{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:KK7CDKG23H4DYYH6KDQ3QLGQIN","short_pith_number":"pith:KK7CDKG2","canonical_record":{"source":{"id":"2409.09406","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-09-14T10:38:35Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"94551a0ee3b6c42eb4e281f1fa31e2ed0def6014b522d43ee5579f4506650b78","abstract_canon_sha256":"4f38786f614b2c5b06977ec9e2d6d04379e70a1002701903433530def39d33df"},"schema_version":"1.0"},"canonical_sha256":"52be21a8dad9f83c60fe50e1b82cd0436a53fb112ed1aaba622cbfa46abb9a65","source":{"kind":"arxiv","id":"2409.09406","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.09406","created_at":"2026-07-05T09:07:09Z"},{"alias_kind":"arxiv_version","alias_value":"2409.09406v1","created_at":"2026-07-05T09:07:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.09406","created_at":"2026-07-05T09:07:09Z"},{"alias_kind":"pith_short_12","alias_value":"KK7CDKG23H4D","created_at":"2026-07-05T09:07:09Z"},{"alias_kind":"pith_short_16","alias_value":"KK7CDKG23H4DYYH6","created_at":"2026-07-05T09:07:09Z"},{"alias_kind":"pith_short_8","alias_value":"KK7CDKG2","created_at":"2026-07-05T09:07:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:KK7CDKG23H4DYYH6KDQ3QLGQIN","target":"record","payload":{"canonical_record":{"source":{"id":"2409.09406","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-09-14T10:38:35Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"94551a0ee3b6c42eb4e281f1fa31e2ed0def6014b522d43ee5579f4506650b78","abstract_canon_sha256":"4f38786f614b2c5b06977ec9e2d6d04379e70a1002701903433530def39d33df"},"schema_version":"1.0"},"canonical_sha256":"52be21a8dad9f83c60fe50e1b82cd0436a53fb112ed1aaba622cbfa46abb9a65","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:07:09.342605Z","signature_b64":"pA28abFigqivimohsfvD5zLLo5VUXpinTA870rAJd5niOoeu70pRClGZ8iCr0TRKd6XUc+CkIHjCXh3upUGeDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"52be21a8dad9f83c60fe50e1b82cd0436a53fb112ed1aaba622cbfa46abb9a65","last_reissued_at":"2026-07-05T09:07:09.342084Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:07:09.342084Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.09406","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:07:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"a2cMODeKLniqy91WfCaXgsbAtYA2x8aIva5fucsaa5FR+iR6IdtlTaUORu/ew4NbM6iwhstmESPhHiZ10JeHBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T10:27:07.789926Z"},"content_sha256":"490dd8c3f73643fd68720485349bc7f88ce7eacee8331bb0e22bf526761efea2","schema_version":"1.0","event_id":"sha256:490dd8c3f73643fd68720485349bc7f88ce7eacee8331bb0e22bf526761efea2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:KK7CDKG23H4DYYH6KDQ3QLGQIN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Real-world Adversarial Defense against Patch Attacks based on Diffusion Model","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Caixin Kang, Hang Su, Shouwei Ruan, Xingxing Wei, Yinpeng Dong, Yubo Chen, Zhengyi Wang","submitted_at":"2024-09-14T10:38:35Z","abstract_excerpt":"Adversarial patches present significant challenges to the robustness of deep learning models, making the development of effective defenses become critical for real-world applications. This paper introduces DIFFender, a novel DIFfusion-based DeFender framework that leverages the power of a text-guided diffusion model to counter adversarial patch attacks. At the core of our approach is the discovery of the Adversarial Anomaly Perception (AAP) phenomenon, which enables the diffusion model to accurately detect and locate adversarial patches by analyzing distributional anomalies. DIFFender seamless"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.09406","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.09406/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:07:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"htpOgUVHhGqAqIuSvnJvgxjRNPZOOyH0mq0ewZW3GZvmMsTZjER/LwhhM5G5liqeEQs4lO8f5ujhj8dErSewAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T10:27:07.790449Z"},"content_sha256":"a9c1dbf4db5514bd940dc9a33ba4e8c3618d6453a6184638b3f614bad87a4d75","schema_version":"1.0","event_id":"sha256:a9c1dbf4db5514bd940dc9a33ba4e8c3618d6453a6184638b3f614bad87a4d75"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KK7CDKG23H4DYYH6KDQ3QLGQIN/bundle.json","state_url":"https://pith.science/pith/KK7CDKG23H4DYYH6KDQ3QLGQIN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KK7CDKG23H4DYYH6KDQ3QLGQIN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T10:27:07Z","links":{"resolver":"https://pith.science/pith/KK7CDKG23H4DYYH6KDQ3QLGQIN","bundle":"https://pith.science/pith/KK7CDKG23H4DYYH6KDQ3QLGQIN/bundle.json","state":"https://pith.science/pith/KK7CDKG23H4DYYH6KDQ3QLGQIN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KK7CDKG23H4DYYH6KDQ3QLGQIN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:KK7CDKG23H4DYYH6KDQ3QLGQIN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4f38786f614b2c5b06977ec9e2d6d04379e70a1002701903433530def39d33df","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-09-14T10:38:35Z","title_canon_sha256":"94551a0ee3b6c42eb4e281f1fa31e2ed0def6014b522d43ee5579f4506650b78"},"schema_version":"1.0","source":{"id":"2409.09406","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.09406","created_at":"2026-07-05T09:07:09Z"},{"alias_kind":"arxiv_version","alias_value":"2409.09406v1","created_at":"2026-07-05T09:07:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.09406","created_at":"2026-07-05T09:07:09Z"},{"alias_kind":"pith_short_12","alias_value":"KK7CDKG23H4D","created_at":"2026-07-05T09:07:09Z"},{"alias_kind":"pith_short_16","alias_value":"KK7CDKG23H4DYYH6","created_at":"2026-07-05T09:07:09Z"},{"alias_kind":"pith_short_8","alias_value":"KK7CDKG2","created_at":"2026-07-05T09:07:09Z"}],"graph_snapshots":[{"event_id":"sha256:a9c1dbf4db5514bd940dc9a33ba4e8c3618d6453a6184638b3f614bad87a4d75","target":"graph","created_at":"2026-07-05T09:07:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.09406/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial patches present significant challenges to the robustness of deep learning models, making the development of effective defenses become critical for real-world applications. This paper introduces DIFFender, a novel DIFfusion-based DeFender framework that leverages the power of a text-guided diffusion model to counter adversarial patch attacks. At the core of our approach is the discovery of the Adversarial Anomaly Perception (AAP) phenomenon, which enables the diffusion model to accurately detect and locate adversarial patches by analyzing distributional anomalies. DIFFender seamless","authors_text":"Caixin Kang, Hang Su, Shouwei Ruan, Xingxing Wei, Yinpeng Dong, Yubo Chen, Zhengyi Wang","cross_cats":["cs.AI","cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-09-14T10:38:35Z","title":"Real-world Adversarial Defense against Patch Attacks based on Diffusion Model"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.09406","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:490dd8c3f73643fd68720485349bc7f88ce7eacee8331bb0e22bf526761efea2","target":"record","created_at":"2026-07-05T09:07:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4f38786f614b2c5b06977ec9e2d6d04379e70a1002701903433530def39d33df","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-09-14T10:38:35Z","title_canon_sha256":"94551a0ee3b6c42eb4e281f1fa31e2ed0def6014b522d43ee5579f4506650b78"},"schema_version":"1.0","source":{"id":"2409.09406","kind":"arxiv","version":1}},"canonical_sha256":"52be21a8dad9f83c60fe50e1b82cd0436a53fb112ed1aaba622cbfa46abb9a65","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"52be21a8dad9f83c60fe50e1b82cd0436a53fb112ed1aaba622cbfa46abb9a65","first_computed_at":"2026-07-05T09:07:09.342084Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:07:09.342084Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"pA28abFigqivimohsfvD5zLLo5VUXpinTA870rAJd5niOoeu70pRClGZ8iCr0TRKd6XUc+CkIHjCXh3upUGeDA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:07:09.342605Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.09406","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:490dd8c3f73643fd68720485349bc7f88ce7eacee8331bb0e22bf526761efea2","sha256:a9c1dbf4db5514bd940dc9a33ba4e8c3618d6453a6184638b3f614bad87a4d75"],"state_sha256":"1b71e10eec9510f4342b8cd3772a5bf9445ac6fc864a929adc895d701142c7e1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mtz6wdrrOUij6iUywzoaguIn31XpFfPXx/8lESrYE/dMgTOkYF4jpjJq1G4q8El6u221ryxEd6HnCaguDBQjDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T10:27:07.793724Z","bundle_sha256":"a587f3b931216608fbcbef2a18e89dece492b337e21dad13059b205b029eb8e8"}}