{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:K6R574K5QZMOS2MRSVRJKUVLRJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8cc668b32a3efe12c9a624df27f6191b7c603ce3c37c73826c99da8ba74b89c0","cross_cats_sorted":["cs.CR","cs.CV","eess.IV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-22T20:50:30Z","title_canon_sha256":"15dd8a161fd2b3b6dc8b434da181bd5c0885619a2d2370154aa634a0a10214c1"},"schema_version":"1.0","source":{"id":"2103.13813","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.13813","created_at":"2026-07-05T02:26:22Z"},{"alias_kind":"arxiv_version","alias_value":"2103.13813v1","created_at":"2026-07-05T02:26:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.13813","created_at":"2026-07-05T02:26:22Z"},{"alias_kind":"pith_short_12","alias_value":"K6R574K5QZMO","created_at":"2026-07-05T02:26:22Z"},{"alias_kind":"pith_short_16","alias_value":"K6R574K5QZMOS2MR","created_at":"2026-07-05T02:26:22Z"},{"alias_kind":"pith_short_8","alias_value":"K6R574K5","created_at":"2026-07-05T02:26:22Z"}],"graph_snapshots":[{"event_id":"sha256:08a5fcb7ce02fe2e623dd6b1d1e8dd9f82f5c11c52837782fdfdc5051c7d2305","target":"graph","created_at":"2026-07-05T02:26:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2103.13813/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recently developed adversarial weight attack, a.k.a. bit-flip attack (BFA), has shown enormous success in compromising Deep Neural Network (DNN) performance with an extremely small amount of model parameter perturbation. To defend against this threat, we propose RA-BNN that adopts a complete binary (i.e., for both weights and activation) neural network (BNN) to significantly improve DNN model robustness (defined as the number of bit-flips required to degrade the accuracy to as low as a random guess). However, such an aggressive low bit-width model suffers from poor clean (i.e., no attack) infe","authors_text":"Adnan Siraj Rakin, Chaitali Chakrabarti, Deliang Fan, Fan Yao, Jae-sun Seo, Jingtao Li, Li Yang, Yu Cao","cross_cats":["cs.CR","cs.CV","eess.IV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-22T20:50:30Z","title":"RA-BNN: Constructing Robust & Accurate Binary Neural Network to Simultaneously Defend Adversarial Bit-Flip Attack and Improve Accuracy"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.13813","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:27c0d080bf2c568e1783a83e24ed47ba7beb0b2b06237e0b461263183b2e6982","target":"record","created_at":"2026-07-05T02:26:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8cc668b32a3efe12c9a624df27f6191b7c603ce3c37c73826c99da8ba74b89c0","cross_cats_sorted":["cs.CR","cs.CV","eess.IV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-22T20:50:30Z","title_canon_sha256":"15dd8a161fd2b3b6dc8b434da181bd5c0885619a2d2370154aa634a0a10214c1"},"schema_version":"1.0","source":{"id":"2103.13813","kind":"arxiv","version":1}},"canonical_sha256":"57a3dff15d8658e9699195629552ab8a618da4fc672820ea7b10eaeded02407a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"57a3dff15d8658e9699195629552ab8a618da4fc672820ea7b10eaeded02407a","first_computed_at":"2026-07-05T02:26:22.518668Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:26:22.518668Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LiBcz3xCoWZ55kZMLgEESTqjU1TGu/7uhLeW3tmPkS5ysADpbGfwAInWFnr/zeKiIX1M4xI2WO/gbuPXmcmbAA==","signature_status":"signed_v1","signed_at":"2026-07-05T02:26:22.519159Z","signed_message":"canonical_sha256_bytes"},"source_id":"2103.13813","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:27c0d080bf2c568e1783a83e24ed47ba7beb0b2b06237e0b461263183b2e6982","sha256:08a5fcb7ce02fe2e623dd6b1d1e8dd9f82f5c11c52837782fdfdc5051c7d2305"],"state_sha256":"66adbff5765ac48c8e3b1df10fb8e465dbe46cf424d9643961cd9e534b313824"}