{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:QN5CD76CHHTIVWHEQXVWH65UJ2","short_pith_number":"pith:QN5CD76C","canonical_record":{"source":{"id":"2002.04599","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-11T18:50:23Z","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"title_canon_sha256":"42940b7eb7cd61a2e1c028d63d14b4f93c95774c64fc48e9482cc34aff02dcf0","abstract_canon_sha256":"4159f835f8d2f0f39b1ac40ea7c80d805902133e8da3a10d25a5e4299ecf3801"},"schema_version":"1.0"},"canonical_sha256":"837a21ffc239e68ad8e485eb63fbb44ebdd091763f8e7ca1f9073697a58b24dd","source":{"kind":"arxiv","id":"2002.04599","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.04599","created_at":"2026-07-05T01:24:31Z"},{"alias_kind":"arxiv_version","alias_value":"2002.04599v2","created_at":"2026-07-05T01:24:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.04599","created_at":"2026-07-05T01:24:31Z"},{"alias_kind":"pith_short_12","alias_value":"QN5CD76CHHTI","created_at":"2026-07-05T01:24:31Z"},{"alias_kind":"pith_short_16","alias_value":"QN5CD76CHHTIVWHE","created_at":"2026-07-05T01:24:31Z"},{"alias_kind":"pith_short_8","alias_value":"QN5CD76C","created_at":"2026-07-05T01:24:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:QN5CD76CHHTIVWHEQXVWH65UJ2","target":"record","payload":{"canonical_record":{"source":{"id":"2002.04599","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-11T18:50:23Z","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"title_canon_sha256":"42940b7eb7cd61a2e1c028d63d14b4f93c95774c64fc48e9482cc34aff02dcf0","abstract_canon_sha256":"4159f835f8d2f0f39b1ac40ea7c80d805902133e8da3a10d25a5e4299ecf3801"},"schema_version":"1.0"},"canonical_sha256":"837a21ffc239e68ad8e485eb63fbb44ebdd091763f8e7ca1f9073697a58b24dd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:24:31.399589Z","signature_b64":"kyWdhXjfHpU0gt6BqpVoK7Bz82nL36K/q8lkmM9axmVOeLb7/RhTNMf56uYEz1ioOdM39zyIKDImbTaE5dexDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"837a21ffc239e68ad8e485eb63fbb44ebdd091763f8e7ca1f9073697a58b24dd","last_reissued_at":"2026-07-05T01:24:31.399118Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:24:31.399118Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2002.04599","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:24:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"y0v9W2biALodlB8ACiRqxnNGf+5c4uDyRstuweLjoJx9pRNTYjGryfeq1GYePjqdfr/ouppKhPj7sur/rZ54Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T06:49:56.391129Z"},"content_sha256":"1b2d1920af5da6717ed58909c04965c0aa378b9d81fd847202c6933c07c65fd9","schema_version":"1.0","event_id":"sha256:1b2d1920af5da6717ed58909c04965c0aa378b9d81fd847202c6933c07c65fd9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:QN5CD76CHHTIVWHEQXVWH65UJ2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Fundamental Tradeoffs between Invariance and Sensitivity to Adversarial Perturbations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV","stat.ML"],"primary_cat":"cs.LG","authors_text":"Florian Tram\\`er, Jens Behrmann, J\\\"orn-Henrik Jacobsen, Nicholas Carlini, Nicolas Papernot","submitted_at":"2020-02-11T18:50:23Z","abstract_excerpt":"Adversarial examples are malicious inputs crafted to induce misclassification. Commonly studied sensitivity-based adversarial examples introduce semantically-small changes to an input that result in a different model prediction. This paper studies a complementary failure mode, invariance-based adversarial examples, that introduce minimal semantic changes that modify an input's true label yet preserve the model's prediction. We demonstrate fundamental tradeoffs between these two types of adversarial examples.\n  We show that defenses against sensitivity-based attacks actively harm a model's accu"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.04599","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2002.04599/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:24:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ueblaSZcdWNalaQfxaL6CMzsIHJ3OQcw6tBJSzz/cwDgxKwXBbgQubV/yc5rC8t8+xTTjtxCdWQ7MTbr73hIBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T06:49:56.391518Z"},"content_sha256":"8af383b76cf9f8042829c08a54138edd4f87fbed5e66408998c7eab7deeec43e","schema_version":"1.0","event_id":"sha256:8af383b76cf9f8042829c08a54138edd4f87fbed5e66408998c7eab7deeec43e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QN5CD76CHHTIVWHEQXVWH65UJ2/bundle.json","state_url":"https://pith.science/pith/QN5CD76CHHTIVWHEQXVWH65UJ2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QN5CD76CHHTIVWHEQXVWH65UJ2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-09T06:49:56Z","links":{"resolver":"https://pith.science/pith/QN5CD76CHHTIVWHEQXVWH65UJ2","bundle":"https://pith.science/pith/QN5CD76CHHTIVWHEQXVWH65UJ2/bundle.json","state":"https://pith.science/pith/QN5CD76CHHTIVWHEQXVWH65UJ2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QN5CD76CHHTIVWHEQXVWH65UJ2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:QN5CD76CHHTIVWHEQXVWH65UJ2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4159f835f8d2f0f39b1ac40ea7c80d805902133e8da3a10d25a5e4299ecf3801","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-11T18:50:23Z","title_canon_sha256":"42940b7eb7cd61a2e1c028d63d14b4f93c95774c64fc48e9482cc34aff02dcf0"},"schema_version":"1.0","source":{"id":"2002.04599","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.04599","created_at":"2026-07-05T01:24:31Z"},{"alias_kind":"arxiv_version","alias_value":"2002.04599v2","created_at":"2026-07-05T01:24:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.04599","created_at":"2026-07-05T01:24:31Z"},{"alias_kind":"pith_short_12","alias_value":"QN5CD76CHHTI","created_at":"2026-07-05T01:24:31Z"},{"alias_kind":"pith_short_16","alias_value":"QN5CD76CHHTIVWHE","created_at":"2026-07-05T01:24:31Z"},{"alias_kind":"pith_short_8","alias_value":"QN5CD76C","created_at":"2026-07-05T01:24:31Z"}],"graph_snapshots":[{"event_id":"sha256:8af383b76cf9f8042829c08a54138edd4f87fbed5e66408998c7eab7deeec43e","target":"graph","created_at":"2026-07-05T01:24:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2002.04599/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial examples are malicious inputs crafted to induce misclassification. Commonly studied sensitivity-based adversarial examples introduce semantically-small changes to an input that result in a different model prediction. This paper studies a complementary failure mode, invariance-based adversarial examples, that introduce minimal semantic changes that modify an input's true label yet preserve the model's prediction. We demonstrate fundamental tradeoffs between these two types of adversarial examples.\n  We show that defenses against sensitivity-based attacks actively harm a model's accu","authors_text":"Florian Tram\\`er, Jens Behrmann, J\\\"orn-Henrik Jacobsen, Nicholas Carlini, Nicolas Papernot","cross_cats":["cs.CR","cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-11T18:50:23Z","title":"Fundamental Tradeoffs between Invariance and Sensitivity to Adversarial Perturbations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.04599","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1b2d1920af5da6717ed58909c04965c0aa378b9d81fd847202c6933c07c65fd9","target":"record","created_at":"2026-07-05T01:24:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4159f835f8d2f0f39b1ac40ea7c80d805902133e8da3a10d25a5e4299ecf3801","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-11T18:50:23Z","title_canon_sha256":"42940b7eb7cd61a2e1c028d63d14b4f93c95774c64fc48e9482cc34aff02dcf0"},"schema_version":"1.0","source":{"id":"2002.04599","kind":"arxiv","version":2}},"canonical_sha256":"837a21ffc239e68ad8e485eb63fbb44ebdd091763f8e7ca1f9073697a58b24dd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"837a21ffc239e68ad8e485eb63fbb44ebdd091763f8e7ca1f9073697a58b24dd","first_computed_at":"2026-07-05T01:24:31.399118Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:24:31.399118Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kyWdhXjfHpU0gt6BqpVoK7Bz82nL36K/q8lkmM9axmVOeLb7/RhTNMf56uYEz1ioOdM39zyIKDImbTaE5dexDg==","signature_status":"signed_v1","signed_at":"2026-07-05T01:24:31.399589Z","signed_message":"canonical_sha256_bytes"},"source_id":"2002.04599","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1b2d1920af5da6717ed58909c04965c0aa378b9d81fd847202c6933c07c65fd9","sha256:8af383b76cf9f8042829c08a54138edd4f87fbed5e66408998c7eab7deeec43e"],"state_sha256":"82047f20e785b07a454d2c91b65eca404e7faa8c2991d783f7f29ff97b692643"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BJowSUukrKhrxFnG1i7sJMZlPjJ8u9VTYJhlNd5jQC0ZANKExMCwCYcB8qm/uuQLLDO3bcEGy0G5xHlL8PF2CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-09T06:49:56.394078Z","bundle_sha256":"224cbe4e6e2506d45407835728adf6c79654fd69474335acfbc6ee5149d7df32"}}