{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:YXRIYM74X5D2X23IU2SHWQALNO","short_pith_number":"pith:YXRIYM74","canonical_record":{"source":{"id":"2203.14533","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-28T07:13:51Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"e2efeddd352993fe875cc3a3da324c0941efa6b721c33f199bdd49a2cb8986ed","abstract_canon_sha256":"9a2f623de9151e263eaf8edb89175e0636877b7e57e5b748cca48427f56828d5"},"schema_version":"1.0"},"canonical_sha256":"c5e28c33fcbf47abeb68a6a47b400b6b8d03898c41c6cfbf1d4180b4543ec9d0","source":{"kind":"arxiv","id":"2203.14533","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.14533","created_at":"2026-07-05T04:09:06Z"},{"alias_kind":"arxiv_version","alias_value":"2203.14533v1","created_at":"2026-07-05T04:09:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.14533","created_at":"2026-07-05T04:09:06Z"},{"alias_kind":"pith_short_12","alias_value":"YXRIYM74X5D2","created_at":"2026-07-05T04:09:06Z"},{"alias_kind":"pith_short_16","alias_value":"YXRIYM74X5D2X23I","created_at":"2026-07-05T04:09:06Z"},{"alias_kind":"pith_short_8","alias_value":"YXRIYM74","created_at":"2026-07-05T04:09:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:YXRIYM74X5D2X23IU2SHWQALNO","target":"record","payload":{"canonical_record":{"source":{"id":"2203.14533","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-28T07:13:51Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"e2efeddd352993fe875cc3a3da324c0941efa6b721c33f199bdd49a2cb8986ed","abstract_canon_sha256":"9a2f623de9151e263eaf8edb89175e0636877b7e57e5b748cca48427f56828d5"},"schema_version":"1.0"},"canonical_sha256":"c5e28c33fcbf47abeb68a6a47b400b6b8d03898c41c6cfbf1d4180b4543ec9d0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:09:06.223998Z","signature_b64":"tUVGkiTvMl8uqnBSVC2Dd0YT68rJmulCPQYg9yRELcMLIBRFyLDbWZmhUQtzpFD6JKiZ1uVKsrfxF4iNrznoCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c5e28c33fcbf47abeb68a6a47b400b6b8d03898c41c6cfbf1d4180b4543ec9d0","last_reissued_at":"2026-07-05T04:09:06.223656Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:09:06.223656Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2203.14533","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:09:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"i8UcnNvQZEjtMBXRVAdE+jhMi0gBPBzAXbdjyA/1zBt1IRMBMu8pFo20uCYmPHNOmRb9MlJjwFXtyaEv2JHdBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T11:01:33.397125Z"},"content_sha256":"15141e2d618d57579cfc1cf23313ff2cb65b675fc8e1b3437d0fc6bb42bbff79","schema_version":"1.0","event_id":"sha256:15141e2d618d57579cfc1cf23313ff2cb65b675fc8e1b3437d0fc6bb42bbff79"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:YXRIYM74X5D2X23IU2SHWQALNO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Robust Unlearnable Examples: Protecting Data Against Adversarial Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Dacheng Tao, Fengxiang He, Li Shen, Shaopeng Fu, Yang Liu","submitted_at":"2022-03-28T07:13:51Z","abstract_excerpt":"The tremendous amount of accessible data in cyberspace face the risk of being unauthorized used for training deep learning models. To address this concern, methods are proposed to make data unlearnable for deep learning models by adding a type of error-minimizing noise. However, such conferred unlearnability is found fragile to adversarial training. In this paper, we design new methods to generate robust unlearnable examples that are protected from adversarial training. We first find that the vanilla error-minimizing noise, which suppresses the informative knowledge of data via minimizing the "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.14533","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2203.14533/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:09:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MOif8MKZfgjuqesXL+ccbHuQ6Toqcft+ZDm7JRiPbcAEAm7CeW/ZcnRCo6ggm60aIPU0rRVjTTMNbHgJcd0DDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T11:01:33.397682Z"},"content_sha256":"6a198fe4d950a29c3e72d2650aefed8f9793e7ee702cc0c8f0619c58c6168f62","schema_version":"1.0","event_id":"sha256:6a198fe4d950a29c3e72d2650aefed8f9793e7ee702cc0c8f0619c58c6168f62"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YXRIYM74X5D2X23IU2SHWQALNO/bundle.json","state_url":"https://pith.science/pith/YXRIYM74X5D2X23IU2SHWQALNO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YXRIYM74X5D2X23IU2SHWQALNO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T11:01:33Z","links":{"resolver":"https://pith.science/pith/YXRIYM74X5D2X23IU2SHWQALNO","bundle":"https://pith.science/pith/YXRIYM74X5D2X23IU2SHWQALNO/bundle.json","state":"https://pith.science/pith/YXRIYM74X5D2X23IU2SHWQALNO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YXRIYM74X5D2X23IU2SHWQALNO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:YXRIYM74X5D2X23IU2SHWQALNO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9a2f623de9151e263eaf8edb89175e0636877b7e57e5b748cca48427f56828d5","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-28T07:13:51Z","title_canon_sha256":"e2efeddd352993fe875cc3a3da324c0941efa6b721c33f199bdd49a2cb8986ed"},"schema_version":"1.0","source":{"id":"2203.14533","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.14533","created_at":"2026-07-05T04:09:06Z"},{"alias_kind":"arxiv_version","alias_value":"2203.14533v1","created_at":"2026-07-05T04:09:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.14533","created_at":"2026-07-05T04:09:06Z"},{"alias_kind":"pith_short_12","alias_value":"YXRIYM74X5D2","created_at":"2026-07-05T04:09:06Z"},{"alias_kind":"pith_short_16","alias_value":"YXRIYM74X5D2X23I","created_at":"2026-07-05T04:09:06Z"},{"alias_kind":"pith_short_8","alias_value":"YXRIYM74","created_at":"2026-07-05T04:09:06Z"}],"graph_snapshots":[{"event_id":"sha256:6a198fe4d950a29c3e72d2650aefed8f9793e7ee702cc0c8f0619c58c6168f62","target":"graph","created_at":"2026-07-05T04:09:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2203.14533/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The tremendous amount of accessible data in cyberspace face the risk of being unauthorized used for training deep learning models. To address this concern, methods are proposed to make data unlearnable for deep learning models by adding a type of error-minimizing noise. However, such conferred unlearnability is found fragile to adversarial training. In this paper, we design new methods to generate robust unlearnable examples that are protected from adversarial training. We first find that the vanilla error-minimizing noise, which suppresses the informative knowledge of data via minimizing the ","authors_text":"Dacheng Tao, Fengxiang He, Li Shen, Shaopeng Fu, Yang Liu","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-28T07:13:51Z","title":"Robust Unlearnable Examples: Protecting Data Against Adversarial Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.14533","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:15141e2d618d57579cfc1cf23313ff2cb65b675fc8e1b3437d0fc6bb42bbff79","target":"record","created_at":"2026-07-05T04:09:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9a2f623de9151e263eaf8edb89175e0636877b7e57e5b748cca48427f56828d5","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-28T07:13:51Z","title_canon_sha256":"e2efeddd352993fe875cc3a3da324c0941efa6b721c33f199bdd49a2cb8986ed"},"schema_version":"1.0","source":{"id":"2203.14533","kind":"arxiv","version":1}},"canonical_sha256":"c5e28c33fcbf47abeb68a6a47b400b6b8d03898c41c6cfbf1d4180b4543ec9d0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c5e28c33fcbf47abeb68a6a47b400b6b8d03898c41c6cfbf1d4180b4543ec9d0","first_computed_at":"2026-07-05T04:09:06.223656Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:09:06.223656Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"tUVGkiTvMl8uqnBSVC2Dd0YT68rJmulCPQYg9yRELcMLIBRFyLDbWZmhUQtzpFD6JKiZ1uVKsrfxF4iNrznoCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T04:09:06.223998Z","signed_message":"canonical_sha256_bytes"},"source_id":"2203.14533","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:15141e2d618d57579cfc1cf23313ff2cb65b675fc8e1b3437d0fc6bb42bbff79","sha256:6a198fe4d950a29c3e72d2650aefed8f9793e7ee702cc0c8f0619c58c6168f62"],"state_sha256":"b1eacdf265ee70d241ae01c32f19e1a6e5ffd5fc49cd8474339c313c1d68139b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9RkYwV89wASfVJ6urDwV4AG+SsWnRhSX4sPPvked0pSIihKLkClCRHNyEJHAYQsF1mMq8tjIE9gMawHyXh1FCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T11:01:33.401893Z","bundle_sha256":"b964b323b492e84012bb99f163f1209606edd08e4984a72c54e49dce8de8dd72"}}