{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:VEG56VUJYGGKIWTUKYRPGKRKES","short_pith_number":"pith:VEG56VUJ","canonical_record":{"source":{"id":"1908.07116","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-20T00:29:23Z","cross_cats_sorted":["cs.CV","stat.ML"],"title_canon_sha256":"e2a23c88dd9f45a0086c5207b4b3dc5b97d3d705513ddaa54de1eaddf4feda27","abstract_canon_sha256":"f78a1664bbfafc7248284f430cc44de28b5a6d9383e25cdf20a58f9dca2bdaf0"},"schema_version":"1.0"},"canonical_sha256":"a90ddf5689c18ca45a745622f32a2a248a8b419290ce967720fc8571115a0afb","source":{"kind":"arxiv","id":"1908.07116","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.07116","created_at":"2026-07-04T23:58:30Z"},{"alias_kind":"arxiv_version","alias_value":"1908.07116v1","created_at":"2026-07-04T23:58:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.07116","created_at":"2026-07-04T23:58:30Z"},{"alias_kind":"pith_short_12","alias_value":"VEG56VUJYGGK","created_at":"2026-07-04T23:58:30Z"},{"alias_kind":"pith_short_16","alias_value":"VEG56VUJYGGKIWTU","created_at":"2026-07-04T23:58:30Z"},{"alias_kind":"pith_short_8","alias_value":"VEG56VUJ","created_at":"2026-07-04T23:58:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:VEG56VUJYGGKIWTUKYRPGKRKES","target":"record","payload":{"canonical_record":{"source":{"id":"1908.07116","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-20T00:29:23Z","cross_cats_sorted":["cs.CV","stat.ML"],"title_canon_sha256":"e2a23c88dd9f45a0086c5207b4b3dc5b97d3d705513ddaa54de1eaddf4feda27","abstract_canon_sha256":"f78a1664bbfafc7248284f430cc44de28b5a6d9383e25cdf20a58f9dca2bdaf0"},"schema_version":"1.0"},"canonical_sha256":"a90ddf5689c18ca45a745622f32a2a248a8b419290ce967720fc8571115a0afb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-04T23:58:30.994699Z","signature_b64":"HjK0AH0SaESa/Ns5XHOl8Coar9A0e0LrWDIiuMFriD2vRJYuWnoNrX3hSNDcYqnxZwIl9S1JJYZYlh+e8/G1AQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a90ddf5689c18ca45a745622f32a2a248a8b419290ce967720fc8571115a0afb","last_reissued_at":"2026-07-04T23:58:30.994357Z","signature_status":"signed_v1","first_computed_at":"2026-07-04T23:58:30.994357Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1908.07116","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:58:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bYmMGWONBzNGdCRmX3CSWTd2mlJY0QaJrb/Bdy+udre7LQ3G3lXPFNtX6HUAQCXRmDJm9+obBrRhvJCTHjYkBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T19:26:31.531527Z"},"content_sha256":"a6bcc0be8f231ebf074d0f342f3f63599576855bffe2cb316a98c0c882d52516","schema_version":"1.0","event_id":"sha256:a6bcc0be8f231ebf074d0f342f3f63599576855bffe2cb316a98c0c882d52516"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:VEG56VUJYGGKIWTUKYRPGKRKES","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","stat.ML"],"primary_cat":"cs.LG","authors_text":"Brian Kulis, Peter Chin, Pin-Yu Chen, Siyue Wang, Xiao Wang, Xue Lin, Yanzhi Wang","submitted_at":"2019-08-20T00:29:23Z","abstract_excerpt":"Despite achieving remarkable success in various domains, recent studies have uncovered the vulnerability of deep neural networks to adversarial perturbations, creating concerns on model generalizability and new threats such as prediction-evasive misclassification or stealthy reprogramming. Among different defense proposals, stochastic network defenses such as random neuron activation pruning or random perturbation to layer inputs are shown to be promising for attack mitigation. However, one critical drawback of current defenses is that the robustness enhancement is at the cost of noticeable pe"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.07116","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1908.07116/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:58:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"j2m22dOR6Ysg7OI3MxkMN+F3S1L+E3SoTq4Q0X/I4lPbHFx2rHCw0B7kKh97SH/DrC87rn4A/JcW0nP/Y//5DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T19:26:31.532099Z"},"content_sha256":"92c308a773d48589a7e896a9fdca93794e98207f0306642974b6a69ab0f1a669","schema_version":"1.0","event_id":"sha256:92c308a773d48589a7e896a9fdca93794e98207f0306642974b6a69ab0f1a669"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VEG56VUJYGGKIWTUKYRPGKRKES/bundle.json","state_url":"https://pith.science/pith/VEG56VUJYGGKIWTUKYRPGKRKES/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VEG56VUJYGGKIWTUKYRPGKRKES/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T19:26:31Z","links":{"resolver":"https://pith.science/pith/VEG56VUJYGGKIWTUKYRPGKRKES","bundle":"https://pith.science/pith/VEG56VUJYGGKIWTUKYRPGKRKES/bundle.json","state":"https://pith.science/pith/VEG56VUJYGGKIWTUKYRPGKRKES/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VEG56VUJYGGKIWTUKYRPGKRKES/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:VEG56VUJYGGKIWTUKYRPGKRKES","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f78a1664bbfafc7248284f430cc44de28b5a6d9383e25cdf20a58f9dca2bdaf0","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-20T00:29:23Z","title_canon_sha256":"e2a23c88dd9f45a0086c5207b4b3dc5b97d3d705513ddaa54de1eaddf4feda27"},"schema_version":"1.0","source":{"id":"1908.07116","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.07116","created_at":"2026-07-04T23:58:30Z"},{"alias_kind":"arxiv_version","alias_value":"1908.07116v1","created_at":"2026-07-04T23:58:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.07116","created_at":"2026-07-04T23:58:30Z"},{"alias_kind":"pith_short_12","alias_value":"VEG56VUJYGGK","created_at":"2026-07-04T23:58:30Z"},{"alias_kind":"pith_short_16","alias_value":"VEG56VUJYGGKIWTU","created_at":"2026-07-04T23:58:30Z"},{"alias_kind":"pith_short_8","alias_value":"VEG56VUJ","created_at":"2026-07-04T23:58:30Z"}],"graph_snapshots":[{"event_id":"sha256:92c308a773d48589a7e896a9fdca93794e98207f0306642974b6a69ab0f1a669","target":"graph","created_at":"2026-07-04T23:58:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1908.07116/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Despite achieving remarkable success in various domains, recent studies have uncovered the vulnerability of deep neural networks to adversarial perturbations, creating concerns on model generalizability and new threats such as prediction-evasive misclassification or stealthy reprogramming. Among different defense proposals, stochastic network defenses such as random neuron activation pruning or random perturbation to layer inputs are shown to be promising for attack mitigation. However, one critical drawback of current defenses is that the robustness enhancement is at the cost of noticeable pe","authors_text":"Brian Kulis, Peter Chin, Pin-Yu Chen, Siyue Wang, Xiao Wang, Xue Lin, Yanzhi Wang","cross_cats":["cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.07116","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a6bcc0be8f231ebf074d0f342f3f63599576855bffe2cb316a98c0c882d52516","target":"record","created_at":"2026-07-04T23:58:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f78a1664bbfafc7248284f430cc44de28b5a6d9383e25cdf20a58f9dca2bdaf0","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-20T00:29:23Z","title_canon_sha256":"e2a23c88dd9f45a0086c5207b4b3dc5b97d3d705513ddaa54de1eaddf4feda27"},"schema_version":"1.0","source":{"id":"1908.07116","kind":"arxiv","version":1}},"canonical_sha256":"a90ddf5689c18ca45a745622f32a2a248a8b419290ce967720fc8571115a0afb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a90ddf5689c18ca45a745622f32a2a248a8b419290ce967720fc8571115a0afb","first_computed_at":"2026-07-04T23:58:30.994357Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-04T23:58:30.994357Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HjK0AH0SaESa/Ns5XHOl8Coar9A0e0LrWDIiuMFriD2vRJYuWnoNrX3hSNDcYqnxZwIl9S1JJYZYlh+e8/G1AQ==","signature_status":"signed_v1","signed_at":"2026-07-04T23:58:30.994699Z","signed_message":"canonical_sha256_bytes"},"source_id":"1908.07116","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a6bcc0be8f231ebf074d0f342f3f63599576855bffe2cb316a98c0c882d52516","sha256:92c308a773d48589a7e896a9fdca93794e98207f0306642974b6a69ab0f1a669"],"state_sha256":"ab92429af98b6f7b9c3eaca264ed0327f3bb4708dd051c7b5e0988f401ef1a95"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tNJIP+vA+ea8R0xjqlg8bw8UNNP+VVq0VORjhtAbI1Gr0h5AKKy1vwnWxOxWGqy/Z6B6epyRyTfcCs0s7Ol+BA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T19:26:31.535867Z","bundle_sha256":"5631492f2a81f7a9757e569493ab7e1b193ad2b7c876677eee191cee980531c9"}}