{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:YVMIGQRL55H4CLLQKCL4MQP5EW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fcfdffae985f59c7348f93b528be2adf85e84fe64c2df746b4e88ad5cb75919f","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-02-19T19:01:56Z","title_canon_sha256":"c4c404b635ded2cfeb242c41ff643b78837e5e96ce448334a5555ea2f1cb7baa"},"schema_version":"1.0","source":{"id":"1802.06806","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1802.06806","created_at":"2026-05-17T23:47:44Z"},{"alias_kind":"arxiv_version","alias_value":"1802.06806v2","created_at":"2026-05-17T23:47:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1802.06806","created_at":"2026-05-17T23:47:44Z"},{"alias_kind":"pith_short_12","alias_value":"YVMIGQRL55H4","created_at":"2026-05-18T12:33:04Z"},{"alias_kind":"pith_short_16","alias_value":"YVMIGQRL55H4CLLQ","created_at":"2026-05-18T12:33:04Z"},{"alias_kind":"pith_short_8","alias_value":"YVMIGQRL","created_at":"2026-05-18T12:33:04Z"}],"graph_snapshots":[{"event_id":"sha256:d149aa7ac8efe9c8d1860ff429e745c90f0f938deb0f8ffb95c7df34944c118e","target":"graph","created_at":"2026-05-17T23:47:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Deep neural networks, although shown to be a successful class of machine learning algorithms, are known to be extremely unstable to adversarial perturbations. Improving the robustness of neural networks against these attacks is important, especially for security-critical applications. To defend against such attacks, we propose dividing the input image into multiple patches, denoising each patch independently, and reconstructing the image, without losing significant image content. We call our method D3. This proposed defense mechanism is non-differentiable which makes it non-trivial for an adve","authors_text":"Ashish Shrivastava, Oncel Tuzel, Seyed-Mohsen Moosavi-Dezfooli","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-02-19T19:01:56Z","title":"Divide, Denoise, and Defend against Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1802.06806","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:223b7124371a18c97350b4d5f107165337e4f92af74471676332fd9d34e37350","target":"record","created_at":"2026-05-17T23:47:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fcfdffae985f59c7348f93b528be2adf85e84fe64c2df746b4e88ad5cb75919f","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-02-19T19:01:56Z","title_canon_sha256":"c4c404b635ded2cfeb242c41ff643b78837e5e96ce448334a5555ea2f1cb7baa"},"schema_version":"1.0","source":{"id":"1802.06806","kind":"arxiv","version":2}},"canonical_sha256":"c55883422bef4fc12d705097c641fd2586750c599f0b3eb534575bab97eb481e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c55883422bef4fc12d705097c641fd2586750c599f0b3eb534575bab97eb481e","first_computed_at":"2026-05-17T23:47:44.393377Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:47:44.393377Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zSVaMacorXwvwCpqACGubr8XVLKQayCxawAy9SWSSht75qUjXuTk1qY6gINzFIyxEk0Y26eSa0NkdDh5YGFpCQ==","signature_status":"signed_v1","signed_at":"2026-05-17T23:47:44.393924Z","signed_message":"canonical_sha256_bytes"},"source_id":"1802.06806","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:223b7124371a18c97350b4d5f107165337e4f92af74471676332fd9d34e37350","sha256:d149aa7ac8efe9c8d1860ff429e745c90f0f938deb0f8ffb95c7df34944c118e"],"state_sha256":"34bb0454e0a1577642e5ffd1c0193fb7f4277c19fb5b0ecd0179b9d7acc8b839"}