{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:XNM5FRW5RGEC3RMOPM3O3KRVSD","short_pith_number":"pith:XNM5FRW5","canonical_record":{"source":{"id":"1709.05583","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-17T00:18:42Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"5cc692fcfc7d1c84fddf4ea8943bc5fd4b551b9c3a087658bc230791a3bfeae8","abstract_canon_sha256":"9444b32b79c789641543f3f377fcfd9ab9dec5e0ef5f904fdfb79b97947fab6b"},"schema_version":"1.0"},"canonical_sha256":"bb59d2c6dd89882dc58e7b36edaa3590d2a02c3c7f076db431636289be9293c0","source":{"kind":"arxiv","id":"1709.05583","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1709.05583","created_at":"2026-07-05T00:28:43Z"},{"alias_kind":"arxiv_version","alias_value":"1709.05583v4","created_at":"2026-07-05T00:28:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1709.05583","created_at":"2026-07-05T00:28:43Z"},{"alias_kind":"pith_short_12","alias_value":"XNM5FRW5RGEC","created_at":"2026-07-05T00:28:43Z"},{"alias_kind":"pith_short_16","alias_value":"XNM5FRW5RGEC3RMO","created_at":"2026-07-05T00:28:43Z"},{"alias_kind":"pith_short_8","alias_value":"XNM5FRW5","created_at":"2026-07-05T00:28:43Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:XNM5FRW5RGEC3RMOPM3O3KRVSD","target":"record","payload":{"canonical_record":{"source":{"id":"1709.05583","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-17T00:18:42Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"5cc692fcfc7d1c84fddf4ea8943bc5fd4b551b9c3a087658bc230791a3bfeae8","abstract_canon_sha256":"9444b32b79c789641543f3f377fcfd9ab9dec5e0ef5f904fdfb79b97947fab6b"},"schema_version":"1.0"},"canonical_sha256":"bb59d2c6dd89882dc58e7b36edaa3590d2a02c3c7f076db431636289be9293c0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:28:43.385203Z","signature_b64":"lEwUA5g/jr0odwuK6kc+JU6+AjZUFrR3qRiR36IuUznqZiXDPyf2Hi994KuPKPJkOqOLTPYPAtG4fEEYA59SCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bb59d2c6dd89882dc58e7b36edaa3590d2a02c3c7f076db431636289be9293c0","last_reissued_at":"2026-07-05T00:28:43.384827Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:28:43.384827Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1709.05583","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:28:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vrARcldqXM8WLGugm3kAiNB0+tm35wS2OSM+NCP6KsPyEE4m4YeldgcFZCAh4HSodyYfBuhmyRqJktOpy5ZhDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T13:16:34.322660Z"},"content_sha256":"86020fe6e71ea45a723900a331ef9c0c64ea3c66221bbf6d9a78aaa01e42820c","schema_version":"1.0","event_id":"sha256:86020fe6e71ea45a723900a331ef9c0c64ea3c66221bbf6d9a78aaa01e42820c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:XNM5FRW5RGEC3RMOPM3O3KRVSD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Mitigating Evasion Attacks to Deep Neural Networks via Region-based Classification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","stat.ML"],"primary_cat":"cs.CR","authors_text":"Neil Zhenqiang Gong, Xiaoyu Cao","submitted_at":"2017-09-17T00:18:42Z","abstract_excerpt":"Deep neural networks (DNNs) have transformed several artificial intelligence research areas including computer vision, speech recognition, and natural language processing. However, recent studies demonstrated that DNNs are vulnerable to adversarial manipulations at testing time. Specifically, suppose we have a testing example, whose label can be correctly predicted by a DNN classifier. An attacker can add a small carefully crafted noise to the testing example such that the DNN classifier predicts an incorrect label, where the crafted testing example is called adversarial example. Such attacks "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1709.05583","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1709.05583/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:28:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KeY4SKAb6Cnp2D9GRjgwDxBH5S/PtYitW/TmFG1vRwComQX26oO8LnL7gErLcY93xQPYaW4Qrd1Yk9KzIR2JCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T13:16:34.323246Z"},"content_sha256":"1382b0b0b4f6e13938f948985417e497be56dbaac97492a30511d681050ef4d3","schema_version":"1.0","event_id":"sha256:1382b0b0b4f6e13938f948985417e497be56dbaac97492a30511d681050ef4d3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XNM5FRW5RGEC3RMOPM3O3KRVSD/bundle.json","state_url":"https://pith.science/pith/XNM5FRW5RGEC3RMOPM3O3KRVSD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XNM5FRW5RGEC3RMOPM3O3KRVSD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T13:16:34Z","links":{"resolver":"https://pith.science/pith/XNM5FRW5RGEC3RMOPM3O3KRVSD","bundle":"https://pith.science/pith/XNM5FRW5RGEC3RMOPM3O3KRVSD/bundle.json","state":"https://pith.science/pith/XNM5FRW5RGEC3RMOPM3O3KRVSD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XNM5FRW5RGEC3RMOPM3O3KRVSD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:XNM5FRW5RGEC3RMOPM3O3KRVSD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9444b32b79c789641543f3f377fcfd9ab9dec5e0ef5f904fdfb79b97947fab6b","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-17T00:18:42Z","title_canon_sha256":"5cc692fcfc7d1c84fddf4ea8943bc5fd4b551b9c3a087658bc230791a3bfeae8"},"schema_version":"1.0","source":{"id":"1709.05583","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1709.05583","created_at":"2026-07-05T00:28:43Z"},{"alias_kind":"arxiv_version","alias_value":"1709.05583v4","created_at":"2026-07-05T00:28:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1709.05583","created_at":"2026-07-05T00:28:43Z"},{"alias_kind":"pith_short_12","alias_value":"XNM5FRW5RGEC","created_at":"2026-07-05T00:28:43Z"},{"alias_kind":"pith_short_16","alias_value":"XNM5FRW5RGEC3RMO","created_at":"2026-07-05T00:28:43Z"},{"alias_kind":"pith_short_8","alias_value":"XNM5FRW5","created_at":"2026-07-05T00:28:43Z"}],"graph_snapshots":[{"event_id":"sha256:1382b0b0b4f6e13938f948985417e497be56dbaac97492a30511d681050ef4d3","target":"graph","created_at":"2026-07-05T00:28:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1709.05583/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) have transformed several artificial intelligence research areas including computer vision, speech recognition, and natural language processing. However, recent studies demonstrated that DNNs are vulnerable to adversarial manipulations at testing time. Specifically, suppose we have a testing example, whose label can be correctly predicted by a DNN classifier. An attacker can add a small carefully crafted noise to the testing example such that the DNN classifier predicts an incorrect label, where the crafted testing example is called adversarial example. Such attacks ","authors_text":"Neil Zhenqiang Gong, Xiaoyu Cao","cross_cats":["cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-17T00:18:42Z","title":"Mitigating Evasion Attacks to Deep Neural Networks via Region-based Classification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1709.05583","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:86020fe6e71ea45a723900a331ef9c0c64ea3c66221bbf6d9a78aaa01e42820c","target":"record","created_at":"2026-07-05T00:28:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9444b32b79c789641543f3f377fcfd9ab9dec5e0ef5f904fdfb79b97947fab6b","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-17T00:18:42Z","title_canon_sha256":"5cc692fcfc7d1c84fddf4ea8943bc5fd4b551b9c3a087658bc230791a3bfeae8"},"schema_version":"1.0","source":{"id":"1709.05583","kind":"arxiv","version":4}},"canonical_sha256":"bb59d2c6dd89882dc58e7b36edaa3590d2a02c3c7f076db431636289be9293c0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bb59d2c6dd89882dc58e7b36edaa3590d2a02c3c7f076db431636289be9293c0","first_computed_at":"2026-07-05T00:28:43.384827Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:28:43.384827Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lEwUA5g/jr0odwuK6kc+JU6+AjZUFrR3qRiR36IuUznqZiXDPyf2Hi994KuPKPJkOqOLTPYPAtG4fEEYA59SCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T00:28:43.385203Z","signed_message":"canonical_sha256_bytes"},"source_id":"1709.05583","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:86020fe6e71ea45a723900a331ef9c0c64ea3c66221bbf6d9a78aaa01e42820c","sha256:1382b0b0b4f6e13938f948985417e497be56dbaac97492a30511d681050ef4d3"],"state_sha256":"373a461e84e11967bed81917e867042be320eee15cc974cbf728b63ae4bfa9f7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/cvN7SY7JorYn2Y4J+wZ4hECJT1ggdXTolcJazoaI2ZTdvcHQI5NcD11C+iL4U9uOWmCPY1pBI+PB14OMAtjBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T13:16:34.328572Z","bundle_sha256":"1affae29299fde6affd4b18ddd6cf18b98d8058f12a823a21acff99d6a65ec2d"}}