{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:W4VJZ7M33CJSCKCQAYTMMTS2EB","short_pith_number":"pith:W4VJZ7M3","canonical_record":{"source":{"id":"2301.13028","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-01-30T16:15:40Z","cross_cats_sorted":[],"title_canon_sha256":"b52e6aea331e68f568f2ddd7387e32a6b1d81d8c41eca7005f9d5144fdebd57d","abstract_canon_sha256":"5f4da8c65f35d7b191890fcd1aa4105a6cc4976ec7e043f416a4a2054513dac9"},"schema_version":"1.0"},"canonical_sha256":"b72a9cfd9bd8932128500626c64e5a207eb3706a903961d431ce2169e63e523e","source":{"kind":"arxiv","id":"2301.13028","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2301.13028","created_at":"2026-07-05T05:37:00Z"},{"alias_kind":"arxiv_version","alias_value":"2301.13028v1","created_at":"2026-07-05T05:37:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.13028","created_at":"2026-07-05T05:37:00Z"},{"alias_kind":"pith_short_12","alias_value":"W4VJZ7M33CJS","created_at":"2026-07-05T05:37:00Z"},{"alias_kind":"pith_short_16","alias_value":"W4VJZ7M33CJSCKCQ","created_at":"2026-07-05T05:37:00Z"},{"alias_kind":"pith_short_8","alias_value":"W4VJZ7M3","created_at":"2026-07-05T05:37:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:W4VJZ7M33CJSCKCQAYTMMTS2EB","target":"record","payload":{"canonical_record":{"source":{"id":"2301.13028","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-01-30T16:15:40Z","cross_cats_sorted":[],"title_canon_sha256":"b52e6aea331e68f568f2ddd7387e32a6b1d81d8c41eca7005f9d5144fdebd57d","abstract_canon_sha256":"5f4da8c65f35d7b191890fcd1aa4105a6cc4976ec7e043f416a4a2054513dac9"},"schema_version":"1.0"},"canonical_sha256":"b72a9cfd9bd8932128500626c64e5a207eb3706a903961d431ce2169e63e523e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:37:00.252560Z","signature_b64":"0SztlB27MqCUGVZPFOPZ5toIyG/2HPOLLuzC/PpuoviHpnH+wGAsf86IIG/1VWth+vVphkncUqeipXUULSwzDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b72a9cfd9bd8932128500626c64e5a207eb3706a903961d431ce2169e63e523e","last_reissued_at":"2026-07-05T05:37:00.252062Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:37:00.252062Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2301.13028","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:37:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KPoMPUdHbcOecmFNfwq+GgthM5wU9LP+jSaT9fpuMa9UQ+L9q7C6B2/UCAEIJmrWMJzuqI0WEyDGQUI6DWbkBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T14:13:44.218544Z"},"content_sha256":"56e6e2294ead893e3dae9ff5358e55d1f342e3ab30e8b491c08a22c9e57ca114","schema_version":"1.0","event_id":"sha256:56e6e2294ead893e3dae9ff5358e55d1f342e3ab30e8b491c08a22c9e57ca114"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:W4VJZ7M33CJSCKCQAYTMMTS2EB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Efficacy of Metrics to Describe Adversarial Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Andrea Ceccarelli, Tommaso Puccetti, Tommaso Zoppi","submitted_at":"2023-01-30T16:15:40Z","abstract_excerpt":"Adversarial defenses are naturally evaluated on their ability to tolerate adversarial attacks. To test defenses, diverse adversarial attacks are crafted, that are usually described in terms of their evading capability and the L0, L1, L2, and Linf norms. We question if the evading capability and L-norms are the most effective information to claim that defenses have been tested against a representative attack set. To this extent, we select image quality metrics from the state of the art and search correlations between image perturbation and detectability. We observe that computing L-norms alone "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.13028","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2301.13028/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:37:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PFbbtsz6q/+k/frXPKvLbpTmhW7v40y6HaovyMx1HWtGG0FZZzoaED6CxVWGtmtmjoiT278Voac2qJsU+/3QBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T14:13:44.219160Z"},"content_sha256":"d710df73ef04d40a0e1ebbadde1f6f7a173d98b065cfd9b40a4871e9e1784c0b","schema_version":"1.0","event_id":"sha256:d710df73ef04d40a0e1ebbadde1f6f7a173d98b065cfd9b40a4871e9e1784c0b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/W4VJZ7M33CJSCKCQAYTMMTS2EB/bundle.json","state_url":"https://pith.science/pith/W4VJZ7M33CJSCKCQAYTMMTS2EB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/W4VJZ7M33CJSCKCQAYTMMTS2EB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T14:13:44Z","links":{"resolver":"https://pith.science/pith/W4VJZ7M33CJSCKCQAYTMMTS2EB","bundle":"https://pith.science/pith/W4VJZ7M33CJSCKCQAYTMMTS2EB/bundle.json","state":"https://pith.science/pith/W4VJZ7M33CJSCKCQAYTMMTS2EB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/W4VJZ7M33CJSCKCQAYTMMTS2EB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:W4VJZ7M33CJSCKCQAYTMMTS2EB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5f4da8c65f35d7b191890fcd1aa4105a6cc4976ec7e043f416a4a2054513dac9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-01-30T16:15:40Z","title_canon_sha256":"b52e6aea331e68f568f2ddd7387e32a6b1d81d8c41eca7005f9d5144fdebd57d"},"schema_version":"1.0","source":{"id":"2301.13028","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2301.13028","created_at":"2026-07-05T05:37:00Z"},{"alias_kind":"arxiv_version","alias_value":"2301.13028v1","created_at":"2026-07-05T05:37:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.13028","created_at":"2026-07-05T05:37:00Z"},{"alias_kind":"pith_short_12","alias_value":"W4VJZ7M33CJS","created_at":"2026-07-05T05:37:00Z"},{"alias_kind":"pith_short_16","alias_value":"W4VJZ7M33CJSCKCQ","created_at":"2026-07-05T05:37:00Z"},{"alias_kind":"pith_short_8","alias_value":"W4VJZ7M3","created_at":"2026-07-05T05:37:00Z"}],"graph_snapshots":[{"event_id":"sha256:d710df73ef04d40a0e1ebbadde1f6f7a173d98b065cfd9b40a4871e9e1784c0b","target":"graph","created_at":"2026-07-05T05:37:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2301.13028/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial defenses are naturally evaluated on their ability to tolerate adversarial attacks. To test defenses, diverse adversarial attacks are crafted, that are usually described in terms of their evading capability and the L0, L1, L2, and Linf norms. We question if the evading capability and L-norms are the most effective information to claim that defenses have been tested against a representative attack set. To this extent, we select image quality metrics from the state of the art and search correlations between image perturbation and detectability. We observe that computing L-norms alone ","authors_text":"Andrea Ceccarelli, Tommaso Puccetti, Tommaso Zoppi","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-01-30T16:15:40Z","title":"On the Efficacy of Metrics to Describe Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.13028","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:56e6e2294ead893e3dae9ff5358e55d1f342e3ab30e8b491c08a22c9e57ca114","target":"record","created_at":"2026-07-05T05:37:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5f4da8c65f35d7b191890fcd1aa4105a6cc4976ec7e043f416a4a2054513dac9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-01-30T16:15:40Z","title_canon_sha256":"b52e6aea331e68f568f2ddd7387e32a6b1d81d8c41eca7005f9d5144fdebd57d"},"schema_version":"1.0","source":{"id":"2301.13028","kind":"arxiv","version":1}},"canonical_sha256":"b72a9cfd9bd8932128500626c64e5a207eb3706a903961d431ce2169e63e523e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b72a9cfd9bd8932128500626c64e5a207eb3706a903961d431ce2169e63e523e","first_computed_at":"2026-07-05T05:37:00.252062Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:37:00.252062Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"0SztlB27MqCUGVZPFOPZ5toIyG/2HPOLLuzC/PpuoviHpnH+wGAsf86IIG/1VWth+vVphkncUqeipXUULSwzDw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:37:00.252560Z","signed_message":"canonical_sha256_bytes"},"source_id":"2301.13028","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:56e6e2294ead893e3dae9ff5358e55d1f342e3ab30e8b491c08a22c9e57ca114","sha256:d710df73ef04d40a0e1ebbadde1f6f7a173d98b065cfd9b40a4871e9e1784c0b"],"state_sha256":"2a59cc4dda806e016075085bd920b64fb19fc9839f916564762fc5c709e635ca"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EM18RWjCYsqqNvNIQMyIi2CulgJ+DTbZKS8RDicd00VsyEL8nSCZY7spChTHXU6Ld7tcAk3ck1Q/s6HFYbllCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T14:13:44.230773Z","bundle_sha256":"4586badfcaeb501dd6d18a155f283e56927320fa808e7d3d9b28866da4c99ce8"}}