{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:XKCJ65UF2TFKHBGV7BBTS2APRS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"92c5295d4779ab3c3bc44a79067791c35f7eb25055f5e599015fec845327c432","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2021-09-13T04:17:58Z","title_canon_sha256":"0094d4ad31dd3253172237e4fbb0f616d2a0f3d4bdbf8ef07203ae448eb976b6"},"schema_version":"1.0","source":{"id":"2109.05698","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.05698","created_at":"2026-07-05T04:41:52Z"},{"alias_kind":"arxiv_version","alias_value":"2109.05698v2","created_at":"2026-07-05T04:41:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.05698","created_at":"2026-07-05T04:41:52Z"},{"alias_kind":"pith_short_12","alias_value":"XKCJ65UF2TFK","created_at":"2026-07-05T04:41:52Z"},{"alias_kind":"pith_short_16","alias_value":"XKCJ65UF2TFKHBGV","created_at":"2026-07-05T04:41:52Z"},{"alias_kind":"pith_short_8","alias_value":"XKCJ65UF","created_at":"2026-07-05T04:41:52Z"}],"graph_snapshots":[{"event_id":"sha256:80da23fafaefe4d1ce66a249e69fd46caf2e73e486d05491646a209c5f5355fc","target":"graph","created_at":"2026-07-05T04:41:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2109.05698/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"A line of work has shown that natural text processing models are vulnerable to adversarial examples. Correspondingly, various defense methods are proposed to mitigate the threat of textual adversarial examples, eg, adversarial training, input transformations, detection, etc. In this work, we treat the optimization process for synonym substitution based textual adversarial attacks as a specific sequence of word replacement, in which each word mutually influences other words. We identify that we could destroy such mutual interaction and eliminate the adversarial perturbation by randomly substitu","authors_text":"Kun He, Xiaosen Wang, Yifeng Xiong","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2021-09-13T04:17:58Z","title":"Detecting Textual Adversarial Examples through Randomized Substitution and Vote"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.05698","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:39ccc5f8e84c05601b2ce730fdaf2a09b0a42d914cdd4cc03160cf5adaad20e2","target":"record","created_at":"2026-07-05T04:41:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"92c5295d4779ab3c3bc44a79067791c35f7eb25055f5e599015fec845327c432","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2021-09-13T04:17:58Z","title_canon_sha256":"0094d4ad31dd3253172237e4fbb0f616d2a0f3d4bdbf8ef07203ae448eb976b6"},"schema_version":"1.0","source":{"id":"2109.05698","kind":"arxiv","version":2}},"canonical_sha256":"ba849f7685d4caa384d5f84339680f8cb8b039d6526bbca25b04c2a1bcb31240","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ba849f7685d4caa384d5f84339680f8cb8b039d6526bbca25b04c2a1bcb31240","first_computed_at":"2026-07-05T04:41:52.020015Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:41:52.020015Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"WA5lLrto7b4zM61sTx90sxrMVx6DCisiOQztjBcSrjubhGOg8emabzMDCWb2kEDFZnMO5DBaKKMUgp1mKPbKDA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:41:52.020386Z","signed_message":"canonical_sha256_bytes"},"source_id":"2109.05698","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:39ccc5f8e84c05601b2ce730fdaf2a09b0a42d914cdd4cc03160cf5adaad20e2","sha256:80da23fafaefe4d1ce66a249e69fd46caf2e73e486d05491646a209c5f5355fc"],"state_sha256":"1159ae214116ff021693d07ba73b21d88fd4a21aed6a53db901af4010792abb3"}