{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:TL5EHSYTUDJW7M2MZNGKKYPVSO","short_pith_number":"pith:TL5EHSYT","canonical_record":{"source":{"id":"2109.05211","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-09-11T08:01:14Z","cross_cats_sorted":[],"title_canon_sha256":"13b0f71c09d6a32bd0e8b48a12eb4d7959f8d62ddba3765c8991a6c48fd8cc46","abstract_canon_sha256":"d8afa17a3f390fb9a7cfbaefddf8e3ed906fde90063005916e481572c34f8932"},"schema_version":"1.0"},"canonical_sha256":"9afa43cb13a0d36fb34ccb4ca561f593b7cdadf4ba6553e05fbb703ea22a0049","source":{"kind":"arxiv","id":"2109.05211","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.05211","created_at":"2026-07-05T03:48:19Z"},{"alias_kind":"arxiv_version","alias_value":"2109.05211v4","created_at":"2026-07-05T03:48:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.05211","created_at":"2026-07-05T03:48:19Z"},{"alias_kind":"pith_short_12","alias_value":"TL5EHSYTUDJW","created_at":"2026-07-05T03:48:19Z"},{"alias_kind":"pith_short_16","alias_value":"TL5EHSYTUDJW7M2M","created_at":"2026-07-05T03:48:19Z"},{"alias_kind":"pith_short_8","alias_value":"TL5EHSYT","created_at":"2026-07-05T03:48:19Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:TL5EHSYTUDJW7M2MZNGKKYPVSO","target":"record","payload":{"canonical_record":{"source":{"id":"2109.05211","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-09-11T08:01:14Z","cross_cats_sorted":[],"title_canon_sha256":"13b0f71c09d6a32bd0e8b48a12eb4d7959f8d62ddba3765c8991a6c48fd8cc46","abstract_canon_sha256":"d8afa17a3f390fb9a7cfbaefddf8e3ed906fde90063005916e481572c34f8932"},"schema_version":"1.0"},"canonical_sha256":"9afa43cb13a0d36fb34ccb4ca561f593b7cdadf4ba6553e05fbb703ea22a0049","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:48:19.106839Z","signature_b64":"SAZdP0vj2JxTffvC4YwEnrn15iZMPWVCO2nT2RdUMT3m+PmlNU3JMezkDAU2RTEu+1zJh3jMhuUg/mJxX/kiAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9afa43cb13a0d36fb34ccb4ca561f593b7cdadf4ba6553e05fbb703ea22a0049","last_reissued_at":"2026-07-05T03:48:19.106306Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:48:19.106306Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2109.05211","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:48:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GT3AVhurxugvp/MTV35o4HZaLdj29CmkhhVoYsEIrD3H2a1KwRmBfq0mC5AfV9+7tW3d2xBhO8B59WNRtCbiAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T23:20:11.178474Z"},"content_sha256":"70d1f3ebfed3f9bbdef5bf5ef76c32b2fa971233f5206e47b4ab6fed1990e0f8","schema_version":"1.0","event_id":"sha256:70d1f3ebfed3f9bbdef5bf5ef76c32b2fa971233f5206e47b4ab6fed1990e0f8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:TL5EHSYTUDJW7M2MZNGKKYPVSO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"RobustART: Benchmarking Robustness on Architecture Design and Training Techniques","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Aishan Liu, Alan Yuille, Dacheng Tao, Dawn Song, Fengwei Yu, Jiakai Wang, Philip H.S. Torr, Ruihao Gong, Shiyu Tang, Xianglong Liu, Xinyun Chen, Yan Wang","submitted_at":"2021-09-11T08:01:14Z","abstract_excerpt":"Deep neural networks (DNNs) are vulnerable to adversarial noises, which motivates the benchmark of model robustness. Existing benchmarks mainly focus on evaluating defenses, but there are no comprehensive studies of how architecture design and training techniques affect robustness. Comprehensively benchmarking their relationships is beneficial for better understanding and developing robust DNNs. Thus, we propose RobustART, the first comprehensive Robustness investigation benchmark on ImageNet regarding ARchitecture design (49 human-designed off-the-shelf architectures and 1200+ networks from n"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.05211","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2109.05211/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:48:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FmhZAqR4860ZdR4Bh8iHzBRnJ+OdItiph0yiRSBf10W/rkhIKcgi8Yf21LQAZT0fQAABUhhNyP8qeWK/yYYYDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T23:20:11.178960Z"},"content_sha256":"43dfbe28976c1e28f1b3b763db2b44cb18723bef84121b13b5a29e96b3c8c89f","schema_version":"1.0","event_id":"sha256:43dfbe28976c1e28f1b3b763db2b44cb18723bef84121b13b5a29e96b3c8c89f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TL5EHSYTUDJW7M2MZNGKKYPVSO/bundle.json","state_url":"https://pith.science/pith/TL5EHSYTUDJW7M2MZNGKKYPVSO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TL5EHSYTUDJW7M2MZNGKKYPVSO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T23:20:11Z","links":{"resolver":"https://pith.science/pith/TL5EHSYTUDJW7M2MZNGKKYPVSO","bundle":"https://pith.science/pith/TL5EHSYTUDJW7M2MZNGKKYPVSO/bundle.json","state":"https://pith.science/pith/TL5EHSYTUDJW7M2MZNGKKYPVSO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TL5EHSYTUDJW7M2MZNGKKYPVSO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:TL5EHSYTUDJW7M2MZNGKKYPVSO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d8afa17a3f390fb9a7cfbaefddf8e3ed906fde90063005916e481572c34f8932","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-09-11T08:01:14Z","title_canon_sha256":"13b0f71c09d6a32bd0e8b48a12eb4d7959f8d62ddba3765c8991a6c48fd8cc46"},"schema_version":"1.0","source":{"id":"2109.05211","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.05211","created_at":"2026-07-05T03:48:19Z"},{"alias_kind":"arxiv_version","alias_value":"2109.05211v4","created_at":"2026-07-05T03:48:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.05211","created_at":"2026-07-05T03:48:19Z"},{"alias_kind":"pith_short_12","alias_value":"TL5EHSYTUDJW","created_at":"2026-07-05T03:48:19Z"},{"alias_kind":"pith_short_16","alias_value":"TL5EHSYTUDJW7M2M","created_at":"2026-07-05T03:48:19Z"},{"alias_kind":"pith_short_8","alias_value":"TL5EHSYT","created_at":"2026-07-05T03:48:19Z"}],"graph_snapshots":[{"event_id":"sha256:43dfbe28976c1e28f1b3b763db2b44cb18723bef84121b13b5a29e96b3c8c89f","target":"graph","created_at":"2026-07-05T03:48:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2109.05211/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) are vulnerable to adversarial noises, which motivates the benchmark of model robustness. Existing benchmarks mainly focus on evaluating defenses, but there are no comprehensive studies of how architecture design and training techniques affect robustness. Comprehensively benchmarking their relationships is beneficial for better understanding and developing robust DNNs. Thus, we propose RobustART, the first comprehensive Robustness investigation benchmark on ImageNet regarding ARchitecture design (49 human-designed off-the-shelf architectures and 1200+ networks from n","authors_text":"Aishan Liu, Alan Yuille, Dacheng Tao, Dawn Song, Fengwei Yu, Jiakai Wang, Philip H.S. Torr, Ruihao Gong, Shiyu Tang, Xianglong Liu, Xinyun Chen, Yan Wang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-09-11T08:01:14Z","title":"RobustART: Benchmarking Robustness on Architecture Design and Training Techniques"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.05211","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:70d1f3ebfed3f9bbdef5bf5ef76c32b2fa971233f5206e47b4ab6fed1990e0f8","target":"record","created_at":"2026-07-05T03:48:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d8afa17a3f390fb9a7cfbaefddf8e3ed906fde90063005916e481572c34f8932","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-09-11T08:01:14Z","title_canon_sha256":"13b0f71c09d6a32bd0e8b48a12eb4d7959f8d62ddba3765c8991a6c48fd8cc46"},"schema_version":"1.0","source":{"id":"2109.05211","kind":"arxiv","version":4}},"canonical_sha256":"9afa43cb13a0d36fb34ccb4ca561f593b7cdadf4ba6553e05fbb703ea22a0049","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9afa43cb13a0d36fb34ccb4ca561f593b7cdadf4ba6553e05fbb703ea22a0049","first_computed_at":"2026-07-05T03:48:19.106306Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:48:19.106306Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SAZdP0vj2JxTffvC4YwEnrn15iZMPWVCO2nT2RdUMT3m+PmlNU3JMezkDAU2RTEu+1zJh3jMhuUg/mJxX/kiAg==","signature_status":"signed_v1","signed_at":"2026-07-05T03:48:19.106839Z","signed_message":"canonical_sha256_bytes"},"source_id":"2109.05211","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:70d1f3ebfed3f9bbdef5bf5ef76c32b2fa971233f5206e47b4ab6fed1990e0f8","sha256:43dfbe28976c1e28f1b3b763db2b44cb18723bef84121b13b5a29e96b3c8c89f"],"state_sha256":"f83636df53217eb9ab52b8ebbea425f47b929ff9affdde4bd75fa4131b6e4a60"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mwWoJNLS3D+VTz35MBvKP8opF/SHwtF61eVbd459ZYp0cChphHQH46XaFcZdUeuqJnBdWjm52eGh54m4HRPoCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T23:20:11.182387Z","bundle_sha256":"e776a5ce67495cb8fd5075365f446d596a7e3424f7c9f31d6d548e55b6360ad8"}}