{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:JP4DRQPWWU7PH6Z4VSIG3IFAS5","short_pith_number":"pith:JP4DRQPW","canonical_record":{"source":{"id":"2303.16861","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-03-29T17:18:58Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"2579a14f7915236f7e8958205b799ee11043ef7fe1847458202d390a2d3dff5f","abstract_canon_sha256":"83d5f3071c1df0b4218e74ab9ff30295aaa33cd8cd776ee18cf0a715258bab1a"},"schema_version":"1.0"},"canonical_sha256":"4bf838c1f6b53ef3fb3cac906da0a0975d63ec0790b019840c3a0bfaab3b7ad8","source":{"kind":"arxiv","id":"2303.16861","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.16861","created_at":"2026-07-05T05:56:11Z"},{"alias_kind":"arxiv_version","alias_value":"2303.16861v1","created_at":"2026-07-05T05:56:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.16861","created_at":"2026-07-05T05:56:11Z"},{"alias_kind":"pith_short_12","alias_value":"JP4DRQPWWU7P","created_at":"2026-07-05T05:56:11Z"},{"alias_kind":"pith_short_16","alias_value":"JP4DRQPWWU7PH6Z4","created_at":"2026-07-05T05:56:11Z"},{"alias_kind":"pith_short_8","alias_value":"JP4DRQPW","created_at":"2026-07-05T05:56:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:JP4DRQPWWU7PH6Z4VSIG3IFAS5","target":"record","payload":{"canonical_record":{"source":{"id":"2303.16861","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-03-29T17:18:58Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"2579a14f7915236f7e8958205b799ee11043ef7fe1847458202d390a2d3dff5f","abstract_canon_sha256":"83d5f3071c1df0b4218e74ab9ff30295aaa33cd8cd776ee18cf0a715258bab1a"},"schema_version":"1.0"},"canonical_sha256":"4bf838c1f6b53ef3fb3cac906da0a0975d63ec0790b019840c3a0bfaab3b7ad8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:56:11.078783Z","signature_b64":"5H2yJfBoj7lI89cBMtpKbKymNsnXRMuRQdoeuDcZWDOZUowcUaqlg8bnpRwEZr1O9IRNNzrMtILJZoFpHjkNAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4bf838c1f6b53ef3fb3cac906da0a0975d63ec0790b019840c3a0bfaab3b7ad8","last_reissued_at":"2026-07-05T05:56:11.078395Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:56:11.078395Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2303.16861","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:56:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TIQlznJNwWnXppGXqmnsEho/HbAsTprmRueZ9IeFJRqO5dh2b2eIdv2nXUSAmy4OxkflmgEXmyR8jEQYLRpnDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T01:06:17.471611Z"},"content_sha256":"9971ca86b80eaedd222b91c41664c1e9be42a1aa044aba5eeea41b514a059937","schema_version":"1.0","event_id":"sha256:9971ca86b80eaedd222b91c41664c1e9be42a1aa044aba5eeea41b514a059937"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:JP4DRQPWWU7PH6Z4VSIG3IFAS5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Beyond Empirical Risk Minimization: Local Structure Preserving Regularization for Improving Adversarial Robustness","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Jiahuan Zhou, Wei Wei, Ying Wu","submitted_at":"2023-03-29T17:18:58Z","abstract_excerpt":"It is broadly known that deep neural networks are susceptible to being fooled by adversarial examples with perturbations imperceptible by humans. Various defenses have been proposed to improve adversarial robustness, among which adversarial training methods are most effective. However, most of these methods treat the training samples independently and demand a tremendous amount of samples to train a robust network, while ignoring the latent structural information among these samples. In this work, we propose a novel Local Structure Preserving (LSP) regularization, which aims to preserve the lo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.16861","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2303.16861/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:56:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5iZ68GMMNQVICEdDB1D99q7dBlIWxMMNtNrLi4M3dUW12lj94JGOCx24AzgViiVurpKWmGiFBz9MO9csTUKvAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T01:06:17.472111Z"},"content_sha256":"ebb7299e2ba8e4536b1e72dd3eafe0ce5942d5e5f7613e71ef25cc207c7dd0ab","schema_version":"1.0","event_id":"sha256:ebb7299e2ba8e4536b1e72dd3eafe0ce5942d5e5f7613e71ef25cc207c7dd0ab"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JP4DRQPWWU7PH6Z4VSIG3IFAS5/bundle.json","state_url":"https://pith.science/pith/JP4DRQPWWU7PH6Z4VSIG3IFAS5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JP4DRQPWWU7PH6Z4VSIG3IFAS5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T01:06:17Z","links":{"resolver":"https://pith.science/pith/JP4DRQPWWU7PH6Z4VSIG3IFAS5","bundle":"https://pith.science/pith/JP4DRQPWWU7PH6Z4VSIG3IFAS5/bundle.json","state":"https://pith.science/pith/JP4DRQPWWU7PH6Z4VSIG3IFAS5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JP4DRQPWWU7PH6Z4VSIG3IFAS5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:JP4DRQPWWU7PH6Z4VSIG3IFAS5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"83d5f3071c1df0b4218e74ab9ff30295aaa33cd8cd776ee18cf0a715258bab1a","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-03-29T17:18:58Z","title_canon_sha256":"2579a14f7915236f7e8958205b799ee11043ef7fe1847458202d390a2d3dff5f"},"schema_version":"1.0","source":{"id":"2303.16861","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.16861","created_at":"2026-07-05T05:56:11Z"},{"alias_kind":"arxiv_version","alias_value":"2303.16861v1","created_at":"2026-07-05T05:56:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.16861","created_at":"2026-07-05T05:56:11Z"},{"alias_kind":"pith_short_12","alias_value":"JP4DRQPWWU7P","created_at":"2026-07-05T05:56:11Z"},{"alias_kind":"pith_short_16","alias_value":"JP4DRQPWWU7PH6Z4","created_at":"2026-07-05T05:56:11Z"},{"alias_kind":"pith_short_8","alias_value":"JP4DRQPW","created_at":"2026-07-05T05:56:11Z"}],"graph_snapshots":[{"event_id":"sha256:ebb7299e2ba8e4536b1e72dd3eafe0ce5942d5e5f7613e71ef25cc207c7dd0ab","target":"graph","created_at":"2026-07-05T05:56:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2303.16861/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"It is broadly known that deep neural networks are susceptible to being fooled by adversarial examples with perturbations imperceptible by humans. Various defenses have been proposed to improve adversarial robustness, among which adversarial training methods are most effective. However, most of these methods treat the training samples independently and demand a tremendous amount of samples to train a robust network, while ignoring the latent structural information among these samples. In this work, we propose a novel Local Structure Preserving (LSP) regularization, which aims to preserve the lo","authors_text":"Jiahuan Zhou, Wei Wei, Ying Wu","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-03-29T17:18:58Z","title":"Beyond Empirical Risk Minimization: Local Structure Preserving Regularization for Improving Adversarial Robustness"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.16861","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9971ca86b80eaedd222b91c41664c1e9be42a1aa044aba5eeea41b514a059937","target":"record","created_at":"2026-07-05T05:56:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"83d5f3071c1df0b4218e74ab9ff30295aaa33cd8cd776ee18cf0a715258bab1a","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-03-29T17:18:58Z","title_canon_sha256":"2579a14f7915236f7e8958205b799ee11043ef7fe1847458202d390a2d3dff5f"},"schema_version":"1.0","source":{"id":"2303.16861","kind":"arxiv","version":1}},"canonical_sha256":"4bf838c1f6b53ef3fb3cac906da0a0975d63ec0790b019840c3a0bfaab3b7ad8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4bf838c1f6b53ef3fb3cac906da0a0975d63ec0790b019840c3a0bfaab3b7ad8","first_computed_at":"2026-07-05T05:56:11.078395Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:56:11.078395Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5H2yJfBoj7lI89cBMtpKbKymNsnXRMuRQdoeuDcZWDOZUowcUaqlg8bnpRwEZr1O9IRNNzrMtILJZoFpHjkNAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T05:56:11.078783Z","signed_message":"canonical_sha256_bytes"},"source_id":"2303.16861","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9971ca86b80eaedd222b91c41664c1e9be42a1aa044aba5eeea41b514a059937","sha256:ebb7299e2ba8e4536b1e72dd3eafe0ce5942d5e5f7613e71ef25cc207c7dd0ab"],"state_sha256":"6ee21722b28b833bd65750d5ec6826e6f2560c11216578698d980bce73d78e41"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"R9XtIOglB4x2thovpXGDt6e7qFq99AuALy7HIPMPsSovLWKaJ+3RjhOVSsgXTALHfqcbYvH1+0jiMFOTNGtTCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T01:06:17.475974Z","bundle_sha256":"49729e5c32a9af2b6d4d2994afe2d997f19f1434565d338dc1954f054a5a4bf8"}}