{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:VFH3DGRO34V3IVYAPV6ITPLYEH","short_pith_number":"pith:VFH3DGRO","canonical_record":{"source":{"id":"1906.04584","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-09T15:55:21Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"6b54959cbb8fc9e18139e9fb257850a9f7995299c268152f6136987b470d5387","abstract_canon_sha256":"debf23dfd41418720ee8631f900f110e3c9768471a2b5b42fb4980adab3b4f90"},"schema_version":"1.0"},"canonical_sha256":"a94fb19a2edf2bb457007d7c89bd7821c03256e684bcdee758d81a1905396d68","source":{"kind":"arxiv","id":"1906.04584","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1906.04584","created_at":"2026-07-05T00:32:38Z"},{"alias_kind":"arxiv_version","alias_value":"1906.04584v5","created_at":"2026-07-05T00:32:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1906.04584","created_at":"2026-07-05T00:32:38Z"},{"alias_kind":"pith_short_12","alias_value":"VFH3DGRO34V3","created_at":"2026-07-05T00:32:38Z"},{"alias_kind":"pith_short_16","alias_value":"VFH3DGRO34V3IVYA","created_at":"2026-07-05T00:32:38Z"},{"alias_kind":"pith_short_8","alias_value":"VFH3DGRO","created_at":"2026-07-05T00:32:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:VFH3DGRO34V3IVYAPV6ITPLYEH","target":"record","payload":{"canonical_record":{"source":{"id":"1906.04584","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-09T15:55:21Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"6b54959cbb8fc9e18139e9fb257850a9f7995299c268152f6136987b470d5387","abstract_canon_sha256":"debf23dfd41418720ee8631f900f110e3c9768471a2b5b42fb4980adab3b4f90"},"schema_version":"1.0"},"canonical_sha256":"a94fb19a2edf2bb457007d7c89bd7821c03256e684bcdee758d81a1905396d68","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:32:38.311981Z","signature_b64":"7S6kZuPbOX1havhyM8WVM8VALY0QbTyv6+rXrZWJBL3VPg9EqzEPkCMxZg16Dv/if9osLKuVjYDZ5b3qnKBtBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a94fb19a2edf2bb457007d7c89bd7821c03256e684bcdee758d81a1905396d68","last_reissued_at":"2026-07-05T00:32:38.311492Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:32:38.311492Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1906.04584","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:32:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"A8X2PWjitIHcy9NHlnw7/liP2EIyNTty6NkeHZmnvZUdK1z8z1/6HLJr3wuyz84HDEl2P4iqUNFsg61c8wDtAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T17:01:55.262220Z"},"content_sha256":"4901f3697b645265e3cc5f182f4bde18c547789bdc746722cf3ea97429010c79","schema_version":"1.0","event_id":"sha256:4901f3697b645265e3cc5f182f4bde18c547789bdc746722cf3ea97429010c79"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:VFH3DGRO34V3IVYAPV6ITPLYEH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Greg Yang, Hadi Salman, Huan Zhang, Ilya Razenshteyn, Jerry Li, Pengchuan Zhang, Sebastien Bubeck","submitted_at":"2019-06-09T15:55:21Z","abstract_excerpt":"Recent works have shown the effectiveness of randomized smoothing as a scalable technique for building neural network-based classifiers that are provably robust to $\\ell_2$-norm adversarial perturbations. In this paper, we employ adversarial training to improve the performance of randomized smoothing. We design an adapted attack for smoothed classifiers, and we show how this attack can be used in an adversarial training setting to boost the provable robustness of smoothed classifiers. We demonstrate through extensive experimentation that our method consistently outperforms all existing provabl"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1906.04584","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1906.04584/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:32:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1AOC5ZhSQSG8vJk/9rDdQBY7oyDR8COBnO238SlBgH25MmTX8c1UKR6OiKUtt3LqhkFz+IA03MhKeNlsPRTTAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T17:01:55.262918Z"},"content_sha256":"6efd76ea4c0c52154ab433b441e8007edec75dd323b96f6b81384b523cf250a6","schema_version":"1.0","event_id":"sha256:6efd76ea4c0c52154ab433b441e8007edec75dd323b96f6b81384b523cf250a6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VFH3DGRO34V3IVYAPV6ITPLYEH/bundle.json","state_url":"https://pith.science/pith/VFH3DGRO34V3IVYAPV6ITPLYEH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VFH3DGRO34V3IVYAPV6ITPLYEH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T17:01:55Z","links":{"resolver":"https://pith.science/pith/VFH3DGRO34V3IVYAPV6ITPLYEH","bundle":"https://pith.science/pith/VFH3DGRO34V3IVYAPV6ITPLYEH/bundle.json","state":"https://pith.science/pith/VFH3DGRO34V3IVYAPV6ITPLYEH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VFH3DGRO34V3IVYAPV6ITPLYEH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:VFH3DGRO34V3IVYAPV6ITPLYEH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"debf23dfd41418720ee8631f900f110e3c9768471a2b5b42fb4980adab3b4f90","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-09T15:55:21Z","title_canon_sha256":"6b54959cbb8fc9e18139e9fb257850a9f7995299c268152f6136987b470d5387"},"schema_version":"1.0","source":{"id":"1906.04584","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1906.04584","created_at":"2026-07-05T00:32:38Z"},{"alias_kind":"arxiv_version","alias_value":"1906.04584v5","created_at":"2026-07-05T00:32:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1906.04584","created_at":"2026-07-05T00:32:38Z"},{"alias_kind":"pith_short_12","alias_value":"VFH3DGRO34V3","created_at":"2026-07-05T00:32:38Z"},{"alias_kind":"pith_short_16","alias_value":"VFH3DGRO34V3IVYA","created_at":"2026-07-05T00:32:38Z"},{"alias_kind":"pith_short_8","alias_value":"VFH3DGRO","created_at":"2026-07-05T00:32:38Z"}],"graph_snapshots":[{"event_id":"sha256:6efd76ea4c0c52154ab433b441e8007edec75dd323b96f6b81384b523cf250a6","target":"graph","created_at":"2026-07-05T00:32:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1906.04584/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent works have shown the effectiveness of randomized smoothing as a scalable technique for building neural network-based classifiers that are provably robust to $\\ell_2$-norm adversarial perturbations. In this paper, we employ adversarial training to improve the performance of randomized smoothing. We design an adapted attack for smoothed classifiers, and we show how this attack can be used in an adversarial training setting to boost the provable robustness of smoothed classifiers. We demonstrate through extensive experimentation that our method consistently outperforms all existing provabl","authors_text":"Greg Yang, Hadi Salman, Huan Zhang, Ilya Razenshteyn, Jerry Li, Pengchuan Zhang, Sebastien Bubeck","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-09T15:55:21Z","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1906.04584","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4901f3697b645265e3cc5f182f4bde18c547789bdc746722cf3ea97429010c79","target":"record","created_at":"2026-07-05T00:32:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"debf23dfd41418720ee8631f900f110e3c9768471a2b5b42fb4980adab3b4f90","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-09T15:55:21Z","title_canon_sha256":"6b54959cbb8fc9e18139e9fb257850a9f7995299c268152f6136987b470d5387"},"schema_version":"1.0","source":{"id":"1906.04584","kind":"arxiv","version":5}},"canonical_sha256":"a94fb19a2edf2bb457007d7c89bd7821c03256e684bcdee758d81a1905396d68","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a94fb19a2edf2bb457007d7c89bd7821c03256e684bcdee758d81a1905396d68","first_computed_at":"2026-07-05T00:32:38.311492Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:32:38.311492Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7S6kZuPbOX1havhyM8WVM8VALY0QbTyv6+rXrZWJBL3VPg9EqzEPkCMxZg16Dv/if9osLKuVjYDZ5b3qnKBtBA==","signature_status":"signed_v1","signed_at":"2026-07-05T00:32:38.311981Z","signed_message":"canonical_sha256_bytes"},"source_id":"1906.04584","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4901f3697b645265e3cc5f182f4bde18c547789bdc746722cf3ea97429010c79","sha256:6efd76ea4c0c52154ab433b441e8007edec75dd323b96f6b81384b523cf250a6"],"state_sha256":"3b6006b50758acbe08e6a27d47ce5408d090a11e6671349aec6d9f6193dbd477"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"T0MrcnB5nlUCYKd4YhskY4ha39GOKMGDfAFeeqLL+rIEHsZnXxF1SmrM1eE+/7tjX84JvKnfPbeAeYg+0aveCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T17:01:55.268268Z","bundle_sha256":"fcc784b85b65ad6fcb7798fa48e96756d00da60bd0a0a7d74f140d6724547735"}}