{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:V4FAX4SOOYZMULROCNSY4CYR5O","short_pith_number":"pith:V4FAX4SO","canonical_record":{"source":{"id":"2303.06151","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2023-03-09T22:07:41Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"d6b32534a6148cb0462148b51c0109c58965c3f9ddf2b315491b96a8913c5999","abstract_canon_sha256":"31981e8f3821c494f52c8e9e4da9285f45106f71145e5511974ea8752f031461"},"schema_version":"1.0"},"canonical_sha256":"af0a0bf24e7632ca2e2e13658e0b11eb90f63b8f1613d3a6f8481d83cb28ee42","source":{"kind":"arxiv","id":"2303.06151","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.06151","created_at":"2026-07-05T05:50:15Z"},{"alias_kind":"arxiv_version","alias_value":"2303.06151v1","created_at":"2026-07-05T05:50:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.06151","created_at":"2026-07-05T05:50:15Z"},{"alias_kind":"pith_short_12","alias_value":"V4FAX4SOOYZM","created_at":"2026-07-05T05:50:15Z"},{"alias_kind":"pith_short_16","alias_value":"V4FAX4SOOYZMULRO","created_at":"2026-07-05T05:50:15Z"},{"alias_kind":"pith_short_8","alias_value":"V4FAX4SO","created_at":"2026-07-05T05:50:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:V4FAX4SOOYZMULROCNSY4CYR5O","target":"record","payload":{"canonical_record":{"source":{"id":"2303.06151","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2023-03-09T22:07:41Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"d6b32534a6148cb0462148b51c0109c58965c3f9ddf2b315491b96a8913c5999","abstract_canon_sha256":"31981e8f3821c494f52c8e9e4da9285f45106f71145e5511974ea8752f031461"},"schema_version":"1.0"},"canonical_sha256":"af0a0bf24e7632ca2e2e13658e0b11eb90f63b8f1613d3a6f8481d83cb28ee42","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:50:15.247964Z","signature_b64":"q4/l2zYdfMZqvJZVKiV9ZnxKIcx5FidTF2Ghweoue8YIRh2ZIFkspX45ZOw7wWx6140RuCX22fZ5fZwMBs4SAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"af0a0bf24e7632ca2e2e13658e0b11eb90f63b8f1613d3a6f8481d83cb28ee42","last_reissued_at":"2026-07-05T05:50:15.247463Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:50:15.247463Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2303.06151","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:50:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3Hvy+geE2QWWYVXyaYsEE0kpqaeFhYP+trPJHTXX+sedIHgi5LJab3e+V1ROASIYorfDqUL7ajm6IzO5j7FwCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T03:12:40.044897Z"},"content_sha256":"f4f5423533a640cc7f3cfa043f34700372cd5d104c5c8852c33e5b1142b57f0c","schema_version":"1.0","event_id":"sha256:f4f5423533a640cc7f3cfa043f34700372cd5d104c5c8852c33e5b1142b57f0c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:V4FAX4SOOYZMULROCNSY4CYR5O","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"NoiseCAM: Explainable AI for the Boundary Between Noise and Adversarial Attacks","license":"http://creativecommons.org/publicdomain/zero/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Alvaro Velasquez, Fan Yang, Houbing Song, Jian Wang, Justus Renkhoff, Lusi Li, Shuteng Niu, Wenkai Tan, Yongxin Liu, Ziyu Wang","submitted_at":"2023-03-09T22:07:41Z","abstract_excerpt":"Deep Learning (DL) and Deep Neural Networks (DNNs) are widely used in various domains. However, adversarial attacks can easily mislead a neural network and lead to wrong decisions. Defense mechanisms are highly preferred in safety-critical applications. In this paper, firstly, we use the gradient class activation map (GradCAM) to analyze the behavior deviation of the VGG-16 network when its inputs are mixed with adversarial perturbation or Gaussian noise. In particular, our method can locate vulnerable layers that are sensitive to adversarial perturbation and Gaussian noise. We also show that "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.06151","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2303.06151/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:50:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mZmDGLFrsDSSNgzeXA4fiHYMvpudIgoFr3Uu7GFgX3GzxKrkNDp8Sn8T4xY0C9F9bvQsNpKXNlBdKoZO9fBzAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T03:12:40.045386Z"},"content_sha256":"a1799586ef2d90f265eb130ab975048a7227ddfb6dc6f3db739a0314d31749d4","schema_version":"1.0","event_id":"sha256:a1799586ef2d90f265eb130ab975048a7227ddfb6dc6f3db739a0314d31749d4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/V4FAX4SOOYZMULROCNSY4CYR5O/bundle.json","state_url":"https://pith.science/pith/V4FAX4SOOYZMULROCNSY4CYR5O/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/V4FAX4SOOYZMULROCNSY4CYR5O/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T03:12:40Z","links":{"resolver":"https://pith.science/pith/V4FAX4SOOYZMULROCNSY4CYR5O","bundle":"https://pith.science/pith/V4FAX4SOOYZMULROCNSY4CYR5O/bundle.json","state":"https://pith.science/pith/V4FAX4SOOYZMULROCNSY4CYR5O/state.json","well_known_bundle":"https://pith.science/.well-known/pith/V4FAX4SOOYZMULROCNSY4CYR5O/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:V4FAX4SOOYZMULROCNSY4CYR5O","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"31981e8f3821c494f52c8e9e4da9285f45106f71145e5511974ea8752f031461","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2023-03-09T22:07:41Z","title_canon_sha256":"d6b32534a6148cb0462148b51c0109c58965c3f9ddf2b315491b96a8913c5999"},"schema_version":"1.0","source":{"id":"2303.06151","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.06151","created_at":"2026-07-05T05:50:15Z"},{"alias_kind":"arxiv_version","alias_value":"2303.06151v1","created_at":"2026-07-05T05:50:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.06151","created_at":"2026-07-05T05:50:15Z"},{"alias_kind":"pith_short_12","alias_value":"V4FAX4SOOYZM","created_at":"2026-07-05T05:50:15Z"},{"alias_kind":"pith_short_16","alias_value":"V4FAX4SOOYZMULRO","created_at":"2026-07-05T05:50:15Z"},{"alias_kind":"pith_short_8","alias_value":"V4FAX4SO","created_at":"2026-07-05T05:50:15Z"}],"graph_snapshots":[{"event_id":"sha256:a1799586ef2d90f265eb130ab975048a7227ddfb6dc6f3db739a0314d31749d4","target":"graph","created_at":"2026-07-05T05:50:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2303.06151/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep Learning (DL) and Deep Neural Networks (DNNs) are widely used in various domains. However, adversarial attacks can easily mislead a neural network and lead to wrong decisions. Defense mechanisms are highly preferred in safety-critical applications. In this paper, firstly, we use the gradient class activation map (GradCAM) to analyze the behavior deviation of the VGG-16 network when its inputs are mixed with adversarial perturbation or Gaussian noise. In particular, our method can locate vulnerable layers that are sensitive to adversarial perturbation and Gaussian noise. We also show that ","authors_text":"Alvaro Velasquez, Fan Yang, Houbing Song, Jian Wang, Justus Renkhoff, Lusi Li, Shuteng Niu, Wenkai Tan, Yongxin Liu, Ziyu Wang","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2023-03-09T22:07:41Z","title":"NoiseCAM: Explainable AI for the Boundary Between Noise and Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.06151","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f4f5423533a640cc7f3cfa043f34700372cd5d104c5c8852c33e5b1142b57f0c","target":"record","created_at":"2026-07-05T05:50:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"31981e8f3821c494f52c8e9e4da9285f45106f71145e5511974ea8752f031461","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2023-03-09T22:07:41Z","title_canon_sha256":"d6b32534a6148cb0462148b51c0109c58965c3f9ddf2b315491b96a8913c5999"},"schema_version":"1.0","source":{"id":"2303.06151","kind":"arxiv","version":1}},"canonical_sha256":"af0a0bf24e7632ca2e2e13658e0b11eb90f63b8f1613d3a6f8481d83cb28ee42","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"af0a0bf24e7632ca2e2e13658e0b11eb90f63b8f1613d3a6f8481d83cb28ee42","first_computed_at":"2026-07-05T05:50:15.247463Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:50:15.247463Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"q4/l2zYdfMZqvJZVKiV9ZnxKIcx5FidTF2Ghweoue8YIRh2ZIFkspX45ZOw7wWx6140RuCX22fZ5fZwMBs4SAA==","signature_status":"signed_v1","signed_at":"2026-07-05T05:50:15.247964Z","signed_message":"canonical_sha256_bytes"},"source_id":"2303.06151","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f4f5423533a640cc7f3cfa043f34700372cd5d104c5c8852c33e5b1142b57f0c","sha256:a1799586ef2d90f265eb130ab975048a7227ddfb6dc6f3db739a0314d31749d4"],"state_sha256":"53d225db48bd0b90b3a0ea8df26ffcc8f0ce88ae1344606ef5d57783b4422dfe"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7Ve4+1v8dM3J8DgMl4aUCUgd1ddJ123ktZsnEc/bcJVrIrCWrZmn57zimQOl874owbOUFnJLKoVs4hAw/SC0Dg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T03:12:40.048541Z","bundle_sha256":"e767f237146eb4184cf50b7d5281bc36bbf9e4c086e650668c4deed18a2123fd"}}