{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:NYKS22S4WRU4BZUW747AT6NUMW","short_pith_number":"pith:NYKS22S4","canonical_record":{"source":{"id":"2010.03316","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-07T10:24:33Z","cross_cats_sorted":["cs.CV","stat.ML"],"title_canon_sha256":"bd5dd0104fc2d60a15fd32e758122da9a303ea93c0d7f090c7f1ad8aefacd4d0","abstract_canon_sha256":"68c2008cf03e85b22b6c7e913862a665cdf1e8cc71ad072a481a240e3f39e0f8"},"schema_version":"1.0"},"canonical_sha256":"6e152d6a5cb469c0e696ff3e09f9b4659d3eb3d043ca780f9474542114b2f15a","source":{"kind":"arxiv","id":"2010.03316","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.03316","created_at":"2026-07-05T03:20:33Z"},{"alias_kind":"arxiv_version","alias_value":"2010.03316v2","created_at":"2026-07-05T03:20:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.03316","created_at":"2026-07-05T03:20:33Z"},{"alias_kind":"pith_short_12","alias_value":"NYKS22S4WRU4","created_at":"2026-07-05T03:20:33Z"},{"alias_kind":"pith_short_16","alias_value":"NYKS22S4WRU4BZUW","created_at":"2026-07-05T03:20:33Z"},{"alias_kind":"pith_short_8","alias_value":"NYKS22S4","created_at":"2026-07-05T03:20:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:NYKS22S4WRU4BZUW747AT6NUMW","target":"record","payload":{"canonical_record":{"source":{"id":"2010.03316","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-07T10:24:33Z","cross_cats_sorted":["cs.CV","stat.ML"],"title_canon_sha256":"bd5dd0104fc2d60a15fd32e758122da9a303ea93c0d7f090c7f1ad8aefacd4d0","abstract_canon_sha256":"68c2008cf03e85b22b6c7e913862a665cdf1e8cc71ad072a481a240e3f39e0f8"},"schema_version":"1.0"},"canonical_sha256":"6e152d6a5cb469c0e696ff3e09f9b4659d3eb3d043ca780f9474542114b2f15a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:20:33.273858Z","signature_b64":"FLA5rKrxIMxk68yFomGAovbJskQSuwkEWsFjBLYqq2acqVlrW9LA3tNi1Y3Uc+LBMBhWMPcaLwoLzn8jOoLDDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6e152d6a5cb469c0e696ff3e09f9b4659d3eb3d043ca780f9474542114b2f15a","last_reissued_at":"2026-07-05T03:20:33.273424Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:20:33.273424Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2010.03316","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:20:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bHpZBki/zIZDNpjTK2/yNT1k4afhaNUTiDvPPtUTJE6keRzjudZEEU7ttGacqLlbZ62kvj20SkgE/s0DXCahAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:57:25.090692Z"},"content_sha256":"8077646c704900537d67ff6160d3705edb5d198fe81e7acd916eb8e8b0522160","schema_version":"1.0","event_id":"sha256:8077646c704900537d67ff6160d3705edb5d198fe81e7acd916eb8e8b0522160"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:NYKS22S4WRU4BZUW747AT6NUMW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Batch Normalization Increases Adversarial Vulnerability and Decreases Adversarial Transferability: A Non-Robust Feature Perspective","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","stat.ML"],"primary_cat":"cs.LG","authors_text":"Chaoning Zhang, In So Kweon, Philipp Benz","submitted_at":"2020-10-07T10:24:33Z","abstract_excerpt":"Batch normalization (BN) has been widely used in modern deep neural networks (DNNs) due to improved convergence. BN is observed to increase the model accuracy while at the cost of adversarial robustness. There is an increasing interest in the ML community to understand the impact of BN on DNNs, especially related to the model robustness. This work attempts to understand the impact of BN on DNNs from a non-robust feature perspective. Straightforwardly, the improved accuracy can be attributed to the better utilization of useful features. It remains unclear whether BN mainly favors learning robus"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.03316","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2010.03316/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:20:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ALzNiIPlwzj9I4CCkHEOttWbgiaCFQ2FeZLE49/aIhmtNg/lXyrP+UXrJ4vfGNzVyfxiq0esE2NmHQFSjBPGAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:57:25.091143Z"},"content_sha256":"e664f616b930891c3d77c568549c18ef269c0662e25f1d0ca1bae0ad32984124","schema_version":"1.0","event_id":"sha256:e664f616b930891c3d77c568549c18ef269c0662e25f1d0ca1bae0ad32984124"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NYKS22S4WRU4BZUW747AT6NUMW/bundle.json","state_url":"https://pith.science/pith/NYKS22S4WRU4BZUW747AT6NUMW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NYKS22S4WRU4BZUW747AT6NUMW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T05:57:25Z","links":{"resolver":"https://pith.science/pith/NYKS22S4WRU4BZUW747AT6NUMW","bundle":"https://pith.science/pith/NYKS22S4WRU4BZUW747AT6NUMW/bundle.json","state":"https://pith.science/pith/NYKS22S4WRU4BZUW747AT6NUMW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NYKS22S4WRU4BZUW747AT6NUMW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:NYKS22S4WRU4BZUW747AT6NUMW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"68c2008cf03e85b22b6c7e913862a665cdf1e8cc71ad072a481a240e3f39e0f8","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-07T10:24:33Z","title_canon_sha256":"bd5dd0104fc2d60a15fd32e758122da9a303ea93c0d7f090c7f1ad8aefacd4d0"},"schema_version":"1.0","source":{"id":"2010.03316","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.03316","created_at":"2026-07-05T03:20:33Z"},{"alias_kind":"arxiv_version","alias_value":"2010.03316v2","created_at":"2026-07-05T03:20:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.03316","created_at":"2026-07-05T03:20:33Z"},{"alias_kind":"pith_short_12","alias_value":"NYKS22S4WRU4","created_at":"2026-07-05T03:20:33Z"},{"alias_kind":"pith_short_16","alias_value":"NYKS22S4WRU4BZUW","created_at":"2026-07-05T03:20:33Z"},{"alias_kind":"pith_short_8","alias_value":"NYKS22S4","created_at":"2026-07-05T03:20:33Z"}],"graph_snapshots":[{"event_id":"sha256:e664f616b930891c3d77c568549c18ef269c0662e25f1d0ca1bae0ad32984124","target":"graph","created_at":"2026-07-05T03:20:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2010.03316/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Batch normalization (BN) has been widely used in modern deep neural networks (DNNs) due to improved convergence. BN is observed to increase the model accuracy while at the cost of adversarial robustness. There is an increasing interest in the ML community to understand the impact of BN on DNNs, especially related to the model robustness. This work attempts to understand the impact of BN on DNNs from a non-robust feature perspective. Straightforwardly, the improved accuracy can be attributed to the better utilization of useful features. It remains unclear whether BN mainly favors learning robus","authors_text":"Chaoning Zhang, In So Kweon, Philipp Benz","cross_cats":["cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-07T10:24:33Z","title":"Batch Normalization Increases Adversarial Vulnerability and Decreases Adversarial Transferability: A Non-Robust Feature Perspective"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.03316","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8077646c704900537d67ff6160d3705edb5d198fe81e7acd916eb8e8b0522160","target":"record","created_at":"2026-07-05T03:20:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"68c2008cf03e85b22b6c7e913862a665cdf1e8cc71ad072a481a240e3f39e0f8","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-07T10:24:33Z","title_canon_sha256":"bd5dd0104fc2d60a15fd32e758122da9a303ea93c0d7f090c7f1ad8aefacd4d0"},"schema_version":"1.0","source":{"id":"2010.03316","kind":"arxiv","version":2}},"canonical_sha256":"6e152d6a5cb469c0e696ff3e09f9b4659d3eb3d043ca780f9474542114b2f15a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6e152d6a5cb469c0e696ff3e09f9b4659d3eb3d043ca780f9474542114b2f15a","first_computed_at":"2026-07-05T03:20:33.273424Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:20:33.273424Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FLA5rKrxIMxk68yFomGAovbJskQSuwkEWsFjBLYqq2acqVlrW9LA3tNi1Y3Uc+LBMBhWMPcaLwoLzn8jOoLDDA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:20:33.273858Z","signed_message":"canonical_sha256_bytes"},"source_id":"2010.03316","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8077646c704900537d67ff6160d3705edb5d198fe81e7acd916eb8e8b0522160","sha256:e664f616b930891c3d77c568549c18ef269c0662e25f1d0ca1bae0ad32984124"],"state_sha256":"c5ff56def2b6f6aeae8159f262b2cae210ae9fd63f860d3197a695ce1a69fa86"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0j/0UqsLoIf9o0cBu1IPdW23CJ4+WjHeQWifh67xJBIN4G29ZvyrifomRwLzsKE+jgPtD9Hayf3u2ZNcuD1rDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T05:57:25.093467Z","bundle_sha256":"a7d353ac5b7165bbf78eaaab701e22782a8e96ccee180f1c00778e2eb3e4600b"}}