{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:LABIS6VVRUZS7JTGHZK66KC4U3","short_pith_number":"pith:LABIS6VV","canonical_record":{"source":{"id":"1906.00230","kind":"arxiv","version":6},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-06-01T14:29:01Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"e68672813f81d0f2b8265081451799ad65d5cdc7362b437961484cf23513c2ca","abstract_canon_sha256":"b88fc3bd0c809e8c1db8d63f78e1431c7e15df48cf8940cf738e5fece6d60965"},"schema_version":"1.0"},"canonical_sha256":"5802897ab58d332fa6663e55ef285ca6fd46d87c4936ec091f9b08198915667e","source":{"kind":"arxiv","id":"1906.00230","version":6},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1906.00230","created_at":"2026-07-05T02:10:36Z"},{"alias_kind":"arxiv_version","alias_value":"1906.00230v6","created_at":"2026-07-05T02:10:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1906.00230","created_at":"2026-07-05T02:10:36Z"},{"alias_kind":"pith_short_12","alias_value":"LABIS6VVRUZS","created_at":"2026-07-05T02:10:36Z"},{"alias_kind":"pith_short_16","alias_value":"LABIS6VVRUZS7JTG","created_at":"2026-07-05T02:10:36Z"},{"alias_kind":"pith_short_8","alias_value":"LABIS6VV","created_at":"2026-07-05T02:10:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:LABIS6VVRUZS7JTGHZK66KC4U3","target":"record","payload":{"canonical_record":{"source":{"id":"1906.00230","kind":"arxiv","version":6},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-06-01T14:29:01Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"e68672813f81d0f2b8265081451799ad65d5cdc7362b437961484cf23513c2ca","abstract_canon_sha256":"b88fc3bd0c809e8c1db8d63f78e1431c7e15df48cf8940cf738e5fece6d60965"},"schema_version":"1.0"},"canonical_sha256":"5802897ab58d332fa6663e55ef285ca6fd46d87c4936ec091f9b08198915667e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:10:36.602460Z","signature_b64":"i1LLFwkclVD0Tn/vuNSE/pCilitTExUvKMh9YAobdK0/oHLFYQ0Uc62MM97cMhX8+vtd0f+DmQO3Yfqg+b3CAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5802897ab58d332fa6663e55ef285ca6fd46d87c4936ec091f9b08198915667e","last_reissued_at":"2026-07-05T02:10:36.601905Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:10:36.601905Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1906.00230","source_version":6,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:10:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jm2sHCv5Z6YsIg1fT1bPLZx+oWB/OOZKRtb25ZVSfKSXp1Bk1X4KcFhamCxd5Y6ycTdX4LkC8Zv41oEOelIBBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T03:06:52.388431Z"},"content_sha256":"ec757e0a7e2c268c2e1cbcfa0f92519a26d9afca7b64965d220cd4c60d325cbf","schema_version":"1.0","event_id":"sha256:ec757e0a7e2c268c2e1cbcfa0f92519a26d9afca7b64965d220cd4c60d325cbf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:LABIS6VVRUZS7JTGHZK66KC4U3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Improving VAEs' Robustness to Adversarial Attack","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"stat.ML","authors_text":"Alexander Camuto, Chris Holmes, Matthew Willetts, Stephen Roberts, Tom Rainforth","submitted_at":"2019-06-01T14:29:01Z","abstract_excerpt":"Variational autoencoders (VAEs) have recently been shown to be vulnerable to adversarial attacks, wherein they are fooled into reconstructing a chosen target image. However, how to defend against such attacks remains an open problem. We make significant advances in addressing this issue by introducing methods for producing adversarially robust VAEs. Namely, we first demonstrate that methods proposed to obtain disentangled latent representations produce VAEs that are more robust to these attacks. However, this robustness comes at the cost of reducing the quality of the reconstructions. We ameli"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1906.00230","kind":"arxiv","version":6},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1906.00230/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:10:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oZ+Iyz58/wofJVT7Ea3+U8Mrt2/Tu7UMN6XvvXZYSelvndcXhufM4zMIYfo68oZRysT0HVuI/NKJcSZKUFoaDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T03:06:52.389033Z"},"content_sha256":"edb81ded81393091f1fe72e7b313c96594638df596d79e6db64ca283c144d382","schema_version":"1.0","event_id":"sha256:edb81ded81393091f1fe72e7b313c96594638df596d79e6db64ca283c144d382"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LABIS6VVRUZS7JTGHZK66KC4U3/bundle.json","state_url":"https://pith.science/pith/LABIS6VVRUZS7JTGHZK66KC4U3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LABIS6VVRUZS7JTGHZK66KC4U3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T03:06:52Z","links":{"resolver":"https://pith.science/pith/LABIS6VVRUZS7JTGHZK66KC4U3","bundle":"https://pith.science/pith/LABIS6VVRUZS7JTGHZK66KC4U3/bundle.json","state":"https://pith.science/pith/LABIS6VVRUZS7JTGHZK66KC4U3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LABIS6VVRUZS7JTGHZK66KC4U3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:LABIS6VVRUZS7JTGHZK66KC4U3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b88fc3bd0c809e8c1db8d63f78e1431c7e15df48cf8940cf738e5fece6d60965","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-06-01T14:29:01Z","title_canon_sha256":"e68672813f81d0f2b8265081451799ad65d5cdc7362b437961484cf23513c2ca"},"schema_version":"1.0","source":{"id":"1906.00230","kind":"arxiv","version":6}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1906.00230","created_at":"2026-07-05T02:10:36Z"},{"alias_kind":"arxiv_version","alias_value":"1906.00230v6","created_at":"2026-07-05T02:10:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1906.00230","created_at":"2026-07-05T02:10:36Z"},{"alias_kind":"pith_short_12","alias_value":"LABIS6VVRUZS","created_at":"2026-07-05T02:10:36Z"},{"alias_kind":"pith_short_16","alias_value":"LABIS6VVRUZS7JTG","created_at":"2026-07-05T02:10:36Z"},{"alias_kind":"pith_short_8","alias_value":"LABIS6VV","created_at":"2026-07-05T02:10:36Z"}],"graph_snapshots":[{"event_id":"sha256:edb81ded81393091f1fe72e7b313c96594638df596d79e6db64ca283c144d382","target":"graph","created_at":"2026-07-05T02:10:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1906.00230/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Variational autoencoders (VAEs) have recently been shown to be vulnerable to adversarial attacks, wherein they are fooled into reconstructing a chosen target image. However, how to defend against such attacks remains an open problem. We make significant advances in addressing this issue by introducing methods for producing adversarially robust VAEs. Namely, we first demonstrate that methods proposed to obtain disentangled latent representations produce VAEs that are more robust to these attacks. However, this robustness comes at the cost of reducing the quality of the reconstructions. We ameli","authors_text":"Alexander Camuto, Chris Holmes, Matthew Willetts, Stephen Roberts, Tom Rainforth","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-06-01T14:29:01Z","title":"Improving VAEs' Robustness to Adversarial Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1906.00230","kind":"arxiv","version":6},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ec757e0a7e2c268c2e1cbcfa0f92519a26d9afca7b64965d220cd4c60d325cbf","target":"record","created_at":"2026-07-05T02:10:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b88fc3bd0c809e8c1db8d63f78e1431c7e15df48cf8940cf738e5fece6d60965","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-06-01T14:29:01Z","title_canon_sha256":"e68672813f81d0f2b8265081451799ad65d5cdc7362b437961484cf23513c2ca"},"schema_version":"1.0","source":{"id":"1906.00230","kind":"arxiv","version":6}},"canonical_sha256":"5802897ab58d332fa6663e55ef285ca6fd46d87c4936ec091f9b08198915667e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5802897ab58d332fa6663e55ef285ca6fd46d87c4936ec091f9b08198915667e","first_computed_at":"2026-07-05T02:10:36.601905Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:10:36.601905Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"i1LLFwkclVD0Tn/vuNSE/pCilitTExUvKMh9YAobdK0/oHLFYQ0Uc62MM97cMhX8+vtd0f+DmQO3Yfqg+b3CAw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:10:36.602460Z","signed_message":"canonical_sha256_bytes"},"source_id":"1906.00230","source_kind":"arxiv","source_version":6}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ec757e0a7e2c268c2e1cbcfa0f92519a26d9afca7b64965d220cd4c60d325cbf","sha256:edb81ded81393091f1fe72e7b313c96594638df596d79e6db64ca283c144d382"],"state_sha256":"bbdb8335f23d9dbe4cc4b4ee097a92d8358b45c156ec17c41595ca586877e93b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SWjwHfFFEnj+LM/ozqCs5u/UVq704sBrW3AnliD61YfypscwblANXJ6xrBcxOC2GsPy/C0TNIK+d4J4u7tW2BQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T03:06:52.394321Z","bundle_sha256":"a6ae5b86711426016737a0191d56bc2a7c7feb8805dfe6b465a597a6969fb48c"}}