{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:MDNPPLBCZJII7YSXT6L3OP2ZTW","short_pith_number":"pith:MDNPPLBC","canonical_record":{"source":{"id":"2210.03543","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-10-07T13:28:00Z","cross_cats_sorted":[],"title_canon_sha256":"342e2d3e5a739a11e83eeb5334ee63ae486fc40324a8adef601b767740004289","abstract_canon_sha256":"6f2cbf05577c86c9ec4c29a8894e1033954c058ac045147820a9ab26bf12684a"},"schema_version":"1.0"},"canonical_sha256":"60daf7ac22ca508fe2579f97b73f599d8199365802f137bdd68d3c646642a9a7","source":{"kind":"arxiv","id":"2210.03543","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.03543","created_at":"2026-07-05T05:07:04Z"},{"alias_kind":"arxiv_version","alias_value":"2210.03543v2","created_at":"2026-07-05T05:07:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.03543","created_at":"2026-07-05T05:07:04Z"},{"alias_kind":"pith_short_12","alias_value":"MDNPPLBCZJII","created_at":"2026-07-05T05:07:04Z"},{"alias_kind":"pith_short_16","alias_value":"MDNPPLBCZJII7YSX","created_at":"2026-07-05T05:07:04Z"},{"alias_kind":"pith_short_8","alias_value":"MDNPPLBC","created_at":"2026-07-05T05:07:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:MDNPPLBCZJII7YSXT6L3OP2ZTW","target":"record","payload":{"canonical_record":{"source":{"id":"2210.03543","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-10-07T13:28:00Z","cross_cats_sorted":[],"title_canon_sha256":"342e2d3e5a739a11e83eeb5334ee63ae486fc40324a8adef601b767740004289","abstract_canon_sha256":"6f2cbf05577c86c9ec4c29a8894e1033954c058ac045147820a9ab26bf12684a"},"schema_version":"1.0"},"canonical_sha256":"60daf7ac22ca508fe2579f97b73f599d8199365802f137bdd68d3c646642a9a7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:07:04.486473Z","signature_b64":"hA8sY9uvpnzW65Uyl3wCAd5uViN3ofWzpcGLtpXFNkwiAvvfWgd9aVG5K9PRK6D6z2HeATJB1jeBy/DESC51DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"60daf7ac22ca508fe2579f97b73f599d8199365802f137bdd68d3c646642a9a7","last_reissued_at":"2026-07-05T05:07:04.486037Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:07:04.486037Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2210.03543","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:07:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lXoWbxVrfNRwPExt7XKG1vSbb+DKwdVF0EG66ZfzqBx1GLTuWSBHjYrHJ2ieG9n8g74YM/mcKoe5MHqCOfbMDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-16T07:01:21.450071Z"},"content_sha256":"fbbeae5ee5e4c24a32f0afcd248ecef011f01c2fe45af621d6572da09065a9e6","schema_version":"1.0","event_id":"sha256:fbbeae5ee5e4c24a32f0afcd248ecef011f01c2fe45af621d6572da09065a9e6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:MDNPPLBCZJII7YSXT6L3OP2ZTW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A2: Efficient Automated Attacker for Boosting Adversarial Training","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Changhua Meng, Guanghui Zhu, Ming Gu, Shiwen Cui, Weiqiang Wang, Yihua Huang, Zhenzhe Ying, Zhuoer Xu","submitted_at":"2022-10-07T13:28:00Z","abstract_excerpt":"Based on the significant improvement of model robustness by AT (Adversarial Training), various variants have been proposed to further boost the performance. Well-recognized methods have focused on different components of AT (e.g., designing loss functions and leveraging additional unlabeled data). It is generally accepted that stronger perturbations yield more robust models. However, how to generate stronger perturbations efficiently is still missed. In this paper, we propose an efficient automated attacker called A2 to boost AT by generating the optimal perturbations on-the-fly during trainin"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.03543","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2210.03543/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:07:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"my8ElXDdOAcAB59p/jodKr6WtrDBtH63gEgv1mU1rVPytOobL6xth/UiF53MB0iLVjFxz0l3+bpGLMfVxlM8Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-16T07:01:21.450462Z"},"content_sha256":"33d94fe1965ffcc87bc42fb1f74d711717a220cc83ac90489ac50ad4c227787e","schema_version":"1.0","event_id":"sha256:33d94fe1965ffcc87bc42fb1f74d711717a220cc83ac90489ac50ad4c227787e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MDNPPLBCZJII7YSXT6L3OP2ZTW/bundle.json","state_url":"https://pith.science/pith/MDNPPLBCZJII7YSXT6L3OP2ZTW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MDNPPLBCZJII7YSXT6L3OP2ZTW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-16T07:01:21Z","links":{"resolver":"https://pith.science/pith/MDNPPLBCZJII7YSXT6L3OP2ZTW","bundle":"https://pith.science/pith/MDNPPLBCZJII7YSXT6L3OP2ZTW/bundle.json","state":"https://pith.science/pith/MDNPPLBCZJII7YSXT6L3OP2ZTW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MDNPPLBCZJII7YSXT6L3OP2ZTW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:MDNPPLBCZJII7YSXT6L3OP2ZTW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6f2cbf05577c86c9ec4c29a8894e1033954c058ac045147820a9ab26bf12684a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-10-07T13:28:00Z","title_canon_sha256":"342e2d3e5a739a11e83eeb5334ee63ae486fc40324a8adef601b767740004289"},"schema_version":"1.0","source":{"id":"2210.03543","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.03543","created_at":"2026-07-05T05:07:04Z"},{"alias_kind":"arxiv_version","alias_value":"2210.03543v2","created_at":"2026-07-05T05:07:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.03543","created_at":"2026-07-05T05:07:04Z"},{"alias_kind":"pith_short_12","alias_value":"MDNPPLBCZJII","created_at":"2026-07-05T05:07:04Z"},{"alias_kind":"pith_short_16","alias_value":"MDNPPLBCZJII7YSX","created_at":"2026-07-05T05:07:04Z"},{"alias_kind":"pith_short_8","alias_value":"MDNPPLBC","created_at":"2026-07-05T05:07:04Z"}],"graph_snapshots":[{"event_id":"sha256:33d94fe1965ffcc87bc42fb1f74d711717a220cc83ac90489ac50ad4c227787e","target":"graph","created_at":"2026-07-05T05:07:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.03543/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Based on the significant improvement of model robustness by AT (Adversarial Training), various variants have been proposed to further boost the performance. Well-recognized methods have focused on different components of AT (e.g., designing loss functions and leveraging additional unlabeled data). It is generally accepted that stronger perturbations yield more robust models. However, how to generate stronger perturbations efficiently is still missed. In this paper, we propose an efficient automated attacker called A2 to boost AT by generating the optimal perturbations on-the-fly during trainin","authors_text":"Changhua Meng, Guanghui Zhu, Ming Gu, Shiwen Cui, Weiqiang Wang, Yihua Huang, Zhenzhe Ying, Zhuoer Xu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-10-07T13:28:00Z","title":"A2: Efficient Automated Attacker for Boosting Adversarial Training"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.03543","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fbbeae5ee5e4c24a32f0afcd248ecef011f01c2fe45af621d6572da09065a9e6","target":"record","created_at":"2026-07-05T05:07:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6f2cbf05577c86c9ec4c29a8894e1033954c058ac045147820a9ab26bf12684a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-10-07T13:28:00Z","title_canon_sha256":"342e2d3e5a739a11e83eeb5334ee63ae486fc40324a8adef601b767740004289"},"schema_version":"1.0","source":{"id":"2210.03543","kind":"arxiv","version":2}},"canonical_sha256":"60daf7ac22ca508fe2579f97b73f599d8199365802f137bdd68d3c646642a9a7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"60daf7ac22ca508fe2579f97b73f599d8199365802f137bdd68d3c646642a9a7","first_computed_at":"2026-07-05T05:07:04.486037Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:07:04.486037Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"hA8sY9uvpnzW65Uyl3wCAd5uViN3ofWzpcGLtpXFNkwiAvvfWgd9aVG5K9PRK6D6z2HeATJB1jeBy/DESC51DA==","signature_status":"signed_v1","signed_at":"2026-07-05T05:07:04.486473Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.03543","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fbbeae5ee5e4c24a32f0afcd248ecef011f01c2fe45af621d6572da09065a9e6","sha256:33d94fe1965ffcc87bc42fb1f74d711717a220cc83ac90489ac50ad4c227787e"],"state_sha256":"e5a8c841eb99c95860f7cb12fb6ec2c916d7545d68b9a5fdc4813ce109047585"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kJwnKpc6LE05hiruwxezNFQ9QFCaTm4WiZvxNUEPXIgtlNAiBoqJf2ylxTdIQtaqrT1Kp7/IRCmyddMPpwquCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-16T07:01:21.452996Z","bundle_sha256":"f8a31a8d0f418c61763dee25bfdddd36df74bf59cac2a276033b8b02d3afffb7"}}