{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:UNLP426GQ5WA6UM474BBEA6E3Y","short_pith_number":"pith:UNLP426G","canonical_record":{"source":{"id":"2007.14042","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-07-28T07:45:25Z","cross_cats_sorted":["cs.IT","math.IT","stat.ML"],"title_canon_sha256":"652f0aefd8da372d6f1ad622cd9dd9a1a3ab38ff58fbfcacb1039c04a26c987a","abstract_canon_sha256":"e2df910c16b59b84462adb40f897c1127ea43ea543c1bbfee4991cf63778728f"},"schema_version":"1.0"},"canonical_sha256":"a356fe6bc6876c0f519cff021203c4de145500c8cb851ed484c84df1f4b8c136","source":{"kind":"arxiv","id":"2007.14042","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2007.14042","created_at":"2026-07-05T01:22:54Z"},{"alias_kind":"arxiv_version","alias_value":"2007.14042v1","created_at":"2026-07-05T01:22:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2007.14042","created_at":"2026-07-05T01:22:54Z"},{"alias_kind":"pith_short_12","alias_value":"UNLP426GQ5WA","created_at":"2026-07-05T01:22:54Z"},{"alias_kind":"pith_short_16","alias_value":"UNLP426GQ5WA6UM4","created_at":"2026-07-05T01:22:54Z"},{"alias_kind":"pith_short_8","alias_value":"UNLP426G","created_at":"2026-07-05T01:22:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:UNLP426GQ5WA6UM474BBEA6E3Y","target":"record","payload":{"canonical_record":{"source":{"id":"2007.14042","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-07-28T07:45:25Z","cross_cats_sorted":["cs.IT","math.IT","stat.ML"],"title_canon_sha256":"652f0aefd8da372d6f1ad622cd9dd9a1a3ab38ff58fbfcacb1039c04a26c987a","abstract_canon_sha256":"e2df910c16b59b84462adb40f897c1127ea43ea543c1bbfee4991cf63778728f"},"schema_version":"1.0"},"canonical_sha256":"a356fe6bc6876c0f519cff021203c4de145500c8cb851ed484c84df1f4b8c136","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:22:54.817899Z","signature_b64":"FRG1y8FVwD0whvx4HhzzPReWfbdHTyHzm0jUhG/nAeS5ErU6oQYiobYg43MBVn2ze7Vs6t2QXqHWMXvvB5ORBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a356fe6bc6876c0f519cff021203c4de145500c8cb851ed484c84df1f4b8c136","last_reissued_at":"2026-07-05T01:22:54.817543Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:22:54.817543Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2007.14042","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:22:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3JiKINBMgoe+Svl6aQDOn7ePh2NTr+6vxBXIkiR0QSzEY85n2P/xmqk2BHT0b7c1nCqvPvNkjxg7rKlBXw4ZAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T22:15:30.735328Z"},"content_sha256":"dfc9a23257fbdaeede4029fd69d424c29f7ba2ca19675504bf86b1d4c877d1a7","schema_version":"1.0","event_id":"sha256:dfc9a23257fbdaeede4029fd69d424c29f7ba2ca19675504bf86b1d4c877d1a7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:UNLP426GQ5WA6UM474BBEA6E3Y","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Derivation of Information-Theoretically Optimal Adversarial Attacks with Applications to Robust Machine Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.IT","math.IT","stat.ML"],"primary_cat":"cs.LG","authors_text":"Jirong Yi, Raghu Mudumbai, Weiyu Xu","submitted_at":"2020-07-28T07:45:25Z","abstract_excerpt":"We consider the theoretical problem of designing an optimal adversarial attack on a decision system that maximally degrades the achievable performance of the system as measured by the mutual information between the degraded signal and the label of interest. This problem is motivated by the existence of adversarial examples for machine learning classifiers. By adopting an information theoretic perspective, we seek to identify conditions under which adversarial vulnerability is unavoidable i.e. even optimally designed classifiers will be vulnerable to small adversarial perturbations. We present "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2007.14042","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2007.14042/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:22:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UIAzbdwowDj1/RxaX1vZslhOmWb4zUF/rW60E3hW4NO/yYFKTLKnNatR0M5nBoc5smh2EftxGoDti46LB3T5DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T22:15:30.735836Z"},"content_sha256":"7a8f7a4b635b5a348bb5b452be2820e290d6e01b881ef2a884c292213b9daf64","schema_version":"1.0","event_id":"sha256:7a8f7a4b635b5a348bb5b452be2820e290d6e01b881ef2a884c292213b9daf64"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UNLP426GQ5WA6UM474BBEA6E3Y/bundle.json","state_url":"https://pith.science/pith/UNLP426GQ5WA6UM474BBEA6E3Y/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UNLP426GQ5WA6UM474BBEA6E3Y/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T22:15:30Z","links":{"resolver":"https://pith.science/pith/UNLP426GQ5WA6UM474BBEA6E3Y","bundle":"https://pith.science/pith/UNLP426GQ5WA6UM474BBEA6E3Y/bundle.json","state":"https://pith.science/pith/UNLP426GQ5WA6UM474BBEA6E3Y/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UNLP426GQ5WA6UM474BBEA6E3Y/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:UNLP426GQ5WA6UM474BBEA6E3Y","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e2df910c16b59b84462adb40f897c1127ea43ea543c1bbfee4991cf63778728f","cross_cats_sorted":["cs.IT","math.IT","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-07-28T07:45:25Z","title_canon_sha256":"652f0aefd8da372d6f1ad622cd9dd9a1a3ab38ff58fbfcacb1039c04a26c987a"},"schema_version":"1.0","source":{"id":"2007.14042","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2007.14042","created_at":"2026-07-05T01:22:54Z"},{"alias_kind":"arxiv_version","alias_value":"2007.14042v1","created_at":"2026-07-05T01:22:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2007.14042","created_at":"2026-07-05T01:22:54Z"},{"alias_kind":"pith_short_12","alias_value":"UNLP426GQ5WA","created_at":"2026-07-05T01:22:54Z"},{"alias_kind":"pith_short_16","alias_value":"UNLP426GQ5WA6UM4","created_at":"2026-07-05T01:22:54Z"},{"alias_kind":"pith_short_8","alias_value":"UNLP426G","created_at":"2026-07-05T01:22:54Z"}],"graph_snapshots":[{"event_id":"sha256:7a8f7a4b635b5a348bb5b452be2820e290d6e01b881ef2a884c292213b9daf64","target":"graph","created_at":"2026-07-05T01:22:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2007.14042/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We consider the theoretical problem of designing an optimal adversarial attack on a decision system that maximally degrades the achievable performance of the system as measured by the mutual information between the degraded signal and the label of interest. This problem is motivated by the existence of adversarial examples for machine learning classifiers. By adopting an information theoretic perspective, we seek to identify conditions under which adversarial vulnerability is unavoidable i.e. even optimally designed classifiers will be vulnerable to small adversarial perturbations. We present ","authors_text":"Jirong Yi, Raghu Mudumbai, Weiyu Xu","cross_cats":["cs.IT","math.IT","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-07-28T07:45:25Z","title":"Derivation of Information-Theoretically Optimal Adversarial Attacks with Applications to Robust Machine Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2007.14042","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:dfc9a23257fbdaeede4029fd69d424c29f7ba2ca19675504bf86b1d4c877d1a7","target":"record","created_at":"2026-07-05T01:22:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e2df910c16b59b84462adb40f897c1127ea43ea543c1bbfee4991cf63778728f","cross_cats_sorted":["cs.IT","math.IT","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-07-28T07:45:25Z","title_canon_sha256":"652f0aefd8da372d6f1ad622cd9dd9a1a3ab38ff58fbfcacb1039c04a26c987a"},"schema_version":"1.0","source":{"id":"2007.14042","kind":"arxiv","version":1}},"canonical_sha256":"a356fe6bc6876c0f519cff021203c4de145500c8cb851ed484c84df1f4b8c136","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a356fe6bc6876c0f519cff021203c4de145500c8cb851ed484c84df1f4b8c136","first_computed_at":"2026-07-05T01:22:54.817543Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:22:54.817543Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FRG1y8FVwD0whvx4HhzzPReWfbdHTyHzm0jUhG/nAeS5ErU6oQYiobYg43MBVn2ze7Vs6t2QXqHWMXvvB5ORBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T01:22:54.817899Z","signed_message":"canonical_sha256_bytes"},"source_id":"2007.14042","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:dfc9a23257fbdaeede4029fd69d424c29f7ba2ca19675504bf86b1d4c877d1a7","sha256:7a8f7a4b635b5a348bb5b452be2820e290d6e01b881ef2a884c292213b9daf64"],"state_sha256":"e23112054d09882881b1e866cb217a215cbf2dac8300e7af77b42ae78687c876"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"H+EdM7tn3MkpcGp1WJ7o4VSKQQNr7gOf4nGokGhLZvSD/9kW1wyGE4szKJF94hXb58XMfrkNlRalC1mZnKKNAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T22:15:30.740678Z","bundle_sha256":"70a826ad7bb39e7e9f8b0136616cf6086ca82db0aa529d75ae57f11576876355"}}