{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:ZYFVOVE64LW55W5TKW3YAJBNYU","short_pith_number":"pith:ZYFVOVE6","canonical_record":{"source":{"id":"2202.03077","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-02-07T11:18:04Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"6e9b965bd51989e1c8f3a81a38ed643aa869a75dff55f6bef4c1de941eccd676","abstract_canon_sha256":"fd2da866d3b9252a4f051fcc8fb5094a624b5129d75ffc29d74b8c9b5130f577"},"schema_version":"1.0"},"canonical_sha256":"ce0b57549ee2eddedbb355b780242dc531a2fbdeac5c300681167abcba1447c5","source":{"kind":"arxiv","id":"2202.03077","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.03077","created_at":"2026-07-05T04:32:27Z"},{"alias_kind":"arxiv_version","alias_value":"2202.03077v2","created_at":"2026-07-05T04:32:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.03077","created_at":"2026-07-05T04:32:27Z"},{"alias_kind":"pith_short_12","alias_value":"ZYFVOVE64LW5","created_at":"2026-07-05T04:32:27Z"},{"alias_kind":"pith_short_16","alias_value":"ZYFVOVE64LW55W5T","created_at":"2026-07-05T04:32:27Z"},{"alias_kind":"pith_short_8","alias_value":"ZYFVOVE6","created_at":"2026-07-05T04:32:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:ZYFVOVE64LW55W5TKW3YAJBNYU","target":"record","payload":{"canonical_record":{"source":{"id":"2202.03077","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-02-07T11:18:04Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"6e9b965bd51989e1c8f3a81a38ed643aa869a75dff55f6bef4c1de941eccd676","abstract_canon_sha256":"fd2da866d3b9252a4f051fcc8fb5094a624b5129d75ffc29d74b8c9b5130f577"},"schema_version":"1.0"},"canonical_sha256":"ce0b57549ee2eddedbb355b780242dc531a2fbdeac5c300681167abcba1447c5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:32:27.601222Z","signature_b64":"cGTDJdTKpo7+d5oc3KvGsAufQjaVnguS5SSkG9aY+fOQSpNdUwd8Atuns/vbg0YbCyASdkZ+IUbJYk/FQayvCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ce0b57549ee2eddedbb355b780242dc531a2fbdeac5c300681167abcba1447c5","last_reissued_at":"2026-07-05T04:32:27.600725Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:32:27.600725Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2202.03077","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:32:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lkxldmNaAJGI3qZNZ/VodmksMwqNV15LSZhxhE4saZtKOUmAmpUVAiuRpEb4Q3kxn65k3MpftgTNfUrFkIhUAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T11:37:11.709846Z"},"content_sha256":"ec1cbbf70f316d262ae9c30f3b7a97ffa13cd174dab5c6e3d82e9d48965b6c40","schema_version":"1.0","event_id":"sha256:ec1cbbf70f316d262ae9c30f3b7a97ffa13cd174dab5c6e3d82e9d48965b6c40"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:ZYFVOVE64LW55W5TKW3YAJBNYU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Attack and Defense for Non-Parametric Two-Sample Tests","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Feng Liu, Jingfeng Zhang, Masashi Sugiyama, Mohan Kankanhalli, Xilie Xu","submitted_at":"2022-02-07T11:18:04Z","abstract_excerpt":"Non-parametric two-sample tests (TSTs) that judge whether two sets of samples are drawn from the same distribution, have been widely used in the analysis of critical data. People tend to employ TSTs as trusted basic tools and rarely have any doubt about their reliability. This paper systematically uncovers the failure mode of non-parametric TSTs through adversarial attacks and then proposes corresponding defense strategies. First, we theoretically show that an adversary can upper-bound the distributional shift which guarantees the attack's invisibility. Furthermore, we theoretically find that "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.03077","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2202.03077/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:32:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eUAfbw2P1221isxz5PYsmOnau0STOhQZOJTXN3KcYhdE05AFpnN/XZY5Z5C0qS4MULYl8d3aeHXIzNoBcQrxAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T11:37:11.710494Z"},"content_sha256":"baaba67da55ed1fa59a5d342f671ae489748aacddf1a637a1c35ae1a52ac7882","schema_version":"1.0","event_id":"sha256:baaba67da55ed1fa59a5d342f671ae489748aacddf1a637a1c35ae1a52ac7882"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZYFVOVE64LW55W5TKW3YAJBNYU/bundle.json","state_url":"https://pith.science/pith/ZYFVOVE64LW55W5TKW3YAJBNYU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZYFVOVE64LW55W5TKW3YAJBNYU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T11:37:11Z","links":{"resolver":"https://pith.science/pith/ZYFVOVE64LW55W5TKW3YAJBNYU","bundle":"https://pith.science/pith/ZYFVOVE64LW55W5TKW3YAJBNYU/bundle.json","state":"https://pith.science/pith/ZYFVOVE64LW55W5TKW3YAJBNYU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZYFVOVE64LW55W5TKW3YAJBNYU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:ZYFVOVE64LW55W5TKW3YAJBNYU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fd2da866d3b9252a4f051fcc8fb5094a624b5129d75ffc29d74b8c9b5130f577","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-02-07T11:18:04Z","title_canon_sha256":"6e9b965bd51989e1c8f3a81a38ed643aa869a75dff55f6bef4c1de941eccd676"},"schema_version":"1.0","source":{"id":"2202.03077","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.03077","created_at":"2026-07-05T04:32:27Z"},{"alias_kind":"arxiv_version","alias_value":"2202.03077v2","created_at":"2026-07-05T04:32:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.03077","created_at":"2026-07-05T04:32:27Z"},{"alias_kind":"pith_short_12","alias_value":"ZYFVOVE64LW5","created_at":"2026-07-05T04:32:27Z"},{"alias_kind":"pith_short_16","alias_value":"ZYFVOVE64LW55W5T","created_at":"2026-07-05T04:32:27Z"},{"alias_kind":"pith_short_8","alias_value":"ZYFVOVE6","created_at":"2026-07-05T04:32:27Z"}],"graph_snapshots":[{"event_id":"sha256:baaba67da55ed1fa59a5d342f671ae489748aacddf1a637a1c35ae1a52ac7882","target":"graph","created_at":"2026-07-05T04:32:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.03077/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Non-parametric two-sample tests (TSTs) that judge whether two sets of samples are drawn from the same distribution, have been widely used in the analysis of critical data. People tend to employ TSTs as trusted basic tools and rarely have any doubt about their reliability. This paper systematically uncovers the failure mode of non-parametric TSTs through adversarial attacks and then proposes corresponding defense strategies. First, we theoretically show that an adversary can upper-bound the distributional shift which guarantees the attack's invisibility. Furthermore, we theoretically find that ","authors_text":"Feng Liu, Jingfeng Zhang, Masashi Sugiyama, Mohan Kankanhalli, Xilie Xu","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-02-07T11:18:04Z","title":"Adversarial Attack and Defense for Non-Parametric Two-Sample Tests"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.03077","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ec1cbbf70f316d262ae9c30f3b7a97ffa13cd174dab5c6e3d82e9d48965b6c40","target":"record","created_at":"2026-07-05T04:32:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fd2da866d3b9252a4f051fcc8fb5094a624b5129d75ffc29d74b8c9b5130f577","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-02-07T11:18:04Z","title_canon_sha256":"6e9b965bd51989e1c8f3a81a38ed643aa869a75dff55f6bef4c1de941eccd676"},"schema_version":"1.0","source":{"id":"2202.03077","kind":"arxiv","version":2}},"canonical_sha256":"ce0b57549ee2eddedbb355b780242dc531a2fbdeac5c300681167abcba1447c5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ce0b57549ee2eddedbb355b780242dc531a2fbdeac5c300681167abcba1447c5","first_computed_at":"2026-07-05T04:32:27.600725Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:32:27.600725Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cGTDJdTKpo7+d5oc3KvGsAufQjaVnguS5SSkG9aY+fOQSpNdUwd8Atuns/vbg0YbCyASdkZ+IUbJYk/FQayvCA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:32:27.601222Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.03077","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ec1cbbf70f316d262ae9c30f3b7a97ffa13cd174dab5c6e3d82e9d48965b6c40","sha256:baaba67da55ed1fa59a5d342f671ae489748aacddf1a637a1c35ae1a52ac7882"],"state_sha256":"80742a980c37ebb65a6817c823140c141653cfe3c276ac06d3d3439b5bcd0c72"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"A4vGXKDOgkr+SnpxWImSj4GGhxRV244JNwvrbXKUTeSX+K4MVi/Exm0JfQFjQjbUxQljQLR1EN9PfJRFL4TOCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T11:37:11.713369Z","bundle_sha256":"a87c57a8033b4c4a60061ea015ea661a32049f9cf6caa3bb9ea88e271922378c"}}