{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:ZBM2ZI3OOBM6ZEVPB3AYM5MERW","short_pith_number":"pith:ZBM2ZI3O","canonical_record":{"source":{"id":"1903.09822","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-23T13:33:55Z","cross_cats_sorted":[],"title_canon_sha256":"0720d989e7aa69c65c8cb5aecaa89b8127d5f16ae987069dd0bb7f7e2e6bf481","abstract_canon_sha256":"0a3102814d36ef6de95e85548635536c4410f1df802df2affa454175f1815eca"},"schema_version":"1.0"},"canonical_sha256":"c859aca36e7059ec92af0ec18675848dbd743fa30be1b04c6f7f38188252ed86","source":{"kind":"arxiv","id":"1903.09822","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1903.09822","created_at":"2026-07-05T01:35:23Z"},{"alias_kind":"arxiv_version","alias_value":"1903.09822v5","created_at":"2026-07-05T01:35:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1903.09822","created_at":"2026-07-05T01:35:23Z"},{"alias_kind":"pith_short_12","alias_value":"ZBM2ZI3OOBM6","created_at":"2026-07-05T01:35:23Z"},{"alias_kind":"pith_short_16","alias_value":"ZBM2ZI3OOBM6ZEVP","created_at":"2026-07-05T01:35:23Z"},{"alias_kind":"pith_short_8","alias_value":"ZBM2ZI3O","created_at":"2026-07-05T01:35:23Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:ZBM2ZI3OOBM6ZEVPB3AYM5MERW","target":"record","payload":{"canonical_record":{"source":{"id":"1903.09822","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-23T13:33:55Z","cross_cats_sorted":[],"title_canon_sha256":"0720d989e7aa69c65c8cb5aecaa89b8127d5f16ae987069dd0bb7f7e2e6bf481","abstract_canon_sha256":"0a3102814d36ef6de95e85548635536c4410f1df802df2affa454175f1815eca"},"schema_version":"1.0"},"canonical_sha256":"c859aca36e7059ec92af0ec18675848dbd743fa30be1b04c6f7f38188252ed86","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:35:23.271287Z","signature_b64":"hb20uR5MqhE+06pr76OY0BrzHgPjgwrlaLYA5wlUAdxq6brKEDpclx/m3QY6XY891gkQJd35zBwmXmKwr8smDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c859aca36e7059ec92af0ec18675848dbd743fa30be1b04c6f7f38188252ed86","last_reissued_at":"2026-07-05T01:35:23.270948Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:35:23.270948Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1903.09822","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:35:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OzaBpa1PZJZAwKvYsnnzqZvEYFu/seINSgBh3x4LjzgF+0/GkpdLpnDyr3mdlmYYc5EjGOplbDdImJ0GtbgCCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-24T07:22:46.815075Z"},"content_sha256":"632c3ec12df999d204c8853c56f65401a383ea5bf53576782e9fb08b0d92e4d6","schema_version":"1.0","event_id":"sha256:632c3ec12df999d204c8853c56f65401a383ea5bf53576782e9fb08b0d92e4d6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:ZBM2ZI3OOBM6ZEVPB3AYM5MERW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Scalable Differential Privacy with Certified Robustness in Adversarial Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Dejing Dou, Han Hu, My T. Thai, NHatHai Phan, Ruoming Jin, Tong Sun","submitted_at":"2019-03-23T13:33:55Z","abstract_excerpt":"In this paper, we aim to develop a scalable algorithm to preserve differential privacy (DP) in adversarial learning for deep neural networks (DNNs), with certified robustness to adversarial examples. By leveraging the sequential composition theory in DP, we randomize both input and latent spaces to strengthen our certified robustness bounds. To address the trade-off among model utility, privacy loss, and robustness, we design an original adversarial objective function, based on the post-processing property in DP, to tighten the sensitivity of our model. A new stochastic batch training is propo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1903.09822","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1903.09822/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:35:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Yw+PiuoYAh8t7WQ1kY9R9ib0mopw9cAxOBN+t5+9rfNhkvO6p9x6HTctF0AznQSyTJJWKp7ePkuqv5Hh+ydiDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-24T07:22:46.816120Z"},"content_sha256":"ac36673ff6da65a0b2183e463318a4a0cbbccf6d2e50113d7eb2624e32f21516","schema_version":"1.0","event_id":"sha256:ac36673ff6da65a0b2183e463318a4a0cbbccf6d2e50113d7eb2624e32f21516"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZBM2ZI3OOBM6ZEVPB3AYM5MERW/bundle.json","state_url":"https://pith.science/pith/ZBM2ZI3OOBM6ZEVPB3AYM5MERW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZBM2ZI3OOBM6ZEVPB3AYM5MERW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-24T07:22:46Z","links":{"resolver":"https://pith.science/pith/ZBM2ZI3OOBM6ZEVPB3AYM5MERW","bundle":"https://pith.science/pith/ZBM2ZI3OOBM6ZEVPB3AYM5MERW/bundle.json","state":"https://pith.science/pith/ZBM2ZI3OOBM6ZEVPB3AYM5MERW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZBM2ZI3OOBM6ZEVPB3AYM5MERW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:ZBM2ZI3OOBM6ZEVPB3AYM5MERW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0a3102814d36ef6de95e85548635536c4410f1df802df2affa454175f1815eca","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-23T13:33:55Z","title_canon_sha256":"0720d989e7aa69c65c8cb5aecaa89b8127d5f16ae987069dd0bb7f7e2e6bf481"},"schema_version":"1.0","source":{"id":"1903.09822","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1903.09822","created_at":"2026-07-05T01:35:23Z"},{"alias_kind":"arxiv_version","alias_value":"1903.09822v5","created_at":"2026-07-05T01:35:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1903.09822","created_at":"2026-07-05T01:35:23Z"},{"alias_kind":"pith_short_12","alias_value":"ZBM2ZI3OOBM6","created_at":"2026-07-05T01:35:23Z"},{"alias_kind":"pith_short_16","alias_value":"ZBM2ZI3OOBM6ZEVP","created_at":"2026-07-05T01:35:23Z"},{"alias_kind":"pith_short_8","alias_value":"ZBM2ZI3O","created_at":"2026-07-05T01:35:23Z"}],"graph_snapshots":[{"event_id":"sha256:ac36673ff6da65a0b2183e463318a4a0cbbccf6d2e50113d7eb2624e32f21516","target":"graph","created_at":"2026-07-05T01:35:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1903.09822/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this paper, we aim to develop a scalable algorithm to preserve differential privacy (DP) in adversarial learning for deep neural networks (DNNs), with certified robustness to adversarial examples. By leveraging the sequential composition theory in DP, we randomize both input and latent spaces to strengthen our certified robustness bounds. To address the trade-off among model utility, privacy loss, and robustness, we design an original adversarial objective function, based on the post-processing property in DP, to tighten the sensitivity of our model. A new stochastic batch training is propo","authors_text":"Dejing Dou, Han Hu, My T. Thai, NHatHai Phan, Ruoming Jin, Tong Sun","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-23T13:33:55Z","title":"Scalable Differential Privacy with Certified Robustness in Adversarial Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1903.09822","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:632c3ec12df999d204c8853c56f65401a383ea5bf53576782e9fb08b0d92e4d6","target":"record","created_at":"2026-07-05T01:35:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0a3102814d36ef6de95e85548635536c4410f1df802df2affa454175f1815eca","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-23T13:33:55Z","title_canon_sha256":"0720d989e7aa69c65c8cb5aecaa89b8127d5f16ae987069dd0bb7f7e2e6bf481"},"schema_version":"1.0","source":{"id":"1903.09822","kind":"arxiv","version":5}},"canonical_sha256":"c859aca36e7059ec92af0ec18675848dbd743fa30be1b04c6f7f38188252ed86","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c859aca36e7059ec92af0ec18675848dbd743fa30be1b04c6f7f38188252ed86","first_computed_at":"2026-07-05T01:35:23.270948Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:35:23.270948Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"hb20uR5MqhE+06pr76OY0BrzHgPjgwrlaLYA5wlUAdxq6brKEDpclx/m3QY6XY891gkQJd35zBwmXmKwr8smDw==","signature_status":"signed_v1","signed_at":"2026-07-05T01:35:23.271287Z","signed_message":"canonical_sha256_bytes"},"source_id":"1903.09822","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:632c3ec12df999d204c8853c56f65401a383ea5bf53576782e9fb08b0d92e4d6","sha256:ac36673ff6da65a0b2183e463318a4a0cbbccf6d2e50113d7eb2624e32f21516"],"state_sha256":"4ad85295116a4a7a9594d5ba2476e3e7916a724396a6e93c371660bcbfa20d94"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zhCOV6H8zk3emhfhHJM46b0Psdyzq0XaAAhmEttjH59lORl1xF6Sez9LTYrlqXykKQNhXJ91E1x54t5pyd6uDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-24T07:22:46.818707Z","bundle_sha256":"a996d08d221938b072cbebab1750e3301562129322be9db0b891b00dd417db85"}}