{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:QIEUZMGEDZAIVXVLNP54DGHKQ2","short_pith_number":"pith:QIEUZMGE","canonical_record":{"source":{"id":"2402.15152","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-02-23T07:22:55Z","cross_cats_sorted":["cs.AI","cs.CR","math.OC"],"title_canon_sha256":"8b79295380e4fd3d8595afae1eedd01c2a317194eaaa8e7cf91c1f0138ef6cff","abstract_canon_sha256":"141d586174092646444d6221058acd3511416ad838eb2523b817fa5f9399ce40"},"schema_version":"1.0"},"canonical_sha256":"82094cb0c41e408adeab6bfbc198ea868d955ff6a5f6b5333f6080e280e4c1ba","source":{"kind":"arxiv","id":"2402.15152","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.15152","created_at":"2026-07-05T08:27:46Z"},{"alias_kind":"arxiv_version","alias_value":"2402.15152v2","created_at":"2026-07-05T08:27:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.15152","created_at":"2026-07-05T08:27:46Z"},{"alias_kind":"pith_short_12","alias_value":"QIEUZMGEDZAI","created_at":"2026-07-05T08:27:46Z"},{"alias_kind":"pith_short_16","alias_value":"QIEUZMGEDZAIVXVL","created_at":"2026-07-05T08:27:46Z"},{"alias_kind":"pith_short_8","alias_value":"QIEUZMGE","created_at":"2026-07-05T08:27:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:QIEUZMGEDZAIVXVLNP54DGHKQ2","target":"record","payload":{"canonical_record":{"source":{"id":"2402.15152","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-02-23T07:22:55Z","cross_cats_sorted":["cs.AI","cs.CR","math.OC"],"title_canon_sha256":"8b79295380e4fd3d8595afae1eedd01c2a317194eaaa8e7cf91c1f0138ef6cff","abstract_canon_sha256":"141d586174092646444d6221058acd3511416ad838eb2523b817fa5f9399ce40"},"schema_version":"1.0"},"canonical_sha256":"82094cb0c41e408adeab6bfbc198ea868d955ff6a5f6b5333f6080e280e4c1ba","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:27:46.609680Z","signature_b64":"yeY+hpDe4GS8Ceg7KOq/tgUXQVaYFt8zWOwbrfsWjh4Bpgxt8H98PtWL6Qf8b9YgBVdooATFYou+B7Xs4UslCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"82094cb0c41e408adeab6bfbc198ea868d955ff6a5f6b5333f6080e280e4c1ba","last_reissued_at":"2026-07-05T08:27:46.609117Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:27:46.609117Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.15152","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:27:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"o/b4wR6ZuLg/7rjimk9F7a8v0fI5e3kLv+Xu8bfrH5hFMb7jhbxtYE7KXMiahKFdgEbkfM0GJxlhTTObR1pZAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T22:11:00.036363Z"},"content_sha256":"d5b5f669e1ec63d09027309a6eb0fc3866f36c979983bf23a447bd2e8afafaee","schema_version":"1.0","event_id":"sha256:d5b5f669e1ec63d09027309a6eb0fc3866f36c979983bf23a447bd2e8afafaee"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:QIEUZMGEDZAIVXVLNP54DGHKQ2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Duality Between Sharpness-Aware Minimization and Adversarial Training","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","math.OC"],"primary_cat":"cs.LG","authors_text":"Hangzhou He, Huanran Chen, Jingyu Zhu, Yifei Wang, Yihao Zhang, Zeming Wei","submitted_at":"2024-02-23T07:22:55Z","abstract_excerpt":"Adversarial Training (AT), which adversarially perturb the input samples during training, has been acknowledged as one of the most effective defenses against adversarial attacks, yet suffers from inevitably decreased clean accuracy. Instead of perturbing the samples, Sharpness-Aware Minimization (SAM) perturbs the model weights during training to find a more flat loss landscape and improve generalization. However, as SAM is designed for better clean accuracy, its effectiveness in enhancing adversarial robustness remains unexplored. In this work, considering the duality between SAM and AT, we i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.15152","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.15152/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:27:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"F3fCDKlgFqLcU1eg1uYc8w7JE0RvXhegJT28h+tEypZN3f11Mno0OXW8CkG/83FNTBlbqPxEcnlrsICBW74TDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T22:11:00.036957Z"},"content_sha256":"f237c4609ed577a00cc637764712776a75da937c9ac42b5fb722dbee93089580","schema_version":"1.0","event_id":"sha256:f237c4609ed577a00cc637764712776a75da937c9ac42b5fb722dbee93089580"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QIEUZMGEDZAIVXVLNP54DGHKQ2/bundle.json","state_url":"https://pith.science/pith/QIEUZMGEDZAIVXVLNP54DGHKQ2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QIEUZMGEDZAIVXVLNP54DGHKQ2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T22:11:00Z","links":{"resolver":"https://pith.science/pith/QIEUZMGEDZAIVXVLNP54DGHKQ2","bundle":"https://pith.science/pith/QIEUZMGEDZAIVXVLNP54DGHKQ2/bundle.json","state":"https://pith.science/pith/QIEUZMGEDZAIVXVLNP54DGHKQ2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QIEUZMGEDZAIVXVLNP54DGHKQ2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:QIEUZMGEDZAIVXVLNP54DGHKQ2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"141d586174092646444d6221058acd3511416ad838eb2523b817fa5f9399ce40","cross_cats_sorted":["cs.AI","cs.CR","math.OC"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-02-23T07:22:55Z","title_canon_sha256":"8b79295380e4fd3d8595afae1eedd01c2a317194eaaa8e7cf91c1f0138ef6cff"},"schema_version":"1.0","source":{"id":"2402.15152","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.15152","created_at":"2026-07-05T08:27:46Z"},{"alias_kind":"arxiv_version","alias_value":"2402.15152v2","created_at":"2026-07-05T08:27:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.15152","created_at":"2026-07-05T08:27:46Z"},{"alias_kind":"pith_short_12","alias_value":"QIEUZMGEDZAI","created_at":"2026-07-05T08:27:46Z"},{"alias_kind":"pith_short_16","alias_value":"QIEUZMGEDZAIVXVL","created_at":"2026-07-05T08:27:46Z"},{"alias_kind":"pith_short_8","alias_value":"QIEUZMGE","created_at":"2026-07-05T08:27:46Z"}],"graph_snapshots":[{"event_id":"sha256:f237c4609ed577a00cc637764712776a75da937c9ac42b5fb722dbee93089580","target":"graph","created_at":"2026-07-05T08:27:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.15152/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial Training (AT), which adversarially perturb the input samples during training, has been acknowledged as one of the most effective defenses against adversarial attacks, yet suffers from inevitably decreased clean accuracy. Instead of perturbing the samples, Sharpness-Aware Minimization (SAM) perturbs the model weights during training to find a more flat loss landscape and improve generalization. However, as SAM is designed for better clean accuracy, its effectiveness in enhancing adversarial robustness remains unexplored. In this work, considering the duality between SAM and AT, we i","authors_text":"Hangzhou He, Huanran Chen, Jingyu Zhu, Yifei Wang, Yihao Zhang, Zeming Wei","cross_cats":["cs.AI","cs.CR","math.OC"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-02-23T07:22:55Z","title":"On the Duality Between Sharpness-Aware Minimization and Adversarial Training"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.15152","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d5b5f669e1ec63d09027309a6eb0fc3866f36c979983bf23a447bd2e8afafaee","target":"record","created_at":"2026-07-05T08:27:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"141d586174092646444d6221058acd3511416ad838eb2523b817fa5f9399ce40","cross_cats_sorted":["cs.AI","cs.CR","math.OC"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-02-23T07:22:55Z","title_canon_sha256":"8b79295380e4fd3d8595afae1eedd01c2a317194eaaa8e7cf91c1f0138ef6cff"},"schema_version":"1.0","source":{"id":"2402.15152","kind":"arxiv","version":2}},"canonical_sha256":"82094cb0c41e408adeab6bfbc198ea868d955ff6a5f6b5333f6080e280e4c1ba","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"82094cb0c41e408adeab6bfbc198ea868d955ff6a5f6b5333f6080e280e4c1ba","first_computed_at":"2026-07-05T08:27:46.609117Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:27:46.609117Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"yeY+hpDe4GS8Ceg7KOq/tgUXQVaYFt8zWOwbrfsWjh4Bpgxt8H98PtWL6Qf8b9YgBVdooATFYou+B7Xs4UslCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:27:46.609680Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.15152","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d5b5f669e1ec63d09027309a6eb0fc3866f36c979983bf23a447bd2e8afafaee","sha256:f237c4609ed577a00cc637764712776a75da937c9ac42b5fb722dbee93089580"],"state_sha256":"3afeb4a0d4638647943e4f845e0b2039bb1cc1d335bd0f7a1c0097132ba5e289"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uRknblI6+VCDVYfuxT1AvkR+pBAugGHe/QBVSY1B5bkj/DXa+aikSU+skUUEYpsNCglNgWdxSicC2kkuvUzgAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T22:11:00.040505Z","bundle_sha256":"77168d94341e9d50af61ca1f608a62f138f2825d53c3ba53e76e43faae35365a"}}