{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2026:YEM54AE6TCCLSFT4H3AXUFNHVS","short_pith_number":"pith:YEM54AE6","schema_version":"1.0","canonical_sha256":"c119de009e9884b9167c3ec17a15a7aca98237a2b57427ddddbb6fad07c266e7","source":{"kind":"arxiv","id":"2605.01718","version":2},"attestation_state":"computed","paper":{"title":"Dual-branch Robust Unlearnable Examples","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"DUNE achieves robust unlearnability by separately optimizing perturbations in spatial and color domains.","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Changsong Jiang, Hangtao Zhang, Li Zeng, Wenbo Pan, Xianlong Wang, Xiaohua Jia, Ziqi Zhou","submitted_at":"2026-05-03T05:19:21Z","abstract_excerpt":"Unlearnable examples (UEs) aim to compromise model training by injecting imperceptible perturbations to clean samples. However, existing UE schemes exhibit limited robustness against advanced defenses due to their heuristic design or narrowly scoped domain perturbations. To address this, we propose \\texttt{DUNE}, a \\underline{\\textbf{D}}ual-branch \\underline{\\textbf{UN}}learnable \\underline{\\textbf{E}}nsemble perturbation optimization approach. Specifically, \\texttt{DUNE} separately optimizes perturbations in the spatial and color domains to establish the mapping between perturbations and shif"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":true},"canonical_record":{"source":{"id":"2605.01718","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-05-03T05:19:21Z","cross_cats_sorted":[],"title_canon_sha256":"a3eafba55ab20e3761e1ef2ed46c41dc642e0517f5d495928fe641883887d107","abstract_canon_sha256":"2717284d8b63be9c3a8cb78e96ce258203aaf12ba5b58065dc4d188369de3d5c"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-29T01:14:32.664642Z","signature_b64":"q5eQekWOscz8MKKqwNNCF7PWiTlM15ytSzMvgSDCAFJUepDxl8ADiXYhpqVJFDXBfWXiGL4SUvAVW7VRlBQfCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c119de009e9884b9167c3ec17a15a7aca98237a2b57427ddddbb6fad07c266e7","last_reissued_at":"2026-06-29T01:14:32.664231Z","signature_status":"signed_v1","first_computed_at":"2026-06-29T01:14:32.664231Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Dual-branch Robust Unlearnable Examples","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"DUNE achieves robust unlearnability by separately optimizing perturbations in spatial and color domains.","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Changsong Jiang, Hangtao Zhang, Li Zeng, Wenbo Pan, Xianlong Wang, Xiaohua Jia, Ziqi Zhou","submitted_at":"2026-05-03T05:19:21Z","abstract_excerpt":"Unlearnable examples (UEs) aim to compromise model training by injecting imperceptible perturbations to clean samples. However, existing UE schemes exhibit limited robustness against advanced defenses due to their heuristic design or narrowly scoped domain perturbations. To address this, we propose \\texttt{DUNE}, a \\underline{\\textbf{D}}ual-branch \\underline{\\textbf{UN}}learnable \\underline{\\textbf{E}}nsemble perturbation optimization approach. Specifically, \\texttt{DUNE} separately optimizes perturbations in the spatial and color domains to establish the mapping between perturbations and shif"},"claims":{"count":4,"items":[{"kind":"strongest_claim","text":"DUNE separately optimizes perturbations in the spatial and color domains to establish the mapping between perturbations and shift-induced labels... DUNE's robustness outperforms 12 SOTA UE schemes under 7 mainstream defenses, yielding a lower average test accuracy of 14.95% to 50.82%.","source":"verdict.strongest_claim","status":"machine_extracted","claim_id":"C1","attestation":"unclaimed"},{"kind":"weakest_assumption","text":"That dual-branch optimization in spatial and color domains combined with ensemble aggregation will reliably increase noise intensity, drive models to learn perturbation-oriented features, and maintain unlearnability against advanced defenses without introducing exploitable weaknesses.","source":"verdict.weakest_assumption","status":"machine_extracted","claim_id":"C2","attestation":"unclaimed"},{"kind":"one_line_summary","text":"DUNE creates robust unlearnable examples through dual-branch spatial-color perturbation optimization and ensemble strategies, achieving lower average test accuracies of 14.95% to 50.82% than 12 prior methods against 7 defenses on CIFAR-10 and ImageNet.","source":"verdict.one_line_summary","status":"machine_extracted","claim_id":"C3","attestation":"unclaimed"},{"kind":"headline","text":"DUNE achieves robust unlearnability by separately optimizing perturbations in spatial and color domains.","source":"verdict.pith_extraction.headline","status":"machine_extracted","claim_id":"C4","attestation":"unclaimed"}],"snapshot_sha256":"605d9163cffdf323e05c6971075c4ac1a7e3c3c9e14d6b129082b14136c2c991"},"source":{"id":"2605.01718","kind":"arxiv","version":2},"verdict":{"id":"772cd107-0e8b-48c1-b150-b1d81dd7d50b","model_set":{"reader":"grok-4.3"},"created_at":"2026-05-10T15:44:59.165655Z","strongest_claim":"DUNE separately optimizes perturbations in the spatial and color domains to establish the mapping between perturbations and shift-induced labels... DUNE's robustness outperforms 12 SOTA UE schemes under 7 mainstream defenses, yielding a lower average test accuracy of 14.95% to 50.82%.","one_line_summary":"DUNE creates robust unlearnable examples through dual-branch spatial-color perturbation optimization and ensemble strategies, achieving lower average test accuracies of 14.95% to 50.82% than 12 prior methods against 7 defenses on CIFAR-10 and ImageNet.","pipeline_version":"pith-pipeline@v0.9.0","weakest_assumption":"That dual-branch optimization in spatial and color domains combined with ensemble aggregation will reliably increase noise intensity, drive models to learn perturbation-oriented features, and maintain unlearnability against advanced defenses without introducing exploitable weaknesses.","pith_extraction_headline":"DUNE achieves robust unlearnability by separately optimizing perturbations in spatial and color domains."},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2605.01718/integrity.json","findings":[],"available":true,"detectors_run":[{"name":"ai_meta_artifact","ran_at":"2026-05-20T17:37:44.538219Z","status":"completed","version":"1.0.0","findings_count":0},{"name":"doi_title_agreement","ran_at":"2026-05-20T05:01:23.199622Z","status":"completed","version":"1.0.0","findings_count":0},{"name":"doi_compliance","ran_at":"2026-05-19T17:00:52.671119Z","status":"completed","version":"1.0.0","findings_count":0}],"snapshot_sha256":"87e4a39f3853ca6525619ff040e9e9776ead1799b34890873beeb59d26f9547e"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":2,"snapshot_sha256":"3753e80b9eada50f13ba9cfea89e750ef08881a541089b95d75d21cc95facdee"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2605.01718","created_at":"2026-06-29T01:14:32.664282+00:00"},{"alias_kind":"arxiv_version","alias_value":"2605.01718v2","created_at":"2026-06-29T01:14:32.664282+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.01718","created_at":"2026-06-29T01:14:32.664282+00:00"},{"alias_kind":"pith_short_12","alias_value":"YEM54AE6TCCL","created_at":"2026-06-29T01:14:32.664282+00:00"},{"alias_kind":"pith_short_16","alias_value":"YEM54AE6TCCLSFT4","created_at":"2026-06-29T01:14:32.664282+00:00"},{"alias_kind":"pith_short_8","alias_value":"YEM54AE6","created_at":"2026-06-29T01:14:32.664282+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":1,"sample":[{"citing_arxiv_id":"2606.07335","citing_title":"Defending Jailbreak Attacks on Large Language Models via Manifold Trajectory Kinetics","ref_index":97,"is_internal_anchor":true}]},"formal_canon":{"evidence_count":2,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/YEM54AE6TCCLSFT4H3AXUFNHVS","json":"https://pith.science/pith/YEM54AE6TCCLSFT4H3AXUFNHVS.json","graph_json":"https://pith.science/api/pith-number/YEM54AE6TCCLSFT4H3AXUFNHVS/graph.json","events_json":"https://pith.science/api/pith-number/YEM54AE6TCCLSFT4H3AXUFNHVS/events.json","paper":"https://pith.science/paper/YEM54AE6"},"agent_actions":{"view_html":"https://pith.science/pith/YEM54AE6TCCLSFT4H3AXUFNHVS","download_json":"https://pith.science/pith/YEM54AE6TCCLSFT4H3AXUFNHVS.json","view_paper":"https://pith.science/paper/YEM54AE6","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2605.01718&json=true","fetch_graph":"https://pith.science/api/pith-number/YEM54AE6TCCLSFT4H3AXUFNHVS/graph.json","fetch_events":"https://pith.science/api/pith-number/YEM54AE6TCCLSFT4H3AXUFNHVS/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/YEM54AE6TCCLSFT4H3AXUFNHVS/action/timestamp_anchor","attest_storage":"https://pith.science/pith/YEM54AE6TCCLSFT4H3AXUFNHVS/action/storage_attestation","attest_author":"https://pith.science/pith/YEM54AE6TCCLSFT4H3AXUFNHVS/action/author_attestation","sign_citation":"https://pith.science/pith/YEM54AE6TCCLSFT4H3AXUFNHVS/action/citation_signature","submit_replication":"https://pith.science/pith/YEM54AE6TCCLSFT4H3AXUFNHVS/action/replication_record"}},"created_at":"2026-06-29T01:14:32.664282+00:00","updated_at":"2026-06-29T01:14:32.664282+00:00"}