{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:TH5KDQT3DBLRUJF2J7IYCA3MLB","short_pith_number":"pith:TH5KDQT3","canonical_record":{"source":{"id":"2404.08154","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-04-11T22:43:44Z","cross_cats_sorted":[],"title_canon_sha256":"143905697e5589aab060085505d530d39f6952636dfc49ea2405e9fd2ecec95e","abstract_canon_sha256":"34b7853c1ec5f62622a58681656d1972292bf972f5831d78095dca508d4a7ce0"},"schema_version":"1.0"},"canonical_sha256":"99faa1c27b18571a24ba4fd181036c587755848948638e1ea2455612f87bfe23","source":{"kind":"arxiv","id":"2404.08154","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.08154","created_at":"2026-07-05T09:06:59Z"},{"alias_kind":"arxiv_version","alias_value":"2404.08154v2","created_at":"2026-07-05T09:06:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.08154","created_at":"2026-07-05T09:06:59Z"},{"alias_kind":"pith_short_12","alias_value":"TH5KDQT3DBLR","created_at":"2026-07-05T09:06:59Z"},{"alias_kind":"pith_short_16","alias_value":"TH5KDQT3DBLRUJF2","created_at":"2026-07-05T09:06:59Z"},{"alias_kind":"pith_short_8","alias_value":"TH5KDQT3","created_at":"2026-07-05T09:06:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:TH5KDQT3DBLRUJF2J7IYCA3MLB","target":"record","payload":{"canonical_record":{"source":{"id":"2404.08154","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-04-11T22:43:44Z","cross_cats_sorted":[],"title_canon_sha256":"143905697e5589aab060085505d530d39f6952636dfc49ea2405e9fd2ecec95e","abstract_canon_sha256":"34b7853c1ec5f62622a58681656d1972292bf972f5831d78095dca508d4a7ce0"},"schema_version":"1.0"},"canonical_sha256":"99faa1c27b18571a24ba4fd181036c587755848948638e1ea2455612f87bfe23","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:06:59.026046Z","signature_b64":"aLju8zP0sn/mnjQXi3MojvhJRhg41BBrbQYvJ4a08+2oPo6o/YGlq0WyO8eKsOxYP4JmK9g4jIu/F3DAJvsWDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"99faa1c27b18571a24ba4fd181036c587755848948638e1ea2455612f87bfe23","last_reissued_at":"2026-07-05T09:06:59.025580Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:06:59.025580Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.08154","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:06:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"otzJoHHCRAEJbFAJ/V4LaTf3yDhoiles1C260MpwdgLca5t1aQo9hFaUlequhtgQyCz8lx2XMUUM4NuDS/HFCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T08:28:44.938573Z"},"content_sha256":"27471bbcbaea74b157a00e1915e6f61de6db40bfb05fdfd2fe406d9eadabc8cc","schema_version":"1.0","event_id":"sha256:27471bbcbaea74b157a00e1915e6f61de6db40bfb05fdfd2fe406d9eadabc8cc"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:TH5KDQT3DBLRUJF2J7IYCA3MLB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Eliminating Catastrophic Overfitting Via Abnormal Adversarial Examples Regularization","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Chaojian Yu, Runqi Lin, Tongliang Liu","submitted_at":"2024-04-11T22:43:44Z","abstract_excerpt":"Single-step adversarial training (SSAT) has demonstrated the potential to achieve both efficiency and robustness. However, SSAT suffers from catastrophic overfitting (CO), a phenomenon that leads to a severely distorted classifier, making it vulnerable to multi-step adversarial attacks. In this work, we observe that some adversarial examples generated on the SSAT-trained network exhibit anomalous behaviour, that is, although these training samples are generated by the inner maximization process, their associated loss decreases instead, which we named abnormal adversarial examples (AAEs). Upon "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.08154","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.08154/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:06:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SG3s/MkU0FSySwIuepidz2d6nnNKK5HEaES9cUjWZNUo0129xErRgMPeQbLrQjivQTG8xK09qHsVynhI50RFDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T08:28:44.938947Z"},"content_sha256":"4e0daf759d69ac938c281c8f5e2eaf0cb55abe667e6cf93fec8df4a77b935e2a","schema_version":"1.0","event_id":"sha256:4e0daf759d69ac938c281c8f5e2eaf0cb55abe667e6cf93fec8df4a77b935e2a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TH5KDQT3DBLRUJF2J7IYCA3MLB/bundle.json","state_url":"https://pith.science/pith/TH5KDQT3DBLRUJF2J7IYCA3MLB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TH5KDQT3DBLRUJF2J7IYCA3MLB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T08:28:44Z","links":{"resolver":"https://pith.science/pith/TH5KDQT3DBLRUJF2J7IYCA3MLB","bundle":"https://pith.science/pith/TH5KDQT3DBLRUJF2J7IYCA3MLB/bundle.json","state":"https://pith.science/pith/TH5KDQT3DBLRUJF2J7IYCA3MLB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TH5KDQT3DBLRUJF2J7IYCA3MLB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:TH5KDQT3DBLRUJF2J7IYCA3MLB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"34b7853c1ec5f62622a58681656d1972292bf972f5831d78095dca508d4a7ce0","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-04-11T22:43:44Z","title_canon_sha256":"143905697e5589aab060085505d530d39f6952636dfc49ea2405e9fd2ecec95e"},"schema_version":"1.0","source":{"id":"2404.08154","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.08154","created_at":"2026-07-05T09:06:59Z"},{"alias_kind":"arxiv_version","alias_value":"2404.08154v2","created_at":"2026-07-05T09:06:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.08154","created_at":"2026-07-05T09:06:59Z"},{"alias_kind":"pith_short_12","alias_value":"TH5KDQT3DBLR","created_at":"2026-07-05T09:06:59Z"},{"alias_kind":"pith_short_16","alias_value":"TH5KDQT3DBLRUJF2","created_at":"2026-07-05T09:06:59Z"},{"alias_kind":"pith_short_8","alias_value":"TH5KDQT3","created_at":"2026-07-05T09:06:59Z"}],"graph_snapshots":[{"event_id":"sha256:4e0daf759d69ac938c281c8f5e2eaf0cb55abe667e6cf93fec8df4a77b935e2a","target":"graph","created_at":"2026-07-05T09:06:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.08154/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Single-step adversarial training (SSAT) has demonstrated the potential to achieve both efficiency and robustness. However, SSAT suffers from catastrophic overfitting (CO), a phenomenon that leads to a severely distorted classifier, making it vulnerable to multi-step adversarial attacks. In this work, we observe that some adversarial examples generated on the SSAT-trained network exhibit anomalous behaviour, that is, although these training samples are generated by the inner maximization process, their associated loss decreases instead, which we named abnormal adversarial examples (AAEs). Upon ","authors_text":"Chaojian Yu, Runqi Lin, Tongliang Liu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-04-11T22:43:44Z","title":"Eliminating Catastrophic Overfitting Via Abnormal Adversarial Examples Regularization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.08154","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:27471bbcbaea74b157a00e1915e6f61de6db40bfb05fdfd2fe406d9eadabc8cc","target":"record","created_at":"2026-07-05T09:06:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"34b7853c1ec5f62622a58681656d1972292bf972f5831d78095dca508d4a7ce0","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-04-11T22:43:44Z","title_canon_sha256":"143905697e5589aab060085505d530d39f6952636dfc49ea2405e9fd2ecec95e"},"schema_version":"1.0","source":{"id":"2404.08154","kind":"arxiv","version":2}},"canonical_sha256":"99faa1c27b18571a24ba4fd181036c587755848948638e1ea2455612f87bfe23","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"99faa1c27b18571a24ba4fd181036c587755848948638e1ea2455612f87bfe23","first_computed_at":"2026-07-05T09:06:59.025580Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:06:59.025580Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"aLju8zP0sn/mnjQXi3MojvhJRhg41BBrbQYvJ4a08+2oPo6o/YGlq0WyO8eKsOxYP4JmK9g4jIu/F3DAJvsWDg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:06:59.026046Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.08154","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:27471bbcbaea74b157a00e1915e6f61de6db40bfb05fdfd2fe406d9eadabc8cc","sha256:4e0daf759d69ac938c281c8f5e2eaf0cb55abe667e6cf93fec8df4a77b935e2a"],"state_sha256":"aeac00f3487dd361254df9752502c16719a98be2c3d59b8907f848a805d16d91"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tJUIGtO2yegCSh5AFy6hya0UsEKswtw7FxWPRMxm3EW0wcz4tdhlMLhxeWNcasPxP1GYrfHk85zA34o1M3M5Bg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T08:28:44.940963Z","bundle_sha256":"9b714acd542649ae78cba573beca539b42c640998bf8f6adad533108784ec068"}}