{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:Z3GE2A2HRVIUDFUTZJJ57MMJU4","short_pith_number":"pith:Z3GE2A2H","canonical_record":{"source":{"id":"2102.03482","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-02-06T02:45:03Z","cross_cats_sorted":[],"title_canon_sha256":"b079a8427f35c1bf90da6919b85b81989f559b78b39d5758506773b6d713e192","abstract_canon_sha256":"7238b4c9d01d4f702988754ec3fa0c21a790d45d37ac8c3402f0996b1495b1e2"},"schema_version":"1.0"},"canonical_sha256":"cecc4d03478d51419693ca53dfb189a720b1b0d6a63a4ee405cfe87f65ff2dbd","source":{"kind":"arxiv","id":"2102.03482","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2102.03482","created_at":"2026-07-05T02:14:01Z"},{"alias_kind":"arxiv_version","alias_value":"2102.03482v2","created_at":"2026-07-05T02:14:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2102.03482","created_at":"2026-07-05T02:14:01Z"},{"alias_kind":"pith_short_12","alias_value":"Z3GE2A2HRVIU","created_at":"2026-07-05T02:14:01Z"},{"alias_kind":"pith_short_16","alias_value":"Z3GE2A2HRVIUDFUT","created_at":"2026-07-05T02:14:01Z"},{"alias_kind":"pith_short_8","alias_value":"Z3GE2A2H","created_at":"2026-07-05T02:14:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:Z3GE2A2HRVIUDFUTZJJ57MMJU4","target":"record","payload":{"canonical_record":{"source":{"id":"2102.03482","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-02-06T02:45:03Z","cross_cats_sorted":[],"title_canon_sha256":"b079a8427f35c1bf90da6919b85b81989f559b78b39d5758506773b6d713e192","abstract_canon_sha256":"7238b4c9d01d4f702988754ec3fa0c21a790d45d37ac8c3402f0996b1495b1e2"},"schema_version":"1.0"},"canonical_sha256":"cecc4d03478d51419693ca53dfb189a720b1b0d6a63a4ee405cfe87f65ff2dbd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:14:01.319603Z","signature_b64":"vCz+0tLJ90kNY46ycuzNtAImvZP3twydzne0tFtSqpIPJGIgAocXIrXQGJrFfoJMmC8V6r0jS/k53/fGX8qxAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cecc4d03478d51419693ca53dfb189a720b1b0d6a63a4ee405cfe87f65ff2dbd","last_reissued_at":"2026-07-05T02:14:01.319171Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:14:01.319171Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2102.03482","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:14:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nYnlfGtceGWIxaoxY6J02wK3AYgPSdVgI7CmdFYyKZTsFBsR/8c7DyxqZWuWA163jflSDG0YkqtM9jP9GBK0Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T18:13:01.990532Z"},"content_sha256":"3bbdfd30ca823e2ab30cb02ef0e48ca3d066f671f9193e60f9d0982a7c0a04f8","schema_version":"1.0","event_id":"sha256:3bbdfd30ca823e2ab30cb02ef0e48ca3d066f671f9193e60f9d0982a7c0a04f8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:Z3GE2A2HRVIUDFUTZJJ57MMJU4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Understanding the Interaction of Adversarial Training with Noisy Labels","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Bo Han, Gang Niu, Hongxia Yang, Jianing Zhu, Jingfeng Zhang, Masashi Sugiyama, Mohan Kankanhalli, Tongliang Liu","submitted_at":"2021-02-06T02:45:03Z","abstract_excerpt":"Noisy labels (NL) and adversarial examples both undermine trained models, but interestingly they have hitherto been studied independently. A recent adversarial training (AT) study showed that the number of projected gradient descent (PGD) steps to successfully attack a point (i.e., find an adversarial example in its proximity) is an effective measure of the robustness of this point. Given that natural data are clean, this measure reveals an intrinsic geometric property -- how far a point is from its class boundary. Based on this breakthrough, in this paper, we figure out how AT would interact "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2102.03482","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2102.03482/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:14:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7jnr5eBZbp+itsxFJ2cyxTqnabqVLAkp8s1wg6DwslSZT0D6zXM3iIvwBLxXLQs0SCaiRNZZwUIHdqmlWVDjDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T18:13:01.990897Z"},"content_sha256":"183e9bea7267375c080af9d899d37fe14dacf7bc5695c89c1cbd539d0793b82b","schema_version":"1.0","event_id":"sha256:183e9bea7267375c080af9d899d37fe14dacf7bc5695c89c1cbd539d0793b82b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Z3GE2A2HRVIUDFUTZJJ57MMJU4/bundle.json","state_url":"https://pith.science/pith/Z3GE2A2HRVIUDFUTZJJ57MMJU4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Z3GE2A2HRVIUDFUTZJJ57MMJU4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T18:13:01Z","links":{"resolver":"https://pith.science/pith/Z3GE2A2HRVIUDFUTZJJ57MMJU4","bundle":"https://pith.science/pith/Z3GE2A2HRVIUDFUTZJJ57MMJU4/bundle.json","state":"https://pith.science/pith/Z3GE2A2HRVIUDFUTZJJ57MMJU4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Z3GE2A2HRVIUDFUTZJJ57MMJU4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:Z3GE2A2HRVIUDFUTZJJ57MMJU4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7238b4c9d01d4f702988754ec3fa0c21a790d45d37ac8c3402f0996b1495b1e2","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-02-06T02:45:03Z","title_canon_sha256":"b079a8427f35c1bf90da6919b85b81989f559b78b39d5758506773b6d713e192"},"schema_version":"1.0","source":{"id":"2102.03482","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2102.03482","created_at":"2026-07-05T02:14:01Z"},{"alias_kind":"arxiv_version","alias_value":"2102.03482v2","created_at":"2026-07-05T02:14:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2102.03482","created_at":"2026-07-05T02:14:01Z"},{"alias_kind":"pith_short_12","alias_value":"Z3GE2A2HRVIU","created_at":"2026-07-05T02:14:01Z"},{"alias_kind":"pith_short_16","alias_value":"Z3GE2A2HRVIUDFUT","created_at":"2026-07-05T02:14:01Z"},{"alias_kind":"pith_short_8","alias_value":"Z3GE2A2H","created_at":"2026-07-05T02:14:01Z"}],"graph_snapshots":[{"event_id":"sha256:183e9bea7267375c080af9d899d37fe14dacf7bc5695c89c1cbd539d0793b82b","target":"graph","created_at":"2026-07-05T02:14:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2102.03482/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Noisy labels (NL) and adversarial examples both undermine trained models, but interestingly they have hitherto been studied independently. A recent adversarial training (AT) study showed that the number of projected gradient descent (PGD) steps to successfully attack a point (i.e., find an adversarial example in its proximity) is an effective measure of the robustness of this point. Given that natural data are clean, this measure reveals an intrinsic geometric property -- how far a point is from its class boundary. Based on this breakthrough, in this paper, we figure out how AT would interact ","authors_text":"Bo Han, Gang Niu, Hongxia Yang, Jianing Zhu, Jingfeng Zhang, Masashi Sugiyama, Mohan Kankanhalli, Tongliang Liu","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-02-06T02:45:03Z","title":"Understanding the Interaction of Adversarial Training with Noisy Labels"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2102.03482","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3bbdfd30ca823e2ab30cb02ef0e48ca3d066f671f9193e60f9d0982a7c0a04f8","target":"record","created_at":"2026-07-05T02:14:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7238b4c9d01d4f702988754ec3fa0c21a790d45d37ac8c3402f0996b1495b1e2","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-02-06T02:45:03Z","title_canon_sha256":"b079a8427f35c1bf90da6919b85b81989f559b78b39d5758506773b6d713e192"},"schema_version":"1.0","source":{"id":"2102.03482","kind":"arxiv","version":2}},"canonical_sha256":"cecc4d03478d51419693ca53dfb189a720b1b0d6a63a4ee405cfe87f65ff2dbd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cecc4d03478d51419693ca53dfb189a720b1b0d6a63a4ee405cfe87f65ff2dbd","first_computed_at":"2026-07-05T02:14:01.319171Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:14:01.319171Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vCz+0tLJ90kNY46ycuzNtAImvZP3twydzne0tFtSqpIPJGIgAocXIrXQGJrFfoJMmC8V6r0jS/k53/fGX8qxAA==","signature_status":"signed_v1","signed_at":"2026-07-05T02:14:01.319603Z","signed_message":"canonical_sha256_bytes"},"source_id":"2102.03482","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3bbdfd30ca823e2ab30cb02ef0e48ca3d066f671f9193e60f9d0982a7c0a04f8","sha256:183e9bea7267375c080af9d899d37fe14dacf7bc5695c89c1cbd539d0793b82b"],"state_sha256":"f5050f3a990a20d063ccedc240fc6dec4dd4623f0c2b995ba96640203cf41a0a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pmqICipnAMmSTU0I9E8ZEM/waeHu0HloxvmOASLCc6mQVe4phstiLaFoeTZd7l462XBpawy3JlwrWmlPsdEPBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T18:13:01.992805Z","bundle_sha256":"cff4c1c94f8c84e40976221ba312365b8bfe624745b9568dd2742018e2a1c45d"}}