{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:Q34DWK5MYUXTUKJ5VF367HLQPZ","short_pith_number":"pith:Q34DWK5M","canonical_record":{"source":{"id":"2203.14207","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2022-03-27T04:41:55Z","cross_cats_sorted":[],"title_canon_sha256":"b6979b24d302b973980cc76cc414e8948079b356b8d14c51f0be0bc54b344e04","abstract_canon_sha256":"51341b2a35e6525bb60c2a8a2817488911d89509c55b59fb66205ae3e37b2aa9"},"schema_version":"1.0"},"canonical_sha256":"86f83b2bacc52f3a293da977ef9d707e538a45adc6177c16fddfa815327bf0d3","source":{"kind":"arxiv","id":"2203.14207","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.14207","created_at":"2026-07-05T06:06:39Z"},{"alias_kind":"arxiv_version","alias_value":"2203.14207v2","created_at":"2026-07-05T06:06:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.14207","created_at":"2026-07-05T06:06:39Z"},{"alias_kind":"pith_short_12","alias_value":"Q34DWK5MYUXT","created_at":"2026-07-05T06:06:39Z"},{"alias_kind":"pith_short_16","alias_value":"Q34DWK5MYUXTUKJ5","created_at":"2026-07-05T06:06:39Z"},{"alias_kind":"pith_short_8","alias_value":"Q34DWK5M","created_at":"2026-07-05T06:06:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:Q34DWK5MYUXTUKJ5VF367HLQPZ","target":"record","payload":{"canonical_record":{"source":{"id":"2203.14207","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2022-03-27T04:41:55Z","cross_cats_sorted":[],"title_canon_sha256":"b6979b24d302b973980cc76cc414e8948079b356b8d14c51f0be0bc54b344e04","abstract_canon_sha256":"51341b2a35e6525bb60c2a8a2817488911d89509c55b59fb66205ae3e37b2aa9"},"schema_version":"1.0"},"canonical_sha256":"86f83b2bacc52f3a293da977ef9d707e538a45adc6177c16fddfa815327bf0d3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:06:39.354742Z","signature_b64":"/9sKo1EQxf036ysREBXMdQcTBK9gBGGGmYazwhcyKWHCf6DGdQPhmQUIn6YUcPsCEQMGK71PLviAdUl9IUlJAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"86f83b2bacc52f3a293da977ef9d707e538a45adc6177c16fddfa815327bf0d3","last_reissued_at":"2026-07-05T06:06:39.354259Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:06:39.354259Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2203.14207","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:06:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lgBVkPUEB5FeJOLxXN7irapIwel8hEgD65u/LFdTK9E5skDRm74p9qSsW48H7PaPHb/QomflIdZsVWKX+f9oDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T04:02:46.458007Z"},"content_sha256":"8151ade540ccef77faa44337b66e8ff3abbcd7ad8ff06121df276905d221b70b","schema_version":"1.0","event_id":"sha256:8151ade540ccef77faa44337b66e8ff3abbcd7ad8ff06121df276905d221b70b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:Q34DWK5MYUXTUKJ5VF367HLQPZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Text Adversarial Purification as Defense against Adversarial Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Demin Song, Linyang Li, Xipeng Qiu","submitted_at":"2022-03-27T04:41:55Z","abstract_excerpt":"Adversarial purification is a successful defense mechanism against adversarial attacks without requiring knowledge of the form of the incoming attack. Generally, adversarial purification aims to remove the adversarial perturbations therefore can make correct predictions based on the recovered clean samples. Despite the success of adversarial purification in the computer vision field that incorporates generative models such as energy-based models and diffusion models, using purification as a defense strategy against textual adversarial attacks is rarely explored. In this work, we introduce a no"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.14207","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2203.14207/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:06:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8MXxqleB28RWSiGeC7T5DHQXQ/StNUq8Grib9bcNoC0UCMj74PnjvrbBzCUiiV77l/KgmvGKtLnl1pSUwL07Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T04:02:46.458499Z"},"content_sha256":"f27305dad2aa80868ada0f495c5c6ebba5a0c4e2135be40c45bcacceb3d0041f","schema_version":"1.0","event_id":"sha256:f27305dad2aa80868ada0f495c5c6ebba5a0c4e2135be40c45bcacceb3d0041f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Q34DWK5MYUXTUKJ5VF367HLQPZ/bundle.json","state_url":"https://pith.science/pith/Q34DWK5MYUXTUKJ5VF367HLQPZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Q34DWK5MYUXTUKJ5VF367HLQPZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T04:02:46Z","links":{"resolver":"https://pith.science/pith/Q34DWK5MYUXTUKJ5VF367HLQPZ","bundle":"https://pith.science/pith/Q34DWK5MYUXTUKJ5VF367HLQPZ/bundle.json","state":"https://pith.science/pith/Q34DWK5MYUXTUKJ5VF367HLQPZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Q34DWK5MYUXTUKJ5VF367HLQPZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:Q34DWK5MYUXTUKJ5VF367HLQPZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"51341b2a35e6525bb60c2a8a2817488911d89509c55b59fb66205ae3e37b2aa9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2022-03-27T04:41:55Z","title_canon_sha256":"b6979b24d302b973980cc76cc414e8948079b356b8d14c51f0be0bc54b344e04"},"schema_version":"1.0","source":{"id":"2203.14207","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.14207","created_at":"2026-07-05T06:06:39Z"},{"alias_kind":"arxiv_version","alias_value":"2203.14207v2","created_at":"2026-07-05T06:06:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.14207","created_at":"2026-07-05T06:06:39Z"},{"alias_kind":"pith_short_12","alias_value":"Q34DWK5MYUXT","created_at":"2026-07-05T06:06:39Z"},{"alias_kind":"pith_short_16","alias_value":"Q34DWK5MYUXTUKJ5","created_at":"2026-07-05T06:06:39Z"},{"alias_kind":"pith_short_8","alias_value":"Q34DWK5M","created_at":"2026-07-05T06:06:39Z"}],"graph_snapshots":[{"event_id":"sha256:f27305dad2aa80868ada0f495c5c6ebba5a0c4e2135be40c45bcacceb3d0041f","target":"graph","created_at":"2026-07-05T06:06:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2203.14207/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial purification is a successful defense mechanism against adversarial attacks without requiring knowledge of the form of the incoming attack. Generally, adversarial purification aims to remove the adversarial perturbations therefore can make correct predictions based on the recovered clean samples. Despite the success of adversarial purification in the computer vision field that incorporates generative models such as energy-based models and diffusion models, using purification as a defense strategy against textual adversarial attacks is rarely explored. In this work, we introduce a no","authors_text":"Demin Song, Linyang Li, Xipeng Qiu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2022-03-27T04:41:55Z","title":"Text Adversarial Purification as Defense against Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.14207","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8151ade540ccef77faa44337b66e8ff3abbcd7ad8ff06121df276905d221b70b","target":"record","created_at":"2026-07-05T06:06:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"51341b2a35e6525bb60c2a8a2817488911d89509c55b59fb66205ae3e37b2aa9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2022-03-27T04:41:55Z","title_canon_sha256":"b6979b24d302b973980cc76cc414e8948079b356b8d14c51f0be0bc54b344e04"},"schema_version":"1.0","source":{"id":"2203.14207","kind":"arxiv","version":2}},"canonical_sha256":"86f83b2bacc52f3a293da977ef9d707e538a45adc6177c16fddfa815327bf0d3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"86f83b2bacc52f3a293da977ef9d707e538a45adc6177c16fddfa815327bf0d3","first_computed_at":"2026-07-05T06:06:39.354259Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:06:39.354259Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/9sKo1EQxf036ysREBXMdQcTBK9gBGGGmYazwhcyKWHCf6DGdQPhmQUIn6YUcPsCEQMGK71PLviAdUl9IUlJAA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:06:39.354742Z","signed_message":"canonical_sha256_bytes"},"source_id":"2203.14207","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8151ade540ccef77faa44337b66e8ff3abbcd7ad8ff06121df276905d221b70b","sha256:f27305dad2aa80868ada0f495c5c6ebba5a0c4e2135be40c45bcacceb3d0041f"],"state_sha256":"dcbf22012a0d152a80b27c0466853bd1cd6a883dbded10e40995b82de0c5e2e4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aii90A57SP2eMRGCVcafbLxItLpS2jNVsuSObpZCNLr1K00H0i9mVfiapNIWpDFpg2V6jiwJ2VFEYfwlo5yYCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T04:02:46.464151Z","bundle_sha256":"1c4424f2faf5d5c3248152d68c47e5da446ada8422afa0e4abedb86aec441d93"}}