{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:W62AV5SDQPVRVLXZTCU7XSZ7U3","short_pith_number":"pith:W62AV5SD","canonical_record":{"source":{"id":"2306.14262","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-06-25T14:47:03Z","cross_cats_sorted":[],"title_canon_sha256":"8002c1b9e98e71961496b063bd3b60de1a528e5e05e055359aa51238a339b080","abstract_canon_sha256":"62410ba136f81ad6ef03f0098c181b9a7b64b4cfbd0fede701181e5094fe686d"},"schema_version":"1.0"},"canonical_sha256":"b7b40af64383eb1aaef998a9fbcb3fa6d94f6625087b43cd9d8cf114c4253be2","source":{"kind":"arxiv","id":"2306.14262","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.14262","created_at":"2026-07-05T06:24:34Z"},{"alias_kind":"arxiv_version","alias_value":"2306.14262v1","created_at":"2026-07-05T06:24:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.14262","created_at":"2026-07-05T06:24:34Z"},{"alias_kind":"pith_short_12","alias_value":"W62AV5SDQPVR","created_at":"2026-07-05T06:24:34Z"},{"alias_kind":"pith_short_16","alias_value":"W62AV5SDQPVRVLXZ","created_at":"2026-07-05T06:24:34Z"},{"alias_kind":"pith_short_8","alias_value":"W62AV5SD","created_at":"2026-07-05T06:24:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:W62AV5SDQPVRVLXZTCU7XSZ7U3","target":"record","payload":{"canonical_record":{"source":{"id":"2306.14262","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-06-25T14:47:03Z","cross_cats_sorted":[],"title_canon_sha256":"8002c1b9e98e71961496b063bd3b60de1a528e5e05e055359aa51238a339b080","abstract_canon_sha256":"62410ba136f81ad6ef03f0098c181b9a7b64b4cfbd0fede701181e5094fe686d"},"schema_version":"1.0"},"canonical_sha256":"b7b40af64383eb1aaef998a9fbcb3fa6d94f6625087b43cd9d8cf114c4253be2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:24:34.184364Z","signature_b64":"yZ+pGtfzV3BRM7HHx4cCqEP+2Cgd4Zr/nHC1/s0jDcEKnMXoN9JGeoyLMe1+76Kh0UG5lgEZfJzD0wKfWy8xCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b7b40af64383eb1aaef998a9fbcb3fa6d94f6625087b43cd9d8cf114c4253be2","last_reissued_at":"2026-07-05T06:24:34.183912Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:24:34.183912Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.14262","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:24:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SReT0rpW8LJr+AkbOhErfSK6FbPbMcAnJAMRBbLSHQFJd4AaTe7oKMGsQgg/Z+onIjnWSl68uSdFmj/EAoeOCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-20T16:09:21.752300Z"},"content_sha256":"2c519469ef5cdb57f12fa8e5233c3a45bd409989b58ffbaf09d41fe19b9a5f77","schema_version":"1.0","event_id":"sha256:2c519469ef5cdb57f12fa8e5233c3a45bd409989b58ffbaf09d41fe19b9a5f77"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:W62AV5SDQPVRVLXZTCU7XSZ7U3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Spectral Perspective towards Understanding and Improving Adversarial Robustness","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Binxiao Huang, Chaofan Tao, Ngai Wong, Rui Lin","submitted_at":"2023-06-25T14:47:03Z","abstract_excerpt":"Deep neural networks (DNNs) are incredibly vulnerable to crafted, imperceptible adversarial perturbations. While adversarial training (AT) has proven to be an effective defense approach, the AT mechanism for robustness improvement is not fully understood. This work investigates AT from a spectral perspective, adding new insights to the design of effective defenses. In particular, we show that AT induces the deep model to focus more on the low-frequency region, which retains the shape-biased representations, to gain robustness. Further, we find that the spectrum of a white-box attack is primari"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.14262","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.14262/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:24:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IAnKVqe73H6e0aiQS1ZEtwgI9D4cvzpU8jYft/wzTg15GQXmaz6Tz+uIoESwEUYrqPscv8m8s/CSxPhc1G2rAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-20T16:09:21.752688Z"},"content_sha256":"bf474531c02986350f9e78d403d1f9f8ec4a1ea34055a4f36d0391fa48bf459b","schema_version":"1.0","event_id":"sha256:bf474531c02986350f9e78d403d1f9f8ec4a1ea34055a4f36d0391fa48bf459b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/W62AV5SDQPVRVLXZTCU7XSZ7U3/bundle.json","state_url":"https://pith.science/pith/W62AV5SDQPVRVLXZTCU7XSZ7U3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/W62AV5SDQPVRVLXZTCU7XSZ7U3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-20T16:09:21Z","links":{"resolver":"https://pith.science/pith/W62AV5SDQPVRVLXZTCU7XSZ7U3","bundle":"https://pith.science/pith/W62AV5SDQPVRVLXZTCU7XSZ7U3/bundle.json","state":"https://pith.science/pith/W62AV5SDQPVRVLXZTCU7XSZ7U3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/W62AV5SDQPVRVLXZTCU7XSZ7U3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:W62AV5SDQPVRVLXZTCU7XSZ7U3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"62410ba136f81ad6ef03f0098c181b9a7b64b4cfbd0fede701181e5094fe686d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-06-25T14:47:03Z","title_canon_sha256":"8002c1b9e98e71961496b063bd3b60de1a528e5e05e055359aa51238a339b080"},"schema_version":"1.0","source":{"id":"2306.14262","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.14262","created_at":"2026-07-05T06:24:34Z"},{"alias_kind":"arxiv_version","alias_value":"2306.14262v1","created_at":"2026-07-05T06:24:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.14262","created_at":"2026-07-05T06:24:34Z"},{"alias_kind":"pith_short_12","alias_value":"W62AV5SDQPVR","created_at":"2026-07-05T06:24:34Z"},{"alias_kind":"pith_short_16","alias_value":"W62AV5SDQPVRVLXZ","created_at":"2026-07-05T06:24:34Z"},{"alias_kind":"pith_short_8","alias_value":"W62AV5SD","created_at":"2026-07-05T06:24:34Z"}],"graph_snapshots":[{"event_id":"sha256:bf474531c02986350f9e78d403d1f9f8ec4a1ea34055a4f36d0391fa48bf459b","target":"graph","created_at":"2026-07-05T06:24:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.14262/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) are incredibly vulnerable to crafted, imperceptible adversarial perturbations. While adversarial training (AT) has proven to be an effective defense approach, the AT mechanism for robustness improvement is not fully understood. This work investigates AT from a spectral perspective, adding new insights to the design of effective defenses. In particular, we show that AT induces the deep model to focus more on the low-frequency region, which retains the shape-biased representations, to gain robustness. Further, we find that the spectrum of a white-box attack is primari","authors_text":"Binxiao Huang, Chaofan Tao, Ngai Wong, Rui Lin","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-06-25T14:47:03Z","title":"A Spectral Perspective towards Understanding and Improving Adversarial Robustness"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.14262","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2c519469ef5cdb57f12fa8e5233c3a45bd409989b58ffbaf09d41fe19b9a5f77","target":"record","created_at":"2026-07-05T06:24:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"62410ba136f81ad6ef03f0098c181b9a7b64b4cfbd0fede701181e5094fe686d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-06-25T14:47:03Z","title_canon_sha256":"8002c1b9e98e71961496b063bd3b60de1a528e5e05e055359aa51238a339b080"},"schema_version":"1.0","source":{"id":"2306.14262","kind":"arxiv","version":1}},"canonical_sha256":"b7b40af64383eb1aaef998a9fbcb3fa6d94f6625087b43cd9d8cf114c4253be2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b7b40af64383eb1aaef998a9fbcb3fa6d94f6625087b43cd9d8cf114c4253be2","first_computed_at":"2026-07-05T06:24:34.183912Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:24:34.183912Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"yZ+pGtfzV3BRM7HHx4cCqEP+2Cgd4Zr/nHC1/s0jDcEKnMXoN9JGeoyLMe1+76Kh0UG5lgEZfJzD0wKfWy8xCA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:24:34.184364Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.14262","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2c519469ef5cdb57f12fa8e5233c3a45bd409989b58ffbaf09d41fe19b9a5f77","sha256:bf474531c02986350f9e78d403d1f9f8ec4a1ea34055a4f36d0391fa48bf459b"],"state_sha256":"cb55cc98ada5489f74195dbbd33ec9800934152d4faaf1b15acba2891bbe94d4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xoZp7KbFziJQtkXC3C+tH/zqgW3rFY0UW2Jm3r7r9i+PgWI3lTWZSh4KMfJV+xmhb6TMPZNTTuWB+eNq9rCxAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-20T16:09:21.755137Z","bundle_sha256":"f5682ab782b7f3f4d6c9c8538fea57620f053933babab1185642f828fecbc4dd"}}