{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:K4IHMRJGHKGUYYT43VYXWYCUY3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9a7e1bb09eaf24dc2a78a8086fc60679468fb795b3f45af34cca89f59d5f79e2","cross_cats_sorted":["cs.SY","eess.SY","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-12T02:17:01Z","title_canon_sha256":"d04f397c92caf59c419b31276753f5e4a478726a154a6cbabe7e395eafd3fd0e"},"schema_version":"1.0","source":{"id":"1911.04636","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.04636","created_at":"2026-07-05T00:18:43Z"},{"alias_kind":"arxiv_version","alias_value":"1911.04636v1","created_at":"2026-07-05T00:18:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.04636","created_at":"2026-07-05T00:18:43Z"},{"alias_kind":"pith_short_12","alias_value":"K4IHMRJGHKGU","created_at":"2026-07-05T00:18:43Z"},{"alias_kind":"pith_short_16","alias_value":"K4IHMRJGHKGUYYT4","created_at":"2026-07-05T00:18:43Z"},{"alias_kind":"pith_short_8","alias_value":"K4IHMRJG","created_at":"2026-07-05T00:18:43Z"}],"graph_snapshots":[{"event_id":"sha256:855c108b42114a07103ae87bf47ea22ab11157a1938f231bf6c6231550ecd0bd","target":"graph","created_at":"2026-07-05T00:18:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1911.04636/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) are vulnerable to subtle adversarial perturbations applied to the input. These adversarial perturbations, though imperceptible, can easily mislead the DNN. In this work, we take a control theoretic approach to the problem of robustness in DNNs. We treat each individual layer of the DNN as a nonlinear dynamical system and use Lyapunov theory to prove stability and robustness locally. We then proceed to prove stability and robustness globally for the entire DNN. We develop empirically tight bounds on the response of the output layer, or any hidden layer, to adversaria","authors_text":"Andre T. Nguyen, Arash Rahnama, Edward Raff","cross_cats":["cs.SY","eess.SY","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-12T02:17:01Z","title":"Robust Design of Deep Neural Networks against Adversarial Attacks based on Lyapunov Theory"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.04636","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:559deda53df83bb741536ccf7886b28b604c95cd9e6d764abf2ad15d22bfba1e","target":"record","created_at":"2026-07-05T00:18:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9a7e1bb09eaf24dc2a78a8086fc60679468fb795b3f45af34cca89f59d5f79e2","cross_cats_sorted":["cs.SY","eess.SY","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-12T02:17:01Z","title_canon_sha256":"d04f397c92caf59c419b31276753f5e4a478726a154a6cbabe7e395eafd3fd0e"},"schema_version":"1.0","source":{"id":"1911.04636","kind":"arxiv","version":1}},"canonical_sha256":"57107645263a8d4c627cdd717b6054c6dca1dca4c605065c6b664f57199a1acb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"57107645263a8d4c627cdd717b6054c6dca1dca4c605065c6b664f57199a1acb","first_computed_at":"2026-07-05T00:18:43.795450Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:18:43.795450Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"9WThwAUfa+9lUe/Geb4+fKjYq3gtXypfzeDd0M8GjzYjs65FIJraYJKp6Pvqy9twGOQZ9MRa+stQJvGHfcBmAA==","signature_status":"signed_v1","signed_at":"2026-07-05T00:18:43.795831Z","signed_message":"canonical_sha256_bytes"},"source_id":"1911.04636","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:559deda53df83bb741536ccf7886b28b604c95cd9e6d764abf2ad15d22bfba1e","sha256:855c108b42114a07103ae87bf47ea22ab11157a1938f231bf6c6231550ecd0bd"],"state_sha256":"73de12ba6ffe00c6a1ae723f8dc34843ce2c774f01241fe2947e4b7fe67e2be6"}