{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:XYYN2QK4XVQX3XMJ4ZYBSISUTC","short_pith_number":"pith:XYYN2QK4","canonical_record":{"source":{"id":"1802.08686","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-02-23T15:46:05Z","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"title_canon_sha256":"69e8e918922f7a4f4fd7d918830aeeb1bc5a662f2e0fc9ea0a650d63502f228e","abstract_canon_sha256":"015940fabdc7bfce29ed63c810c6b650668981565fcfcdbc87041fb3cef8c1f5"},"schema_version":"1.0"},"canonical_sha256":"be30dd415cbd617ddd89e6701922549887e238a25d501149a60faca0658201a7","source":{"kind":"arxiv","id":"1802.08686","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1802.08686","created_at":"2026-05-17T23:59:33Z"},{"alias_kind":"arxiv_version","alias_value":"1802.08686v2","created_at":"2026-05-17T23:59:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1802.08686","created_at":"2026-05-17T23:59:33Z"},{"alias_kind":"pith_short_12","alias_value":"XYYN2QK4XVQX","created_at":"2026-05-18T12:33:04Z"},{"alias_kind":"pith_short_16","alias_value":"XYYN2QK4XVQX3XMJ","created_at":"2026-05-18T12:33:04Z"},{"alias_kind":"pith_short_8","alias_value":"XYYN2QK4","created_at":"2026-05-18T12:33:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:XYYN2QK4XVQX3XMJ4ZYBSISUTC","target":"record","payload":{"canonical_record":{"source":{"id":"1802.08686","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-02-23T15:46:05Z","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"title_canon_sha256":"69e8e918922f7a4f4fd7d918830aeeb1bc5a662f2e0fc9ea0a650d63502f228e","abstract_canon_sha256":"015940fabdc7bfce29ed63c810c6b650668981565fcfcdbc87041fb3cef8c1f5"},"schema_version":"1.0"},"canonical_sha256":"be30dd415cbd617ddd89e6701922549887e238a25d501149a60faca0658201a7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:59:33.005117Z","signature_b64":"5gLai6UKYNKF4m2SAJ3eKDhZawkB63pPTTNQvdWy9wSwsjqJYI7bS3Ut5xXpBUUTv0e5xkhBSUHt91PQhRi2CA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"be30dd415cbd617ddd89e6701922549887e238a25d501149a60faca0658201a7","last_reissued_at":"2026-05-17T23:59:33.004429Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:59:33.004429Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1802.08686","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:59:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"danwRH5bRfMC0uOvPNnUkln8nRzgwkalAlM8YhbWwIHpV85pi5fhSROBI7wPGh9hqhzpO1yct3GQVzYnj+PRAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-22T17:33:38.565974Z"},"content_sha256":"c628a9707e05bbc0763fb92ff03b37dcec193f23b4c521a9925bdeb88eb9d827","schema_version":"1.0","event_id":"sha256:c628a9707e05bbc0763fb92ff03b37dcec193f23b4c521a9925bdeb88eb9d827"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:XYYN2QK4XVQX3XMJ4ZYBSISUTC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial vulnerability for any classifier","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV","stat.ML"],"primary_cat":"cs.LG","authors_text":"Alhussein Fawzi, Hamza Fawzi, Omar Fawzi","submitted_at":"2018-02-23T15:46:05Z","abstract_excerpt":"Despite achieving impressive performance, state-of-the-art classifiers remain highly vulnerable to small, imperceptible, adversarial perturbations. This vulnerability has proven empirically to be very intricate to address. In this paper, we study the phenomenon of adversarial perturbations under the assumption that the data is generated with a smooth generative model. We derive fundamental upper bounds on the robustness to perturbations of any classification function, and prove the existence of adversarial perturbations that transfer well across different classifiers with small risk. Our analy"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1802.08686","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:59:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jkWhDJHjcGg7Ab5iDD0KUsdagrP4PfOlluMLT9aPXMqrhhSMgaAO/5jwl6OFqaxZ6uXdnAshoyQWZq6dko+lBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-22T17:33:38.566337Z"},"content_sha256":"3531f095f2b332af0c272329389e026c8b20379bcfbc25c7f9fd59586fbc232b","schema_version":"1.0","event_id":"sha256:3531f095f2b332af0c272329389e026c8b20379bcfbc25c7f9fd59586fbc232b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XYYN2QK4XVQX3XMJ4ZYBSISUTC/bundle.json","state_url":"https://pith.science/pith/XYYN2QK4XVQX3XMJ4ZYBSISUTC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XYYN2QK4XVQX3XMJ4ZYBSISUTC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-22T17:33:38Z","links":{"resolver":"https://pith.science/pith/XYYN2QK4XVQX3XMJ4ZYBSISUTC","bundle":"https://pith.science/pith/XYYN2QK4XVQX3XMJ4ZYBSISUTC/bundle.json","state":"https://pith.science/pith/XYYN2QK4XVQX3XMJ4ZYBSISUTC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XYYN2QK4XVQX3XMJ4ZYBSISUTC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:XYYN2QK4XVQX3XMJ4ZYBSISUTC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"015940fabdc7bfce29ed63c810c6b650668981565fcfcdbc87041fb3cef8c1f5","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-02-23T15:46:05Z","title_canon_sha256":"69e8e918922f7a4f4fd7d918830aeeb1bc5a662f2e0fc9ea0a650d63502f228e"},"schema_version":"1.0","source":{"id":"1802.08686","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1802.08686","created_at":"2026-05-17T23:59:33Z"},{"alias_kind":"arxiv_version","alias_value":"1802.08686v2","created_at":"2026-05-17T23:59:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1802.08686","created_at":"2026-05-17T23:59:33Z"},{"alias_kind":"pith_short_12","alias_value":"XYYN2QK4XVQX","created_at":"2026-05-18T12:33:04Z"},{"alias_kind":"pith_short_16","alias_value":"XYYN2QK4XVQX3XMJ","created_at":"2026-05-18T12:33:04Z"},{"alias_kind":"pith_short_8","alias_value":"XYYN2QK4","created_at":"2026-05-18T12:33:04Z"}],"graph_snapshots":[{"event_id":"sha256:3531f095f2b332af0c272329389e026c8b20379bcfbc25c7f9fd59586fbc232b","target":"graph","created_at":"2026-05-17T23:59:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Despite achieving impressive performance, state-of-the-art classifiers remain highly vulnerable to small, imperceptible, adversarial perturbations. This vulnerability has proven empirically to be very intricate to address. In this paper, we study the phenomenon of adversarial perturbations under the assumption that the data is generated with a smooth generative model. We derive fundamental upper bounds on the robustness to perturbations of any classification function, and prove the existence of adversarial perturbations that transfer well across different classifiers with small risk. Our analy","authors_text":"Alhussein Fawzi, Hamza Fawzi, Omar Fawzi","cross_cats":["cs.CR","cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-02-23T15:46:05Z","title":"Adversarial vulnerability for any classifier"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1802.08686","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c628a9707e05bbc0763fb92ff03b37dcec193f23b4c521a9925bdeb88eb9d827","target":"record","created_at":"2026-05-17T23:59:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"015940fabdc7bfce29ed63c810c6b650668981565fcfcdbc87041fb3cef8c1f5","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-02-23T15:46:05Z","title_canon_sha256":"69e8e918922f7a4f4fd7d918830aeeb1bc5a662f2e0fc9ea0a650d63502f228e"},"schema_version":"1.0","source":{"id":"1802.08686","kind":"arxiv","version":2}},"canonical_sha256":"be30dd415cbd617ddd89e6701922549887e238a25d501149a60faca0658201a7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"be30dd415cbd617ddd89e6701922549887e238a25d501149a60faca0658201a7","first_computed_at":"2026-05-17T23:59:33.004429Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:59:33.004429Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5gLai6UKYNKF4m2SAJ3eKDhZawkB63pPTTNQvdWy9wSwsjqJYI7bS3Ut5xXpBUUTv0e5xkhBSUHt91PQhRi2CA==","signature_status":"signed_v1","signed_at":"2026-05-17T23:59:33.005117Z","signed_message":"canonical_sha256_bytes"},"source_id":"1802.08686","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c628a9707e05bbc0763fb92ff03b37dcec193f23b4c521a9925bdeb88eb9d827","sha256:3531f095f2b332af0c272329389e026c8b20379bcfbc25c7f9fd59586fbc232b"],"state_sha256":"e1808bd6bdb9a15f66a0bfc94381add21269168f0c90a566c28221e038a86ff9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NuQIfevhiZNY3mD1DvJXfHG7a5Ey5V1f4sbJU+mfmjt9rMfFPMCKjKcqsYGvaEL/TD3t/9LGhjvuC2Hl2F+gBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-22T17:33:38.569158Z","bundle_sha256":"64a7e8e2dc0cb0f83f10fbb5bcc5d6a8a8a4b82dae255bf42740190d69a2ff8f"}}