{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:WKFE55BDXPK56CH5J7YZVVJBQY","short_pith_number":"pith:WKFE55BD","canonical_record":{"source":{"id":"2207.01156","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-07-04T01:39:37Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"b50762d6e05615ad884be8c325354266b63f146312f6c366bf9b15ab5be3e628","abstract_canon_sha256":"1cbd039acfc15b4e064a66dde9eac842224393d3fcf3057edd0cb3357b4ffe66"},"schema_version":"1.0"},"canonical_sha256":"b28a4ef423bbd5df08fd4ff19ad521862b0589b4e43d30f2726d857e5c902236","source":{"kind":"arxiv","id":"2207.01156","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.01156","created_at":"2026-07-05T04:37:08Z"},{"alias_kind":"arxiv_version","alias_value":"2207.01156v1","created_at":"2026-07-05T04:37:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.01156","created_at":"2026-07-05T04:37:08Z"},{"alias_kind":"pith_short_12","alias_value":"WKFE55BDXPK5","created_at":"2026-07-05T04:37:08Z"},{"alias_kind":"pith_short_16","alias_value":"WKFE55BDXPK56CH5","created_at":"2026-07-05T04:37:08Z"},{"alias_kind":"pith_short_8","alias_value":"WKFE55BD","created_at":"2026-07-05T04:37:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:WKFE55BDXPK56CH5J7YZVVJBQY","target":"record","payload":{"canonical_record":{"source":{"id":"2207.01156","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-07-04T01:39:37Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"b50762d6e05615ad884be8c325354266b63f146312f6c366bf9b15ab5be3e628","abstract_canon_sha256":"1cbd039acfc15b4e064a66dde9eac842224393d3fcf3057edd0cb3357b4ffe66"},"schema_version":"1.0"},"canonical_sha256":"b28a4ef423bbd5df08fd4ff19ad521862b0589b4e43d30f2726d857e5c902236","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:37:08.539493Z","signature_b64":"cTnVYHqj5R0JTGx/HSZfq0q28V1eE1cCBFgQfSYsNOlHdVOeAsrC3B4vNA4Yru3bbqc+G8ihwp7ynSrh+EawDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b28a4ef423bbd5df08fd4ff19ad521862b0589b4e43d30f2726d857e5c902236","last_reissued_at":"2026-07-05T04:37:08.539077Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:37:08.539077Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2207.01156","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:37:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fhOxPlzt95m/G1F8j9u7gbtWUaDzIyGKbgE5gWa1BPcpWiuHCnn/AzwkETvHByq4TZydizI9d63a1tbs2sZ8DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T18:35:00.474625Z"},"content_sha256":"37ae1dd81cc7569428b922d44d2f1424cfbf0ccc480ae178b49b4c9ed16a9abc","schema_version":"1.0","event_id":"sha256:37ae1dd81cc7569428b922d44d2f1424cfbf0ccc480ae178b49b4c9ed16a9abc"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:WKFE55BDXPK56CH5J7YZVVJBQY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Removing Batch Normalization Boosts Adversarial Training","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.LG","authors_text":"Aston Zhang, Haotao Wang, Mu Li, Shuai Zheng, Xingjian Shi, Zhangyang Wang","submitted_at":"2022-07-04T01:39:37Z","abstract_excerpt":"Adversarial training (AT) defends deep neural networks against adversarial attacks. One challenge that limits its practical application is the performance degradation on clean samples. A major bottleneck identified by previous works is the widely used batch normalization (BN), which struggles to model the different statistics of clean and adversarial training samples in AT. Although the dominant approach is to extend BN to capture this mixture of distribution, we propose to completely eliminate this bottleneck by removing all BN layers in AT. Our normalizer-free robust training (NoFrost) metho"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.01156","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2207.01156/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:37:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Thj5Nqw7jXwIdkybiMNevhZzjenZ6eS8VFk/sLzhf6n9aQJyC8j98O6FbqjoxCHlHiICor3Xez6XtU9wlwgqAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T18:35:00.475137Z"},"content_sha256":"6d41534214c339345002c1f3bb5174e5030aae24592ff9c3a59f8f0f729c0884","schema_version":"1.0","event_id":"sha256:6d41534214c339345002c1f3bb5174e5030aae24592ff9c3a59f8f0f729c0884"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WKFE55BDXPK56CH5J7YZVVJBQY/bundle.json","state_url":"https://pith.science/pith/WKFE55BDXPK56CH5J7YZVVJBQY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WKFE55BDXPK56CH5J7YZVVJBQY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T18:35:00Z","links":{"resolver":"https://pith.science/pith/WKFE55BDXPK56CH5J7YZVVJBQY","bundle":"https://pith.science/pith/WKFE55BDXPK56CH5J7YZVVJBQY/bundle.json","state":"https://pith.science/pith/WKFE55BDXPK56CH5J7YZVVJBQY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WKFE55BDXPK56CH5J7YZVVJBQY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:WKFE55BDXPK56CH5J7YZVVJBQY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1cbd039acfc15b4e064a66dde9eac842224393d3fcf3057edd0cb3357b4ffe66","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-07-04T01:39:37Z","title_canon_sha256":"b50762d6e05615ad884be8c325354266b63f146312f6c366bf9b15ab5be3e628"},"schema_version":"1.0","source":{"id":"2207.01156","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.01156","created_at":"2026-07-05T04:37:08Z"},{"alias_kind":"arxiv_version","alias_value":"2207.01156v1","created_at":"2026-07-05T04:37:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.01156","created_at":"2026-07-05T04:37:08Z"},{"alias_kind":"pith_short_12","alias_value":"WKFE55BDXPK5","created_at":"2026-07-05T04:37:08Z"},{"alias_kind":"pith_short_16","alias_value":"WKFE55BDXPK56CH5","created_at":"2026-07-05T04:37:08Z"},{"alias_kind":"pith_short_8","alias_value":"WKFE55BD","created_at":"2026-07-05T04:37:08Z"}],"graph_snapshots":[{"event_id":"sha256:6d41534214c339345002c1f3bb5174e5030aae24592ff9c3a59f8f0f729c0884","target":"graph","created_at":"2026-07-05T04:37:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2207.01156/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial training (AT) defends deep neural networks against adversarial attacks. One challenge that limits its practical application is the performance degradation on clean samples. A major bottleneck identified by previous works is the widely used batch normalization (BN), which struggles to model the different statistics of clean and adversarial training samples in AT. Although the dominant approach is to extend BN to capture this mixture of distribution, we propose to completely eliminate this bottleneck by removing all BN layers in AT. Our normalizer-free robust training (NoFrost) metho","authors_text":"Aston Zhang, Haotao Wang, Mu Li, Shuai Zheng, Xingjian Shi, Zhangyang Wang","cross_cats":["cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-07-04T01:39:37Z","title":"Removing Batch Normalization Boosts Adversarial Training"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.01156","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:37ae1dd81cc7569428b922d44d2f1424cfbf0ccc480ae178b49b4c9ed16a9abc","target":"record","created_at":"2026-07-05T04:37:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1cbd039acfc15b4e064a66dde9eac842224393d3fcf3057edd0cb3357b4ffe66","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-07-04T01:39:37Z","title_canon_sha256":"b50762d6e05615ad884be8c325354266b63f146312f6c366bf9b15ab5be3e628"},"schema_version":"1.0","source":{"id":"2207.01156","kind":"arxiv","version":1}},"canonical_sha256":"b28a4ef423bbd5df08fd4ff19ad521862b0589b4e43d30f2726d857e5c902236","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b28a4ef423bbd5df08fd4ff19ad521862b0589b4e43d30f2726d857e5c902236","first_computed_at":"2026-07-05T04:37:08.539077Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:37:08.539077Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cTnVYHqj5R0JTGx/HSZfq0q28V1eE1cCBFgQfSYsNOlHdVOeAsrC3B4vNA4Yru3bbqc+G8ihwp7ynSrh+EawDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T04:37:08.539493Z","signed_message":"canonical_sha256_bytes"},"source_id":"2207.01156","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:37ae1dd81cc7569428b922d44d2f1424cfbf0ccc480ae178b49b4c9ed16a9abc","sha256:6d41534214c339345002c1f3bb5174e5030aae24592ff9c3a59f8f0f729c0884"],"state_sha256":"428b5d1a32b4308ece4e2c1f83cc4fa8d24c5adc50c2352b85e1de76dc6c790b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"laH+nIVdggIjaGgsyKkJTu9bxOM8Or/D5/FiCLBXK+IBeziXFQjuskaRYDSQ7rxCRiN7noPj3PzaKYIWHDHkBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T18:35:00.479869Z","bundle_sha256":"5292a330d7fe0c078b3cf6e0400904818fe32c6ddce33798d386db371736422f"}}