{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:TLDZQ4MATAZFIVWHWV2SAI6XHH","short_pith_number":"pith:TLDZQ4MA","canonical_record":{"source":{"id":"1912.03406","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-12-07T01:15:40Z","cross_cats_sorted":["cs.CV","eess.IV","stat.ML"],"title_canon_sha256":"63ad75f924ae1276d4941dd6ec039adf99a6f1304e74e10a0fdbf7e24a78474f","abstract_canon_sha256":"ce8f0364e840593f45a9b7bd0738cd968bf8f766d74b1eb996fb0c5dc953162d"},"schema_version":"1.0"},"canonical_sha256":"9ac798718098325456c7b5752023d739d988fbcb2bd8bd1bedb724447574784c","source":{"kind":"arxiv","id":"1912.03406","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1912.03406","created_at":"2026-07-05T00:24:45Z"},{"alias_kind":"arxiv_version","alias_value":"1912.03406v1","created_at":"2026-07-05T00:24:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1912.03406","created_at":"2026-07-05T00:24:45Z"},{"alias_kind":"pith_short_12","alias_value":"TLDZQ4MATAZF","created_at":"2026-07-05T00:24:45Z"},{"alias_kind":"pith_short_16","alias_value":"TLDZQ4MATAZFIVWH","created_at":"2026-07-05T00:24:45Z"},{"alias_kind":"pith_short_8","alias_value":"TLDZQ4MA","created_at":"2026-07-05T00:24:45Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:TLDZQ4MATAZFIVWHWV2SAI6XHH","target":"record","payload":{"canonical_record":{"source":{"id":"1912.03406","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-12-07T01:15:40Z","cross_cats_sorted":["cs.CV","eess.IV","stat.ML"],"title_canon_sha256":"63ad75f924ae1276d4941dd6ec039adf99a6f1304e74e10a0fdbf7e24a78474f","abstract_canon_sha256":"ce8f0364e840593f45a9b7bd0738cd968bf8f766d74b1eb996fb0c5dc953162d"},"schema_version":"1.0"},"canonical_sha256":"9ac798718098325456c7b5752023d739d988fbcb2bd8bd1bedb724447574784c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:24:45.137604Z","signature_b64":"3igkVE5VxzeBXA5zh0sSGPn8Sw537GZIqprg3vVeRb2t3QTcfnhaXeSjm9ttxUmmLlqDeHPF+BRRRtX40HedAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9ac798718098325456c7b5752023d739d988fbcb2bd8bd1bedb724447574784c","last_reissued_at":"2026-07-05T00:24:45.137188Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:24:45.137188Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1912.03406","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:24:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2GS1Lh/9kXGDQjzO4EjWXIHaxxMv6bU22o63ROjJiMiMtr1Exi4PdKzv8op3+aoHhVgJd6eeKFPhGnv9yXEvBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T22:52:56.555727Z"},"content_sha256":"aa433c8cb1047806bd16ad4a8a1f1d1d39a7fcd90fd69dc71411d71c3572983f","schema_version":"1.0","event_id":"sha256:aa433c8cb1047806bd16ad4a8a1f1d1d39a7fcd90fd69dc71411d71c3572983f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:TLDZQ4MATAZFIVWHWV2SAI6XHH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Principal Component Properties of Adversarial Samples","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","eess.IV","stat.ML"],"primary_cat":"cs.LG","authors_text":"Christine Lind, Farinaz Koushanfar, Malhar Jere, Sandro Herbig","submitted_at":"2019-12-07T01:15:40Z","abstract_excerpt":"Deep Neural Networks for image classification have been found to be vulnerable to adversarial samples, which consist of sub-perceptual noise added to a benign image that can easily fool trained neural networks, posing a significant risk to their commercial deployment. In this work, we analyze adversarial samples through the lens of their contributions to the principal components of each image, which is different than prior works in which authors performed PCA on the entire dataset. We investigate a number of state-of-the-art deep neural networks trained on ImageNet as well as several attacks f"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1912.03406","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1912.03406/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:24:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"z4+CW9XQE589KLyDwAucyUmxM1mLjLsyrhEhiMEDBJoh8b3AxM4ujpnK+Jc6K2uPkGys9w25F1Ma/xriK8bqDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T22:52:56.556232Z"},"content_sha256":"95cae80b019e3fd4b963fe925e7d82d89baac16f1bc349659d16f4dd15d98278","schema_version":"1.0","event_id":"sha256:95cae80b019e3fd4b963fe925e7d82d89baac16f1bc349659d16f4dd15d98278"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TLDZQ4MATAZFIVWHWV2SAI6XHH/bundle.json","state_url":"https://pith.science/pith/TLDZQ4MATAZFIVWHWV2SAI6XHH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TLDZQ4MATAZFIVWHWV2SAI6XHH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T22:52:56Z","links":{"resolver":"https://pith.science/pith/TLDZQ4MATAZFIVWHWV2SAI6XHH","bundle":"https://pith.science/pith/TLDZQ4MATAZFIVWHWV2SAI6XHH/bundle.json","state":"https://pith.science/pith/TLDZQ4MATAZFIVWHWV2SAI6XHH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TLDZQ4MATAZFIVWHWV2SAI6XHH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:TLDZQ4MATAZFIVWHWV2SAI6XHH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ce8f0364e840593f45a9b7bd0738cd968bf8f766d74b1eb996fb0c5dc953162d","cross_cats_sorted":["cs.CV","eess.IV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-12-07T01:15:40Z","title_canon_sha256":"63ad75f924ae1276d4941dd6ec039adf99a6f1304e74e10a0fdbf7e24a78474f"},"schema_version":"1.0","source":{"id":"1912.03406","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1912.03406","created_at":"2026-07-05T00:24:45Z"},{"alias_kind":"arxiv_version","alias_value":"1912.03406v1","created_at":"2026-07-05T00:24:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1912.03406","created_at":"2026-07-05T00:24:45Z"},{"alias_kind":"pith_short_12","alias_value":"TLDZQ4MATAZF","created_at":"2026-07-05T00:24:45Z"},{"alias_kind":"pith_short_16","alias_value":"TLDZQ4MATAZFIVWH","created_at":"2026-07-05T00:24:45Z"},{"alias_kind":"pith_short_8","alias_value":"TLDZQ4MA","created_at":"2026-07-05T00:24:45Z"}],"graph_snapshots":[{"event_id":"sha256:95cae80b019e3fd4b963fe925e7d82d89baac16f1bc349659d16f4dd15d98278","target":"graph","created_at":"2026-07-05T00:24:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1912.03406/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep Neural Networks for image classification have been found to be vulnerable to adversarial samples, which consist of sub-perceptual noise added to a benign image that can easily fool trained neural networks, posing a significant risk to their commercial deployment. In this work, we analyze adversarial samples through the lens of their contributions to the principal components of each image, which is different than prior works in which authors performed PCA on the entire dataset. We investigate a number of state-of-the-art deep neural networks trained on ImageNet as well as several attacks f","authors_text":"Christine Lind, Farinaz Koushanfar, Malhar Jere, Sandro Herbig","cross_cats":["cs.CV","eess.IV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-12-07T01:15:40Z","title":"Principal Component Properties of Adversarial Samples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1912.03406","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:aa433c8cb1047806bd16ad4a8a1f1d1d39a7fcd90fd69dc71411d71c3572983f","target":"record","created_at":"2026-07-05T00:24:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ce8f0364e840593f45a9b7bd0738cd968bf8f766d74b1eb996fb0c5dc953162d","cross_cats_sorted":["cs.CV","eess.IV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-12-07T01:15:40Z","title_canon_sha256":"63ad75f924ae1276d4941dd6ec039adf99a6f1304e74e10a0fdbf7e24a78474f"},"schema_version":"1.0","source":{"id":"1912.03406","kind":"arxiv","version":1}},"canonical_sha256":"9ac798718098325456c7b5752023d739d988fbcb2bd8bd1bedb724447574784c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9ac798718098325456c7b5752023d739d988fbcb2bd8bd1bedb724447574784c","first_computed_at":"2026-07-05T00:24:45.137188Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:24:45.137188Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"3igkVE5VxzeBXA5zh0sSGPn8Sw537GZIqprg3vVeRb2t3QTcfnhaXeSjm9ttxUmmLlqDeHPF+BRRRtX40HedAw==","signature_status":"signed_v1","signed_at":"2026-07-05T00:24:45.137604Z","signed_message":"canonical_sha256_bytes"},"source_id":"1912.03406","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:aa433c8cb1047806bd16ad4a8a1f1d1d39a7fcd90fd69dc71411d71c3572983f","sha256:95cae80b019e3fd4b963fe925e7d82d89baac16f1bc349659d16f4dd15d98278"],"state_sha256":"f2925ba8fe45247b25d91c5995d71021a86eddebadff975a48da45b19cb1cfd0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NdhAF3kPNnXuDJh68x88SyaZIaZc3lvQlR3Xed4yBNypkzpsm9TCzrlo6A4JPqjAkc/gKvYqOb1nDCWfr9HzAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T22:52:56.561271Z","bundle_sha256":"9ff1b5dfc2b13c70ef94fb6657ad118d329ce534332452104e5949fef7ebe41d"}}