{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:QVK7BPOWQNGYUBIMBDJY3W6YOY","short_pith_number":"pith:QVK7BPOW","canonical_record":{"source":{"id":"2405.16226","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-05-25T13:34:16Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"580daf59d801e97dbd7a06b5f97adf4b14ba51775f64fc364e535615f0643a61","abstract_canon_sha256":"f6fa0172202f14464be2bfa69b3c6ed2965ce45484c1a2b15b3279a3fc8f6dda"},"schema_version":"1.0"},"canonical_sha256":"8555f0bdd6834d8a050c08d38ddbd8763d5ac86eb751db62e441b86c0064ab7a","source":{"kind":"arxiv","id":"2405.16226","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.16226","created_at":"2026-07-05T10:24:22Z"},{"alias_kind":"arxiv_version","alias_value":"2405.16226v4","created_at":"2026-07-05T10:24:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.16226","created_at":"2026-07-05T10:24:22Z"},{"alias_kind":"pith_short_12","alias_value":"QVK7BPOWQNGY","created_at":"2026-07-05T10:24:22Z"},{"alias_kind":"pith_short_16","alias_value":"QVK7BPOWQNGYUBIM","created_at":"2026-07-05T10:24:22Z"},{"alias_kind":"pith_short_8","alias_value":"QVK7BPOW","created_at":"2026-07-05T10:24:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:QVK7BPOWQNGYUBIMBDJY3W6YOY","target":"record","payload":{"canonical_record":{"source":{"id":"2405.16226","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-05-25T13:34:16Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"580daf59d801e97dbd7a06b5f97adf4b14ba51775f64fc364e535615f0643a61","abstract_canon_sha256":"f6fa0172202f14464be2bfa69b3c6ed2965ce45484c1a2b15b3279a3fc8f6dda"},"schema_version":"1.0"},"canonical_sha256":"8555f0bdd6834d8a050c08d38ddbd8763d5ac86eb751db62e441b86c0064ab7a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:24:22.148297Z","signature_b64":"6ynTQMwQkJPwfHsuRuhmyqf/Hs5LboJrxIpSYzMUc+5LVfwAFdEYB1kPy2sqSri8eCjtDeRmF9OALHASImuVDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8555f0bdd6834d8a050c08d38ddbd8763d5ac86eb751db62e441b86c0064ab7a","last_reissued_at":"2026-07-05T10:24:22.147428Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:24:22.147428Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.16226","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:24:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"f6ptnIeAE9yvRQTTLgyKKXX1xw0ZFMyORGvu4+M4ieoxiAMB/ebbp659I4dp0NmX5wuv4NV5pxSOLh4nlmxNBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T16:31:19.705699Z"},"content_sha256":"1b445a2949f8dc150251fe22d6ac4a342ceb8da255124d780ad87d1ff4fdb4af","schema_version":"1.0","event_id":"sha256:1b445a2949f8dc150251fe22d6ac4a342ceb8da255124d780ad87d1ff4fdb4af"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:QVK7BPOWQNGYUBIMBDJY3W6YOY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Detecting Adversarial Data using Perturbation Forgery","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Chen Li, Hefei Ling, Ning Yu, Qian Wang, Ruoxi Jia, Shijuan Huang, Yuchen Luo","submitted_at":"2024-05-25T13:34:16Z","abstract_excerpt":"As a defense strategy against adversarial attacks, adversarial detection aims to identify and filter out adversarial data from the data flow based on discrepancies in distribution and noise patterns between natural and adversarial data. Although previous detection methods achieve high performance in detecting gradient-based adversarial attacks, new attacks based on generative models with imbalanced and anisotropic noise patterns evade detection. Even worse, the significant inference time overhead and limited performance against unseen attacks make existing techniques impractical for real-world"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.16226","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.16226/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:24:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"S/iaTF+H1LvnmHjjqi3F7rPTjLCArQ1gykY33tjJY54W1PpA5QZHKd0NW5ii+3ObcFNDhKSVLTqoWyIhWUi0DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T16:31:19.706311Z"},"content_sha256":"0cbabe9e004700bb2213c9c272daa00480d5e8a1108402f28857284b0ef082c0","schema_version":"1.0","event_id":"sha256:0cbabe9e004700bb2213c9c272daa00480d5e8a1108402f28857284b0ef082c0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QVK7BPOWQNGYUBIMBDJY3W6YOY/bundle.json","state_url":"https://pith.science/pith/QVK7BPOWQNGYUBIMBDJY3W6YOY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QVK7BPOWQNGYUBIMBDJY3W6YOY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T16:31:19Z","links":{"resolver":"https://pith.science/pith/QVK7BPOWQNGYUBIMBDJY3W6YOY","bundle":"https://pith.science/pith/QVK7BPOWQNGYUBIMBDJY3W6YOY/bundle.json","state":"https://pith.science/pith/QVK7BPOWQNGYUBIMBDJY3W6YOY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QVK7BPOWQNGYUBIMBDJY3W6YOY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:QVK7BPOWQNGYUBIMBDJY3W6YOY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f6fa0172202f14464be2bfa69b3c6ed2965ce45484c1a2b15b3279a3fc8f6dda","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-05-25T13:34:16Z","title_canon_sha256":"580daf59d801e97dbd7a06b5f97adf4b14ba51775f64fc364e535615f0643a61"},"schema_version":"1.0","source":{"id":"2405.16226","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.16226","created_at":"2026-07-05T10:24:22Z"},{"alias_kind":"arxiv_version","alias_value":"2405.16226v4","created_at":"2026-07-05T10:24:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.16226","created_at":"2026-07-05T10:24:22Z"},{"alias_kind":"pith_short_12","alias_value":"QVK7BPOWQNGY","created_at":"2026-07-05T10:24:22Z"},{"alias_kind":"pith_short_16","alias_value":"QVK7BPOWQNGYUBIM","created_at":"2026-07-05T10:24:22Z"},{"alias_kind":"pith_short_8","alias_value":"QVK7BPOW","created_at":"2026-07-05T10:24:22Z"}],"graph_snapshots":[{"event_id":"sha256:0cbabe9e004700bb2213c9c272daa00480d5e8a1108402f28857284b0ef082c0","target":"graph","created_at":"2026-07-05T10:24:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.16226/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As a defense strategy against adversarial attacks, adversarial detection aims to identify and filter out adversarial data from the data flow based on discrepancies in distribution and noise patterns between natural and adversarial data. Although previous detection methods achieve high performance in detecting gradient-based adversarial attacks, new attacks based on generative models with imbalanced and anisotropic noise patterns evade detection. Even worse, the significant inference time overhead and limited performance against unseen attacks make existing techniques impractical for real-world","authors_text":"Chen Li, Hefei Ling, Ning Yu, Qian Wang, Ruoxi Jia, Shijuan Huang, Yuchen Luo","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-05-25T13:34:16Z","title":"Detecting Adversarial Data using Perturbation Forgery"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.16226","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1b445a2949f8dc150251fe22d6ac4a342ceb8da255124d780ad87d1ff4fdb4af","target":"record","created_at":"2026-07-05T10:24:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f6fa0172202f14464be2bfa69b3c6ed2965ce45484c1a2b15b3279a3fc8f6dda","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-05-25T13:34:16Z","title_canon_sha256":"580daf59d801e97dbd7a06b5f97adf4b14ba51775f64fc364e535615f0643a61"},"schema_version":"1.0","source":{"id":"2405.16226","kind":"arxiv","version":4}},"canonical_sha256":"8555f0bdd6834d8a050c08d38ddbd8763d5ac86eb751db62e441b86c0064ab7a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8555f0bdd6834d8a050c08d38ddbd8763d5ac86eb751db62e441b86c0064ab7a","first_computed_at":"2026-07-05T10:24:22.147428Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:24:22.147428Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6ynTQMwQkJPwfHsuRuhmyqf/Hs5LboJrxIpSYzMUc+5LVfwAFdEYB1kPy2sqSri8eCjtDeRmF9OALHASImuVDA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:24:22.148297Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.16226","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1b445a2949f8dc150251fe22d6ac4a342ceb8da255124d780ad87d1ff4fdb4af","sha256:0cbabe9e004700bb2213c9c272daa00480d5e8a1108402f28857284b0ef082c0"],"state_sha256":"0ae92963d6eca8f87f4e1f7bcadce3f487520a4db0b666780e3dc4b30ad80c50"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mcgyC+ITTn9DLzJSpFGcHj7l8+O55Dl/ivyr+RyZHEvbEd/SlVsQni9EdfxLOWqlNQZ2xvYIIl+n9OY3QOk6Ag==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T16:31:19.709820Z","bundle_sha256":"8195229701b8733ac38af37a73296efa673d329dcd9766df181c0d75a5e6b4b8"}}