{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:OZRU4WX46EI7PMP3URI2W26HFQ","short_pith_number":"pith:OZRU4WX4","canonical_record":{"source":{"id":"2002.09364","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-21T15:45:42Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"4f21c7f0f663fd5423d8b7deb1f5b700429e089db48dac6047569485fcd39564","abstract_canon_sha256":"cee138dd888984fc1f0e0aebbdcc054331cc655f13a3b764ebc50df836c6519c"},"schema_version":"1.0"},"canonical_sha256":"76634e5afcf111f7b1fba451ab6bc72c1fc922bc653d46fc734513264534d341","source":{"kind":"arxiv","id":"2002.09364","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.09364","created_at":"2026-07-05T00:42:55Z"},{"alias_kind":"arxiv_version","alias_value":"2002.09364v1","created_at":"2026-07-05T00:42:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.09364","created_at":"2026-07-05T00:42:55Z"},{"alias_kind":"pith_short_12","alias_value":"OZRU4WX46EI7","created_at":"2026-07-05T00:42:55Z"},{"alias_kind":"pith_short_16","alias_value":"OZRU4WX46EI7PMP3","created_at":"2026-07-05T00:42:55Z"},{"alias_kind":"pith_short_8","alias_value":"OZRU4WX4","created_at":"2026-07-05T00:42:55Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:OZRU4WX46EI7PMP3URI2W26HFQ","target":"record","payload":{"canonical_record":{"source":{"id":"2002.09364","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-21T15:45:42Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"4f21c7f0f663fd5423d8b7deb1f5b700429e089db48dac6047569485fcd39564","abstract_canon_sha256":"cee138dd888984fc1f0e0aebbdcc054331cc655f13a3b764ebc50df836c6519c"},"schema_version":"1.0"},"canonical_sha256":"76634e5afcf111f7b1fba451ab6bc72c1fc922bc653d46fc734513264534d341","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:42:55.425215Z","signature_b64":"JselVUG6WvcrFu3JVb3I6Xp+8X5XWAgOP+VvY0YARCoH1J0vjei4+j96Hg5FADMCe6WT5jgmjr/vii4q16WBDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"76634e5afcf111f7b1fba451ab6bc72c1fc922bc653d46fc734513264534d341","last_reissued_at":"2026-07-05T00:42:55.424764Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:42:55.424764Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2002.09364","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:42:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hzyji2WboxZ+MVMhcYZwOTLO6KJi8tAijxUiK/NUxK8j563m4qzF5zaN3ig2ZQ43B2+6h115BoH6/XSP8te1Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T11:29:08.644507Z"},"content_sha256":"4cb02d93b054a7f727af4a8d70dfbceee286b0b1e259f4d08b5bdc2193cff528","schema_version":"1.0","event_id":"sha256:4cb02d93b054a7f727af4a8d70dfbceee286b0b1e259f4d08b5bdc2193cff528"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:OZRU4WX46EI7PMP3URI2W26HFQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Detection and Correction by Matching Prediction Distributions","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Arnaud Van Looveren, Giovanni Vacanti","submitted_at":"2020-02-21T15:45:42Z","abstract_excerpt":"We present a novel adversarial detection and correction method for machine learning classifiers.The detector consists of an autoencoder trained with a custom loss function based on the Kullback-Leibler divergence between the classifier predictions on the original and reconstructed instances.The method is unsupervised, easy to train and does not require any knowledge about the underlying attack. The detector almost completely neutralises powerful attacks like Carlini-Wagner or SLIDE on MNIST and Fashion-MNIST, and remains very effective on CIFAR-10 when the attack is granted full access to the "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.09364","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2002.09364/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:42:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8DkuA08w1aoaXZu3zkjWb5ZDs46HXWR4Lf3xll20f4HjFbq1ifdnDosg5cERAFcPBOVm3jNKRZtAEMOZ9M99BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T11:29:08.645038Z"},"content_sha256":"8f6a97762bc93a032ba212be59743aa3516c56400e07e63af0826b90a7692a31","schema_version":"1.0","event_id":"sha256:8f6a97762bc93a032ba212be59743aa3516c56400e07e63af0826b90a7692a31"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OZRU4WX46EI7PMP3URI2W26HFQ/bundle.json","state_url":"https://pith.science/pith/OZRU4WX46EI7PMP3URI2W26HFQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OZRU4WX46EI7PMP3URI2W26HFQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T11:29:08Z","links":{"resolver":"https://pith.science/pith/OZRU4WX46EI7PMP3URI2W26HFQ","bundle":"https://pith.science/pith/OZRU4WX46EI7PMP3URI2W26HFQ/bundle.json","state":"https://pith.science/pith/OZRU4WX46EI7PMP3URI2W26HFQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OZRU4WX46EI7PMP3URI2W26HFQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:OZRU4WX46EI7PMP3URI2W26HFQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cee138dd888984fc1f0e0aebbdcc054331cc655f13a3b764ebc50df836c6519c","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-21T15:45:42Z","title_canon_sha256":"4f21c7f0f663fd5423d8b7deb1f5b700429e089db48dac6047569485fcd39564"},"schema_version":"1.0","source":{"id":"2002.09364","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.09364","created_at":"2026-07-05T00:42:55Z"},{"alias_kind":"arxiv_version","alias_value":"2002.09364v1","created_at":"2026-07-05T00:42:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.09364","created_at":"2026-07-05T00:42:55Z"},{"alias_kind":"pith_short_12","alias_value":"OZRU4WX46EI7","created_at":"2026-07-05T00:42:55Z"},{"alias_kind":"pith_short_16","alias_value":"OZRU4WX46EI7PMP3","created_at":"2026-07-05T00:42:55Z"},{"alias_kind":"pith_short_8","alias_value":"OZRU4WX4","created_at":"2026-07-05T00:42:55Z"}],"graph_snapshots":[{"event_id":"sha256:8f6a97762bc93a032ba212be59743aa3516c56400e07e63af0826b90a7692a31","target":"graph","created_at":"2026-07-05T00:42:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2002.09364/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We present a novel adversarial detection and correction method for machine learning classifiers.The detector consists of an autoencoder trained with a custom loss function based on the Kullback-Leibler divergence between the classifier predictions on the original and reconstructed instances.The method is unsupervised, easy to train and does not require any knowledge about the underlying attack. The detector almost completely neutralises powerful attacks like Carlini-Wagner or SLIDE on MNIST and Fashion-MNIST, and remains very effective on CIFAR-10 when the attack is granted full access to the ","authors_text":"Arnaud Van Looveren, Giovanni Vacanti","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-21T15:45:42Z","title":"Adversarial Detection and Correction by Matching Prediction Distributions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.09364","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4cb02d93b054a7f727af4a8d70dfbceee286b0b1e259f4d08b5bdc2193cff528","target":"record","created_at":"2026-07-05T00:42:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cee138dd888984fc1f0e0aebbdcc054331cc655f13a3b764ebc50df836c6519c","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-21T15:45:42Z","title_canon_sha256":"4f21c7f0f663fd5423d8b7deb1f5b700429e089db48dac6047569485fcd39564"},"schema_version":"1.0","source":{"id":"2002.09364","kind":"arxiv","version":1}},"canonical_sha256":"76634e5afcf111f7b1fba451ab6bc72c1fc922bc653d46fc734513264534d341","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"76634e5afcf111f7b1fba451ab6bc72c1fc922bc653d46fc734513264534d341","first_computed_at":"2026-07-05T00:42:55.424764Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:42:55.424764Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"JselVUG6WvcrFu3JVb3I6Xp+8X5XWAgOP+VvY0YARCoH1J0vjei4+j96Hg5FADMCe6WT5jgmjr/vii4q16WBDg==","signature_status":"signed_v1","signed_at":"2026-07-05T00:42:55.425215Z","signed_message":"canonical_sha256_bytes"},"source_id":"2002.09364","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4cb02d93b054a7f727af4a8d70dfbceee286b0b1e259f4d08b5bdc2193cff528","sha256:8f6a97762bc93a032ba212be59743aa3516c56400e07e63af0826b90a7692a31"],"state_sha256":"a77e09fbc3b3b8a5f53e79b79735b73e4e9bdffb71439dc6b3b3216180414795"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JxbLb+QJGVdB+9Ae18cXygTspfzd7Ui2JeapxRCVVcnmwr2KHGnAwSGLm2GkkOZDQYqtzTV+HwpUgbGkouVADw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T11:29:08.650040Z","bundle_sha256":"d7a4d0e7d575c08e764b7f3e501f07c678d63c410412c953ca10876063d3ac3e"}}