{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:QM7OHORO2REBAISPXLPNLITIZ4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"281a3b3923ff1385da7facf3b2dbaa1cc6e62216a4f48a23c4e1ef09d58fa7de","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2020-12-01T19:55:58Z","title_canon_sha256":"23f398b6680d4bc5e61d929da46ebfb9461897c3533832dbe517ad4246e5a222"},"schema_version":"1.0","source":{"id":"2012.00802","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2012.00802","created_at":"2026-07-05T01:56:20Z"},{"alias_kind":"arxiv_version","alias_value":"2012.00802v1","created_at":"2026-07-05T01:56:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.00802","created_at":"2026-07-05T01:56:20Z"},{"alias_kind":"pith_short_12","alias_value":"QM7OHORO2REB","created_at":"2026-07-05T01:56:20Z"},{"alias_kind":"pith_short_16","alias_value":"QM7OHORO2REBAISP","created_at":"2026-07-05T01:56:20Z"},{"alias_kind":"pith_short_8","alias_value":"QM7OHORO","created_at":"2026-07-05T01:56:20Z"}],"graph_snapshots":[{"event_id":"sha256:ea4e47c1b2c1cb1aac82f68fded632415dd42e4fd217929a72e8a46c88b3aea2","target":"graph","created_at":"2026-07-05T01:56:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2012.00802/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial robustness corresponds to the susceptibility of deep neural networks to imperceptible perturbations made at test time. In the context of image tasks, many algorithms have been proposed to make neural networks robust to adversarial perturbations made to the input pixels. These perturbations are typically measured in an $\\ell_p$ norm. However, robustness often holds only for the specific attack used for training. In this work we extend the above setting to consider the problem of training of deep neural networks that can be made simultaneously robust to perturbations applied in multi","authors_text":"Andrew Tomkins, Chun-Sung Ferng, Da-Cheng Juan, George Yu, Pranjal Awasthi","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2020-12-01T19:55:58Z","title":"Adversarial Robustness Across Representation Spaces"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.00802","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:970dfd739694a699c8366a1a4bfa57778c7dc35535bd7e22130efe47ad83eff0","target":"record","created_at":"2026-07-05T01:56:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"281a3b3923ff1385da7facf3b2dbaa1cc6e62216a4f48a23c4e1ef09d58fa7de","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2020-12-01T19:55:58Z","title_canon_sha256":"23f398b6680d4bc5e61d929da46ebfb9461897c3533832dbe517ad4246e5a222"},"schema_version":"1.0","source":{"id":"2012.00802","kind":"arxiv","version":1}},"canonical_sha256":"833ee3ba2ed44810224fbaded5a268cf2b9b428d768095d152d60fe448471937","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"833ee3ba2ed44810224fbaded5a268cf2b9b428d768095d152d60fe448471937","first_computed_at":"2026-07-05T01:56:20.762727Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:56:20.762727Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7K9gOff48r2ApJ4fYKAyURMcTCOtG/2o++26J5H8qKhwduqx2FPYf/yHt2aB5ZNcReKhJ49t7nj/+UGqnBzMAw==","signature_status":"signed_v1","signed_at":"2026-07-05T01:56:20.763174Z","signed_message":"canonical_sha256_bytes"},"source_id":"2012.00802","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:970dfd739694a699c8366a1a4bfa57778c7dc35535bd7e22130efe47ad83eff0","sha256:ea4e47c1b2c1cb1aac82f68fded632415dd42e4fd217929a72e8a46c88b3aea2"],"state_sha256":"a3d7283d69d9369aa2303795583e7a1b447a76e1f8d2de8761a638f6c64ae08c"}