{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:VSY5D4GE4N7SUFHMV3OW2YGVIC","short_pith_number":"pith:VSY5D4GE","canonical_record":{"source":{"id":"1709.03423","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2017-09-11T15:01:03Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"d65fc51385d0ebc21f822afabe54ecdede5f84df2534e6d0a6b01e818851f679","abstract_canon_sha256":"8c5e8b56dded939e864c7af23c2363432cae7a0493ca559ebb8dc20a94f4afa3"},"schema_version":"1.0"},"canonical_sha256":"acb1d1f0c4e37f2a14ecaedd6d60d5409d36e7068a8b5bfb0863fdcb52ab97d1","source":{"kind":"arxiv","id":"1709.03423","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1709.03423","created_at":"2026-05-18T00:24:04Z"},{"alias_kind":"arxiv_version","alias_value":"1709.03423v2","created_at":"2026-05-18T00:24:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1709.03423","created_at":"2026-05-18T00:24:04Z"},{"alias_kind":"pith_short_12","alias_value":"VSY5D4GE4N7S","created_at":"2026-05-18T12:31:49Z"},{"alias_kind":"pith_short_16","alias_value":"VSY5D4GE4N7SUFHM","created_at":"2026-05-18T12:31:49Z"},{"alias_kind":"pith_short_8","alias_value":"VSY5D4GE","created_at":"2026-05-18T12:31:49Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:VSY5D4GE4N7SUFHMV3OW2YGVIC","target":"record","payload":{"canonical_record":{"source":{"id":"1709.03423","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2017-09-11T15:01:03Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"d65fc51385d0ebc21f822afabe54ecdede5f84df2534e6d0a6b01e818851f679","abstract_canon_sha256":"8c5e8b56dded939e864c7af23c2363432cae7a0493ca559ebb8dc20a94f4afa3"},"schema_version":"1.0"},"canonical_sha256":"acb1d1f0c4e37f2a14ecaedd6d60d5409d36e7068a8b5bfb0863fdcb52ab97d1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:24:04.135462Z","signature_b64":"hT3yBgHjhgDsAOGkjncIFqjoc7hmTVJNmpIaJUVpcuYOBz1H+wtfn0Gg7ODiGjns9nLuqSpjCN7UYF/qtIoUAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"acb1d1f0c4e37f2a14ecaedd6d60d5409d36e7068a8b5bfb0863fdcb52ab97d1","last_reissued_at":"2026-05-18T00:24:04.134809Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:24:04.134809Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1709.03423","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:24:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3fuyWgBdEu3MAqbeoFVrGoa27Ip9lbzlNvI74aP/Q9W45el3fGW1JkKci6kYajhuovbAO+1dsF+TeGhhCB0BBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-07T23:56:55.409490Z"},"content_sha256":"4ec30acbb7ff79cc46b335064ed55d3bf97f825979611277b52ae493bc7fa7ee","schema_version":"1.0","event_id":"sha256:4ec30acbb7ff79cc46b335064ed55d3bf97f825979611277b52ae493bc7fa7ee"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:VSY5D4GE4N7SUFHMV3OW2YGVIC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Ensemble Methods as a Defense to Adversarial Perturbations Against Deep Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"stat.ML","authors_text":"Andrej Junginger, Holger Ulmer, Markus Hanselmann, Thilo Strauss","submitted_at":"2017-09-11T15:01:03Z","abstract_excerpt":"Deep learning has become the state of the art approach in many machine learning problems such as classification. It has recently been shown that deep learning is highly vulnerable to adversarial perturbations. Taking the camera systems of self-driving cars as an example, small adversarial perturbations can cause the system to make errors in important tasks, such as classifying traffic signs or detecting pedestrians. Hence, in order to use deep learning without safety concerns a proper defense strategy is required. We propose to use ensemble methods as a defense strategy against adversarial per"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1709.03423","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:24:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"U7B0hPOR+VctMCsez7fwyOGc+AgYwMMv1W0HSURNifigv3MSIhDOj0jRvwaHKzV5HdfFqWloBBL9sB0fa2fXAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-07T23:56:55.410199Z"},"content_sha256":"dc6ce54484d993dfb7a98f1910c0c65d69b8ca92be618ac1a7bad0d26a1b9b72","schema_version":"1.0","event_id":"sha256:dc6ce54484d993dfb7a98f1910c0c65d69b8ca92be618ac1a7bad0d26a1b9b72"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VSY5D4GE4N7SUFHMV3OW2YGVIC/bundle.json","state_url":"https://pith.science/pith/VSY5D4GE4N7SUFHMV3OW2YGVIC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VSY5D4GE4N7SUFHMV3OW2YGVIC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-07T23:56:55Z","links":{"resolver":"https://pith.science/pith/VSY5D4GE4N7SUFHMV3OW2YGVIC","bundle":"https://pith.science/pith/VSY5D4GE4N7SUFHMV3OW2YGVIC/bundle.json","state":"https://pith.science/pith/VSY5D4GE4N7SUFHMV3OW2YGVIC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VSY5D4GE4N7SUFHMV3OW2YGVIC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:VSY5D4GE4N7SUFHMV3OW2YGVIC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8c5e8b56dded939e864c7af23c2363432cae7a0493ca559ebb8dc20a94f4afa3","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2017-09-11T15:01:03Z","title_canon_sha256":"d65fc51385d0ebc21f822afabe54ecdede5f84df2534e6d0a6b01e818851f679"},"schema_version":"1.0","source":{"id":"1709.03423","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1709.03423","created_at":"2026-05-18T00:24:04Z"},{"alias_kind":"arxiv_version","alias_value":"1709.03423v2","created_at":"2026-05-18T00:24:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1709.03423","created_at":"2026-05-18T00:24:04Z"},{"alias_kind":"pith_short_12","alias_value":"VSY5D4GE4N7S","created_at":"2026-05-18T12:31:49Z"},{"alias_kind":"pith_short_16","alias_value":"VSY5D4GE4N7SUFHM","created_at":"2026-05-18T12:31:49Z"},{"alias_kind":"pith_short_8","alias_value":"VSY5D4GE","created_at":"2026-05-18T12:31:49Z"}],"graph_snapshots":[{"event_id":"sha256:dc6ce54484d993dfb7a98f1910c0c65d69b8ca92be618ac1a7bad0d26a1b9b72","target":"graph","created_at":"2026-05-18T00:24:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Deep learning has become the state of the art approach in many machine learning problems such as classification. It has recently been shown that deep learning is highly vulnerable to adversarial perturbations. Taking the camera systems of self-driving cars as an example, small adversarial perturbations can cause the system to make errors in important tasks, such as classifying traffic signs or detecting pedestrians. Hence, in order to use deep learning without safety concerns a proper defense strategy is required. We propose to use ensemble methods as a defense strategy against adversarial per","authors_text":"Andrej Junginger, Holger Ulmer, Markus Hanselmann, Thilo Strauss","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2017-09-11T15:01:03Z","title":"Ensemble Methods as a Defense to Adversarial Perturbations Against Deep Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1709.03423","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4ec30acbb7ff79cc46b335064ed55d3bf97f825979611277b52ae493bc7fa7ee","target":"record","created_at":"2026-05-18T00:24:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8c5e8b56dded939e864c7af23c2363432cae7a0493ca559ebb8dc20a94f4afa3","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2017-09-11T15:01:03Z","title_canon_sha256":"d65fc51385d0ebc21f822afabe54ecdede5f84df2534e6d0a6b01e818851f679"},"schema_version":"1.0","source":{"id":"1709.03423","kind":"arxiv","version":2}},"canonical_sha256":"acb1d1f0c4e37f2a14ecaedd6d60d5409d36e7068a8b5bfb0863fdcb52ab97d1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"acb1d1f0c4e37f2a14ecaedd6d60d5409d36e7068a8b5bfb0863fdcb52ab97d1","first_computed_at":"2026-05-18T00:24:04.134809Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:24:04.134809Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"hT3yBgHjhgDsAOGkjncIFqjoc7hmTVJNmpIaJUVpcuYOBz1H+wtfn0Gg7ODiGjns9nLuqSpjCN7UYF/qtIoUAA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:24:04.135462Z","signed_message":"canonical_sha256_bytes"},"source_id":"1709.03423","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4ec30acbb7ff79cc46b335064ed55d3bf97f825979611277b52ae493bc7fa7ee","sha256:dc6ce54484d993dfb7a98f1910c0c65d69b8ca92be618ac1a7bad0d26a1b9b72"],"state_sha256":"e674ec96b6caedf3a622b812dac457d9a53502b9f9c42d48a2e8187deecdec35"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"u6F4rJWjpH3fAvt2SvH3r0v8Xy9OExXWhdVmZdGKcWNmBu71eAchgTurTmtvVNINkWpw7Iw+0ksFgmpLZr5oAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-07T23:56:55.413953Z","bundle_sha256":"5f06918a1975d06f7864b9c9b6f5151a88a53e0d77a9c3cbe5dfc624c2ed9c46"}}