{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:TWBFWYW2B6RXVJZDLOZBBW6BVY","short_pith_number":"pith:TWBFWYW2","canonical_record":{"source":{"id":"2112.04720","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-12-09T06:16:08Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"289a983824ef80fd75c3d2b64f37371a1d7ec01d4de84425b339b39527d4d564","abstract_canon_sha256":"ccc48b4406c38e7268292c33f5538666d85b0aa1587031c43d8738a9dd46604c"},"schema_version":"1.0"},"canonical_sha256":"9d825b62da0fa37aa7235bb210dbc1ae1dbcd9226b5ec3dfd9fcb97c8a72693a","source":{"kind":"arxiv","id":"2112.04720","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.04720","created_at":"2026-07-05T07:23:53Z"},{"alias_kind":"arxiv_version","alias_value":"2112.04720v4","created_at":"2026-07-05T07:23:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.04720","created_at":"2026-07-05T07:23:53Z"},{"alias_kind":"pith_short_12","alias_value":"TWBFWYW2B6RX","created_at":"2026-07-05T07:23:53Z"},{"alias_kind":"pith_short_16","alias_value":"TWBFWYW2B6RXVJZD","created_at":"2026-07-05T07:23:53Z"},{"alias_kind":"pith_short_8","alias_value":"TWBFWYW2","created_at":"2026-07-05T07:23:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:TWBFWYW2B6RXVJZDLOZBBW6BVY","target":"record","payload":{"canonical_record":{"source":{"id":"2112.04720","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-12-09T06:16:08Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"289a983824ef80fd75c3d2b64f37371a1d7ec01d4de84425b339b39527d4d564","abstract_canon_sha256":"ccc48b4406c38e7268292c33f5538666d85b0aa1587031c43d8738a9dd46604c"},"schema_version":"1.0"},"canonical_sha256":"9d825b62da0fa37aa7235bb210dbc1ae1dbcd9226b5ec3dfd9fcb97c8a72693a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:23:53.277363Z","signature_b64":"HNzTpA450qe4WHZhcuTJuW2+lvh0xrrX10OLjRb958C3SSN8nV5WuUujjnrjNQLvbsnfdyJTNU1UgbocSm0LAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9d825b62da0fa37aa7235bb210dbc1ae1dbcd9226b5ec3dfd9fcb97c8a72693a","last_reissued_at":"2026-07-05T07:23:53.276954Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:23:53.276954Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2112.04720","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:23:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"12sYnyjc9qGPVbesKzEiYWZX1h/Y1lwpZOgeaDPZlVZLXXZNie4li7bNimZMeMFKN81W6s8lkXqkC+Jqex9VDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T22:25:26.910588Z"},"content_sha256":"70ba50eba5a1e99a4d709d2ad3ed000c4fb05052b6921ad71434c91803066240","schema_version":"1.0","event_id":"sha256:70ba50eba5a1e99a4d709d2ad3ed000c4fb05052b6921ad71434c91803066240"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:TWBFWYW2B6RXVJZDLOZBBW6BVY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Amicable Aid: Perturbing Images to Improve Classification Performance","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Jong-Seok Lee, Jun-Ho Choi, Juyeop Kim, Soobeom Jang","submitted_at":"2021-12-09T06:16:08Z","abstract_excerpt":"While adversarial perturbation of images to attack deep image classification models pose serious security concerns in practice, this paper suggests a novel paradigm where the concept of image perturbation can benefit classification performance, which we call amicable aid. We show that by taking the opposite search direction of perturbation, an image can be modified to yield higher classification confidence and even a misclassified image can be made correctly classified. This can be also achieved with a large amount of perturbation by which the image is made unrecognizable by human eyes. The me"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.04720","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2112.04720/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:23:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rncoLRDMUqS41oIIrBQ++ss7wsj2abNuXbdV+GV5A+K95ptcFVcM9n8xRMKxd8ZlwA1orr71j+2rB2i3fvVUCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T22:25:26.911237Z"},"content_sha256":"3fd51aba86c3ff09ea6e62de1ce9d4d6ccae1b5e25030b1c3b28d7367f3d94d8","schema_version":"1.0","event_id":"sha256:3fd51aba86c3ff09ea6e62de1ce9d4d6ccae1b5e25030b1c3b28d7367f3d94d8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TWBFWYW2B6RXVJZDLOZBBW6BVY/bundle.json","state_url":"https://pith.science/pith/TWBFWYW2B6RXVJZDLOZBBW6BVY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TWBFWYW2B6RXVJZDLOZBBW6BVY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T22:25:26Z","links":{"resolver":"https://pith.science/pith/TWBFWYW2B6RXVJZDLOZBBW6BVY","bundle":"https://pith.science/pith/TWBFWYW2B6RXVJZDLOZBBW6BVY/bundle.json","state":"https://pith.science/pith/TWBFWYW2B6RXVJZDLOZBBW6BVY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TWBFWYW2B6RXVJZDLOZBBW6BVY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:TWBFWYW2B6RXVJZDLOZBBW6BVY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ccc48b4406c38e7268292c33f5538666d85b0aa1587031c43d8738a9dd46604c","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-12-09T06:16:08Z","title_canon_sha256":"289a983824ef80fd75c3d2b64f37371a1d7ec01d4de84425b339b39527d4d564"},"schema_version":"1.0","source":{"id":"2112.04720","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.04720","created_at":"2026-07-05T07:23:53Z"},{"alias_kind":"arxiv_version","alias_value":"2112.04720v4","created_at":"2026-07-05T07:23:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.04720","created_at":"2026-07-05T07:23:53Z"},{"alias_kind":"pith_short_12","alias_value":"TWBFWYW2B6RX","created_at":"2026-07-05T07:23:53Z"},{"alias_kind":"pith_short_16","alias_value":"TWBFWYW2B6RXVJZD","created_at":"2026-07-05T07:23:53Z"},{"alias_kind":"pith_short_8","alias_value":"TWBFWYW2","created_at":"2026-07-05T07:23:53Z"}],"graph_snapshots":[{"event_id":"sha256:3fd51aba86c3ff09ea6e62de1ce9d4d6ccae1b5e25030b1c3b28d7367f3d94d8","target":"graph","created_at":"2026-07-05T07:23:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2112.04720/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While adversarial perturbation of images to attack deep image classification models pose serious security concerns in practice, this paper suggests a novel paradigm where the concept of image perturbation can benefit classification performance, which we call amicable aid. We show that by taking the opposite search direction of perturbation, an image can be modified to yield higher classification confidence and even a misclassified image can be made correctly classified. This can be also achieved with a large amount of perturbation by which the image is made unrecognizable by human eyes. The me","authors_text":"Jong-Seok Lee, Jun-Ho Choi, Juyeop Kim, Soobeom Jang","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-12-09T06:16:08Z","title":"Amicable Aid: Perturbing Images to Improve Classification Performance"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.04720","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:70ba50eba5a1e99a4d709d2ad3ed000c4fb05052b6921ad71434c91803066240","target":"record","created_at":"2026-07-05T07:23:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ccc48b4406c38e7268292c33f5538666d85b0aa1587031c43d8738a9dd46604c","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-12-09T06:16:08Z","title_canon_sha256":"289a983824ef80fd75c3d2b64f37371a1d7ec01d4de84425b339b39527d4d564"},"schema_version":"1.0","source":{"id":"2112.04720","kind":"arxiv","version":4}},"canonical_sha256":"9d825b62da0fa37aa7235bb210dbc1ae1dbcd9226b5ec3dfd9fcb97c8a72693a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9d825b62da0fa37aa7235bb210dbc1ae1dbcd9226b5ec3dfd9fcb97c8a72693a","first_computed_at":"2026-07-05T07:23:53.276954Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:23:53.276954Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HNzTpA450qe4WHZhcuTJuW2+lvh0xrrX10OLjRb958C3SSN8nV5WuUujjnrjNQLvbsnfdyJTNU1UgbocSm0LAg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:23:53.277363Z","signed_message":"canonical_sha256_bytes"},"source_id":"2112.04720","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:70ba50eba5a1e99a4d709d2ad3ed000c4fb05052b6921ad71434c91803066240","sha256:3fd51aba86c3ff09ea6e62de1ce9d4d6ccae1b5e25030b1c3b28d7367f3d94d8"],"state_sha256":"4d9b8f9fc982f8fd11833c24ce690b75bb4a6ce9bd0f00755de56870e3e3ba29"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kWh84aF+NXoIBgBUBh7CIp/CfFmhNpfd+5+TU9LYxwot1W2nfzv4//uSRjc9JsXlVgLFHop7WZBEnMYdmx9cBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T22:25:26.919388Z","bundle_sha256":"f02c40e94be7ba0d7edc3be1287c7daa077e915e1e2ec4bd64c2538d1649a07f"}}