{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:UNYAQM753HNQ6MKMMBNRUFY5SS","short_pith_number":"pith:UNYAQM75","canonical_record":{"source":{"id":"2402.03317","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-01-02T14:27:24Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"0c79ffa37415c62e4299edb2cb57fde6ca2bcefc7fe15eec8080a96d1f01a3ff","abstract_canon_sha256":"2e49a72d6e91829de0695f28e152e2baec8c23faae009c9973b584a29c246480"},"schema_version":"1.0"},"canonical_sha256":"a3700833fdd9db0f314c605b1a171d94be87e62672fa3b373dee1b9a0f7c833e","source":{"kind":"arxiv","id":"2402.03317","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.03317","created_at":"2026-07-05T08:43:26Z"},{"alias_kind":"arxiv_version","alias_value":"2402.03317v2","created_at":"2026-07-05T08:43:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.03317","created_at":"2026-07-05T08:43:26Z"},{"alias_kind":"pith_short_12","alias_value":"UNYAQM753HNQ","created_at":"2026-07-05T08:43:26Z"},{"alias_kind":"pith_short_16","alias_value":"UNYAQM753HNQ6MKM","created_at":"2026-07-05T08:43:26Z"},{"alias_kind":"pith_short_8","alias_value":"UNYAQM75","created_at":"2026-07-05T08:43:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:UNYAQM753HNQ6MKMMBNRUFY5SS","target":"record","payload":{"canonical_record":{"source":{"id":"2402.03317","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-01-02T14:27:24Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"0c79ffa37415c62e4299edb2cb57fde6ca2bcefc7fe15eec8080a96d1f01a3ff","abstract_canon_sha256":"2e49a72d6e91829de0695f28e152e2baec8c23faae009c9973b584a29c246480"},"schema_version":"1.0"},"canonical_sha256":"a3700833fdd9db0f314c605b1a171d94be87e62672fa3b373dee1b9a0f7c833e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:43:26.038242Z","signature_b64":"dSc896k8NBTlqA7X60oaWgR4isuoJSQNz2eFLrQ6oNzvGvKsNdA9sVQS2vNWhd2w8cu/pW82bebczbl7UiiwBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a3700833fdd9db0f314c605b1a171d94be87e62672fa3b373dee1b9a0f7c833e","last_reissued_at":"2026-07-05T08:43:26.037816Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:43:26.037816Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.03317","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:43:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vm+XXrcwT7YWf+rcFTX/kTBF8+xfhPfzenfXyMGPxlpLtrDRu1PfzT3raH30NHwKX7EG/6xsomiohODsctKKCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T03:50:28.375276Z"},"content_sha256":"cf21a1db62fd27a282d92ac9287d90a4c777515244d4920e991da500ff07dd2e","schema_version":"1.0","event_id":"sha256:cf21a1db62fd27a282d92ac9287d90a4c777515244d4920e991da500ff07dd2e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:UNYAQM753HNQ6MKMMBNRUFY5SS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SpecFormer: Guarding Vision Transformer Robustness via Maximum Singular Value Penalization","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Cheuk Hang Leung, Jindong Wang, Qi Wu, Runkai Zheng, Xing Xie, Xixu Hu","submitted_at":"2024-01-02T14:27:24Z","abstract_excerpt":"Vision Transformers (ViTs) are increasingly used in computer vision due to their high performance, but their vulnerability to adversarial attacks is a concern. Existing methods lack a solid theoretical basis, focusing mainly on empirical training adjustments. This study introduces SpecFormer, tailored to fortify ViTs against adversarial attacks, with theoretical underpinnings. We establish local Lipschitz bounds for the self-attention layer and propose the Maximum Singular Value Penalization (MSVP) to precisely manage these bounds By incorporating MSVP into ViTs' attention layers, we enhance t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.03317","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.03317/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:43:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Bb5zBCVfVsyPKdesDxcLwOBPa/ikeQcBlcLXRpRpe16XlIuElz7nQ0pXohzFBrmJBsODHAoQxQqgfujOVmNnAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T03:50:28.375951Z"},"content_sha256":"8827deb11b9965ce355ac01cd4537976709ffd7faf185b84e1505aa989fb7cb0","schema_version":"1.0","event_id":"sha256:8827deb11b9965ce355ac01cd4537976709ffd7faf185b84e1505aa989fb7cb0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UNYAQM753HNQ6MKMMBNRUFY5SS/bundle.json","state_url":"https://pith.science/pith/UNYAQM753HNQ6MKMMBNRUFY5SS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UNYAQM753HNQ6MKMMBNRUFY5SS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T03:50:28Z","links":{"resolver":"https://pith.science/pith/UNYAQM753HNQ6MKMMBNRUFY5SS","bundle":"https://pith.science/pith/UNYAQM753HNQ6MKMMBNRUFY5SS/bundle.json","state":"https://pith.science/pith/UNYAQM753HNQ6MKMMBNRUFY5SS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UNYAQM753HNQ6MKMMBNRUFY5SS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:UNYAQM753HNQ6MKMMBNRUFY5SS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2e49a72d6e91829de0695f28e152e2baec8c23faae009c9973b584a29c246480","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-01-02T14:27:24Z","title_canon_sha256":"0c79ffa37415c62e4299edb2cb57fde6ca2bcefc7fe15eec8080a96d1f01a3ff"},"schema_version":"1.0","source":{"id":"2402.03317","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.03317","created_at":"2026-07-05T08:43:26Z"},{"alias_kind":"arxiv_version","alias_value":"2402.03317v2","created_at":"2026-07-05T08:43:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.03317","created_at":"2026-07-05T08:43:26Z"},{"alias_kind":"pith_short_12","alias_value":"UNYAQM753HNQ","created_at":"2026-07-05T08:43:26Z"},{"alias_kind":"pith_short_16","alias_value":"UNYAQM753HNQ6MKM","created_at":"2026-07-05T08:43:26Z"},{"alias_kind":"pith_short_8","alias_value":"UNYAQM75","created_at":"2026-07-05T08:43:26Z"}],"graph_snapshots":[{"event_id":"sha256:8827deb11b9965ce355ac01cd4537976709ffd7faf185b84e1505aa989fb7cb0","target":"graph","created_at":"2026-07-05T08:43:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.03317/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision Transformers (ViTs) are increasingly used in computer vision due to their high performance, but their vulnerability to adversarial attacks is a concern. Existing methods lack a solid theoretical basis, focusing mainly on empirical training adjustments. This study introduces SpecFormer, tailored to fortify ViTs against adversarial attacks, with theoretical underpinnings. We establish local Lipschitz bounds for the self-attention layer and propose the Maximum Singular Value Penalization (MSVP) to precisely manage these bounds By incorporating MSVP into ViTs' attention layers, we enhance t","authors_text":"Cheuk Hang Leung, Jindong Wang, Qi Wu, Runkai Zheng, Xing Xie, Xixu Hu","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-01-02T14:27:24Z","title":"SpecFormer: Guarding Vision Transformer Robustness via Maximum Singular Value Penalization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.03317","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cf21a1db62fd27a282d92ac9287d90a4c777515244d4920e991da500ff07dd2e","target":"record","created_at":"2026-07-05T08:43:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2e49a72d6e91829de0695f28e152e2baec8c23faae009c9973b584a29c246480","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-01-02T14:27:24Z","title_canon_sha256":"0c79ffa37415c62e4299edb2cb57fde6ca2bcefc7fe15eec8080a96d1f01a3ff"},"schema_version":"1.0","source":{"id":"2402.03317","kind":"arxiv","version":2}},"canonical_sha256":"a3700833fdd9db0f314c605b1a171d94be87e62672fa3b373dee1b9a0f7c833e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a3700833fdd9db0f314c605b1a171d94be87e62672fa3b373dee1b9a0f7c833e","first_computed_at":"2026-07-05T08:43:26.037816Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:43:26.037816Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"dSc896k8NBTlqA7X60oaWgR4isuoJSQNz2eFLrQ6oNzvGvKsNdA9sVQS2vNWhd2w8cu/pW82bebczbl7UiiwBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:43:26.038242Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.03317","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cf21a1db62fd27a282d92ac9287d90a4c777515244d4920e991da500ff07dd2e","sha256:8827deb11b9965ce355ac01cd4537976709ffd7faf185b84e1505aa989fb7cb0"],"state_sha256":"3d16a183a4ee94602ff62c2f3acb59f87323ce0e51fc4c253b7270aa236548e7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GjIWgLk4ITj/78FjMdt8KYTz2hZZFyveUPlbcOZ0rl+DfWmjuspYJHHT9EdB2vCoojU4HxtMCsxKLJ1nDUIvAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T03:50:28.381003Z","bundle_sha256":"9dbfa6b0433918135ab759b7334d1e33286da5f8ecad59f9c06091b956f48145"}}