{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:ZK44HFWU4RSSTQK7C3QBRVM7KI","short_pith_number":"pith:ZK44HFWU","canonical_record":{"source":{"id":"2105.08714","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-05-18T17:55:07Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"5e2eb886bf31531e0ebfbd5d115266b897ab6d016e1d19695c5d88611f8c87eb","abstract_canon_sha256":"28a39722e043a7f8fa336ce55e2dcb3a06976af1b388c0482adc97d36537ae1d"},"schema_version":"1.0"},"canonical_sha256":"cab9c396d4e46529c15f16e018d59f521feef1221712c26bdae43eff2c031690","source":{"kind":"arxiv","id":"2105.08714","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.08714","created_at":"2026-07-05T02:41:25Z"},{"alias_kind":"arxiv_version","alias_value":"2105.08714v1","created_at":"2026-07-05T02:41:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.08714","created_at":"2026-07-05T02:41:25Z"},{"alias_kind":"pith_short_12","alias_value":"ZK44HFWU4RSS","created_at":"2026-07-05T02:41:25Z"},{"alias_kind":"pith_short_16","alias_value":"ZK44HFWU4RSSTQK7","created_at":"2026-07-05T02:41:25Z"},{"alias_kind":"pith_short_8","alias_value":"ZK44HFWU","created_at":"2026-07-05T02:41:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:ZK44HFWU4RSSTQK7C3QBRVM7KI","target":"record","payload":{"canonical_record":{"source":{"id":"2105.08714","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-05-18T17:55:07Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"5e2eb886bf31531e0ebfbd5d115266b897ab6d016e1d19695c5d88611f8c87eb","abstract_canon_sha256":"28a39722e043a7f8fa336ce55e2dcb3a06976af1b388c0482adc97d36537ae1d"},"schema_version":"1.0"},"canonical_sha256":"cab9c396d4e46529c15f16e018d59f521feef1221712c26bdae43eff2c031690","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:41:25.710618Z","signature_b64":"gsQv76ioqS3O8P0jHFGOLGBPiwz9axF/XRUriTWd00jqAHrT4kM8obXsJShkdHqNkIIesWv7VZQ22wdQWv8GAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cab9c396d4e46529c15f16e018d59f521feef1221712c26bdae43eff2c031690","last_reissued_at":"2026-07-05T02:41:25.710108Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:41:25.710108Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2105.08714","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:41:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ERWJiubJmatDl90BDgjmecXoumv7VAFtUrpIibcVQGWUVSwzJhb9qEIwG/0IaF6wUlj/11bHVh7pISCxi1SrCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T12:27:14.427048Z"},"content_sha256":"0f0adfc22789e26cdb99c745a0021e521e6f4617c3677ce3f0fe1ff45adaba7d","schema_version":"1.0","event_id":"sha256:0f0adfc22789e26cdb99c745a0021e521e6f4617c3677ce3f0fe1ff45adaba7d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:ZK44HFWU4RSSTQK7C3QBRVM7KI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"An Ju, David Wagner, Dequan Wang, Evan Shelhamer, Trevor Darrell","submitted_at":"2021-05-18T17:55:07Z","abstract_excerpt":"Adversarial attacks optimize against models to defeat defenses. Existing defenses are static, and stay the same once trained, even while attacks change. We argue that models should fight back, and optimize their defenses against attacks at test time. We propose dynamic defenses, to adapt the model and input during testing, by defensive entropy minimization (dent). Dent alters testing, but not training, for compatibility with existing models and train-time defenses. Dent improves the robustness of adversarially-trained defenses and nominally-trained models against white-box, black-box, and adap"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.08714","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2105.08714/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:41:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"avX35XMWKwRmHU4ItG/VHaD6dbYQYVK7nKCAWp1UCO+TqGI5B/Zb8qINeERh9Nl8nMNf0Us9PMku1VlkLJLcBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T12:27:14.427382Z"},"content_sha256":"5230b93f891480cbf87dda7d66435020845b9d01bc1bfdba9c2911aacf59823d","schema_version":"1.0","event_id":"sha256:5230b93f891480cbf87dda7d66435020845b9d01bc1bfdba9c2911aacf59823d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZK44HFWU4RSSTQK7C3QBRVM7KI/bundle.json","state_url":"https://pith.science/pith/ZK44HFWU4RSSTQK7C3QBRVM7KI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZK44HFWU4RSSTQK7C3QBRVM7KI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T12:27:14Z","links":{"resolver":"https://pith.science/pith/ZK44HFWU4RSSTQK7C3QBRVM7KI","bundle":"https://pith.science/pith/ZK44HFWU4RSSTQK7C3QBRVM7KI/bundle.json","state":"https://pith.science/pith/ZK44HFWU4RSSTQK7C3QBRVM7KI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZK44HFWU4RSSTQK7C3QBRVM7KI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:ZK44HFWU4RSSTQK7C3QBRVM7KI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"28a39722e043a7f8fa336ce55e2dcb3a06976af1b388c0482adc97d36537ae1d","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-05-18T17:55:07Z","title_canon_sha256":"5e2eb886bf31531e0ebfbd5d115266b897ab6d016e1d19695c5d88611f8c87eb"},"schema_version":"1.0","source":{"id":"2105.08714","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.08714","created_at":"2026-07-05T02:41:25Z"},{"alias_kind":"arxiv_version","alias_value":"2105.08714v1","created_at":"2026-07-05T02:41:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.08714","created_at":"2026-07-05T02:41:25Z"},{"alias_kind":"pith_short_12","alias_value":"ZK44HFWU4RSS","created_at":"2026-07-05T02:41:25Z"},{"alias_kind":"pith_short_16","alias_value":"ZK44HFWU4RSSTQK7","created_at":"2026-07-05T02:41:25Z"},{"alias_kind":"pith_short_8","alias_value":"ZK44HFWU","created_at":"2026-07-05T02:41:25Z"}],"graph_snapshots":[{"event_id":"sha256:5230b93f891480cbf87dda7d66435020845b9d01bc1bfdba9c2911aacf59823d","target":"graph","created_at":"2026-07-05T02:41:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2105.08714/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial attacks optimize against models to defeat defenses. Existing defenses are static, and stay the same once trained, even while attacks change. We argue that models should fight back, and optimize their defenses against attacks at test time. We propose dynamic defenses, to adapt the model and input during testing, by defensive entropy minimization (dent). Dent alters testing, but not training, for compatibility with existing models and train-time defenses. Dent improves the robustness of adversarially-trained defenses and nominally-trained models against white-box, black-box, and adap","authors_text":"An Ju, David Wagner, Dequan Wang, Evan Shelhamer, Trevor Darrell","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-05-18T17:55:07Z","title":"Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.08714","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0f0adfc22789e26cdb99c745a0021e521e6f4617c3677ce3f0fe1ff45adaba7d","target":"record","created_at":"2026-07-05T02:41:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"28a39722e043a7f8fa336ce55e2dcb3a06976af1b388c0482adc97d36537ae1d","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-05-18T17:55:07Z","title_canon_sha256":"5e2eb886bf31531e0ebfbd5d115266b897ab6d016e1d19695c5d88611f8c87eb"},"schema_version":"1.0","source":{"id":"2105.08714","kind":"arxiv","version":1}},"canonical_sha256":"cab9c396d4e46529c15f16e018d59f521feef1221712c26bdae43eff2c031690","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cab9c396d4e46529c15f16e018d59f521feef1221712c26bdae43eff2c031690","first_computed_at":"2026-07-05T02:41:25.710108Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:41:25.710108Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gsQv76ioqS3O8P0jHFGOLGBPiwz9axF/XRUriTWd00jqAHrT4kM8obXsJShkdHqNkIIesWv7VZQ22wdQWv8GAw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:41:25.710618Z","signed_message":"canonical_sha256_bytes"},"source_id":"2105.08714","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0f0adfc22789e26cdb99c745a0021e521e6f4617c3677ce3f0fe1ff45adaba7d","sha256:5230b93f891480cbf87dda7d66435020845b9d01bc1bfdba9c2911aacf59823d"],"state_sha256":"520f0797e49cc9a79aa724644e06e650f76be5869c4d79f344c646264dbd1c8f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4yfUGvz/5GH0ynJ8IRg/CBCWNVebpfaDQll72ZU5KMtwNt0StYoMr1p3v7GDvz4UlEXn4ERkeqCRww9VS/EMAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T12:27:14.430821Z","bundle_sha256":"9d2d71008f7942a4629162fe47a9bcfff3192e009664eed45754bc28a3c5e35b"}}