{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:Q3NB2VPI2V43GRR2GC6ONXU675","short_pith_number":"pith:Q3NB2VPI","canonical_record":{"source":{"id":"1902.00541","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-02-01T20:10:12Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV","stat.ML"],"title_canon_sha256":"236e919beef0fc77e8c95be82876deae5918161f3c30507323f5bc59a3b95858","abstract_canon_sha256":"d0b38786c18cdaed7e5135981157b10dd38ed6b50f4b0d77fde8eaa8e48c3bcc"},"schema_version":"1.0"},"canonical_sha256":"86da1d55e8d579b3463a30bce6de9eff4643bec788cf7dd729e0b22a57112518","source":{"kind":"arxiv","id":"1902.00541","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1902.00541","created_at":"2026-07-04T23:51:20Z"},{"alias_kind":"arxiv_version","alias_value":"1902.00541v2","created_at":"2026-07-04T23:51:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1902.00541","created_at":"2026-07-04T23:51:20Z"},{"alias_kind":"pith_short_12","alias_value":"Q3NB2VPI2V43","created_at":"2026-07-04T23:51:20Z"},{"alias_kind":"pith_short_16","alias_value":"Q3NB2VPI2V43GRR2","created_at":"2026-07-04T23:51:20Z"},{"alias_kind":"pith_short_8","alias_value":"Q3NB2VPI","created_at":"2026-07-04T23:51:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:Q3NB2VPI2V43GRR2GC6ONXU675","target":"record","payload":{"canonical_record":{"source":{"id":"1902.00541","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-02-01T20:10:12Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV","stat.ML"],"title_canon_sha256":"236e919beef0fc77e8c95be82876deae5918161f3c30507323f5bc59a3b95858","abstract_canon_sha256":"d0b38786c18cdaed7e5135981157b10dd38ed6b50f4b0d77fde8eaa8e48c3bcc"},"schema_version":"1.0"},"canonical_sha256":"86da1d55e8d579b3463a30bce6de9eff4643bec788cf7dd729e0b22a57112518","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-04T23:51:20.597796Z","signature_b64":"nQ+BwOAQBzghN8PniZJLajq1I/9eta/WUyeRMfCChFHQacL52FUEAKHM+3U52YsJ+NWMPUg+uVGZH/YRhNxJAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"86da1d55e8d579b3463a30bce6de9eff4643bec788cf7dd729e0b22a57112518","last_reissued_at":"2026-07-04T23:51:20.597310Z","signature_status":"signed_v1","first_computed_at":"2026-07-04T23:51:20.597310Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1902.00541","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:51:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NKWSEZGkTFQiEMRoHHrjhZDO8Sye7t8mmF8Bp+gNDLkacT0jwUssKbP4RGEGHQl8/Xh+GJaTo88dG4SaES9cCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-31T14:15:31.313563Z"},"content_sha256":"69716462cba6ec75e9bfb95778be9f3e4eb9dee1158ad4e07e2ccd06274672b3","schema_version":"1.0","event_id":"sha256:69716462cba6ec75e9bfb95778be9f3e4eb9dee1158ad4e07e2ccd06274672b3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:Q3NB2VPI2V43GRR2GC6ONXU675","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Efficacy of SHIELD under Different Threat Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.CV","stat.ML"],"primary_cat":"cs.LG","authors_text":"Cory Cornelius, Duen Horng Chau, Li Chen, Michael E. Kounavis, Nilaksh Das, Shang-Tse Chen","submitted_at":"2019-02-01T20:10:12Z","abstract_excerpt":"In this appraisal paper, we evaluate the efficacy of SHIELD, a compression-based defense framework for countering adversarial attacks on image classification models, which was published at KDD 2018. Here, we consider alternative threat models not studied in the original work, where we assume that an adaptive adversary is aware of the ensemble defense approach, the defensive pre-processing, and the architecture and weights of the models used in the ensemble. We define scenarios with varying levels of threat and empirically analyze the proposed defense by varying the degree of information availa"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1902.00541","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1902.00541/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:51:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PwmGwIaAm8rAhEySfPlrjS2FA0CoqNh3oYtZdbisb3RGUGTaBD153BXR39XoFygXCCOvcbOvsA+PolWk0T5DCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-31T14:15:31.314021Z"},"content_sha256":"9f2aa4b1a96a9e5d65593e9f82fb99499dba52c06151bd5a9e182298c55ad5d9","schema_version":"1.0","event_id":"sha256:9f2aa4b1a96a9e5d65593e9f82fb99499dba52c06151bd5a9e182298c55ad5d9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Q3NB2VPI2V43GRR2GC6ONXU675/bundle.json","state_url":"https://pith.science/pith/Q3NB2VPI2V43GRR2GC6ONXU675/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Q3NB2VPI2V43GRR2GC6ONXU675/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-31T14:15:31Z","links":{"resolver":"https://pith.science/pith/Q3NB2VPI2V43GRR2GC6ONXU675","bundle":"https://pith.science/pith/Q3NB2VPI2V43GRR2GC6ONXU675/bundle.json","state":"https://pith.science/pith/Q3NB2VPI2V43GRR2GC6ONXU675/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Q3NB2VPI2V43GRR2GC6ONXU675/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:Q3NB2VPI2V43GRR2GC6ONXU675","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d0b38786c18cdaed7e5135981157b10dd38ed6b50f4b0d77fde8eaa8e48c3bcc","cross_cats_sorted":["cs.AI","cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-02-01T20:10:12Z","title_canon_sha256":"236e919beef0fc77e8c95be82876deae5918161f3c30507323f5bc59a3b95858"},"schema_version":"1.0","source":{"id":"1902.00541","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1902.00541","created_at":"2026-07-04T23:51:20Z"},{"alias_kind":"arxiv_version","alias_value":"1902.00541v2","created_at":"2026-07-04T23:51:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1902.00541","created_at":"2026-07-04T23:51:20Z"},{"alias_kind":"pith_short_12","alias_value":"Q3NB2VPI2V43","created_at":"2026-07-04T23:51:20Z"},{"alias_kind":"pith_short_16","alias_value":"Q3NB2VPI2V43GRR2","created_at":"2026-07-04T23:51:20Z"},{"alias_kind":"pith_short_8","alias_value":"Q3NB2VPI","created_at":"2026-07-04T23:51:20Z"}],"graph_snapshots":[{"event_id":"sha256:9f2aa4b1a96a9e5d65593e9f82fb99499dba52c06151bd5a9e182298c55ad5d9","target":"graph","created_at":"2026-07-04T23:51:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1902.00541/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this appraisal paper, we evaluate the efficacy of SHIELD, a compression-based defense framework for countering adversarial attacks on image classification models, which was published at KDD 2018. Here, we consider alternative threat models not studied in the original work, where we assume that an adaptive adversary is aware of the ensemble defense approach, the defensive pre-processing, and the architecture and weights of the models used in the ensemble. We define scenarios with varying levels of threat and empirically analyze the proposed defense by varying the degree of information availa","authors_text":"Cory Cornelius, Duen Horng Chau, Li Chen, Michael E. Kounavis, Nilaksh Das, Shang-Tse Chen","cross_cats":["cs.AI","cs.CR","cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-02-01T20:10:12Z","title":"The Efficacy of SHIELD under Different Threat Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1902.00541","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:69716462cba6ec75e9bfb95778be9f3e4eb9dee1158ad4e07e2ccd06274672b3","target":"record","created_at":"2026-07-04T23:51:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d0b38786c18cdaed7e5135981157b10dd38ed6b50f4b0d77fde8eaa8e48c3bcc","cross_cats_sorted":["cs.AI","cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-02-01T20:10:12Z","title_canon_sha256":"236e919beef0fc77e8c95be82876deae5918161f3c30507323f5bc59a3b95858"},"schema_version":"1.0","source":{"id":"1902.00541","kind":"arxiv","version":2}},"canonical_sha256":"86da1d55e8d579b3463a30bce6de9eff4643bec788cf7dd729e0b22a57112518","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"86da1d55e8d579b3463a30bce6de9eff4643bec788cf7dd729e0b22a57112518","first_computed_at":"2026-07-04T23:51:20.597310Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-04T23:51:20.597310Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"nQ+BwOAQBzghN8PniZJLajq1I/9eta/WUyeRMfCChFHQacL52FUEAKHM+3U52YsJ+NWMPUg+uVGZH/YRhNxJAg==","signature_status":"signed_v1","signed_at":"2026-07-04T23:51:20.597796Z","signed_message":"canonical_sha256_bytes"},"source_id":"1902.00541","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:69716462cba6ec75e9bfb95778be9f3e4eb9dee1158ad4e07e2ccd06274672b3","sha256:9f2aa4b1a96a9e5d65593e9f82fb99499dba52c06151bd5a9e182298c55ad5d9"],"state_sha256":"7e6dba3ec13372390b32daa1881e596bd0b3cdd061c7c92efda7b44a07d4f0f6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2K7KIXCYJ7N7k+4QGg/rPlZnXIr9BD/C6HTazD/v8mTo5yU8A9ypd0XLr903rxjLKiRc1mjzjnIKRWRW+qHrBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-31T14:15:31.318267Z","bundle_sha256":"f701b0cc5b12f9699849fbfcecda490adaae169d4cd08b94aa88da40b75103af"}}