{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:U35WSKCW3HUB2MWCYN6JZZXQ5D","short_pith_number":"pith:U35WSKCW","canonical_record":{"source":{"id":"1811.08577","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-11-21T02:52:52Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"ec4b2e03c9bcd499d8cfda12f36c156ab5f0b5610ddcfb153ffe1240071965ca","abstract_canon_sha256":"f12b01989d331387c8d57883d913f0deb081ef1a473e282f188fe0cc94f9f796"},"schema_version":"1.0"},"canonical_sha256":"a6fb692856d9e81d32c2c37c9ce6f0e8c54462877df5ab3cbd7155be42b59e81","source":{"kind":"arxiv","id":"1811.08577","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1811.08577","created_at":"2026-05-18T00:00:12Z"},{"alias_kind":"arxiv_version","alias_value":"1811.08577v1","created_at":"2026-05-18T00:00:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1811.08577","created_at":"2026-05-18T00:00:12Z"},{"alias_kind":"pith_short_12","alias_value":"U35WSKCW3HUB","created_at":"2026-05-18T12:32:56Z"},{"alias_kind":"pith_short_16","alias_value":"U35WSKCW3HUB2MWC","created_at":"2026-05-18T12:32:56Z"},{"alias_kind":"pith_short_8","alias_value":"U35WSKCW","created_at":"2026-05-18T12:32:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:U35WSKCW3HUB2MWCYN6JZZXQ5D","target":"record","payload":{"canonical_record":{"source":{"id":"1811.08577","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-11-21T02:52:52Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"ec4b2e03c9bcd499d8cfda12f36c156ab5f0b5610ddcfb153ffe1240071965ca","abstract_canon_sha256":"f12b01989d331387c8d57883d913f0deb081ef1a473e282f188fe0cc94f9f796"},"schema_version":"1.0"},"canonical_sha256":"a6fb692856d9e81d32c2c37c9ce6f0e8c54462877df5ab3cbd7155be42b59e81","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:00:12.173678Z","signature_b64":"Mv+6HgGf8V937Fs45j79tbSns654kgEJqiiel+nLq1Emknk1G55SkAezMt3u22bDBNbm8ypjPWKY3pwXTg9rDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a6fb692856d9e81d32c2c37c9ce6f0e8c54462877df5ab3cbd7155be42b59e81","last_reissued_at":"2026-05-18T00:00:12.173138Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:00:12.173138Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1811.08577","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:00:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7UZmAnPno6ggl6BOkXgvP4FU8aLHR2ORdUFU1eZb4Gi+yxVV9XVL66u53bUnXBweKzPquo4kKDHd/FULE7nuDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-03T07:55:44.851228Z"},"content_sha256":"2bf37b392e1f2b5278e415d69797e034ab1eaf2adcfb0b529fea734b791bbd37","schema_version":"1.0","event_id":"sha256:2bf37b392e1f2b5278e415d69797e034ab1eaf2adcfb0b529fea734b791bbd37"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:U35WSKCW3HUB2MWCYN6JZZXQ5D","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"How the Softmax Output is Misleading for Evaluating the Strength of Adversarial Examples","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Arnout Van Messem, Utku Ozbulak, Wesley De Neve","submitted_at":"2018-11-21T02:52:52Z","abstract_excerpt":"Even before deep learning architectures became the de facto models for complex computer vision tasks, the softmax function was, given its elegant properties, already used to analyze the predictions of feedforward neural networks. Nowadays, the output of the softmax function is also commonly used to assess the strength of adversarial examples: malicious data points designed to fail machine learning models during the testing phase. However, in this paper, we show that it is possible to generate adversarial examples that take advantage of some properties of the softmax function, leading to undesi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1811.08577","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:00:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ua9P4gboNMHHJG2amE3GX9RdvthtadCh+1dU3Cv6pkqoQ53T0HT+6VquUPRpRBlQmNozzm3lZ+MwqmL6TaoGDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-03T07:55:44.851592Z"},"content_sha256":"d9f49b9012a35f4d43887b900451806d2f3428628eb6550ae3f58c0696f6355e","schema_version":"1.0","event_id":"sha256:d9f49b9012a35f4d43887b900451806d2f3428628eb6550ae3f58c0696f6355e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/U35WSKCW3HUB2MWCYN6JZZXQ5D/bundle.json","state_url":"https://pith.science/pith/U35WSKCW3HUB2MWCYN6JZZXQ5D/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/U35WSKCW3HUB2MWCYN6JZZXQ5D/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-03T07:55:44Z","links":{"resolver":"https://pith.science/pith/U35WSKCW3HUB2MWCYN6JZZXQ5D","bundle":"https://pith.science/pith/U35WSKCW3HUB2MWCYN6JZZXQ5D/bundle.json","state":"https://pith.science/pith/U35WSKCW3HUB2MWCYN6JZZXQ5D/state.json","well_known_bundle":"https://pith.science/.well-known/pith/U35WSKCW3HUB2MWCYN6JZZXQ5D/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:U35WSKCW3HUB2MWCYN6JZZXQ5D","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f12b01989d331387c8d57883d913f0deb081ef1a473e282f188fe0cc94f9f796","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-11-21T02:52:52Z","title_canon_sha256":"ec4b2e03c9bcd499d8cfda12f36c156ab5f0b5610ddcfb153ffe1240071965ca"},"schema_version":"1.0","source":{"id":"1811.08577","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1811.08577","created_at":"2026-05-18T00:00:12Z"},{"alias_kind":"arxiv_version","alias_value":"1811.08577v1","created_at":"2026-05-18T00:00:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1811.08577","created_at":"2026-05-18T00:00:12Z"},{"alias_kind":"pith_short_12","alias_value":"U35WSKCW3HUB","created_at":"2026-05-18T12:32:56Z"},{"alias_kind":"pith_short_16","alias_value":"U35WSKCW3HUB2MWC","created_at":"2026-05-18T12:32:56Z"},{"alias_kind":"pith_short_8","alias_value":"U35WSKCW","created_at":"2026-05-18T12:32:56Z"}],"graph_snapshots":[{"event_id":"sha256:d9f49b9012a35f4d43887b900451806d2f3428628eb6550ae3f58c0696f6355e","target":"graph","created_at":"2026-05-18T00:00:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Even before deep learning architectures became the de facto models for complex computer vision tasks, the softmax function was, given its elegant properties, already used to analyze the predictions of feedforward neural networks. Nowadays, the output of the softmax function is also commonly used to assess the strength of adversarial examples: malicious data points designed to fail machine learning models during the testing phase. However, in this paper, we show that it is possible to generate adversarial examples that take advantage of some properties of the softmax function, leading to undesi","authors_text":"Arnout Van Messem, Utku Ozbulak, Wesley De Neve","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-11-21T02:52:52Z","title":"How the Softmax Output is Misleading for Evaluating the Strength of Adversarial Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1811.08577","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2bf37b392e1f2b5278e415d69797e034ab1eaf2adcfb0b529fea734b791bbd37","target":"record","created_at":"2026-05-18T00:00:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f12b01989d331387c8d57883d913f0deb081ef1a473e282f188fe0cc94f9f796","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-11-21T02:52:52Z","title_canon_sha256":"ec4b2e03c9bcd499d8cfda12f36c156ab5f0b5610ddcfb153ffe1240071965ca"},"schema_version":"1.0","source":{"id":"1811.08577","kind":"arxiv","version":1}},"canonical_sha256":"a6fb692856d9e81d32c2c37c9ce6f0e8c54462877df5ab3cbd7155be42b59e81","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a6fb692856d9e81d32c2c37c9ce6f0e8c54462877df5ab3cbd7155be42b59e81","first_computed_at":"2026-05-18T00:00:12.173138Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:00:12.173138Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Mv+6HgGf8V937Fs45j79tbSns654kgEJqiiel+nLq1Emknk1G55SkAezMt3u22bDBNbm8ypjPWKY3pwXTg9rDQ==","signature_status":"signed_v1","signed_at":"2026-05-18T00:00:12.173678Z","signed_message":"canonical_sha256_bytes"},"source_id":"1811.08577","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2bf37b392e1f2b5278e415d69797e034ab1eaf2adcfb0b529fea734b791bbd37","sha256:d9f49b9012a35f4d43887b900451806d2f3428628eb6550ae3f58c0696f6355e"],"state_sha256":"44aac09de0057aceb985dff52e7e80b51f868ac2bac9e520a7cf57cc9e3c61cf"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XyI0FP5nC3sUE5IfiXZFN7QPB+dqMBbGi0K/e0R+rE3E4duZrXdyqTZ3OUnBGEddRX/PE/qNuacOCKncACjiAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-03T07:55:44.853883Z","bundle_sha256":"66689bfaecf647fae765a9bcee8770d3cef68526dbadf66cb0a4515e6f17caac"}}