{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:MLQF2QYTRARFQBYI5TJYY27HV5","short_pith_number":"pith:MLQF2QYT","canonical_record":{"source":{"id":"2004.05887","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2020-04-13T12:11:36Z","cross_cats_sorted":[],"title_canon_sha256":"9350d2ad749e1c996ca4612fd4210d75e0169ddf3c20c14620adc1a30f29e25d","abstract_canon_sha256":"a151759c869cd0bd825a84f1590551b12e8f4023ee819d3d2d42f7c5dcd1a1a8"},"schema_version":"1.0"},"canonical_sha256":"62e05d43138822580708ecd38c6be7af776b44a282fdb3a64bea681ccb3d2d44","source":{"kind":"arxiv","id":"2004.05887","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2004.05887","created_at":"2026-07-05T02:09:38Z"},{"alias_kind":"arxiv_version","alias_value":"2004.05887v2","created_at":"2026-07-05T02:09:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2004.05887","created_at":"2026-07-05T02:09:38Z"},{"alias_kind":"pith_short_12","alias_value":"MLQF2QYTRARF","created_at":"2026-07-05T02:09:38Z"},{"alias_kind":"pith_short_16","alias_value":"MLQF2QYTRARFQBYI","created_at":"2026-07-05T02:09:38Z"},{"alias_kind":"pith_short_8","alias_value":"MLQF2QYT","created_at":"2026-07-05T02:09:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:MLQF2QYTRARFQBYI5TJYY27HV5","target":"record","payload":{"canonical_record":{"source":{"id":"2004.05887","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2020-04-13T12:11:36Z","cross_cats_sorted":[],"title_canon_sha256":"9350d2ad749e1c996ca4612fd4210d75e0169ddf3c20c14620adc1a30f29e25d","abstract_canon_sha256":"a151759c869cd0bd825a84f1590551b12e8f4023ee819d3d2d42f7c5dcd1a1a8"},"schema_version":"1.0"},"canonical_sha256":"62e05d43138822580708ecd38c6be7af776b44a282fdb3a64bea681ccb3d2d44","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:09:38.288855Z","signature_b64":"w0KUhkRrVZZZAW1G0omz+VqvZbwQo6kzShC/L25micXlGmn1WXSweHMbEnB2mh+KI/rM/nFZ85RnUl295cF9Cg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"62e05d43138822580708ecd38c6be7af776b44a282fdb3a64bea681ccb3d2d44","last_reissued_at":"2026-07-05T02:09:38.288428Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:09:38.288428Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2004.05887","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:09:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9TBxkYLMOgn3nB97RJmCkf07fRlWP2CO0bt8jKarzlkLhEfD87/3DDBBMvYaRsxWWZkiUhn27coUqVMiIaSvDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T17:54:00.588273Z"},"content_sha256":"237d5ec8cd94e335be74cbedee3ef059660c9e16afeb09501ab4532d1ab94a5e","schema_version":"1.0","event_id":"sha256:237d5ec8cd94e335be74cbedee3ef059660c9e16afeb09501ab4532d1ab94a5e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:MLQF2QYTRARFQBYI5TJYY27HV5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Frequency-Guided Word Substitutions for Detecting Textual Adversarial Examples","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Bennett Kleinberg, Lewis D. Griffin, Maximilian Mozes, Pontus Stenetorp","submitted_at":"2020-04-13T12:11:36Z","abstract_excerpt":"Recent efforts have shown that neural text processing models are vulnerable to adversarial examples, but the nature of these examples is poorly understood. In this work, we show that adversarial attacks against CNN, LSTM and Transformer-based classification models perform word substitutions that are identifiable through frequency differences between replaced words and their corresponding substitutions. Based on these findings, we propose frequency-guided word substitutions (FGWS), a simple algorithm exploiting the frequency properties of adversarial word substitutions for the detection of adve"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2004.05887","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2004.05887/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:09:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lV5qyMNp4a+/aL5qkIYScT0RkK7aVMsK9PJlpde1Ejlznsq62YM3cDkwnsdeNrWIuhSisbxFpBn+NICPnaQUBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T17:54:00.588603Z"},"content_sha256":"84ed2bd88d3016d11b8c4b688ee372fd3351c5b1c9a59ffcfc6d96538ff8499e","schema_version":"1.0","event_id":"sha256:84ed2bd88d3016d11b8c4b688ee372fd3351c5b1c9a59ffcfc6d96538ff8499e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MLQF2QYTRARFQBYI5TJYY27HV5/bundle.json","state_url":"https://pith.science/pith/MLQF2QYTRARFQBYI5TJYY27HV5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MLQF2QYTRARFQBYI5TJYY27HV5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T17:54:00Z","links":{"resolver":"https://pith.science/pith/MLQF2QYTRARFQBYI5TJYY27HV5","bundle":"https://pith.science/pith/MLQF2QYTRARFQBYI5TJYY27HV5/bundle.json","state":"https://pith.science/pith/MLQF2QYTRARFQBYI5TJYY27HV5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MLQF2QYTRARFQBYI5TJYY27HV5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:MLQF2QYTRARFQBYI5TJYY27HV5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a151759c869cd0bd825a84f1590551b12e8f4023ee819d3d2d42f7c5dcd1a1a8","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2020-04-13T12:11:36Z","title_canon_sha256":"9350d2ad749e1c996ca4612fd4210d75e0169ddf3c20c14620adc1a30f29e25d"},"schema_version":"1.0","source":{"id":"2004.05887","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2004.05887","created_at":"2026-07-05T02:09:38Z"},{"alias_kind":"arxiv_version","alias_value":"2004.05887v2","created_at":"2026-07-05T02:09:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2004.05887","created_at":"2026-07-05T02:09:38Z"},{"alias_kind":"pith_short_12","alias_value":"MLQF2QYTRARF","created_at":"2026-07-05T02:09:38Z"},{"alias_kind":"pith_short_16","alias_value":"MLQF2QYTRARFQBYI","created_at":"2026-07-05T02:09:38Z"},{"alias_kind":"pith_short_8","alias_value":"MLQF2QYT","created_at":"2026-07-05T02:09:38Z"}],"graph_snapshots":[{"event_id":"sha256:84ed2bd88d3016d11b8c4b688ee372fd3351c5b1c9a59ffcfc6d96538ff8499e","target":"graph","created_at":"2026-07-05T02:09:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2004.05887/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent efforts have shown that neural text processing models are vulnerable to adversarial examples, but the nature of these examples is poorly understood. In this work, we show that adversarial attacks against CNN, LSTM and Transformer-based classification models perform word substitutions that are identifiable through frequency differences between replaced words and their corresponding substitutions. Based on these findings, we propose frequency-guided word substitutions (FGWS), a simple algorithm exploiting the frequency properties of adversarial word substitutions for the detection of adve","authors_text":"Bennett Kleinberg, Lewis D. Griffin, Maximilian Mozes, Pontus Stenetorp","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2020-04-13T12:11:36Z","title":"Frequency-Guided Word Substitutions for Detecting Textual Adversarial Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2004.05887","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:237d5ec8cd94e335be74cbedee3ef059660c9e16afeb09501ab4532d1ab94a5e","target":"record","created_at":"2026-07-05T02:09:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a151759c869cd0bd825a84f1590551b12e8f4023ee819d3d2d42f7c5dcd1a1a8","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2020-04-13T12:11:36Z","title_canon_sha256":"9350d2ad749e1c996ca4612fd4210d75e0169ddf3c20c14620adc1a30f29e25d"},"schema_version":"1.0","source":{"id":"2004.05887","kind":"arxiv","version":2}},"canonical_sha256":"62e05d43138822580708ecd38c6be7af776b44a282fdb3a64bea681ccb3d2d44","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"62e05d43138822580708ecd38c6be7af776b44a282fdb3a64bea681ccb3d2d44","first_computed_at":"2026-07-05T02:09:38.288428Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:09:38.288428Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"w0KUhkRrVZZZAW1G0omz+VqvZbwQo6kzShC/L25micXlGmn1WXSweHMbEnB2mh+KI/rM/nFZ85RnUl295cF9Cg==","signature_status":"signed_v1","signed_at":"2026-07-05T02:09:38.288855Z","signed_message":"canonical_sha256_bytes"},"source_id":"2004.05887","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:237d5ec8cd94e335be74cbedee3ef059660c9e16afeb09501ab4532d1ab94a5e","sha256:84ed2bd88d3016d11b8c4b688ee372fd3351c5b1c9a59ffcfc6d96538ff8499e"],"state_sha256":"05312b63a51627bb6052cf8aa39d119875a0637a4ba8a4084e06748a03421e9c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KH04keKcKOEeOqTBN8M5xRSNeWJhfQre4PfdE7SMOaJ01SaibWC/eZ+I0cNY29J4O33Pwi1qpxzqu1wdYVtTCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T17:54:00.591524Z","bundle_sha256":"30f6f0fbf4b5136edf8bf86959daa627365010e0ee523181279bfb296be3d0ba"}}