{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2020:SNSTB2VNA44OSSDPYL53AO44RT","short_pith_number":"pith:SNSTB2VN","schema_version":"1.0","canonical_sha256":"936530eaad0738e9486fc2fbb03b9c8cde46d2e78d145c39afe87e6c78990f8f","source":{"kind":"arxiv","id":"2012.01699","version":4},"attestation_state":"computed","paper":{"title":"Content-Adaptive Pixel Discretization to Improve Model Robustness","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Atul Prakash, Ryan Feng, Wu-chi Feng","submitted_at":"2020-12-03T04:40:51Z","abstract_excerpt":"Preprocessing defenses such as pixel discretization are appealing to remove adversarial attacks due to their simplicity. However, they have been shown to be ineffective except on simple datasets like MNIST. We hypothesize that existing discretization approaches failed because using a fixed codebook for the entire dataset limits their ability to balance image representation and codeword separability. We first formally prove that adaptive codebooks can provide stronger robustness guarantees than fixed codebooks as a preprocessing defense on some datasets. Based on that insight, we propose a cont"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2012.01699","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-12-03T04:40:51Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"90d716e6b07a4a745937e57f6aeb8353ea8f872e232173e5ec9850cf9587d614","abstract_canon_sha256":"f2d7a34cf1f7db212930d2d6d460c87f3be24af173bd803e3a7703bae5e34a5f"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:04:59.174210Z","signature_b64":"a1jpWz3Hck+DaVWfX8bNUGmGpkTerO8kmcOeyOiejwl6CP+0nCrn/VhUlAAzPx99ZNX3kd5wJLGPTs/4IUopAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"936530eaad0738e9486fc2fbb03b9c8cde46d2e78d145c39afe87e6c78990f8f","last_reissued_at":"2026-07-05T05:04:59.173842Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:04:59.173842Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Content-Adaptive Pixel Discretization to Improve Model Robustness","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Atul Prakash, Ryan Feng, Wu-chi Feng","submitted_at":"2020-12-03T04:40:51Z","abstract_excerpt":"Preprocessing defenses such as pixel discretization are appealing to remove adversarial attacks due to their simplicity. However, they have been shown to be ineffective except on simple datasets like MNIST. We hypothesize that existing discretization approaches failed because using a fixed codebook for the entire dataset limits their ability to balance image representation and codeword separability. We first formally prove that adaptive codebooks can provide stronger robustness guarantees than fixed codebooks as a preprocessing defense on some datasets. Based on that insight, we propose a cont"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.01699","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2012.01699/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2012.01699","created_at":"2026-07-05T05:04:59.173903+00:00"},{"alias_kind":"arxiv_version","alias_value":"2012.01699v4","created_at":"2026-07-05T05:04:59.173903+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.01699","created_at":"2026-07-05T05:04:59.173903+00:00"},{"alias_kind":"pith_short_12","alias_value":"SNSTB2VNA44O","created_at":"2026-07-05T05:04:59.173903+00:00"},{"alias_kind":"pith_short_16","alias_value":"SNSTB2VNA44OSSDP","created_at":"2026-07-05T05:04:59.173903+00:00"},{"alias_kind":"pith_short_8","alias_value":"SNSTB2VN","created_at":"2026-07-05T05:04:59.173903+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/SNSTB2VNA44OSSDPYL53AO44RT","json":"https://pith.science/pith/SNSTB2VNA44OSSDPYL53AO44RT.json","graph_json":"https://pith.science/api/pith-number/SNSTB2VNA44OSSDPYL53AO44RT/graph.json","events_json":"https://pith.science/api/pith-number/SNSTB2VNA44OSSDPYL53AO44RT/events.json","paper":"https://pith.science/paper/SNSTB2VN"},"agent_actions":{"view_html":"https://pith.science/pith/SNSTB2VNA44OSSDPYL53AO44RT","download_json":"https://pith.science/pith/SNSTB2VNA44OSSDPYL53AO44RT.json","view_paper":"https://pith.science/paper/SNSTB2VN","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2012.01699&json=true","fetch_graph":"https://pith.science/api/pith-number/SNSTB2VNA44OSSDPYL53AO44RT/graph.json","fetch_events":"https://pith.science/api/pith-number/SNSTB2VNA44OSSDPYL53AO44RT/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/SNSTB2VNA44OSSDPYL53AO44RT/action/timestamp_anchor","attest_storage":"https://pith.science/pith/SNSTB2VNA44OSSDPYL53AO44RT/action/storage_attestation","attest_author":"https://pith.science/pith/SNSTB2VNA44OSSDPYL53AO44RT/action/author_attestation","sign_citation":"https://pith.science/pith/SNSTB2VNA44OSSDPYL53AO44RT/action/citation_signature","submit_replication":"https://pith.science/pith/SNSTB2VNA44OSSDPYL53AO44RT/action/replication_record"}},"created_at":"2026-07-05T05:04:59.173903+00:00","updated_at":"2026-07-05T05:04:59.173903+00:00"}