{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:N4K6FRZAAKVHA3YEL3B7HJNLRO","short_pith_number":"pith:N4K6FRZA","canonical_record":{"source":{"id":"2005.01452","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-05-04T13:12:31Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"3f62cffde3cb913efb75fc4b812be17ec98edb7978443d3464cb6cbb86b3b299","abstract_canon_sha256":"a9cd6424942c9d273221525da6af0ebdaee6bcb490034f89887f4f1f03386393"},"schema_version":"1.0"},"canonical_sha256":"6f15e2c72002aa706f045ec3f3a5ab8bb0bdaf96d7178abc88fc0dc296aa5435","source":{"kind":"arxiv","id":"2005.01452","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2005.01452","created_at":"2026-07-05T02:43:51Z"},{"alias_kind":"arxiv_version","alias_value":"2005.01452v2","created_at":"2026-07-05T02:43:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2005.01452","created_at":"2026-07-05T02:43:51Z"},{"alias_kind":"pith_short_12","alias_value":"N4K6FRZAAKVH","created_at":"2026-07-05T02:43:51Z"},{"alias_kind":"pith_short_16","alias_value":"N4K6FRZAAKVHA3YE","created_at":"2026-07-05T02:43:51Z"},{"alias_kind":"pith_short_8","alias_value":"N4K6FRZA","created_at":"2026-07-05T02:43:51Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:N4K6FRZAAKVHA3YEL3B7HJNLRO","target":"record","payload":{"canonical_record":{"source":{"id":"2005.01452","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-05-04T13:12:31Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"3f62cffde3cb913efb75fc4b812be17ec98edb7978443d3464cb6cbb86b3b299","abstract_canon_sha256":"a9cd6424942c9d273221525da6af0ebdaee6bcb490034f89887f4f1f03386393"},"schema_version":"1.0"},"canonical_sha256":"6f15e2c72002aa706f045ec3f3a5ab8bb0bdaf96d7178abc88fc0dc296aa5435","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:43:51.321997Z","signature_b64":"w/oEIiFsWxNpcZf/4M9wwfyHpUApdudGoaAb0DQi+101Fvmcrb741nFCvuvBmrnF8eU72nixEbnJQ1kB+k2cCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6f15e2c72002aa706f045ec3f3a5ab8bb0bdaf96d7178abc88fc0dc296aa5435","last_reissued_at":"2026-07-05T02:43:51.321417Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:43:51.321417Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2005.01452","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:43:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LjhjVwTGvuPKLGNBFOMMmzlFVaxS/5cpZ0mKMZLQcWwZ1icEgItx9sGURQOx9fM1TG+NbUUWZhMnEZb5HcYfBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T08:52:45.109563Z"},"content_sha256":"d02b542d5749735972ca53174e9728268c5dc92037d25b73a4c66c62b82fc526","schema_version":"1.0","event_id":"sha256:d02b542d5749735972ca53174e9728268c5dc92037d25b73a4c66c62b82fc526"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:N4K6FRZAAKVHA3YEL3B7HJNLRO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Do Gradient-based Explanations Tell Anything About Adversarial Robustness to Android Malware?","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Ambra Demontis, Battista Biggio, Davide Maiorca, Fabio Roli, Giorgio Giacinto, Marco Melis, Michele Scalas","submitted_at":"2020-05-04T13:12:31Z","abstract_excerpt":"While machine-learning algorithms have demonstrated a strong ability in detecting Android malware, they can be evaded by sparse evasion attacks crafted by injecting a small set of fake components, e.g., permissions and system calls, without compromising intrusive functionality. Previous work has shown that, to improve robustness against such attacks, learning algorithms should avoid overemphasizing few discriminant features, providing instead decisions that rely upon a large subset of components. In this work, we investigate whether gradient-based attribution methods, used to explain classifie"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2005.01452","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2005.01452/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:43:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vXFNj9/emwnsrO2pFa2LlymTdOyGRfmeze1kNSNALlV82i/ewrmGge6eCQfpUldbKcAZ3G2nQl5PaBNHJw9bDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T08:52:45.110121Z"},"content_sha256":"4495e6d9123ec7cd3e464d3e3d82b860db855a75d7d8b99c4d0035966f0dcab7","schema_version":"1.0","event_id":"sha256:4495e6d9123ec7cd3e464d3e3d82b860db855a75d7d8b99c4d0035966f0dcab7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/N4K6FRZAAKVHA3YEL3B7HJNLRO/bundle.json","state_url":"https://pith.science/pith/N4K6FRZAAKVHA3YEL3B7HJNLRO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/N4K6FRZAAKVHA3YEL3B7HJNLRO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T08:52:45Z","links":{"resolver":"https://pith.science/pith/N4K6FRZAAKVHA3YEL3B7HJNLRO","bundle":"https://pith.science/pith/N4K6FRZAAKVHA3YEL3B7HJNLRO/bundle.json","state":"https://pith.science/pith/N4K6FRZAAKVHA3YEL3B7HJNLRO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/N4K6FRZAAKVHA3YEL3B7HJNLRO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:N4K6FRZAAKVHA3YEL3B7HJNLRO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a9cd6424942c9d273221525da6af0ebdaee6bcb490034f89887f4f1f03386393","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-05-04T13:12:31Z","title_canon_sha256":"3f62cffde3cb913efb75fc4b812be17ec98edb7978443d3464cb6cbb86b3b299"},"schema_version":"1.0","source":{"id":"2005.01452","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2005.01452","created_at":"2026-07-05T02:43:51Z"},{"alias_kind":"arxiv_version","alias_value":"2005.01452v2","created_at":"2026-07-05T02:43:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2005.01452","created_at":"2026-07-05T02:43:51Z"},{"alias_kind":"pith_short_12","alias_value":"N4K6FRZAAKVH","created_at":"2026-07-05T02:43:51Z"},{"alias_kind":"pith_short_16","alias_value":"N4K6FRZAAKVHA3YE","created_at":"2026-07-05T02:43:51Z"},{"alias_kind":"pith_short_8","alias_value":"N4K6FRZA","created_at":"2026-07-05T02:43:51Z"}],"graph_snapshots":[{"event_id":"sha256:4495e6d9123ec7cd3e464d3e3d82b860db855a75d7d8b99c4d0035966f0dcab7","target":"graph","created_at":"2026-07-05T02:43:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2005.01452/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While machine-learning algorithms have demonstrated a strong ability in detecting Android malware, they can be evaded by sparse evasion attacks crafted by injecting a small set of fake components, e.g., permissions and system calls, without compromising intrusive functionality. Previous work has shown that, to improve robustness against such attacks, learning algorithms should avoid overemphasizing few discriminant features, providing instead decisions that rely upon a large subset of components. In this work, we investigate whether gradient-based attribution methods, used to explain classifie","authors_text":"Ambra Demontis, Battista Biggio, Davide Maiorca, Fabio Roli, Giorgio Giacinto, Marco Melis, Michele Scalas","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-05-04T13:12:31Z","title":"Do Gradient-based Explanations Tell Anything About Adversarial Robustness to Android Malware?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2005.01452","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d02b542d5749735972ca53174e9728268c5dc92037d25b73a4c66c62b82fc526","target":"record","created_at":"2026-07-05T02:43:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a9cd6424942c9d273221525da6af0ebdaee6bcb490034f89887f4f1f03386393","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-05-04T13:12:31Z","title_canon_sha256":"3f62cffde3cb913efb75fc4b812be17ec98edb7978443d3464cb6cbb86b3b299"},"schema_version":"1.0","source":{"id":"2005.01452","kind":"arxiv","version":2}},"canonical_sha256":"6f15e2c72002aa706f045ec3f3a5ab8bb0bdaf96d7178abc88fc0dc296aa5435","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6f15e2c72002aa706f045ec3f3a5ab8bb0bdaf96d7178abc88fc0dc296aa5435","first_computed_at":"2026-07-05T02:43:51.321417Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:43:51.321417Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"w/oEIiFsWxNpcZf/4M9wwfyHpUApdudGoaAb0DQi+101Fvmcrb741nFCvuvBmrnF8eU72nixEbnJQ1kB+k2cCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T02:43:51.321997Z","signed_message":"canonical_sha256_bytes"},"source_id":"2005.01452","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d02b542d5749735972ca53174e9728268c5dc92037d25b73a4c66c62b82fc526","sha256:4495e6d9123ec7cd3e464d3e3d82b860db855a75d7d8b99c4d0035966f0dcab7"],"state_sha256":"b56f3de0d970b9bf2dcfb1ebc2b65ea4c30f6d3fbb0bb2ec4953eba0f5048781"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hfUrGyxcTQN4DO1kfnDxMfpxUrhjK+jJuO5Fn4enno5GR9zfuOERgfaN06XFJCeBIsFfCewKpYMS8Q56Cb+3AA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T08:52:45.114658Z","bundle_sha256":"19bc1e3299df22df39cc4a2a8d41d7539a3f965b0210d4d7c8b294d908127e94"}}