{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:UOGHDKR5QK7OTCWVCPEGXIIN2F","short_pith_number":"pith:UOGHDKR5","canonical_record":{"source":{"id":"1812.01804","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-12-05T03:31:07Z","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"title_canon_sha256":"f4e8d4ac97a2919221cff67f55386a349ccfcaf73c27be8fda86f1d1ac03949f","abstract_canon_sha256":"089154c06a7d98c4b88fa749eba121a90b5e467a982d58eb54b87e1aa0c8d7fe"},"schema_version":"1.0"},"canonical_sha256":"a38c71aa3d82bee98ad513c86ba10dd1450f8c203ddd7ce2643eaf91eaf019d4","source":{"kind":"arxiv","id":"1812.01804","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1812.01804","created_at":"2026-07-05T00:34:36Z"},{"alias_kind":"arxiv_version","alias_value":"1812.01804v4","created_at":"2026-07-05T00:34:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1812.01804","created_at":"2026-07-05T00:34:36Z"},{"alias_kind":"pith_short_12","alias_value":"UOGHDKR5QK7O","created_at":"2026-07-05T00:34:36Z"},{"alias_kind":"pith_short_16","alias_value":"UOGHDKR5QK7OTCWV","created_at":"2026-07-05T00:34:36Z"},{"alias_kind":"pith_short_8","alias_value":"UOGHDKR5","created_at":"2026-07-05T00:34:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:UOGHDKR5QK7OTCWVCPEGXIIN2F","target":"record","payload":{"canonical_record":{"source":{"id":"1812.01804","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-12-05T03:31:07Z","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"title_canon_sha256":"f4e8d4ac97a2919221cff67f55386a349ccfcaf73c27be8fda86f1d1ac03949f","abstract_canon_sha256":"089154c06a7d98c4b88fa749eba121a90b5e467a982d58eb54b87e1aa0c8d7fe"},"schema_version":"1.0"},"canonical_sha256":"a38c71aa3d82bee98ad513c86ba10dd1450f8c203ddd7ce2643eaf91eaf019d4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:34:36.463854Z","signature_b64":"DuAOnEBkmAhEKV170IIyCZLNn9zzJT1DNQCzXGOgKK1pF2kS6hcDsPu2iVf6xEfA2ImaZwb5lUEmm5qWNf84CA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a38c71aa3d82bee98ad513c86ba10dd1450f8c203ddd7ce2643eaf91eaf019d4","last_reissued_at":"2026-07-05T00:34:36.463377Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:34:36.463377Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1812.01804","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:34:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WDI+OHHu7cE29PXDKzxtDKeofC1mERkm9XYYMqQZ5eY3ZfbZgR9nX2SByWMXctROsCxz0PgdLmSF9mv3g5IWAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T12:17:12.429562Z"},"content_sha256":"8e0279625a108de10b4d08f5b1e55d1f0788c21bad55670a326257733821d501","schema_version":"1.0","event_id":"sha256:8e0279625a108de10b4d08f5b1e55d1f0788c21bad55670a326257733821d501"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:UOGHDKR5QK7OTCWVCPEGXIIN2F","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Random Spiking and Systematic Evaluation of Defenses Against Adversarial Examples","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Bruno Ribeiro, Huangyi Ge, Ninghui Li, Sze Yiu Chau","submitted_at":"2018-12-05T03:31:07Z","abstract_excerpt":"Image classifiers often suffer from adversarial examples, which are generated by strategically adding a small amount of noise to input images to trick classifiers into misclassification. Over the years, many defense mechanisms have been proposed, and different researchers have made seemingly contradictory claims on their effectiveness. We present an analysis of possible adversarial models, and propose an evaluation framework for comparing different defense mechanisms. As part of the framework, we introduce a more powerful and realistic adversary strategy. Furthermore, we propose a new defense "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1812.01804","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1812.01804/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:34:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Xgq7ro6xwNYtQ+aE/VoIduCBjSQl7DjmHVhv26w3Qt4tLs5HnFW7MVaIQhJktc1FZw6Shu1w2mQTo21ShngsCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T12:17:12.430527Z"},"content_sha256":"a7dc7169c92298697b13a3d6d7e69d8a0030a327a162a01a033667ecadcefd15","schema_version":"1.0","event_id":"sha256:a7dc7169c92298697b13a3d6d7e69d8a0030a327a162a01a033667ecadcefd15"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UOGHDKR5QK7OTCWVCPEGXIIN2F/bundle.json","state_url":"https://pith.science/pith/UOGHDKR5QK7OTCWVCPEGXIIN2F/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UOGHDKR5QK7OTCWVCPEGXIIN2F/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T12:17:12Z","links":{"resolver":"https://pith.science/pith/UOGHDKR5QK7OTCWVCPEGXIIN2F","bundle":"https://pith.science/pith/UOGHDKR5QK7OTCWVCPEGXIIN2F/bundle.json","state":"https://pith.science/pith/UOGHDKR5QK7OTCWVCPEGXIIN2F/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UOGHDKR5QK7OTCWVCPEGXIIN2F/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:UOGHDKR5QK7OTCWVCPEGXIIN2F","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"089154c06a7d98c4b88fa749eba121a90b5e467a982d58eb54b87e1aa0c8d7fe","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-12-05T03:31:07Z","title_canon_sha256":"f4e8d4ac97a2919221cff67f55386a349ccfcaf73c27be8fda86f1d1ac03949f"},"schema_version":"1.0","source":{"id":"1812.01804","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1812.01804","created_at":"2026-07-05T00:34:36Z"},{"alias_kind":"arxiv_version","alias_value":"1812.01804v4","created_at":"2026-07-05T00:34:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1812.01804","created_at":"2026-07-05T00:34:36Z"},{"alias_kind":"pith_short_12","alias_value":"UOGHDKR5QK7O","created_at":"2026-07-05T00:34:36Z"},{"alias_kind":"pith_short_16","alias_value":"UOGHDKR5QK7OTCWV","created_at":"2026-07-05T00:34:36Z"},{"alias_kind":"pith_short_8","alias_value":"UOGHDKR5","created_at":"2026-07-05T00:34:36Z"}],"graph_snapshots":[{"event_id":"sha256:a7dc7169c92298697b13a3d6d7e69d8a0030a327a162a01a033667ecadcefd15","target":"graph","created_at":"2026-07-05T00:34:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1812.01804/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Image classifiers often suffer from adversarial examples, which are generated by strategically adding a small amount of noise to input images to trick classifiers into misclassification. Over the years, many defense mechanisms have been proposed, and different researchers have made seemingly contradictory claims on their effectiveness. We present an analysis of possible adversarial models, and propose an evaluation framework for comparing different defense mechanisms. As part of the framework, we introduce a more powerful and realistic adversary strategy. Furthermore, we propose a new defense ","authors_text":"Bruno Ribeiro, Huangyi Ge, Ninghui Li, Sze Yiu Chau","cross_cats":["cs.AI","cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-12-05T03:31:07Z","title":"Random Spiking and Systematic Evaluation of Defenses Against Adversarial Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1812.01804","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8e0279625a108de10b4d08f5b1e55d1f0788c21bad55670a326257733821d501","target":"record","created_at":"2026-07-05T00:34:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"089154c06a7d98c4b88fa749eba121a90b5e467a982d58eb54b87e1aa0c8d7fe","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-12-05T03:31:07Z","title_canon_sha256":"f4e8d4ac97a2919221cff67f55386a349ccfcaf73c27be8fda86f1d1ac03949f"},"schema_version":"1.0","source":{"id":"1812.01804","kind":"arxiv","version":4}},"canonical_sha256":"a38c71aa3d82bee98ad513c86ba10dd1450f8c203ddd7ce2643eaf91eaf019d4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a38c71aa3d82bee98ad513c86ba10dd1450f8c203ddd7ce2643eaf91eaf019d4","first_computed_at":"2026-07-05T00:34:36.463377Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:34:36.463377Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"DuAOnEBkmAhEKV170IIyCZLNn9zzJT1DNQCzXGOgKK1pF2kS6hcDsPu2iVf6xEfA2ImaZwb5lUEmm5qWNf84CA==","signature_status":"signed_v1","signed_at":"2026-07-05T00:34:36.463854Z","signed_message":"canonical_sha256_bytes"},"source_id":"1812.01804","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8e0279625a108de10b4d08f5b1e55d1f0788c21bad55670a326257733821d501","sha256:a7dc7169c92298697b13a3d6d7e69d8a0030a327a162a01a033667ecadcefd15"],"state_sha256":"231e0d250ba5593940087e9d16f94f2c7b495e153e1cdc1ce116b061d7e58f4c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Qwq+7yo4j1+FH0wXpM5uzRRTXevIQWQomYLcWFyr3TCBiTicik8HvV058AC0ykHWBWik3nCEtT13W4JCq6G5AA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T12:17:12.467965Z","bundle_sha256":"fe2ae89fe1435df398f0ff262a0085d37a98d8a86e2d0fe0ac0bd92c05782f1f"}}