{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:IWFFKJ2DXQKF4IDMK3N2GGY7S4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"36f97a1367d1e97001881beb32536e3e8a8270ab1a3cefaad34dc9b72b9c6a31","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-10-01T07:57:42Z","title_canon_sha256":"c837870e0c42feb97a173ed1974ca109c54f13b71c52e3013207f354beb56f68"},"schema_version":"1.0","source":{"id":"1910.01742","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1910.01742","created_at":"2026-07-05T00:09:53Z"},{"alias_kind":"arxiv_version","alias_value":"1910.01742v1","created_at":"2026-07-05T00:09:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1910.01742","created_at":"2026-07-05T00:09:53Z"},{"alias_kind":"pith_short_12","alias_value":"IWFFKJ2DXQKF","created_at":"2026-07-05T00:09:53Z"},{"alias_kind":"pith_short_16","alias_value":"IWFFKJ2DXQKF4IDM","created_at":"2026-07-05T00:09:53Z"},{"alias_kind":"pith_short_8","alias_value":"IWFFKJ2D","created_at":"2026-07-05T00:09:53Z"}],"graph_snapshots":[{"event_id":"sha256:8c543c791a9856b5805730a93327d09f50d866b1b4d3343339e9f94a9c8fb5e3","target":"graph","created_at":"2026-07-05T00:09:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1910.01742/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural network (DNN) has demonstrated its success in multiple domains. However, DNN models are inherently vulnerable to adversarial examples, which are generated by adding adversarial perturbations to benign inputs to fool the DNN model to misclassify. In this paper, we present a cross-layer strategic ensemble framework and a suite of robust defense algorithms, which are attack-independent, and capable of auto-repairing and auto-verifying the target model being attacked. Our strategic ensemble approach makes three original contributions. First, we employ input-transformation diversity to ","authors_text":"Emre Gursoy, Ka-Ho Chow, Ling Liu, Margaret Loper, Stacey Truex, Wenqi Wei, Yanzhao Wu","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-10-01T07:57:42Z","title":"Cross-Layer Strategic Ensemble Defense Against Adversarial Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1910.01742","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2a9f8e567a88ce8d9c6a3c5acc68669f1dad200ccf3352f1bb16634e9c1a0b7b","target":"record","created_at":"2026-07-05T00:09:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"36f97a1367d1e97001881beb32536e3e8a8270ab1a3cefaad34dc9b72b9c6a31","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-10-01T07:57:42Z","title_canon_sha256":"c837870e0c42feb97a173ed1974ca109c54f13b71c52e3013207f354beb56f68"},"schema_version":"1.0","source":{"id":"1910.01742","kind":"arxiv","version":1}},"canonical_sha256":"458a552743bc145e206c56dba31b1f97346821e8dc1bcdeaa7ab205b9e231db5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"458a552743bc145e206c56dba31b1f97346821e8dc1bcdeaa7ab205b9e231db5","first_computed_at":"2026-07-05T00:09:53.127803Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:09:53.127803Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7zIPvKCPkQN8pm7TlR2iLZpQUCZv6Cal9u+CSz2OxTgkyHo74VY6ZndC42T17k2xvRELcFm/YLSoA1vaZ5m1Cg==","signature_status":"signed_v1","signed_at":"2026-07-05T00:09:53.128135Z","signed_message":"canonical_sha256_bytes"},"source_id":"1910.01742","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2a9f8e567a88ce8d9c6a3c5acc68669f1dad200ccf3352f1bb16634e9c1a0b7b","sha256:8c543c791a9856b5805730a93327d09f50d866b1b4d3343339e9f94a9c8fb5e3"],"state_sha256":"680aa5d3aaa6981c40213f47a3c1b3dd85e79f272deeeae0c1e5baf0f61352cb"}