{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:YXPM3LL4ZHVTI4VA6SXYYXPOCY","short_pith_number":"pith:YXPM3LL4","canonical_record":{"source":{"id":"2106.11644","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-06-22T09:51:51Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"32efbe7aa1d790b89389ade54217ba1cc5459a288a17474dfa2375beed4d2b63","abstract_canon_sha256":"3f57131414cefc2c3d91e44879acb1371a96d4d0d8a6cc144ae574c425cac48c"},"schema_version":"1.0"},"canonical_sha256":"c5decdad7cc9eb3472a0f4af8c5dee1626f8c996b16734bcc2e3089dba5fd2dc","source":{"kind":"arxiv","id":"2106.11644","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.11644","created_at":"2026-07-05T03:44:29Z"},{"alias_kind":"arxiv_version","alias_value":"2106.11644v2","created_at":"2026-07-05T03:44:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.11644","created_at":"2026-07-05T03:44:29Z"},{"alias_kind":"pith_short_12","alias_value":"YXPM3LL4ZHVT","created_at":"2026-07-05T03:44:29Z"},{"alias_kind":"pith_short_16","alias_value":"YXPM3LL4ZHVTI4VA","created_at":"2026-07-05T03:44:29Z"},{"alias_kind":"pith_short_8","alias_value":"YXPM3LL4","created_at":"2026-07-05T03:44:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:YXPM3LL4ZHVTI4VA6SXYYXPOCY","target":"record","payload":{"canonical_record":{"source":{"id":"2106.11644","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-06-22T09:51:51Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"32efbe7aa1d790b89389ade54217ba1cc5459a288a17474dfa2375beed4d2b63","abstract_canon_sha256":"3f57131414cefc2c3d91e44879acb1371a96d4d0d8a6cc144ae574c425cac48c"},"schema_version":"1.0"},"canonical_sha256":"c5decdad7cc9eb3472a0f4af8c5dee1626f8c996b16734bcc2e3089dba5fd2dc","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:44:29.866260Z","signature_b64":"dC6mWwNwTBTo8nJXBXt5cls85ukEednLVC2xPb6CWGk6DUaDA0BIeLNGXX79e0lkFFvUGtSdfumKB3ysILvMDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c5decdad7cc9eb3472a0f4af8c5dee1626f8c996b16734bcc2e3089dba5fd2dc","last_reissued_at":"2026-07-05T03:44:29.865889Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:44:29.865889Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2106.11644","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:44:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"K2Tazq1srYikeALWVEKgCzQaRG9N6n8jhYGa5vCyKoGbzS+JbF/SY+cnxznZnUE0apSQHsmG5kNVfuRS0zQQBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T21:45:07.001394Z"},"content_sha256":"51a648d42c9b92fe26784006d11e34a9198129990fa50aa065bcd96bc0e1655f","schema_version":"1.0","event_id":"sha256:51a648d42c9b92fe26784006d11e34a9198129990fa50aa065bcd96bc0e1655f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:YXPM3LL4ZHVTI4VA6SXYYXPOCY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"NCIS: Neural Contextual Iterative Smoothing for Purifying Adversarial Perturbations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Naeun Ko, Sungmin Cha, Taesup Moon, Youngjoon Yoo","submitted_at":"2021-06-22T09:51:51Z","abstract_excerpt":"We propose a novel and effective purification based adversarial defense method against pre-processor blind white- and black-box attacks. Our method is computationally efficient and trained only with self-supervised learning on general images, without requiring any adversarial training or retraining of the classification model. We first show an empirical analysis on the adversarial noise, defined to be the residual between an original image and its adversarial example, has almost zero mean, symmetric distribution. Based on this observation, we propose a very simple iterative Gaussian Smoothing "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.11644","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2106.11644/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:44:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zI2udxQDZ4aOQWRFsL8HPWCUoUPJaPWGCZrWD6uwxbRYb6gVg79HQQ0ZRrnYT0Gz9zA2cumxnVOFzzUNkYuuCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T21:45:07.002309Z"},"content_sha256":"2333e801aafe1d23307d883326d2720dd10ca754cfb61b38fc5d190fbcb47c17","schema_version":"1.0","event_id":"sha256:2333e801aafe1d23307d883326d2720dd10ca754cfb61b38fc5d190fbcb47c17"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YXPM3LL4ZHVTI4VA6SXYYXPOCY/bundle.json","state_url":"https://pith.science/pith/YXPM3LL4ZHVTI4VA6SXYYXPOCY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YXPM3LL4ZHVTI4VA6SXYYXPOCY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T21:45:07Z","links":{"resolver":"https://pith.science/pith/YXPM3LL4ZHVTI4VA6SXYYXPOCY","bundle":"https://pith.science/pith/YXPM3LL4ZHVTI4VA6SXYYXPOCY/bundle.json","state":"https://pith.science/pith/YXPM3LL4ZHVTI4VA6SXYYXPOCY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YXPM3LL4ZHVTI4VA6SXYYXPOCY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:YXPM3LL4ZHVTI4VA6SXYYXPOCY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3f57131414cefc2c3d91e44879acb1371a96d4d0d8a6cc144ae574c425cac48c","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-06-22T09:51:51Z","title_canon_sha256":"32efbe7aa1d790b89389ade54217ba1cc5459a288a17474dfa2375beed4d2b63"},"schema_version":"1.0","source":{"id":"2106.11644","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.11644","created_at":"2026-07-05T03:44:29Z"},{"alias_kind":"arxiv_version","alias_value":"2106.11644v2","created_at":"2026-07-05T03:44:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.11644","created_at":"2026-07-05T03:44:29Z"},{"alias_kind":"pith_short_12","alias_value":"YXPM3LL4ZHVT","created_at":"2026-07-05T03:44:29Z"},{"alias_kind":"pith_short_16","alias_value":"YXPM3LL4ZHVTI4VA","created_at":"2026-07-05T03:44:29Z"},{"alias_kind":"pith_short_8","alias_value":"YXPM3LL4","created_at":"2026-07-05T03:44:29Z"}],"graph_snapshots":[{"event_id":"sha256:2333e801aafe1d23307d883326d2720dd10ca754cfb61b38fc5d190fbcb47c17","target":"graph","created_at":"2026-07-05T03:44:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.11644/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We propose a novel and effective purification based adversarial defense method against pre-processor blind white- and black-box attacks. Our method is computationally efficient and trained only with self-supervised learning on general images, without requiring any adversarial training or retraining of the classification model. We first show an empirical analysis on the adversarial noise, defined to be the residual between an original image and its adversarial example, has almost zero mean, symmetric distribution. Based on this observation, we propose a very simple iterative Gaussian Smoothing ","authors_text":"Naeun Ko, Sungmin Cha, Taesup Moon, Youngjoon Yoo","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-06-22T09:51:51Z","title":"NCIS: Neural Contextual Iterative Smoothing for Purifying Adversarial Perturbations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.11644","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:51a648d42c9b92fe26784006d11e34a9198129990fa50aa065bcd96bc0e1655f","target":"record","created_at":"2026-07-05T03:44:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3f57131414cefc2c3d91e44879acb1371a96d4d0d8a6cc144ae574c425cac48c","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-06-22T09:51:51Z","title_canon_sha256":"32efbe7aa1d790b89389ade54217ba1cc5459a288a17474dfa2375beed4d2b63"},"schema_version":"1.0","source":{"id":"2106.11644","kind":"arxiv","version":2}},"canonical_sha256":"c5decdad7cc9eb3472a0f4af8c5dee1626f8c996b16734bcc2e3089dba5fd2dc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c5decdad7cc9eb3472a0f4af8c5dee1626f8c996b16734bcc2e3089dba5fd2dc","first_computed_at":"2026-07-05T03:44:29.865889Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:44:29.865889Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"dC6mWwNwTBTo8nJXBXt5cls85ukEednLVC2xPb6CWGk6DUaDA0BIeLNGXX79e0lkFFvUGtSdfumKB3ysILvMDw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:44:29.866260Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.11644","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:51a648d42c9b92fe26784006d11e34a9198129990fa50aa065bcd96bc0e1655f","sha256:2333e801aafe1d23307d883326d2720dd10ca754cfb61b38fc5d190fbcb47c17"],"state_sha256":"0c935132c0fe85aef0af8f67f6839904a266b023cc855fa4ee225f822ba04b1d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FQkP+Nvotz752liDw74rOlXEY+y6H471wF/H8hRuKqtDF2KgSwumbrFmiKhGQPCo98Flfvaywsx9iX0bZiQsAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T21:45:07.008559Z","bundle_sha256":"ebfc7cce836f8e36136df40c39e3ca314b9b2a845424226102d7a40ba8e30841"}}