{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:JMMUG2H5M4FD3RCXJ5MJYAQ3Q4","short_pith_number":"pith:JMMUG2H5","canonical_record":{"source":{"id":"2201.09650","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2022-01-24T13:15:31Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"4232a877db21c6b632752fcda9b863b5d53e2a9399606e3e1ba1964811a3ac31","abstract_canon_sha256":"1238198e1de1896d0d529769020ff3b2f1d1b59b6ba4c98a221523b68113eb2c"},"schema_version":"1.0"},"canonical_sha256":"4b194368fd670a3dc4574f589c021b8725ade7ec3edc10ac15e3dc5ceb507fc2","source":{"kind":"arxiv","id":"2201.09650","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.09650","created_at":"2026-07-05T03:50:59Z"},{"alias_kind":"arxiv_version","alias_value":"2201.09650v1","created_at":"2026-07-05T03:50:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.09650","created_at":"2026-07-05T03:50:59Z"},{"alias_kind":"pith_short_12","alias_value":"JMMUG2H5M4FD","created_at":"2026-07-05T03:50:59Z"},{"alias_kind":"pith_short_16","alias_value":"JMMUG2H5M4FD3RCX","created_at":"2026-07-05T03:50:59Z"},{"alias_kind":"pith_short_8","alias_value":"JMMUG2H5","created_at":"2026-07-05T03:50:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:JMMUG2H5M4FD3RCXJ5MJYAQ3Q4","target":"record","payload":{"canonical_record":{"source":{"id":"2201.09650","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2022-01-24T13:15:31Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"4232a877db21c6b632752fcda9b863b5d53e2a9399606e3e1ba1964811a3ac31","abstract_canon_sha256":"1238198e1de1896d0d529769020ff3b2f1d1b59b6ba4c98a221523b68113eb2c"},"schema_version":"1.0"},"canonical_sha256":"4b194368fd670a3dc4574f589c021b8725ade7ec3edc10ac15e3dc5ceb507fc2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:50:59.551548Z","signature_b64":"LVWdmZmXLIVkX1vi/2ss3TVN1nujUadyBdX3T06OFYpoOFDuSCajbdLE3TVcMCP8T6Q+rk8/nj7lWMG/lipqAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4b194368fd670a3dc4574f589c021b8725ade7ec3edc10ac15e3dc5ceb507fc2","last_reissued_at":"2026-07-05T03:50:59.551132Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:50:59.551132Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2201.09650","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:50:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CbrJfjYb4/1onMIHMZG6lRHkkLTkxx5f7vZqtGblc5yGxFZQGi5EqHOEYKv1mr5EyxS83XvvV9r5BfvzWp3HAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-26T10:22:57.896226Z"},"content_sha256":"df499f24c95a9b5b0be2e89bd4c0f36be9c361b592fb97c8397e8b8526711a0c","schema_version":"1.0","event_id":"sha256:df499f24c95a9b5b0be2e89bd4c0f36be9c361b592fb97c8397e8b8526711a0c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:JMMUG2H5M4FD3RCXJ5MJYAQ3Q4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"What You See is Not What the Network Infers: Detecting Adversarial Examples Based on Semantic Contradiction","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Qiang Xu, Qiuxia Lai, Ruiyuan Gao, Yijun Yang, Yu Li","submitted_at":"2022-01-24T13:15:31Z","abstract_excerpt":"Adversarial examples (AEs) pose severe threats to the applications of deep neural networks (DNNs) to safety-critical domains, e.g., autonomous driving. While there has been a vast body of AE defense solutions, to the best of our knowledge, they all suffer from some weaknesses, e.g., defending against only a subset of AEs or causing a relatively high accuracy loss for legitimate inputs. Moreover, most existing solutions cannot defend against adaptive attacks, wherein attackers are knowledgeable about the defense mechanisms and craft AEs accordingly. In this paper, we propose a novel AE detectio"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.09650","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2201.09650/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:50:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8DmvaH0vkJYKxCi0k0GHKKWIxAum019J/uzImgbO9mb3a/BYpzMyPMxO0mygcvWpgpp66SCkGyiYEqLhI3bRAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-26T10:22:57.896620Z"},"content_sha256":"4c1f016ebd02d48bf5a0474048fa9ea55a3759b886a8d47e7d69453081504f3e","schema_version":"1.0","event_id":"sha256:4c1f016ebd02d48bf5a0474048fa9ea55a3759b886a8d47e7d69453081504f3e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JMMUG2H5M4FD3RCXJ5MJYAQ3Q4/bundle.json","state_url":"https://pith.science/pith/JMMUG2H5M4FD3RCXJ5MJYAQ3Q4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JMMUG2H5M4FD3RCXJ5MJYAQ3Q4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-26T10:22:57Z","links":{"resolver":"https://pith.science/pith/JMMUG2H5M4FD3RCXJ5MJYAQ3Q4","bundle":"https://pith.science/pith/JMMUG2H5M4FD3RCXJ5MJYAQ3Q4/bundle.json","state":"https://pith.science/pith/JMMUG2H5M4FD3RCXJ5MJYAQ3Q4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JMMUG2H5M4FD3RCXJ5MJYAQ3Q4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:JMMUG2H5M4FD3RCXJ5MJYAQ3Q4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1238198e1de1896d0d529769020ff3b2f1d1b59b6ba4c98a221523b68113eb2c","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2022-01-24T13:15:31Z","title_canon_sha256":"4232a877db21c6b632752fcda9b863b5d53e2a9399606e3e1ba1964811a3ac31"},"schema_version":"1.0","source":{"id":"2201.09650","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.09650","created_at":"2026-07-05T03:50:59Z"},{"alias_kind":"arxiv_version","alias_value":"2201.09650v1","created_at":"2026-07-05T03:50:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.09650","created_at":"2026-07-05T03:50:59Z"},{"alias_kind":"pith_short_12","alias_value":"JMMUG2H5M4FD","created_at":"2026-07-05T03:50:59Z"},{"alias_kind":"pith_short_16","alias_value":"JMMUG2H5M4FD3RCX","created_at":"2026-07-05T03:50:59Z"},{"alias_kind":"pith_short_8","alias_value":"JMMUG2H5","created_at":"2026-07-05T03:50:59Z"}],"graph_snapshots":[{"event_id":"sha256:4c1f016ebd02d48bf5a0474048fa9ea55a3759b886a8d47e7d69453081504f3e","target":"graph","created_at":"2026-07-05T03:50:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2201.09650/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial examples (AEs) pose severe threats to the applications of deep neural networks (DNNs) to safety-critical domains, e.g., autonomous driving. While there has been a vast body of AE defense solutions, to the best of our knowledge, they all suffer from some weaknesses, e.g., defending against only a subset of AEs or causing a relatively high accuracy loss for legitimate inputs. Moreover, most existing solutions cannot defend against adaptive attacks, wherein attackers are knowledgeable about the defense mechanisms and craft AEs accordingly. In this paper, we propose a novel AE detectio","authors_text":"Qiang Xu, Qiuxia Lai, Ruiyuan Gao, Yijun Yang, Yu Li","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2022-01-24T13:15:31Z","title":"What You See is Not What the Network Infers: Detecting Adversarial Examples Based on Semantic Contradiction"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.09650","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:df499f24c95a9b5b0be2e89bd4c0f36be9c361b592fb97c8397e8b8526711a0c","target":"record","created_at":"2026-07-05T03:50:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1238198e1de1896d0d529769020ff3b2f1d1b59b6ba4c98a221523b68113eb2c","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2022-01-24T13:15:31Z","title_canon_sha256":"4232a877db21c6b632752fcda9b863b5d53e2a9399606e3e1ba1964811a3ac31"},"schema_version":"1.0","source":{"id":"2201.09650","kind":"arxiv","version":1}},"canonical_sha256":"4b194368fd670a3dc4574f589c021b8725ade7ec3edc10ac15e3dc5ceb507fc2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4b194368fd670a3dc4574f589c021b8725ade7ec3edc10ac15e3dc5ceb507fc2","first_computed_at":"2026-07-05T03:50:59.551132Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:50:59.551132Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LVWdmZmXLIVkX1vi/2ss3TVN1nujUadyBdX3T06OFYpoOFDuSCajbdLE3TVcMCP8T6Q+rk8/nj7lWMG/lipqAA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:50:59.551548Z","signed_message":"canonical_sha256_bytes"},"source_id":"2201.09650","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:df499f24c95a9b5b0be2e89bd4c0f36be9c361b592fb97c8397e8b8526711a0c","sha256:4c1f016ebd02d48bf5a0474048fa9ea55a3759b886a8d47e7d69453081504f3e"],"state_sha256":"aaf18eb19d225c12436330661f4e99e0f0bd00206bfa6a5667d585fcd383ed10"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+VmKUEIt5zio/O9NhPE/iW63ZTbjrqB2ZDQhrHy+282ThWW4FoN24FnQVk4yZTJsEDIkigvtYBK6d9B7M0vfDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-26T10:22:57.899039Z","bundle_sha256":"a90ad552907e17e686be7f9ea667b3ccee0e5b2f34f0c3859f6b10b0de4e8d91"}}