{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:ZD7UYIUNV3P25N5PZKLQDM5WJC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a6a3a64e1ed2617985533ff4c326c53dd6bd10a4c06ef57f40208b4e5942a2e2","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-05-24T15:25:19Z","title_canon_sha256":"e1621995603229190a6aac0d407d539a3a82c2fb5ece2ca54efe2e98c2ffe55b"},"schema_version":"1.0","source":{"id":"2305.15241","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.15241","created_at":"2026-07-05T08:21:05Z"},{"alias_kind":"arxiv_version","alias_value":"2305.15241v2","created_at":"2026-07-05T08:21:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.15241","created_at":"2026-07-05T08:21:05Z"},{"alias_kind":"pith_short_12","alias_value":"ZD7UYIUNV3P2","created_at":"2026-07-05T08:21:05Z"},{"alias_kind":"pith_short_16","alias_value":"ZD7UYIUNV3P25N5P","created_at":"2026-07-05T08:21:05Z"},{"alias_kind":"pith_short_8","alias_value":"ZD7UYIUN","created_at":"2026-07-05T08:21:05Z"}],"graph_snapshots":[{"event_id":"sha256:9c19ed42adceb014ddb3311285f0d7f3508668aa6456ceda3dc21a0a701dd6a8","target":"graph","created_at":"2026-07-05T08:21:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.15241/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Diffusion models have been applied to improve adversarial robustness of image classifiers by purifying the adversarial noises or generating realistic data for adversarial training. However, diffusion-based purification can be evaded by stronger adaptive attacks while adversarial training does not perform well under unseen threats, exhibiting inevitable limitations of these methods. To better harness the expressive power of diffusion models, this paper proposes Robust Diffusion Classifier (RDC), a generative classifier that is constructed from a pre-trained diffusion model to be adversarially r","authors_text":"Chengqi Duan, Hang Su, Huanran Chen, Jun Zhu, Xiao Yang, Yinpeng Dong, Zhengyi Wang","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-05-24T15:25:19Z","title":"Robust Classification via a Single Diffusion Model"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.15241","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:900a834a3f893690dce64e8bc55edaf889e4526df171415e01ff11161a6ad300","target":"record","created_at":"2026-07-05T08:21:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a6a3a64e1ed2617985533ff4c326c53dd6bd10a4c06ef57f40208b4e5942a2e2","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-05-24T15:25:19Z","title_canon_sha256":"e1621995603229190a6aac0d407d539a3a82c2fb5ece2ca54efe2e98c2ffe55b"},"schema_version":"1.0","source":{"id":"2305.15241","kind":"arxiv","version":2}},"canonical_sha256":"c8ff4c228daedfaeb7afca9701b3b648a4e4fbc804a1660fc9166d3d308f65ab","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c8ff4c228daedfaeb7afca9701b3b648a4e4fbc804a1660fc9166d3d308f65ab","first_computed_at":"2026-07-05T08:21:05.043891Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:21:05.043891Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7VS39qu6R+2ZHXCrVPdA33oswthXZ7ocfuL8hnrZIGy7YZVs5mA3Ec4Z9koqGvWbWrKZsX70BgvXcZeIEQSOCg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:21:05.044408Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.15241","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:900a834a3f893690dce64e8bc55edaf889e4526df171415e01ff11161a6ad300","sha256:9c19ed42adceb014ddb3311285f0d7f3508668aa6456ceda3dc21a0a701dd6a8"],"state_sha256":"cd95474d9faa4107f40a93fae0b732e2a4f7ffa8e2f956112e76b3b80b12fec5"}