{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:SGLVUV6J2E57EPWQSL4ADP2CBC","short_pith_number":"pith:SGLVUV6J","canonical_record":{"source":{"id":"1909.00900","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-09-03T00:39:40Z","cross_cats_sorted":["cs.CR","cs.CV","cs.IR","stat.ML"],"title_canon_sha256":"3bac1449c657bdd72bfd9fa1cad83edd1d518a175c6c259685beb4dc04264a10","abstract_canon_sha256":"628524567097bb08897a0a87c90ecf0d9ad943d9b5e150d1d3de45b9344e84b8"},"schema_version":"1.0"},"canonical_sha256":"91975a57c9d13bf23ed092f801bf420899f149fea7f1ba800f589b0dca02b006","source":{"kind":"arxiv","id":"1909.00900","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.00900","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"arxiv_version","alias_value":"1909.00900v2","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.00900","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"pith_short_12","alias_value":"SGLVUV6J2E57","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"pith_short_16","alias_value":"SGLVUV6J2E57EPWQ","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"pith_short_8","alias_value":"SGLVUV6J","created_at":"2026-07-05T00:15:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:SGLVUV6J2E57EPWQSL4ADP2CBC","target":"record","payload":{"canonical_record":{"source":{"id":"1909.00900","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-09-03T00:39:40Z","cross_cats_sorted":["cs.CR","cs.CV","cs.IR","stat.ML"],"title_canon_sha256":"3bac1449c657bdd72bfd9fa1cad83edd1d518a175c6c259685beb4dc04264a10","abstract_canon_sha256":"628524567097bb08897a0a87c90ecf0d9ad943d9b5e150d1d3de45b9344e84b8"},"schema_version":"1.0"},"canonical_sha256":"91975a57c9d13bf23ed092f801bf420899f149fea7f1ba800f589b0dca02b006","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:15:08.972632Z","signature_b64":"GJYPDG2vtWIta9GqZk7ZUhOHOW39ru07X52T8gwk0PJOkhOFyzNzcKmEPblR+ijexQASfF0Dry2j1+CYPF1yAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"91975a57c9d13bf23ed092f801bf420899f149fea7f1ba800f589b0dca02b006","last_reissued_at":"2026-07-05T00:15:08.972172Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:15:08.972172Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1909.00900","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:15:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mD/Vd9n9X4a41H483wzFElFCg68fQ1npylB2DG40fY3pWyy4niEjPN/ataFZNGK3m36K5KDZPs+ozYE4hnL9DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T07:20:54.776294Z"},"content_sha256":"c3f6eb9ce8998bca7e454c0dd606c79b2f41b4eb51e0d27dd3a7edde70ba378b","schema_version":"1.0","event_id":"sha256:c3f6eb9ce8998bca7e454c0dd606c79b2f41b4eb51e0d27dd3a7edde70ba378b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:SGLVUV6J2E57EPWQSL4ADP2CBC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Metric Learning for Adversarial Robustness","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV","cs.IR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Baishakhi Ray, Carl Vondrick, Chengzhi Mao, Junfeng Yang, Ziyuan Zhong","submitted_at":"2019-09-03T00:39:40Z","abstract_excerpt":"Deep networks are well-known to be fragile to adversarial attacks. We conduct an empirical analysis of deep representations under the state-of-the-art attack method called PGD, and find that the attack causes the internal representation to shift closer to the \"false\" class. Motivated by this observation, we propose to regularize the representation space under attack with metric learning to produce more robust classifiers. By carefully sampling examples for metric learning, our learned representation not only increases robustness, but also detects previously unseen adversarial samples. Quantita"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.00900","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1909.00900/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:15:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ECqV9kbUNufpCxVZDLiA8Q1VTOpIJGkxth0SlgPYuRkm7EETh8CRXr8WMInHuxGi84kOVjwrpQb6HsyAq6lABQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T07:20:54.777030Z"},"content_sha256":"82cbc47123e1b92f2df57115c009dc422f3e8c34d85bb8950deceeda357feeff","schema_version":"1.0","event_id":"sha256:82cbc47123e1b92f2df57115c009dc422f3e8c34d85bb8950deceeda357feeff"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SGLVUV6J2E57EPWQSL4ADP2CBC/bundle.json","state_url":"https://pith.science/pith/SGLVUV6J2E57EPWQSL4ADP2CBC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SGLVUV6J2E57EPWQSL4ADP2CBC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T07:20:54Z","links":{"resolver":"https://pith.science/pith/SGLVUV6J2E57EPWQSL4ADP2CBC","bundle":"https://pith.science/pith/SGLVUV6J2E57EPWQSL4ADP2CBC/bundle.json","state":"https://pith.science/pith/SGLVUV6J2E57EPWQSL4ADP2CBC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SGLVUV6J2E57EPWQSL4ADP2CBC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:SGLVUV6J2E57EPWQSL4ADP2CBC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"628524567097bb08897a0a87c90ecf0d9ad943d9b5e150d1d3de45b9344e84b8","cross_cats_sorted":["cs.CR","cs.CV","cs.IR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-09-03T00:39:40Z","title_canon_sha256":"3bac1449c657bdd72bfd9fa1cad83edd1d518a175c6c259685beb4dc04264a10"},"schema_version":"1.0","source":{"id":"1909.00900","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.00900","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"arxiv_version","alias_value":"1909.00900v2","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.00900","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"pith_short_12","alias_value":"SGLVUV6J2E57","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"pith_short_16","alias_value":"SGLVUV6J2E57EPWQ","created_at":"2026-07-05T00:15:08Z"},{"alias_kind":"pith_short_8","alias_value":"SGLVUV6J","created_at":"2026-07-05T00:15:08Z"}],"graph_snapshots":[{"event_id":"sha256:82cbc47123e1b92f2df57115c009dc422f3e8c34d85bb8950deceeda357feeff","target":"graph","created_at":"2026-07-05T00:15:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1909.00900/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep networks are well-known to be fragile to adversarial attacks. We conduct an empirical analysis of deep representations under the state-of-the-art attack method called PGD, and find that the attack causes the internal representation to shift closer to the \"false\" class. Motivated by this observation, we propose to regularize the representation space under attack with metric learning to produce more robust classifiers. By carefully sampling examples for metric learning, our learned representation not only increases robustness, but also detects previously unseen adversarial samples. Quantita","authors_text":"Baishakhi Ray, Carl Vondrick, Chengzhi Mao, Junfeng Yang, Ziyuan Zhong","cross_cats":["cs.CR","cs.CV","cs.IR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-09-03T00:39:40Z","title":"Metric Learning for Adversarial Robustness"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.00900","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c3f6eb9ce8998bca7e454c0dd606c79b2f41b4eb51e0d27dd3a7edde70ba378b","target":"record","created_at":"2026-07-05T00:15:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"628524567097bb08897a0a87c90ecf0d9ad943d9b5e150d1d3de45b9344e84b8","cross_cats_sorted":["cs.CR","cs.CV","cs.IR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-09-03T00:39:40Z","title_canon_sha256":"3bac1449c657bdd72bfd9fa1cad83edd1d518a175c6c259685beb4dc04264a10"},"schema_version":"1.0","source":{"id":"1909.00900","kind":"arxiv","version":2}},"canonical_sha256":"91975a57c9d13bf23ed092f801bf420899f149fea7f1ba800f589b0dca02b006","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"91975a57c9d13bf23ed092f801bf420899f149fea7f1ba800f589b0dca02b006","first_computed_at":"2026-07-05T00:15:08.972172Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:15:08.972172Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GJYPDG2vtWIta9GqZk7ZUhOHOW39ru07X52T8gwk0PJOkhOFyzNzcKmEPblR+ijexQASfF0Dry2j1+CYPF1yAA==","signature_status":"signed_v1","signed_at":"2026-07-05T00:15:08.972632Z","signed_message":"canonical_sha256_bytes"},"source_id":"1909.00900","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c3f6eb9ce8998bca7e454c0dd606c79b2f41b4eb51e0d27dd3a7edde70ba378b","sha256:82cbc47123e1b92f2df57115c009dc422f3e8c34d85bb8950deceeda357feeff"],"state_sha256":"92197fac90d4e391004df8e160efb69fffec2b5bd581a4e734108737b5690dde"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"He+GrWnarzinOojopyq1lfqP7q857u7sUDLsORO95rzEYfcwMzhPZv0UBxylWtPGi3w9eDEsvJkkfDwn8WDCBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T07:20:54.782552Z","bundle_sha256":"988a3b593a13a6e54a7f25152f3f5950a4e19d1d6b05b28756e420b2ff7e20f4"}}