{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:JFQ6WM54JHVBAHW4AKBDHQYAO5","short_pith_number":"pith:JFQ6WM54","canonical_record":{"source":{"id":"2207.08089","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-07-17T06:50:48Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"b66cfb42adf3e173b0355f7a25fb90bcf424b4864c2ea74c79d7c2d70cef6066","abstract_canon_sha256":"1ee90a5efa911844d526907f8db43a2303d172df9f745087520a2104a7d06bf1"},"schema_version":"1.0"},"canonical_sha256":"4961eb33bc49ea101edc028233c300775cd9056ab4d225f7488317e7040b6719","source":{"kind":"arxiv","id":"2207.08089","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.08089","created_at":"2026-07-05T04:41:00Z"},{"alias_kind":"arxiv_version","alias_value":"2207.08089v1","created_at":"2026-07-05T04:41:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.08089","created_at":"2026-07-05T04:41:00Z"},{"alias_kind":"pith_short_12","alias_value":"JFQ6WM54JHVB","created_at":"2026-07-05T04:41:00Z"},{"alias_kind":"pith_short_16","alias_value":"JFQ6WM54JHVBAHW4","created_at":"2026-07-05T04:41:00Z"},{"alias_kind":"pith_short_8","alias_value":"JFQ6WM54","created_at":"2026-07-05T04:41:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:JFQ6WM54JHVBAHW4AKBDHQYAO5","target":"record","payload":{"canonical_record":{"source":{"id":"2207.08089","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-07-17T06:50:48Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"b66cfb42adf3e173b0355f7a25fb90bcf424b4864c2ea74c79d7c2d70cef6066","abstract_canon_sha256":"1ee90a5efa911844d526907f8db43a2303d172df9f745087520a2104a7d06bf1"},"schema_version":"1.0"},"canonical_sha256":"4961eb33bc49ea101edc028233c300775cd9056ab4d225f7488317e7040b6719","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:41:00.753059Z","signature_b64":"ycmMpZRhLViKZQbubhFQcgVkL3p6KQRQRJpcp40cKlIfQIlc7lMO/fXYFrxSTS8tdVUxSNX07K3UOTMiWnlUBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4961eb33bc49ea101edc028233c300775cd9056ab4d225f7488317e7040b6719","last_reissued_at":"2026-07-05T04:41:00.752643Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:41:00.752643Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2207.08089","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:41:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2OdUBveob8L+W6XKUvgMsmgM5o23wyzuwTusKq/jYYv+g377xz/F8/V7mYXEK8fxaqwEHiBaVHJ8VJ/f831rCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T06:16:47.090740Z"},"content_sha256":"5c7e1c5a4ca6ebd4770d4f8e3c1edc408185b6d784df80871c193863a5726087","schema_version":"1.0","event_id":"sha256:5c7e1c5a4ca6ebd4770d4f8e3c1edc408185b6d784df80871c193863a5726087"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:JFQ6WM54JHVBAHW4AKBDHQYAO5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Threat Model-Agnostic Adversarial Defense using Diffusion Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Alex Bronstein, Bahjat Kawar, Michael Elad, Roy Ganz, Tsachi Blau","submitted_at":"2022-07-17T06:50:48Z","abstract_excerpt":"Deep Neural Networks (DNNs) are highly sensitive to imperceptible malicious perturbations, known as adversarial attacks. Following the discovery of this vulnerability in real-world imaging and vision applications, the associated safety concerns have attracted vast research attention, and many defense techniques have been developed. Most of these defense methods rely on adversarial training (AT) -- training the classification network on images perturbed according to a specific threat model, which defines the magnitude of the allowed modification. Although AT leads to promising results, training"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.08089","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2207.08089/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:41:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MsLyv+ybjA1GjkmIqUeuc2RBBf6pElL+wVg8/LikEeQ4IL9Ub1k5oa0aVTc8UeAVCsALPcrY40J6QrS7+Z3mCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T06:16:47.091262Z"},"content_sha256":"2b8628059cb0a9ed319c4456af3ec6609f610b58dd88ac4c0f617145383e7b54","schema_version":"1.0","event_id":"sha256:2b8628059cb0a9ed319c4456af3ec6609f610b58dd88ac4c0f617145383e7b54"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JFQ6WM54JHVBAHW4AKBDHQYAO5/bundle.json","state_url":"https://pith.science/pith/JFQ6WM54JHVBAHW4AKBDHQYAO5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JFQ6WM54JHVBAHW4AKBDHQYAO5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T06:16:47Z","links":{"resolver":"https://pith.science/pith/JFQ6WM54JHVBAHW4AKBDHQYAO5","bundle":"https://pith.science/pith/JFQ6WM54JHVBAHW4AKBDHQYAO5/bundle.json","state":"https://pith.science/pith/JFQ6WM54JHVBAHW4AKBDHQYAO5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JFQ6WM54JHVBAHW4AKBDHQYAO5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:JFQ6WM54JHVBAHW4AKBDHQYAO5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1ee90a5efa911844d526907f8db43a2303d172df9f745087520a2104a7d06bf1","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-07-17T06:50:48Z","title_canon_sha256":"b66cfb42adf3e173b0355f7a25fb90bcf424b4864c2ea74c79d7c2d70cef6066"},"schema_version":"1.0","source":{"id":"2207.08089","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.08089","created_at":"2026-07-05T04:41:00Z"},{"alias_kind":"arxiv_version","alias_value":"2207.08089v1","created_at":"2026-07-05T04:41:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.08089","created_at":"2026-07-05T04:41:00Z"},{"alias_kind":"pith_short_12","alias_value":"JFQ6WM54JHVB","created_at":"2026-07-05T04:41:00Z"},{"alias_kind":"pith_short_16","alias_value":"JFQ6WM54JHVBAHW4","created_at":"2026-07-05T04:41:00Z"},{"alias_kind":"pith_short_8","alias_value":"JFQ6WM54","created_at":"2026-07-05T04:41:00Z"}],"graph_snapshots":[{"event_id":"sha256:2b8628059cb0a9ed319c4456af3ec6609f610b58dd88ac4c0f617145383e7b54","target":"graph","created_at":"2026-07-05T04:41:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2207.08089/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep Neural Networks (DNNs) are highly sensitive to imperceptible malicious perturbations, known as adversarial attacks. Following the discovery of this vulnerability in real-world imaging and vision applications, the associated safety concerns have attracted vast research attention, and many defense techniques have been developed. Most of these defense methods rely on adversarial training (AT) -- training the classification network on images perturbed according to a specific threat model, which defines the magnitude of the allowed modification. Although AT leads to promising results, training","authors_text":"Alex Bronstein, Bahjat Kawar, Michael Elad, Roy Ganz, Tsachi Blau","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-07-17T06:50:48Z","title":"Threat Model-Agnostic Adversarial Defense using Diffusion Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.08089","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5c7e1c5a4ca6ebd4770d4f8e3c1edc408185b6d784df80871c193863a5726087","target":"record","created_at":"2026-07-05T04:41:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1ee90a5efa911844d526907f8db43a2303d172df9f745087520a2104a7d06bf1","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-07-17T06:50:48Z","title_canon_sha256":"b66cfb42adf3e173b0355f7a25fb90bcf424b4864c2ea74c79d7c2d70cef6066"},"schema_version":"1.0","source":{"id":"2207.08089","kind":"arxiv","version":1}},"canonical_sha256":"4961eb33bc49ea101edc028233c300775cd9056ab4d225f7488317e7040b6719","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4961eb33bc49ea101edc028233c300775cd9056ab4d225f7488317e7040b6719","first_computed_at":"2026-07-05T04:41:00.752643Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:41:00.752643Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ycmMpZRhLViKZQbubhFQcgVkL3p6KQRQRJpcp40cKlIfQIlc7lMO/fXYFrxSTS8tdVUxSNX07K3UOTMiWnlUBg==","signature_status":"signed_v1","signed_at":"2026-07-05T04:41:00.753059Z","signed_message":"canonical_sha256_bytes"},"source_id":"2207.08089","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5c7e1c5a4ca6ebd4770d4f8e3c1edc408185b6d784df80871c193863a5726087","sha256:2b8628059cb0a9ed319c4456af3ec6609f610b58dd88ac4c0f617145383e7b54"],"state_sha256":"ab316e89702a543b8db3b8cffcbffee7ebb846bd7f76493067846f5876068ecc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kvuibpWweUnYuM5NN4K4gk3gpqDCev9MVZII/NG2q0MkpCH08FeNevWb4r+dNY547PGviztHFhfvkwe7ygNGDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T06:16:47.097636Z","bundle_sha256":"9c4229d89a89135e8d439fb31bbca78215e49108fbecba1e5e6cae10f4c4f54a"}}