{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:SARNY3OKUIL7UOIZELKQAMHN4O","short_pith_number":"pith:SARNY3OK","canonical_record":{"source":{"id":"1809.04098","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-09-11T18:23:09Z","cross_cats_sorted":[],"title_canon_sha256":"e2a573f90cf3e21deed29d48b5639e1cb907e497a5fd09703769d030ca4b02e3","abstract_canon_sha256":"fdf3547d7fdf0c8175efb36acc24ded83f680f37d88f696b779b089603c20028"},"schema_version":"1.0"},"canonical_sha256":"9022dc6dcaa217fa391922d50030ede3ae5ec2284115ee6611bfda2ec5414710","source":{"kind":"arxiv","id":"1809.04098","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1809.04098","created_at":"2026-05-17T23:48:17Z"},{"alias_kind":"arxiv_version","alias_value":"1809.04098v2","created_at":"2026-05-17T23:48:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1809.04098","created_at":"2026-05-17T23:48:17Z"},{"alias_kind":"pith_short_12","alias_value":"SARNY3OKUIL7","created_at":"2026-05-18T12:32:50Z"},{"alias_kind":"pith_short_16","alias_value":"SARNY3OKUIL7UOIZ","created_at":"2026-05-18T12:32:50Z"},{"alias_kind":"pith_short_8","alias_value":"SARNY3OK","created_at":"2026-05-18T12:32:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:SARNY3OKUIL7UOIZELKQAMHN4O","target":"record","payload":{"canonical_record":{"source":{"id":"1809.04098","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-09-11T18:23:09Z","cross_cats_sorted":[],"title_canon_sha256":"e2a573f90cf3e21deed29d48b5639e1cb907e497a5fd09703769d030ca4b02e3","abstract_canon_sha256":"fdf3547d7fdf0c8175efb36acc24ded83f680f37d88f696b779b089603c20028"},"schema_version":"1.0"},"canonical_sha256":"9022dc6dcaa217fa391922d50030ede3ae5ec2284115ee6611bfda2ec5414710","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:48:17.138288Z","signature_b64":"NeczzbK9aeBpZEz4AlHs+WTvIF0SLXjUaEqRjvWmY73gy9MLElFlAfBRL+WlFMTfy8CMj8Iwi8PDuxFevZYwBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9022dc6dcaa217fa391922d50030ede3ae5ec2284115ee6611bfda2ec5414710","last_reissued_at":"2026-05-17T23:48:17.137698Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:48:17.137698Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1809.04098","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:48:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"H2TteZ2pHTNC1P1rKP0b4a5elOVQhE3CdZCcp/DIWANFGXthgYBvRx1xdiqoxBkgXS50KH4YKzD0RwuGZ1bSAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T07:30:41.661323Z"},"content_sha256":"42fdc23eda272198dd7056553d6530e4ddaa628fb8880d3544b47cd8740c4ab5","schema_version":"1.0","event_id":"sha256:42fdc23eda272198dd7056553d6530e4ddaa628fb8880d3544b47cd8740c4ab5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:SARNY3OKUIL7UOIZELKQAMHN4O","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Structural Sensitivity of Deep Convolutional Networks to the Directions of Fourier Basis Functions","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Issei Sato, Yusuke Tsuzuku","submitted_at":"2018-09-11T18:23:09Z","abstract_excerpt":"Data-agnostic quasi-imperceptible perturbations on inputs are known to degrade recognition accuracy of deep convolutional networks severely. This phenomenon is considered to be a potential security issue. Moreover, some results on statistical generalization guarantees indicate that the phenomenon can be a key to improve the networks' generalization. However, the characteristics of the shared directions of such harmful perturbations remain unknown. Our primal finding is that convolutional networks are sensitive to the directions of Fourier basis functions. We derived the property by specializin"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1809.04098","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:48:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FJkJaHWJ7I3sHnpwgO0gfMIKgOsE2/iisJZ2gvf6twOgRVCNeag2KflM9fL5EqwfrtYg61QNvl82uGE2hqJlDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T07:30:41.661769Z"},"content_sha256":"5c429ba447b3244c2b31edf4ff83991da20fe3671213d4f7c84abe41128b47ec","schema_version":"1.0","event_id":"sha256:5c429ba447b3244c2b31edf4ff83991da20fe3671213d4f7c84abe41128b47ec"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SARNY3OKUIL7UOIZELKQAMHN4O/bundle.json","state_url":"https://pith.science/pith/SARNY3OKUIL7UOIZELKQAMHN4O/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SARNY3OKUIL7UOIZELKQAMHN4O/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T07:30:41Z","links":{"resolver":"https://pith.science/pith/SARNY3OKUIL7UOIZELKQAMHN4O","bundle":"https://pith.science/pith/SARNY3OKUIL7UOIZELKQAMHN4O/bundle.json","state":"https://pith.science/pith/SARNY3OKUIL7UOIZELKQAMHN4O/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SARNY3OKUIL7UOIZELKQAMHN4O/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:SARNY3OKUIL7UOIZELKQAMHN4O","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fdf3547d7fdf0c8175efb36acc24ded83f680f37d88f696b779b089603c20028","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-09-11T18:23:09Z","title_canon_sha256":"e2a573f90cf3e21deed29d48b5639e1cb907e497a5fd09703769d030ca4b02e3"},"schema_version":"1.0","source":{"id":"1809.04098","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1809.04098","created_at":"2026-05-17T23:48:17Z"},{"alias_kind":"arxiv_version","alias_value":"1809.04098v2","created_at":"2026-05-17T23:48:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1809.04098","created_at":"2026-05-17T23:48:17Z"},{"alias_kind":"pith_short_12","alias_value":"SARNY3OKUIL7","created_at":"2026-05-18T12:32:50Z"},{"alias_kind":"pith_short_16","alias_value":"SARNY3OKUIL7UOIZ","created_at":"2026-05-18T12:32:50Z"},{"alias_kind":"pith_short_8","alias_value":"SARNY3OK","created_at":"2026-05-18T12:32:50Z"}],"graph_snapshots":[{"event_id":"sha256:5c429ba447b3244c2b31edf4ff83991da20fe3671213d4f7c84abe41128b47ec","target":"graph","created_at":"2026-05-17T23:48:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Data-agnostic quasi-imperceptible perturbations on inputs are known to degrade recognition accuracy of deep convolutional networks severely. This phenomenon is considered to be a potential security issue. Moreover, some results on statistical generalization guarantees indicate that the phenomenon can be a key to improve the networks' generalization. However, the characteristics of the shared directions of such harmful perturbations remain unknown. Our primal finding is that convolutional networks are sensitive to the directions of Fourier basis functions. We derived the property by specializin","authors_text":"Issei Sato, Yusuke Tsuzuku","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-09-11T18:23:09Z","title":"On the Structural Sensitivity of Deep Convolutional Networks to the Directions of Fourier Basis Functions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1809.04098","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:42fdc23eda272198dd7056553d6530e4ddaa628fb8880d3544b47cd8740c4ab5","target":"record","created_at":"2026-05-17T23:48:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fdf3547d7fdf0c8175efb36acc24ded83f680f37d88f696b779b089603c20028","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-09-11T18:23:09Z","title_canon_sha256":"e2a573f90cf3e21deed29d48b5639e1cb907e497a5fd09703769d030ca4b02e3"},"schema_version":"1.0","source":{"id":"1809.04098","kind":"arxiv","version":2}},"canonical_sha256":"9022dc6dcaa217fa391922d50030ede3ae5ec2284115ee6611bfda2ec5414710","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9022dc6dcaa217fa391922d50030ede3ae5ec2284115ee6611bfda2ec5414710","first_computed_at":"2026-05-17T23:48:17.137698Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:48:17.137698Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NeczzbK9aeBpZEz4AlHs+WTvIF0SLXjUaEqRjvWmY73gy9MLElFlAfBRL+WlFMTfy8CMj8Iwi8PDuxFevZYwBA==","signature_status":"signed_v1","signed_at":"2026-05-17T23:48:17.138288Z","signed_message":"canonical_sha256_bytes"},"source_id":"1809.04098","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:42fdc23eda272198dd7056553d6530e4ddaa628fb8880d3544b47cd8740c4ab5","sha256:5c429ba447b3244c2b31edf4ff83991da20fe3671213d4f7c84abe41128b47ec"],"state_sha256":"419d7ea24b46e7d41e1eabc3a5aa7a1158cde2ac3197403b5c19a987b3d2b37f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"d9CVIxynUYC4A7NXXM6WPlqoKNckomAjOrX6/CciUyjEEWxQJMfKiquMReX5HI4+lANKmMaPcvaKpkbEvTRqAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T07:30:41.665151Z","bundle_sha256":"918212aca11c4b9c6a62e2d59100e630bba772d2f530d8e5c02c85cae5666b45"}}