{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2020:SZIGDRMP6XUTNCCUKGXRK3XOQZ","short_pith_number":"pith:SZIGDRMP","schema_version":"1.0","canonical_sha256":"965061c58ff5e936885451af156eee865c271a8dea5f40a59a91b12a749c576f","source":{"kind":"arxiv","id":"2012.07828","version":3},"attestation_state":"computed","paper":{"title":"Robustness Threats of Differential Privacy","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Aleksandr Petiushko, Ivan Oseledets, Nurislam Tursynbek","submitted_at":"2020-12-14T18:59:24Z","abstract_excerpt":"Differential privacy (DP) is a gold-standard concept of measuring and guaranteeing privacy in data analysis. It is well-known that the cost of adding DP to deep learning model is its accuracy. However, it remains unclear how it affects robustness of the model. Standard neural networks are not robust to different input perturbations: either adversarial attacks or common corruptions. In this paper, we empirically observe an interesting trade-off between privacy and robustness of neural networks. We experimentally demonstrate that networks, trained with DP, in some settings might be even more vul"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2012.07828","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-12-14T18:59:24Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"1246cba6e8f6ea4b6f9e40295cb03e31eb64e9e3d6ba4d35ef933d25ce1e648c","abstract_canon_sha256":"2310037480583f5d88d574bcda6ff146afc68f2e4a762fafabb7e2b0efab8148"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:08:43.416041Z","signature_b64":"bm7YpMXZZ0Qov8snOeblC911g0+63myB6bgTeQ79p6Cl49NZ1DlyouZtS1haIK1dW9DbtLp20VH/jNfE3cGsDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"965061c58ff5e936885451af156eee865c271a8dea5f40a59a91b12a749c576f","last_reissued_at":"2026-07-05T03:08:43.415649Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:08:43.415649Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Robustness Threats of Differential Privacy","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Aleksandr Petiushko, Ivan Oseledets, Nurislam Tursynbek","submitted_at":"2020-12-14T18:59:24Z","abstract_excerpt":"Differential privacy (DP) is a gold-standard concept of measuring and guaranteeing privacy in data analysis. It is well-known that the cost of adding DP to deep learning model is its accuracy. However, it remains unclear how it affects robustness of the model. Standard neural networks are not robust to different input perturbations: either adversarial attacks or common corruptions. In this paper, we empirically observe an interesting trade-off between privacy and robustness of neural networks. We experimentally demonstrate that networks, trained with DP, in some settings might be even more vul"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.07828","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2012.07828/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2012.07828","created_at":"2026-07-05T03:08:43.415705+00:00"},{"alias_kind":"arxiv_version","alias_value":"2012.07828v3","created_at":"2026-07-05T03:08:43.415705+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.07828","created_at":"2026-07-05T03:08:43.415705+00:00"},{"alias_kind":"pith_short_12","alias_value":"SZIGDRMP6XUT","created_at":"2026-07-05T03:08:43.415705+00:00"},{"alias_kind":"pith_short_16","alias_value":"SZIGDRMP6XUTNCCU","created_at":"2026-07-05T03:08:43.415705+00:00"},{"alias_kind":"pith_short_8","alias_value":"SZIGDRMP","created_at":"2026-07-05T03:08:43.415705+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":3,"internal_anchor_count":0,"sample":[{"citing_arxiv_id":"2605.06505","citing_title":"PACZero: PAC-Private Fine-Tuning of Language Models via Sign Quantization","ref_index":42,"is_internal_anchor":false},{"citing_arxiv_id":"2601.10237","citing_title":"Fundamental Limitations of Favorable Privacy-Utility Guarantees for DP-SGD","ref_index":61,"is_internal_anchor":false},{"citing_arxiv_id":"2605.06505","citing_title":"PACZero: PAC-Private Fine-Tuning of Language Models via Sign Quantization","ref_index":43,"is_internal_anchor":false}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/SZIGDRMP6XUTNCCUKGXRK3XOQZ","json":"https://pith.science/pith/SZIGDRMP6XUTNCCUKGXRK3XOQZ.json","graph_json":"https://pith.science/api/pith-number/SZIGDRMP6XUTNCCUKGXRK3XOQZ/graph.json","events_json":"https://pith.science/api/pith-number/SZIGDRMP6XUTNCCUKGXRK3XOQZ/events.json","paper":"https://pith.science/paper/SZIGDRMP"},"agent_actions":{"view_html":"https://pith.science/pith/SZIGDRMP6XUTNCCUKGXRK3XOQZ","download_json":"https://pith.science/pith/SZIGDRMP6XUTNCCUKGXRK3XOQZ.json","view_paper":"https://pith.science/paper/SZIGDRMP","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2012.07828&json=true","fetch_graph":"https://pith.science/api/pith-number/SZIGDRMP6XUTNCCUKGXRK3XOQZ/graph.json","fetch_events":"https://pith.science/api/pith-number/SZIGDRMP6XUTNCCUKGXRK3XOQZ/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/SZIGDRMP6XUTNCCUKGXRK3XOQZ/action/timestamp_anchor","attest_storage":"https://pith.science/pith/SZIGDRMP6XUTNCCUKGXRK3XOQZ/action/storage_attestation","attest_author":"https://pith.science/pith/SZIGDRMP6XUTNCCUKGXRK3XOQZ/action/author_attestation","sign_citation":"https://pith.science/pith/SZIGDRMP6XUTNCCUKGXRK3XOQZ/action/citation_signature","submit_replication":"https://pith.science/pith/SZIGDRMP6XUTNCCUKGXRK3XOQZ/action/replication_record"}},"created_at":"2026-07-05T03:08:43.415705+00:00","updated_at":"2026-07-05T03:08:43.415705+00:00"}