{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:U2ZLWHGV2HC2ZECAQACZZBZVUP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"971bc07645dc50cd450259c2fba9ede0635586d92f21664adb0eda4233eb6d1e","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2019-07-27T15:07:04Z","title_canon_sha256":"3931d4cc7011fdea03ec9f1d941ec901f28dbcfc8caddaaa2ec8ba91b7861b5f"},"schema_version":"1.0","source":{"id":"1907.11932","kind":"arxiv","version":6}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1907.11932","created_at":"2026-07-05T00:54:01Z"},{"alias_kind":"arxiv_version","alias_value":"1907.11932v6","created_at":"2026-07-05T00:54:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1907.11932","created_at":"2026-07-05T00:54:01Z"},{"alias_kind":"pith_short_12","alias_value":"U2ZLWHGV2HC2","created_at":"2026-07-05T00:54:01Z"},{"alias_kind":"pith_short_16","alias_value":"U2ZLWHGV2HC2ZECA","created_at":"2026-07-05T00:54:01Z"},{"alias_kind":"pith_short_8","alias_value":"U2ZLWHGV","created_at":"2026-07-05T00:54:01Z"}],"graph_snapshots":[{"event_id":"sha256:9847a14384f8bdf894e8fe87e1b06f57fdd1c37d957f7430826dab03864f8973","target":"graph","created_at":"2026-07-05T00:54:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1907.11932/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning algorithms are often vulnerable to adversarial examples that have imperceptible alterations from the original counterparts but can fool the state-of-the-art models. It is helpful to evaluate or even improve the robustness of these models by exposing the maliciously crafted adversarial examples. In this paper, we present TextFooler, a simple but strong baseline to generate natural adversarial text. By applying it to two fundamental natural language tasks, text classification and textual entailment, we successfully attacked three target models, including the powerful pre-trained","authors_text":"Di Jin, Joey Tianyi Zhou, Peter Szolovits, Zhijing Jin","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2019-07-27T15:07:04Z","title":"Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailment"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1907.11932","kind":"arxiv","version":6},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e390a875dad6bc337ad54cf3a7728b78d023c33e4a583f2efd65422ba4c6607e","target":"record","created_at":"2026-07-05T00:54:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"971bc07645dc50cd450259c2fba9ede0635586d92f21664adb0eda4233eb6d1e","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2019-07-27T15:07:04Z","title_canon_sha256":"3931d4cc7011fdea03ec9f1d941ec901f28dbcfc8caddaaa2ec8ba91b7861b5f"},"schema_version":"1.0","source":{"id":"1907.11932","kind":"arxiv","version":6}},"canonical_sha256":"a6b2bb1cd5d1c5ac904080059c8735a3e614b1a05536d7598a62c603c14ee317","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a6b2bb1cd5d1c5ac904080059c8735a3e614b1a05536d7598a62c603c14ee317","first_computed_at":"2026-07-05T00:54:01.934881Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:54:01.934881Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"VjCk1/pTKpXo0861Op8soTDttJCxI4cyyXi9qGIBTW3dRolSy0CsGCExFfPXBOJPiVyBaOw2Fonb9bsduf+GBA==","signature_status":"signed_v1","signed_at":"2026-07-05T00:54:01.935308Z","signed_message":"canonical_sha256_bytes"},"source_id":"1907.11932","source_kind":"arxiv","source_version":6}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e390a875dad6bc337ad54cf3a7728b78d023c33e4a583f2efd65422ba4c6607e","sha256:9847a14384f8bdf894e8fe87e1b06f57fdd1c37d957f7430826dab03864f8973"],"state_sha256":"48cf1856a846ecb76df9675a45d9aeb74c879a22e035449811dee75e7d215b4a"}