{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:WXVF65I6QTYOWLB7T3ULG4MUVV","short_pith_number":"pith:WXVF65I6","canonical_record":{"source":{"id":"1812.05793","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-12-14T06:04:04Z","cross_cats_sorted":["cs.SE","stat.ML"],"title_canon_sha256":"c08eeb8d739dcec3c5962da90ce18d16a9fd3e54ee9a4fb9aa33176d19e6c6ba","abstract_canon_sha256":"07af622d60c4bac90e20cbb59a0f62289ca0a6342e9c1daf9c7f45e47ae41316"},"schema_version":"1.0"},"canonical_sha256":"b5ea5f751e84f0eb2c3f9ee8b37194ad736746db7100fd334f265b559010ff99","source":{"kind":"arxiv","id":"1812.05793","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1812.05793","created_at":"2026-07-05T00:20:51Z"},{"alias_kind":"arxiv_version","alias_value":"1812.05793v2","created_at":"2026-07-05T00:20:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1812.05793","created_at":"2026-07-05T00:20:51Z"},{"alias_kind":"pith_short_12","alias_value":"WXVF65I6QTYO","created_at":"2026-07-05T00:20:51Z"},{"alias_kind":"pith_short_16","alias_value":"WXVF65I6QTYOWLB7","created_at":"2026-07-05T00:20:51Z"},{"alias_kind":"pith_short_8","alias_value":"WXVF65I6","created_at":"2026-07-05T00:20:51Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:WXVF65I6QTYOWLB7T3ULG4MUVV","target":"record","payload":{"canonical_record":{"source":{"id":"1812.05793","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-12-14T06:04:04Z","cross_cats_sorted":["cs.SE","stat.ML"],"title_canon_sha256":"c08eeb8d739dcec3c5962da90ce18d16a9fd3e54ee9a4fb9aa33176d19e6c6ba","abstract_canon_sha256":"07af622d60c4bac90e20cbb59a0f62289ca0a6342e9c1daf9c7f45e47ae41316"},"schema_version":"1.0"},"canonical_sha256":"b5ea5f751e84f0eb2c3f9ee8b37194ad736746db7100fd334f265b559010ff99","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:20:51.216484Z","signature_b64":"efTSfTROM8nfRAogNu9qdCz16nrfvCwgxGm6BQFzSfs/gmFAlPAsgL4n0cmSNWhf/GD1XK+nd/4iJX5SBSbUCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b5ea5f751e84f0eb2c3f9ee8b37194ad736746db7100fd334f265b559010ff99","last_reissued_at":"2026-07-05T00:20:51.216124Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:20:51.216124Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1812.05793","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:20:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0hhIpR2GPAECX1dBgEixwuIxvq8CET+VmxZhyBl22IgfkjGqagAxucKw2i78oOcKAB+wNri94tE9nSm05ou2Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-26T02:22:28.162897Z"},"content_sha256":"f89ca33d0397bf3f660c01d9c7b03554d277d8cede1398dc3c6e9cbaf40e113e","schema_version":"1.0","event_id":"sha256:f89ca33d0397bf3f660c01d9c7b03554d277d8cede1398dc3c6e9cbaf40e113e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:WXVF65I6QTYOWLB7T3ULG4MUVV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Sample Detection for Deep Neural Network through Model Mutation Testing","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.SE","stat.ML"],"primary_cat":"cs.LG","authors_text":"Guoliang Dong, Jingyi Wang, Jun Sun, Peixin Zhang, Xinyu Wang","submitted_at":"2018-12-14T06:04:04Z","abstract_excerpt":"Deep neural networks (DNN) have been shown to be useful in a wide range of applications. However, they are also known to be vulnerable to adversarial samples. By transforming a normal sample with some carefully crafted human imperceptible perturbations, even highly accurate DNN make wrong decisions. Multiple defense mechanisms have been proposed which aim to hinder the generation of such adversarial samples. However, a recent work show that most of them are ineffective. In this work, we propose an alternative approach to detect adversarial samples at runtime. Our main observation is that adver"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1812.05793","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1812.05793/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:20:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7urf8+c3BW2ifiWiicezvIe3Mzvj5BZtoRESWjLGt/tpOF4dtE9g7STmeIP3DgPaL34kdMapxInlUcZhHBk9DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-26T02:22:28.163262Z"},"content_sha256":"40e8c3784cc6c7736220e2050867615ff926125adb1a3322f0829a765f974c68","schema_version":"1.0","event_id":"sha256:40e8c3784cc6c7736220e2050867615ff926125adb1a3322f0829a765f974c68"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WXVF65I6QTYOWLB7T3ULG4MUVV/bundle.json","state_url":"https://pith.science/pith/WXVF65I6QTYOWLB7T3ULG4MUVV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WXVF65I6QTYOWLB7T3ULG4MUVV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-26T02:22:28Z","links":{"resolver":"https://pith.science/pith/WXVF65I6QTYOWLB7T3ULG4MUVV","bundle":"https://pith.science/pith/WXVF65I6QTYOWLB7T3ULG4MUVV/bundle.json","state":"https://pith.science/pith/WXVF65I6QTYOWLB7T3ULG4MUVV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WXVF65I6QTYOWLB7T3ULG4MUVV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:WXVF65I6QTYOWLB7T3ULG4MUVV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"07af622d60c4bac90e20cbb59a0f62289ca0a6342e9c1daf9c7f45e47ae41316","cross_cats_sorted":["cs.SE","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-12-14T06:04:04Z","title_canon_sha256":"c08eeb8d739dcec3c5962da90ce18d16a9fd3e54ee9a4fb9aa33176d19e6c6ba"},"schema_version":"1.0","source":{"id":"1812.05793","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1812.05793","created_at":"2026-07-05T00:20:51Z"},{"alias_kind":"arxiv_version","alias_value":"1812.05793v2","created_at":"2026-07-05T00:20:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1812.05793","created_at":"2026-07-05T00:20:51Z"},{"alias_kind":"pith_short_12","alias_value":"WXVF65I6QTYO","created_at":"2026-07-05T00:20:51Z"},{"alias_kind":"pith_short_16","alias_value":"WXVF65I6QTYOWLB7","created_at":"2026-07-05T00:20:51Z"},{"alias_kind":"pith_short_8","alias_value":"WXVF65I6","created_at":"2026-07-05T00:20:51Z"}],"graph_snapshots":[{"event_id":"sha256:40e8c3784cc6c7736220e2050867615ff926125adb1a3322f0829a765f974c68","target":"graph","created_at":"2026-07-05T00:20:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1812.05793/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNN) have been shown to be useful in a wide range of applications. However, they are also known to be vulnerable to adversarial samples. By transforming a normal sample with some carefully crafted human imperceptible perturbations, even highly accurate DNN make wrong decisions. Multiple defense mechanisms have been proposed which aim to hinder the generation of such adversarial samples. However, a recent work show that most of them are ineffective. In this work, we propose an alternative approach to detect adversarial samples at runtime. Our main observation is that adver","authors_text":"Guoliang Dong, Jingyi Wang, Jun Sun, Peixin Zhang, Xinyu Wang","cross_cats":["cs.SE","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-12-14T06:04:04Z","title":"Adversarial Sample Detection for Deep Neural Network through Model Mutation Testing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1812.05793","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f89ca33d0397bf3f660c01d9c7b03554d277d8cede1398dc3c6e9cbaf40e113e","target":"record","created_at":"2026-07-05T00:20:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"07af622d60c4bac90e20cbb59a0f62289ca0a6342e9c1daf9c7f45e47ae41316","cross_cats_sorted":["cs.SE","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-12-14T06:04:04Z","title_canon_sha256":"c08eeb8d739dcec3c5962da90ce18d16a9fd3e54ee9a4fb9aa33176d19e6c6ba"},"schema_version":"1.0","source":{"id":"1812.05793","kind":"arxiv","version":2}},"canonical_sha256":"b5ea5f751e84f0eb2c3f9ee8b37194ad736746db7100fd334f265b559010ff99","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b5ea5f751e84f0eb2c3f9ee8b37194ad736746db7100fd334f265b559010ff99","first_computed_at":"2026-07-05T00:20:51.216124Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:20:51.216124Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"efTSfTROM8nfRAogNu9qdCz16nrfvCwgxGm6BQFzSfs/gmFAlPAsgL4n0cmSNWhf/GD1XK+nd/4iJX5SBSbUCw==","signature_status":"signed_v1","signed_at":"2026-07-05T00:20:51.216484Z","signed_message":"canonical_sha256_bytes"},"source_id":"1812.05793","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f89ca33d0397bf3f660c01d9c7b03554d277d8cede1398dc3c6e9cbaf40e113e","sha256:40e8c3784cc6c7736220e2050867615ff926125adb1a3322f0829a765f974c68"],"state_sha256":"fc7eb535cc1dcaacb45d6cc2bb9c5e35a7250329ee55974b43e6ea62c8407db5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qBprikYZeRrGi7qlmlCID2US2+gBT8KHsDnCxI2cUDrecxjiypQIpc5SJQMRwksR24gBZf03d7L5urmhYS3fBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-26T02:22:28.165435Z","bundle_sha256":"ae2cbb6068500576a149672e16576bbdd1af21bedf13e69c17e51f784c260c0b"}}