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-30T15:25:51Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"fa281e3d4ccc8c5753c256736a3afa691fa646bd430df114fb21aac7fd658912","abstract_canon_sha256":"f34cb2193b6c627355d346574e859227b421fc41c75bcae0346c1de5f87ea797"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:12:55.043815Z","signature_b64":"GR2bcylR8v2PVfdkM1OmaZVhySicRu2FEYfnsIp88ku062FbULl6GMEGorzhuWv/wpbcDHobIUMvfH8Zh/OQAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"40cf6eb75556b4f2768ad117ffd6e2347b5ca10599ae7d3b0121f65d310276bc","last_reissued_at":"2026-07-05T11:12:55.043148Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:12:55.043148Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Chong Xiang, Dennis Jacob, Prateek Mittal","submitted_at":"2025-05-30T15:25:51Z","abstract_excerpt":"Deep learning techniques have enabled vast improvements in computer vision technologies. Nevertheless, these models are vulnerable to adversarial patch attacks which catastrophically impair performance. The physically realizable nature of these attacks calls for certifiable defenses, which feature provable guarantees on robustness. While certifiable defenses have been successfully applied to single-label classification, limited work has been done for multi-label classification. In this work, we present PatchDEMUX, a certifiably robust framework for multi-label classifiers against adversarial p"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.24703","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.24703/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2505.24703","created_at":"2026-07-05T11:12:55.043239+00:00"},{"alias_kind":"arxiv_version","alias_value":"2505.24703v1","created_at":"2026-07-05T11:12:55.043239+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.24703","created_at":"2026-07-05T11:12:55.043239+00:00"},{"alias_kind":"pith_short_12","alias_value":"IDHW5N2VK22P","created_at":"2026-07-05T11:12:55.043239+00:00"},{"alias_kind":"pith_short_16","alias_value":"IDHW5N2VK22PE5UK","created_at":"2026-07-05T11:12:55.043239+00:00"},{"alias_kind":"pith_short_8","alias_value":"IDHW5N2V","created_at":"2026-07-05T11:12:55.043239+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/IDHW5N2VK22PE5UK2EL77VXCGR","json":"https://pith.science/pith/IDHW5N2VK22PE5UK2EL77VXCGR.json","graph_json":"https://pith.science/api/pith-number/IDHW5N2VK22PE5UK2EL77VXCGR/graph.json","events_json":"https://pith.science/api/pith-number/IDHW5N2VK22PE5UK2EL77VXCGR/events.json","paper":"https://pith.science/paper/IDHW5N2V"},"agent_actions":{"view_html":"https://pith.science/pith/IDHW5N2VK22PE5UK2EL77VXCGR","download_json":"https://pith.science/pith/IDHW5N2VK22PE5UK2EL77VXCGR.json","view_paper":"https://pith.science/paper/IDHW5N2V","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2505.24703&json=true","fetch_graph":"https://pith.science/api/pith-number/IDHW5N2VK22PE5UK2EL77VXCGR/graph.json","fetch_events":"https://pith.science/api/pith-number/IDHW5N2VK22PE5UK2EL77VXCGR/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/IDHW5N2VK22PE5UK2EL77VXCGR/action/timestamp_anchor","attest_storage":"https://pith.science/pith/IDHW5N2VK22PE5UK2EL77VXCGR/action/storage_attestation","attest_author":"https://pith.science/pith/IDHW5N2VK22PE5UK2EL77VXCGR/action/author_attestation","sign_citation":"https://pith.science/pith/IDHW5N2VK22PE5UK2EL77VXCGR/action/citation_signature","submit_replication":"https://pith.science/pith/IDHW5N2VK22PE5UK2EL77VXCGR/action/replication_record"}},"created_at":"2026-07-05T11:12:55.043239+00:00","updated_at":"2026-07-05T11:12:55.043239+00:00"}