{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:MR76XNQL2NBTP36FIKJ5ZMX52Q","short_pith_number":"pith:MR76XNQL","canonical_record":{"source":{"id":"1909.04495","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.IR","submitted_at":"2019-09-06T07:22:01Z","cross_cats_sorted":["cs.CL","cs.CR","cs.LG"],"title_canon_sha256":"2a6e95108b5eecb832176a677563d063a7cf12f0f167e191a8a7fe4fd7fb45bc","abstract_canon_sha256":"a9233aa82d463724f7c2aca5dcbcd8f2fc55a1a240995d3da7ac9222f0f47ab6"},"schema_version":"1.0"},"canonical_sha256":"647febb60bd34337efc54293dcb2fdd41364878cd11216a339c756e502305e73","source":{"kind":"arxiv","id":"1909.04495","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.04495","created_at":"2026-07-05T00:03:22Z"},{"alias_kind":"arxiv_version","alias_value":"1909.04495v1","created_at":"2026-07-05T00:03:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.04495","created_at":"2026-07-05T00:03:22Z"},{"alias_kind":"pith_short_12","alias_value":"MR76XNQL2NBT","created_at":"2026-07-05T00:03:22Z"},{"alias_kind":"pith_short_16","alias_value":"MR76XNQL2NBTP36F","created_at":"2026-07-05T00:03:22Z"},{"alias_kind":"pith_short_8","alias_value":"MR76XNQL","created_at":"2026-07-05T00:03:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:MR76XNQL2NBTP36FIKJ5ZMX52Q","target":"record","payload":{"canonical_record":{"source":{"id":"1909.04495","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.IR","submitted_at":"2019-09-06T07:22:01Z","cross_cats_sorted":["cs.CL","cs.CR","cs.LG"],"title_canon_sha256":"2a6e95108b5eecb832176a677563d063a7cf12f0f167e191a8a7fe4fd7fb45bc","abstract_canon_sha256":"a9233aa82d463724f7c2aca5dcbcd8f2fc55a1a240995d3da7ac9222f0f47ab6"},"schema_version":"1.0"},"canonical_sha256":"647febb60bd34337efc54293dcb2fdd41364878cd11216a339c756e502305e73","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:03:22.670848Z","signature_b64":"D2yHwE+SzqTa/hYvor34/5gUAhyABDDX3u3bg3rwW/EaqNZ3sToUpLmOLkXj9J/SD9dw/CD+1V7rba8WKxl7Dg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"647febb60bd34337efc54293dcb2fdd41364878cd11216a339c756e502305e73","last_reissued_at":"2026-07-05T00:03:22.670462Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:03:22.670462Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1909.04495","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:03:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XnJg/V5vSkE8Y/Mza40D9nOwTSlYMubZ64FqBgfL9LHY+f/PcHppqYBkWHNPyA/eKgOsAFowGPlaIsaQPhXNAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T22:03:00.145962Z"},"content_sha256":"b495f47e2fb6986a8fe743d9753601dfc9592e405aaffd57a21274c12f68bfed","schema_version":"1.0","event_id":"sha256:b495f47e2fb6986a8fe743d9753601dfc9592e405aaffd57a21274c12f68bfed"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:MR76XNQL2NBTP36FIKJ5ZMX52Q","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Natural Adversarial Sentence Generation with Gradient-based Perturbation","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.CL","cs.CR","cs.LG"],"primary_cat":"cs.IR","authors_text":"Cho-Jui Hsieh, Da-Cheng Juan, Minhao Cheng, Wei Wei, Wen-Lian Hsu, Yu-Lun Hsieh","submitted_at":"2019-09-06T07:22:01Z","abstract_excerpt":"This work proposes a novel algorithm to generate natural language adversarial input for text classification models, in order to investigate the robustness of these models. It involves applying gradient-based perturbation on the sentence embeddings that are used as the features for the classifier, and learning a decoder for generation. We employ this method to a sentiment analysis model and verify its effectiveness in inducing incorrect predictions by the model. We also conduct quantitative and qualitative analysis on these examples and demonstrate that our approach can generate more natural ad"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.04495","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1909.04495/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:03:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Qwa4DUUfYuHT9qKmt7U11gpdw7U4Mt83grqCeIBHsmTZbaCDNBSalGQ/lclwPNhrbQ2vohiVjf3SSdxAs6UACA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T22:03:00.146492Z"},"content_sha256":"4536b9ef2b661cf510962d8e8d1c5c94b8cb8113eb834a0f5a607e8009ac95a7","schema_version":"1.0","event_id":"sha256:4536b9ef2b661cf510962d8e8d1c5c94b8cb8113eb834a0f5a607e8009ac95a7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MR76XNQL2NBTP36FIKJ5ZMX52Q/bundle.json","state_url":"https://pith.science/pith/MR76XNQL2NBTP36FIKJ5ZMX52Q/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MR76XNQL2NBTP36FIKJ5ZMX52Q/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T22:03:00Z","links":{"resolver":"https://pith.science/pith/MR76XNQL2NBTP36FIKJ5ZMX52Q","bundle":"https://pith.science/pith/MR76XNQL2NBTP36FIKJ5ZMX52Q/bundle.json","state":"https://pith.science/pith/MR76XNQL2NBTP36FIKJ5ZMX52Q/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MR76XNQL2NBTP36FIKJ5ZMX52Q/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:MR76XNQL2NBTP36FIKJ5ZMX52Q","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a9233aa82d463724f7c2aca5dcbcd8f2fc55a1a240995d3da7ac9222f0f47ab6","cross_cats_sorted":["cs.CL","cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.IR","submitted_at":"2019-09-06T07:22:01Z","title_canon_sha256":"2a6e95108b5eecb832176a677563d063a7cf12f0f167e191a8a7fe4fd7fb45bc"},"schema_version":"1.0","source":{"id":"1909.04495","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.04495","created_at":"2026-07-05T00:03:22Z"},{"alias_kind":"arxiv_version","alias_value":"1909.04495v1","created_at":"2026-07-05T00:03:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.04495","created_at":"2026-07-05T00:03:22Z"},{"alias_kind":"pith_short_12","alias_value":"MR76XNQL2NBT","created_at":"2026-07-05T00:03:22Z"},{"alias_kind":"pith_short_16","alias_value":"MR76XNQL2NBTP36F","created_at":"2026-07-05T00:03:22Z"},{"alias_kind":"pith_short_8","alias_value":"MR76XNQL","created_at":"2026-07-05T00:03:22Z"}],"graph_snapshots":[{"event_id":"sha256:4536b9ef2b661cf510962d8e8d1c5c94b8cb8113eb834a0f5a607e8009ac95a7","target":"graph","created_at":"2026-07-05T00:03:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1909.04495/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This work proposes a novel algorithm to generate natural language adversarial input for text classification models, in order to investigate the robustness of these models. It involves applying gradient-based perturbation on the sentence embeddings that are used as the features for the classifier, and learning a decoder for generation. We employ this method to a sentiment analysis model and verify its effectiveness in inducing incorrect predictions by the model. We also conduct quantitative and qualitative analysis on these examples and demonstrate that our approach can generate more natural ad","authors_text":"Cho-Jui Hsieh, Da-Cheng Juan, Minhao Cheng, Wei Wei, Wen-Lian Hsu, Yu-Lun Hsieh","cross_cats":["cs.CL","cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.IR","submitted_at":"2019-09-06T07:22:01Z","title":"Natural Adversarial Sentence Generation with Gradient-based Perturbation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.04495","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b495f47e2fb6986a8fe743d9753601dfc9592e405aaffd57a21274c12f68bfed","target":"record","created_at":"2026-07-05T00:03:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a9233aa82d463724f7c2aca5dcbcd8f2fc55a1a240995d3da7ac9222f0f47ab6","cross_cats_sorted":["cs.CL","cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.IR","submitted_at":"2019-09-06T07:22:01Z","title_canon_sha256":"2a6e95108b5eecb832176a677563d063a7cf12f0f167e191a8a7fe4fd7fb45bc"},"schema_version":"1.0","source":{"id":"1909.04495","kind":"arxiv","version":1}},"canonical_sha256":"647febb60bd34337efc54293dcb2fdd41364878cd11216a339c756e502305e73","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"647febb60bd34337efc54293dcb2fdd41364878cd11216a339c756e502305e73","first_computed_at":"2026-07-05T00:03:22.670462Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:03:22.670462Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"D2yHwE+SzqTa/hYvor34/5gUAhyABDDX3u3bg3rwW/EaqNZ3sToUpLmOLkXj9J/SD9dw/CD+1V7rba8WKxl7Dg==","signature_status":"signed_v1","signed_at":"2026-07-05T00:03:22.670848Z","signed_message":"canonical_sha256_bytes"},"source_id":"1909.04495","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b495f47e2fb6986a8fe743d9753601dfc9592e405aaffd57a21274c12f68bfed","sha256:4536b9ef2b661cf510962d8e8d1c5c94b8cb8113eb834a0f5a607e8009ac95a7"],"state_sha256":"c2a95345c291a370f2d20cfe4802c33665186b6de9e1ca47900151bff561aefd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"twLEjx6Z4euBpRDT/sYDZ0Ba1z3C0WDtbgxkDqDANroGt4zlXD2qz4aybr0d0J48Mo2zqWnEVfrMFfQnyl/xAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T22:03:00.149829Z","bundle_sha256":"0ecf9917c95aed0e00add55ee2f217d19ddab7e405bc1530b727951362a38f5c"}}