{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:MRYQAMKP7NIJML3UD4YCAYPTYE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9d35975b63e55ee64eb9b26dde35750d33e84c79bfdf051636e5aa5885e5fe34","cross_cats_sorted":["cs.AI","cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2017-05-26T12:42:55Z","title_canon_sha256":"376fdc1a408112b361c17958dac8d77216b013bc9ef1074c02c99b8d6f6ab4ea"},"schema_version":"1.0","source":{"id":"1705.09554","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1705.09554","created_at":"2026-07-05T02:19:13Z"},{"alias_kind":"arxiv_version","alias_value":"1705.09554v2","created_at":"2026-07-05T02:19:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1705.09554","created_at":"2026-07-05T02:19:13Z"},{"alias_kind":"pith_short_12","alias_value":"MRYQAMKP7NIJ","created_at":"2026-07-05T02:19:13Z"},{"alias_kind":"pith_short_16","alias_value":"MRYQAMKP7NIJML3U","created_at":"2026-07-05T02:19:13Z"},{"alias_kind":"pith_short_8","alias_value":"MRYQAMKP","created_at":"2026-07-05T02:19:13Z"}],"graph_snapshots":[{"event_id":"sha256:432ac3059519416dfee5755aa62cbd88e4aeabe95ef695ce7f1f6f8e64f5aaa4","target":"graph","created_at":"2026-07-05T02:19:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1705.09554/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep networks have recently been shown to be vulnerable to universal perturbations: there exist very small image-agnostic perturbations that cause most natural images to be misclassified by such classifiers. In this paper, we propose the first quantitative analysis of the robustness of classifiers to universal perturbations, and draw a formal link between the robustness to universal perturbations, and the geometry of the decision boundary. Specifically, we establish theoretical bounds on the robustness of classifiers under two decision boundary models (flat and curved models). We show in parti","authors_text":"Alhussein Fawzi, Omar Fawzi, Pascal Frossard, Seyed-Mohsen Moosavi-Dezfooli, Stefano Soatto","cross_cats":["cs.AI","cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2017-05-26T12:42:55Z","title":"Robustness of classifiers to universal perturbations: a geometric perspective"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1705.09554","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ecf7766a0787225151073d81938428281f74e49dff7b0260d173918f97f89cb9","target":"record","created_at":"2026-07-05T02:19:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9d35975b63e55ee64eb9b26dde35750d33e84c79bfdf051636e5aa5885e5fe34","cross_cats_sorted":["cs.AI","cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2017-05-26T12:42:55Z","title_canon_sha256":"376fdc1a408112b361c17958dac8d77216b013bc9ef1074c02c99b8d6f6ab4ea"},"schema_version":"1.0","source":{"id":"1705.09554","kind":"arxiv","version":2}},"canonical_sha256":"647100314ffb50962f741f302061f3c12109bd66dbb5f79f2c93115cd16dcc75","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"647100314ffb50962f741f302061f3c12109bd66dbb5f79f2c93115cd16dcc75","first_computed_at":"2026-07-05T02:19:13.930786Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:19:13.930786Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"OlM/daGZy50vsQ8aAjcfiLslAg/+dp82htFAYBmcDcyoji/UyHS0D+Tn0Ua+vCiSPfgw/OdJcU79vgDKCqDbAw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:19:13.931332Z","signed_message":"canonical_sha256_bytes"},"source_id":"1705.09554","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ecf7766a0787225151073d81938428281f74e49dff7b0260d173918f97f89cb9","sha256:432ac3059519416dfee5755aa62cbd88e4aeabe95ef695ce7f1f6f8e64f5aaa4"],"state_sha256":"4208764e29274d1751aa6eb3d61fe60cee02f491ea4c3ffc03ef58125e7d9063"}