{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:N4EGMZLLXZWFS6HRKJKEED2L2P","short_pith_number":"pith:N4EGMZLL","canonical_record":{"source":{"id":"2108.12777","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2021-08-29T08:11:36Z","cross_cats_sorted":[],"title_canon_sha256":"8ef244a0d764365f577e39bbb5e5fef155efe9fb3c69a01814f34319a8f5d0cc","abstract_canon_sha256":"782c629e75a03a430a9687e2517b93164c163e8bc9fe13e000fbb507e323a720"},"schema_version":"1.0"},"canonical_sha256":"6f0866656bbe6c5978f15254420f4bd3eb307036dd9acec714c1ef2a7123ba75","source":{"kind":"arxiv","id":"2108.12777","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2108.12777","created_at":"2026-07-05T03:20:23Z"},{"alias_kind":"arxiv_version","alias_value":"2108.12777v2","created_at":"2026-07-05T03:20:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.12777","created_at":"2026-07-05T03:20:23Z"},{"alias_kind":"pith_short_12","alias_value":"N4EGMZLLXZWF","created_at":"2026-07-05T03:20:23Z"},{"alias_kind":"pith_short_16","alias_value":"N4EGMZLLXZWFS6HR","created_at":"2026-07-05T03:20:23Z"},{"alias_kind":"pith_short_8","alias_value":"N4EGMZLL","created_at":"2026-07-05T03:20:23Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:N4EGMZLLXZWFS6HRKJKEED2L2P","target":"record","payload":{"canonical_record":{"source":{"id":"2108.12777","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2021-08-29T08:11:36Z","cross_cats_sorted":[],"title_canon_sha256":"8ef244a0d764365f577e39bbb5e5fef155efe9fb3c69a01814f34319a8f5d0cc","abstract_canon_sha256":"782c629e75a03a430a9687e2517b93164c163e8bc9fe13e000fbb507e323a720"},"schema_version":"1.0"},"canonical_sha256":"6f0866656bbe6c5978f15254420f4bd3eb307036dd9acec714c1ef2a7123ba75","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:20:23.103135Z","signature_b64":"Z7bdjz6B+wIZ9CaAs7KUIAPScky5t7uGMPeXKCwS3r3AitVd1RKGgyL4gDyDZQEW3MfJQG+S5BijR+0EWNpECA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6f0866656bbe6c5978f15254420f4bd3eb307036dd9acec714c1ef2a7123ba75","last_reissued_at":"2026-07-05T03:20:23.102727Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:20:23.102727Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2108.12777","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:20:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JT6yMB3anX3pGyUDL+OyXDKzwTxR3JXJQ3BfJdH02Q5TduR9coQ+EjeRKCOx0/4ZwM6LFdZfz4Wjbn2ExhheAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T04:09:01.303492Z"},"content_sha256":"27115926512ce6c33a88bcefe8acab1d4563c9257425db771faac4f72cec7ac4","schema_version":"1.0","event_id":"sha256:27115926512ce6c33a88bcefe8acab1d4563c9257425db771faac4f72cec7ac4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:N4EGMZLLXZWFS6HRKJKEED2L2P","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Searching for an Effective Defender: Benchmarking Defense against Adversarial Word Substitution","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Cho-Jui Hsieh, Jianhan Xu, Jiehang Zeng, Kai-Wei Chang, Linyang Li, Qi Zhang, Xiaoqing Zheng, Zongyi Li","submitted_at":"2021-08-29T08:11:36Z","abstract_excerpt":"Recent studies have shown that deep neural networks are vulnerable to intentionally crafted adversarial examples, and various methods have been proposed to defend against adversarial word-substitution attacks for neural NLP models. However, there is a lack of systematic study on comparing different defense approaches under the same attacking setting. In this paper, we seek to fill the gap of systematic studies through comprehensive researches on understanding the behavior of neural text classifiers trained by various defense methods under representative adversarial attacks. In addition, we pro"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.12777","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2108.12777/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:20:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8zCB0EhJlsTc/SrNiNtBuWUYkbngn0QdbxO8GhSovj2fiwvGSLfLcDHm4D4N2JoR5e26D/4tj+A0oTXgnJonAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T04:09:01.304013Z"},"content_sha256":"a13966447c4f5a5ef61a2ea33e2befa63a36da2253d0663a1ae2d94aa8e8110b","schema_version":"1.0","event_id":"sha256:a13966447c4f5a5ef61a2ea33e2befa63a36da2253d0663a1ae2d94aa8e8110b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/N4EGMZLLXZWFS6HRKJKEED2L2P/bundle.json","state_url":"https://pith.science/pith/N4EGMZLLXZWFS6HRKJKEED2L2P/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/N4EGMZLLXZWFS6HRKJKEED2L2P/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T04:09:01Z","links":{"resolver":"https://pith.science/pith/N4EGMZLLXZWFS6HRKJKEED2L2P","bundle":"https://pith.science/pith/N4EGMZLLXZWFS6HRKJKEED2L2P/bundle.json","state":"https://pith.science/pith/N4EGMZLLXZWFS6HRKJKEED2L2P/state.json","well_known_bundle":"https://pith.science/.well-known/pith/N4EGMZLLXZWFS6HRKJKEED2L2P/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:N4EGMZLLXZWFS6HRKJKEED2L2P","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"782c629e75a03a430a9687e2517b93164c163e8bc9fe13e000fbb507e323a720","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2021-08-29T08:11:36Z","title_canon_sha256":"8ef244a0d764365f577e39bbb5e5fef155efe9fb3c69a01814f34319a8f5d0cc"},"schema_version":"1.0","source":{"id":"2108.12777","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2108.12777","created_at":"2026-07-05T03:20:23Z"},{"alias_kind":"arxiv_version","alias_value":"2108.12777v2","created_at":"2026-07-05T03:20:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.12777","created_at":"2026-07-05T03:20:23Z"},{"alias_kind":"pith_short_12","alias_value":"N4EGMZLLXZWF","created_at":"2026-07-05T03:20:23Z"},{"alias_kind":"pith_short_16","alias_value":"N4EGMZLLXZWFS6HR","created_at":"2026-07-05T03:20:23Z"},{"alias_kind":"pith_short_8","alias_value":"N4EGMZLL","created_at":"2026-07-05T03:20:23Z"}],"graph_snapshots":[{"event_id":"sha256:a13966447c4f5a5ef61a2ea33e2befa63a36da2253d0663a1ae2d94aa8e8110b","target":"graph","created_at":"2026-07-05T03:20:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2108.12777/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent studies have shown that deep neural networks are vulnerable to intentionally crafted adversarial examples, and various methods have been proposed to defend against adversarial word-substitution attacks for neural NLP models. However, there is a lack of systematic study on comparing different defense approaches under the same attacking setting. In this paper, we seek to fill the gap of systematic studies through comprehensive researches on understanding the behavior of neural text classifiers trained by various defense methods under representative adversarial attacks. In addition, we pro","authors_text":"Cho-Jui Hsieh, Jianhan Xu, Jiehang Zeng, Kai-Wei Chang, Linyang Li, Qi Zhang, Xiaoqing Zheng, Zongyi Li","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2021-08-29T08:11:36Z","title":"Searching for an Effective Defender: Benchmarking Defense against Adversarial Word Substitution"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.12777","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:27115926512ce6c33a88bcefe8acab1d4563c9257425db771faac4f72cec7ac4","target":"record","created_at":"2026-07-05T03:20:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"782c629e75a03a430a9687e2517b93164c163e8bc9fe13e000fbb507e323a720","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2021-08-29T08:11:36Z","title_canon_sha256":"8ef244a0d764365f577e39bbb5e5fef155efe9fb3c69a01814f34319a8f5d0cc"},"schema_version":"1.0","source":{"id":"2108.12777","kind":"arxiv","version":2}},"canonical_sha256":"6f0866656bbe6c5978f15254420f4bd3eb307036dd9acec714c1ef2a7123ba75","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6f0866656bbe6c5978f15254420f4bd3eb307036dd9acec714c1ef2a7123ba75","first_computed_at":"2026-07-05T03:20:23.102727Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:20:23.102727Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Z7bdjz6B+wIZ9CaAs7KUIAPScky5t7uGMPeXKCwS3r3AitVd1RKGgyL4gDyDZQEW3MfJQG+S5BijR+0EWNpECA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:20:23.103135Z","signed_message":"canonical_sha256_bytes"},"source_id":"2108.12777","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:27115926512ce6c33a88bcefe8acab1d4563c9257425db771faac4f72cec7ac4","sha256:a13966447c4f5a5ef61a2ea33e2befa63a36da2253d0663a1ae2d94aa8e8110b"],"state_sha256":"979c41f4a7449a5dcd6b0cd11fc6a8aeb3aca4cea3b2fbdc17f8cda85b9e4665"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ptwAR2ObmTXciU8LkZZbv37pyBfxCsa7V+SZI1vVDQ2/6UpypBcl5WdrPNKvHlb4QvX/9i+M1SaKcFcutKPYBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T04:09:01.308949Z","bundle_sha256":"7b082ddec33a117c3dfcc62ff2a6b094f730d965e1073d81ebfbca50fe27f819"}}