{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:PINHT2G52E37QPJYO35NWNZQYI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"adc00f51ef59f47cac6f05305409cad74a281ec5fa85cad10b91eab63ac70c37","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-03-03T18:15:55Z","title_canon_sha256":"5b5a7dfc7be71f36f978c3dd1aa34a85d307bf71f474a12789e8a6e2ad00e9d0"},"schema_version":"1.0","source":{"id":"2003.01690","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2003.01690","created_at":"2026-07-05T01:24:50Z"},{"alias_kind":"arxiv_version","alias_value":"2003.01690v2","created_at":"2026-07-05T01:24:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2003.01690","created_at":"2026-07-05T01:24:50Z"},{"alias_kind":"pith_short_12","alias_value":"PINHT2G52E37","created_at":"2026-07-05T01:24:50Z"},{"alias_kind":"pith_short_16","alias_value":"PINHT2G52E37QPJY","created_at":"2026-07-05T01:24:50Z"},{"alias_kind":"pith_short_8","alias_value":"PINHT2G5","created_at":"2026-07-05T01:24:50Z"}],"graph_snapshots":[{"event_id":"sha256:3e77bca27803cf6dc6f5d94d8bfb040bb95e35a9f813a94cb7c49f4787fd91e9","target":"graph","created_at":"2026-07-05T01:24:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2003.01690/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The field of defense strategies against adversarial attacks has significantly grown over the last years, but progress is hampered as the evaluation of adversarial defenses is often insufficient and thus gives a wrong impression of robustness. Many promising defenses could be broken later on, making it difficult to identify the state-of-the-art. Frequent pitfalls in the evaluation are improper tuning of hyperparameters of the attacks, gradient obfuscation or masking. In this paper we first propose two extensions of the PGD-attack overcoming failures due to suboptimal step size and problems of t","authors_text":"Francesco Croce, Matthias Hein","cross_cats":["cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-03-03T18:15:55Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2003.01690","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:90070c57e540e9f8c248716a052daf2e4fe9aff5e4e641eb9d407a6c84a6da49","target":"record","created_at":"2026-07-05T01:24:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"adc00f51ef59f47cac6f05305409cad74a281ec5fa85cad10b91eab63ac70c37","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-03-03T18:15:55Z","title_canon_sha256":"5b5a7dfc7be71f36f978c3dd1aa34a85d307bf71f474a12789e8a6e2ad00e9d0"},"schema_version":"1.0","source":{"id":"2003.01690","kind":"arxiv","version":2}},"canonical_sha256":"7a1a79e8ddd137f83d3876fadb3730c211439c6c33c1b51c8bfaa1e9222548d9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7a1a79e8ddd137f83d3876fadb3730c211439c6c33c1b51c8bfaa1e9222548d9","first_computed_at":"2026-07-05T01:24:50.054562Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:24:50.054562Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HBFvQOeTXroDYI/PFV02bt6TDp7zzAvrB362FTVd9woSVPxVJZSZQUMfemxPDEbFVELH1lJWuOGlHPDV49c2BQ==","signature_status":"signed_v1","signed_at":"2026-07-05T01:24:50.055069Z","signed_message":"canonical_sha256_bytes"},"source_id":"2003.01690","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:90070c57e540e9f8c248716a052daf2e4fe9aff5e4e641eb9d407a6c84a6da49","sha256:3e77bca27803cf6dc6f5d94d8bfb040bb95e35a9f813a94cb7c49f4787fd91e9"],"state_sha256":"f413c9226ae7410377e593c3e958c6fbb391609f7347a16a0d890e05699fe4d1"}