{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:JGVJOENRLN5BNJROLS2UJWZAPI","short_pith_number":"pith:JGVJOENR","canonical_record":{"source":{"id":"2010.13365","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-26T06:32:32Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"a1eb7be1c00fa3295a85f498c617ffcd3a2394b7c26d60e9fef7c88faab753a3","abstract_canon_sha256":"d6c00aea74ec9dbd3fb5f731497d3352605f0fb6dd61c1edb87772b92fa0d70c"},"schema_version":"1.0"},"canonical_sha256":"49aa9711b15b7a16a62e5cb544db207a1bd72a555d9249d54fe3d8cf95bbbb11","source":{"kind":"arxiv","id":"2010.13365","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.13365","created_at":"2026-07-05T03:21:06Z"},{"alias_kind":"arxiv_version","alias_value":"2010.13365v2","created_at":"2026-07-05T03:21:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.13365","created_at":"2026-07-05T03:21:06Z"},{"alias_kind":"pith_short_12","alias_value":"JGVJOENRLN5B","created_at":"2026-07-05T03:21:06Z"},{"alias_kind":"pith_short_16","alias_value":"JGVJOENRLN5BNJRO","created_at":"2026-07-05T03:21:06Z"},{"alias_kind":"pith_short_8","alias_value":"JGVJOENR","created_at":"2026-07-05T03:21:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:JGVJOENRLN5BNJROLS2UJWZAPI","target":"record","payload":{"canonical_record":{"source":{"id":"2010.13365","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-26T06:32:32Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"a1eb7be1c00fa3295a85f498c617ffcd3a2394b7c26d60e9fef7c88faab753a3","abstract_canon_sha256":"d6c00aea74ec9dbd3fb5f731497d3352605f0fb6dd61c1edb87772b92fa0d70c"},"schema_version":"1.0"},"canonical_sha256":"49aa9711b15b7a16a62e5cb544db207a1bd72a555d9249d54fe3d8cf95bbbb11","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:21:06.909119Z","signature_b64":"6HGpCjNCurpRubcUlpdu2rh//rm5ADa9whZrolkO5ad65YfsH75IH+Qh1JW64TdHft5J5p2Y5enGSUYWGiAjDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"49aa9711b15b7a16a62e5cb544db207a1bd72a555d9249d54fe3d8cf95bbbb11","last_reissued_at":"2026-07-05T03:21:06.908733Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:21:06.908733Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2010.13365","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:21:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5c75uUpWOB1au6lGAAkS1tQ3ZHEGjWF0G6wvQCKBN/iCSu8BU4TkchHW/19teFXGaXm991spkxkK1gnwNmeIAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T19:00:45.439908Z"},"content_sha256":"0ffcd9924ca39772c9e61b7f45da613cba1c9b28e9ad7e88f5a5ade4735a1f27","schema_version":"1.0","event_id":"sha256:0ffcd9924ca39772c9e61b7f45da613cba1c9b28e9ad7e88f5a5ade4735a1f27"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:JGVJOENRLN5BNJROLS2UJWZAPI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Robustness May Be at Odds with Fairness: An Empirical Study on Class-wise Accuracy","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.LG","authors_text":"Adil Karjauv, Chaoning Zhang, In So Kweon, Philipp Benz","submitted_at":"2020-10-26T06:32:32Z","abstract_excerpt":"Convolutional neural networks (CNNs) have made significant advancement, however, they are widely known to be vulnerable to adversarial attacks. Adversarial training is the most widely used technique for improving adversarial robustness to strong white-box attacks. Prior works have been evaluating and improving the model average robustness without class-wise evaluation. The average evaluation alone might provide a false sense of robustness. For example, the attacker can focus on attacking the vulnerable class, which can be dangerous, especially, when the vulnerable class is a critical one, such"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.13365","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2010.13365/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:21:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xhbT2f5OH6Cx1sVUNiK3VqU3FyMhBDQHX84gdTfdtQeBBZypvPL4e7A18/B/jG/anhmjXOFn5YETYYlJC7DJAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T19:00:45.440280Z"},"content_sha256":"c8d668767b1cab8ce586f1ec93ceaaf78d0af1f063c06e39b5f09f57f11b9fcc","schema_version":"1.0","event_id":"sha256:c8d668767b1cab8ce586f1ec93ceaaf78d0af1f063c06e39b5f09f57f11b9fcc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JGVJOENRLN5BNJROLS2UJWZAPI/bundle.json","state_url":"https://pith.science/pith/JGVJOENRLN5BNJROLS2UJWZAPI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JGVJOENRLN5BNJROLS2UJWZAPI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T19:00:45Z","links":{"resolver":"https://pith.science/pith/JGVJOENRLN5BNJROLS2UJWZAPI","bundle":"https://pith.science/pith/JGVJOENRLN5BNJROLS2UJWZAPI/bundle.json","state":"https://pith.science/pith/JGVJOENRLN5BNJROLS2UJWZAPI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JGVJOENRLN5BNJROLS2UJWZAPI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:JGVJOENRLN5BNJROLS2UJWZAPI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d6c00aea74ec9dbd3fb5f731497d3352605f0fb6dd61c1edb87772b92fa0d70c","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-26T06:32:32Z","title_canon_sha256":"a1eb7be1c00fa3295a85f498c617ffcd3a2394b7c26d60e9fef7c88faab753a3"},"schema_version":"1.0","source":{"id":"2010.13365","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.13365","created_at":"2026-07-05T03:21:06Z"},{"alias_kind":"arxiv_version","alias_value":"2010.13365v2","created_at":"2026-07-05T03:21:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.13365","created_at":"2026-07-05T03:21:06Z"},{"alias_kind":"pith_short_12","alias_value":"JGVJOENRLN5B","created_at":"2026-07-05T03:21:06Z"},{"alias_kind":"pith_short_16","alias_value":"JGVJOENRLN5BNJRO","created_at":"2026-07-05T03:21:06Z"},{"alias_kind":"pith_short_8","alias_value":"JGVJOENR","created_at":"2026-07-05T03:21:06Z"}],"graph_snapshots":[{"event_id":"sha256:c8d668767b1cab8ce586f1ec93ceaaf78d0af1f063c06e39b5f09f57f11b9fcc","target":"graph","created_at":"2026-07-05T03:21:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2010.13365/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Convolutional neural networks (CNNs) have made significant advancement, however, they are widely known to be vulnerable to adversarial attacks. Adversarial training is the most widely used technique for improving adversarial robustness to strong white-box attacks. Prior works have been evaluating and improving the model average robustness without class-wise evaluation. The average evaluation alone might provide a false sense of robustness. For example, the attacker can focus on attacking the vulnerable class, which can be dangerous, especially, when the vulnerable class is a critical one, such","authors_text":"Adil Karjauv, Chaoning Zhang, In So Kweon, Philipp Benz","cross_cats":["cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-26T06:32:32Z","title":"Robustness May Be at Odds with Fairness: An Empirical Study on Class-wise Accuracy"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.13365","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0ffcd9924ca39772c9e61b7f45da613cba1c9b28e9ad7e88f5a5ade4735a1f27","target":"record","created_at":"2026-07-05T03:21:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d6c00aea74ec9dbd3fb5f731497d3352605f0fb6dd61c1edb87772b92fa0d70c","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-26T06:32:32Z","title_canon_sha256":"a1eb7be1c00fa3295a85f498c617ffcd3a2394b7c26d60e9fef7c88faab753a3"},"schema_version":"1.0","source":{"id":"2010.13365","kind":"arxiv","version":2}},"canonical_sha256":"49aa9711b15b7a16a62e5cb544db207a1bd72a555d9249d54fe3d8cf95bbbb11","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"49aa9711b15b7a16a62e5cb544db207a1bd72a555d9249d54fe3d8cf95bbbb11","first_computed_at":"2026-07-05T03:21:06.908733Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:21:06.908733Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6HGpCjNCurpRubcUlpdu2rh//rm5ADa9whZrolkO5ad65YfsH75IH+Qh1JW64TdHft5J5p2Y5enGSUYWGiAjDg==","signature_status":"signed_v1","signed_at":"2026-07-05T03:21:06.909119Z","signed_message":"canonical_sha256_bytes"},"source_id":"2010.13365","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0ffcd9924ca39772c9e61b7f45da613cba1c9b28e9ad7e88f5a5ade4735a1f27","sha256:c8d668767b1cab8ce586f1ec93ceaaf78d0af1f063c06e39b5f09f57f11b9fcc"],"state_sha256":"7c73e88187895ec8fd34d5e389fe0ea236f6bfd53cd0a7e32e4800238cf989ec"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"F0UP2b2gM2FLFRf9ZYG2z58TBxDERrDSqDaF1ZClVdyFd6hw6DsESB6BmN89W+/63GaKkAK7sCXdfF7ZcdFdAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T19:00:45.442239Z","bundle_sha256":"97e0d905d95e505d0beb353ebf31adfecd1158ffdbb733eff98a2b6fc3dff33d"}}