{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:KF2TQG2AMYH3VARTVFM5S2PDB5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d637e0a91b39d9f03943ab3ec32de6ae33a09980709cffebf6c4c9fbc22621cc","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"stat.ML","submitted_at":"2020-06-19T23:50:51Z","title_canon_sha256":"39aff2657ce9cff2bbea74617ccb8af4d73022c0c0c0aff825a51f9d68a65621"},"schema_version":"1.0","source":{"id":"2006.11440","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2006.11440","created_at":"2026-07-05T05:49:25Z"},{"alias_kind":"arxiv_version","alias_value":"2006.11440v5","created_at":"2026-07-05T05:49:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2006.11440","created_at":"2026-07-05T05:49:25Z"},{"alias_kind":"pith_short_12","alias_value":"KF2TQG2AMYH3","created_at":"2026-07-05T05:49:25Z"},{"alias_kind":"pith_short_16","alias_value":"KF2TQG2AMYH3VART","created_at":"2026-07-05T05:49:25Z"},{"alias_kind":"pith_short_8","alias_value":"KF2TQG2A","created_at":"2026-07-05T05:49:25Z"}],"graph_snapshots":[{"event_id":"sha256:8d335e4ee35f7faf6bfd28f2399b719e48753baef33cde748206a8d8e2d28ae5","target":"graph","created_at":"2026-07-05T05:49:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2006.11440/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial Attacks are still a significant challenge for neural networks. Recent work has shown that adversarial perturbations typically contain high-frequency features, but the root cause of this phenomenon remains unknown. Inspired by theoretical work on linear full-width convolutional models, we hypothesize that the local (i.e. bounded-width) convolutional operations commonly used in current neural networks are implicitly biased to learn high frequency features, and that this is one of the root causes of high frequency adversarial examples. To test this hypothesis, we analyzed the impact o","authors_text":"Ankit Patel, Fabio Anselmi, Josue Ortega Caro, Ryan Pyle, Sourav Dey, Wieland Brendel, Yilong Ju","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"stat.ML","submitted_at":"2020-06-19T23:50:51Z","title":"Local Convolutions Cause an Implicit Bias towards High Frequency Adversarial Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2006.11440","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fc0f16660b621eb95cd37e9409ae7a0de5f37c43f5ba04181501f617c8a10765","target":"record","created_at":"2026-07-05T05:49:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d637e0a91b39d9f03943ab3ec32de6ae33a09980709cffebf6c4c9fbc22621cc","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"stat.ML","submitted_at":"2020-06-19T23:50:51Z","title_canon_sha256":"39aff2657ce9cff2bbea74617ccb8af4d73022c0c0c0aff825a51f9d68a65621"},"schema_version":"1.0","source":{"id":"2006.11440","kind":"arxiv","version":5}},"canonical_sha256":"5175381b40660fba8233a959d969e30f764f94272b14aecb39db88da1fee7b6c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5175381b40660fba8233a959d969e30f764f94272b14aecb39db88da1fee7b6c","first_computed_at":"2026-07-05T05:49:25.664473Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:49:25.664473Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"F9Ry/5/hNyOM5G45A9u8joebmUvqHwx37kNhuJ2bFsbduK2LJlpzZUaV4bcXGhvi8XAX1zbWa6NyKhTRsB91DA==","signature_status":"signed_v1","signed_at":"2026-07-05T05:49:25.664958Z","signed_message":"canonical_sha256_bytes"},"source_id":"2006.11440","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fc0f16660b621eb95cd37e9409ae7a0de5f37c43f5ba04181501f617c8a10765","sha256:8d335e4ee35f7faf6bfd28f2399b719e48753baef33cde748206a8d8e2d28ae5"],"state_sha256":"1eb542bf3280fd8bf2760b37c70f3cd33e7a43200fb582b0274449fd019e8acb"}