{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:QDBLE5CCKNLLMQ6Z2TJOK6RUHR","short_pith_number":"pith:QDBLE5CC","canonical_record":{"source":{"id":"2103.04623","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-08T09:21:41Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"6f902a6c6accd9fce0a0d6a540c9d09f0a35426d7e9df687bb01d97daa88532c","abstract_canon_sha256":"683282197ad59fe879ff9201e2da1fc1de8eda8e6e3022eaddc8821e2bbebe7e"},"schema_version":"1.0"},"canonical_sha256":"80c2b274425356b643d9d4d2e57a343c7e79e12b564b36faaaa1ce3423f816ec","source":{"kind":"arxiv","id":"2103.04623","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.04623","created_at":"2026-07-05T03:43:01Z"},{"alias_kind":"arxiv_version","alias_value":"2103.04623v3","created_at":"2026-07-05T03:43:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.04623","created_at":"2026-07-05T03:43:01Z"},{"alias_kind":"pith_short_12","alias_value":"QDBLE5CCKNLL","created_at":"2026-07-05T03:43:01Z"},{"alias_kind":"pith_short_16","alias_value":"QDBLE5CCKNLLMQ6Z","created_at":"2026-07-05T03:43:01Z"},{"alias_kind":"pith_short_8","alias_value":"QDBLE5CC","created_at":"2026-07-05T03:43:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:QDBLE5CCKNLLMQ6Z2TJOK6RUHR","target":"record","payload":{"canonical_record":{"source":{"id":"2103.04623","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-08T09:21:41Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"6f902a6c6accd9fce0a0d6a540c9d09f0a35426d7e9df687bb01d97daa88532c","abstract_canon_sha256":"683282197ad59fe879ff9201e2da1fc1de8eda8e6e3022eaddc8821e2bbebe7e"},"schema_version":"1.0"},"canonical_sha256":"80c2b274425356b643d9d4d2e57a343c7e79e12b564b36faaaa1ce3423f816ec","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:43:01.502375Z","signature_b64":"z5cjVyCJ4s/TGkHyzcbYpecFXTFKXjrTQBaIvHsue+chEQYkLAZSL7FJRyz/BHrCCg/HDSqivRC/X3nAgjOVBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"80c2b274425356b643d9d4d2e57a343c7e79e12b564b36faaaa1ce3423f816ec","last_reissued_at":"2026-07-05T03:43:01.501951Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:43:01.501951Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2103.04623","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:43:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MNd6jOmsKWdLooxRs59n9FDeMVKYfflxRJ5XAgGzbTiBMQx3oLRXL93u5STCZyRIndqty05+yVli2JUolbBYAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-17T17:04:44.754940Z"},"content_sha256":"dd4e517041e06150c29271ddbfbc3948a963f2b3fcfcaf3752dfc7c6a78de43b","schema_version":"1.0","event_id":"sha256:dd4e517041e06150c29271ddbfbc3948a963f2b3fcfcaf3752dfc7c6a78de43b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:QDBLE5CCKNLLMQ6Z2TJOK6RUHR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Consistency Regularization for Adversarial Robustness","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Jihoon Tack, Jinwoo Shin, Jongheon Jeong, Minseon Kim, Sihyun Yu, Sung Ju Hwang","submitted_at":"2021-03-08T09:21:41Z","abstract_excerpt":"Adversarial training (AT) is currently one of the most successful methods to obtain the adversarial robustness of deep neural networks. However, the phenomenon of robust overfitting, i.e., the robustness starts to decrease significantly during AT, has been problematic, not only making practitioners consider a bag of tricks for a successful training, e.g., early stopping, but also incurring a significant generalization gap in the robustness. In this paper, we propose an effective regularization technique that prevents robust overfitting by optimizing an auxiliary `consistency' regularization lo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.04623","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2103.04623/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:43:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dLgqJaWK+oQ3jyCdZ0Jw8oyQnJ9nEgIyc0Uf/p9EcvwamSmoOoR+K7QifZaGOUpG52xG56q7GzJKP+Qv7ltTBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-17T17:04:44.755309Z"},"content_sha256":"964f399176191932ae63806d3865a274a00842a91764cfcfcc091f002fa2e144","schema_version":"1.0","event_id":"sha256:964f399176191932ae63806d3865a274a00842a91764cfcfcc091f002fa2e144"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QDBLE5CCKNLLMQ6Z2TJOK6RUHR/bundle.json","state_url":"https://pith.science/pith/QDBLE5CCKNLLMQ6Z2TJOK6RUHR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QDBLE5CCKNLLMQ6Z2TJOK6RUHR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-17T17:04:44Z","links":{"resolver":"https://pith.science/pith/QDBLE5CCKNLLMQ6Z2TJOK6RUHR","bundle":"https://pith.science/pith/QDBLE5CCKNLLMQ6Z2TJOK6RUHR/bundle.json","state":"https://pith.science/pith/QDBLE5CCKNLLMQ6Z2TJOK6RUHR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QDBLE5CCKNLLMQ6Z2TJOK6RUHR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:QDBLE5CCKNLLMQ6Z2TJOK6RUHR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"683282197ad59fe879ff9201e2da1fc1de8eda8e6e3022eaddc8821e2bbebe7e","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-08T09:21:41Z","title_canon_sha256":"6f902a6c6accd9fce0a0d6a540c9d09f0a35426d7e9df687bb01d97daa88532c"},"schema_version":"1.0","source":{"id":"2103.04623","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.04623","created_at":"2026-07-05T03:43:01Z"},{"alias_kind":"arxiv_version","alias_value":"2103.04623v3","created_at":"2026-07-05T03:43:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.04623","created_at":"2026-07-05T03:43:01Z"},{"alias_kind":"pith_short_12","alias_value":"QDBLE5CCKNLL","created_at":"2026-07-05T03:43:01Z"},{"alias_kind":"pith_short_16","alias_value":"QDBLE5CCKNLLMQ6Z","created_at":"2026-07-05T03:43:01Z"},{"alias_kind":"pith_short_8","alias_value":"QDBLE5CC","created_at":"2026-07-05T03:43:01Z"}],"graph_snapshots":[{"event_id":"sha256:964f399176191932ae63806d3865a274a00842a91764cfcfcc091f002fa2e144","target":"graph","created_at":"2026-07-05T03:43:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2103.04623/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial training (AT) is currently one of the most successful methods to obtain the adversarial robustness of deep neural networks. However, the phenomenon of robust overfitting, i.e., the robustness starts to decrease significantly during AT, has been problematic, not only making practitioners consider a bag of tricks for a successful training, e.g., early stopping, but also incurring a significant generalization gap in the robustness. In this paper, we propose an effective regularization technique that prevents robust overfitting by optimizing an auxiliary `consistency' regularization lo","authors_text":"Jihoon Tack, Jinwoo Shin, Jongheon Jeong, Minseon Kim, Sihyun Yu, Sung Ju Hwang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-08T09:21:41Z","title":"Consistency Regularization for Adversarial Robustness"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.04623","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:dd4e517041e06150c29271ddbfbc3948a963f2b3fcfcaf3752dfc7c6a78de43b","target":"record","created_at":"2026-07-05T03:43:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"683282197ad59fe879ff9201e2da1fc1de8eda8e6e3022eaddc8821e2bbebe7e","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-08T09:21:41Z","title_canon_sha256":"6f902a6c6accd9fce0a0d6a540c9d09f0a35426d7e9df687bb01d97daa88532c"},"schema_version":"1.0","source":{"id":"2103.04623","kind":"arxiv","version":3}},"canonical_sha256":"80c2b274425356b643d9d4d2e57a343c7e79e12b564b36faaaa1ce3423f816ec","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"80c2b274425356b643d9d4d2e57a343c7e79e12b564b36faaaa1ce3423f816ec","first_computed_at":"2026-07-05T03:43:01.501951Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:43:01.501951Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"z5cjVyCJ4s/TGkHyzcbYpecFXTFKXjrTQBaIvHsue+chEQYkLAZSL7FJRyz/BHrCCg/HDSqivRC/X3nAgjOVBg==","signature_status":"signed_v1","signed_at":"2026-07-05T03:43:01.502375Z","signed_message":"canonical_sha256_bytes"},"source_id":"2103.04623","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:dd4e517041e06150c29271ddbfbc3948a963f2b3fcfcaf3752dfc7c6a78de43b","sha256:964f399176191932ae63806d3865a274a00842a91764cfcfcc091f002fa2e144"],"state_sha256":"7ea79d0b27d7e0185e3668aeb64d15ba0aff6e0cab5d01efec4bab4581919929"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"r7u6kcletTKIIYXAZxfQDiE64VUCrdC6guI2ZjHjNdo6q2aAc8KNNkrvkMA0ZDg6LKWKihpm99suuawqvQnBAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-17T17:04:44.757499Z","bundle_sha256":"92b41215c16f163d29e116130d5908c1b2db0326d861f16c69d9686812fe606f"}}