{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:JZMHPL5ENAM3DSSQ6BJWXWIDDZ","short_pith_number":"pith:JZMHPL5E","canonical_record":{"source":{"id":"2003.06693","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-14T19:57:31Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"dc9076f172315c6ce39ca27000e0fd8c8dffcf09414b01f01bae478a7501219d","abstract_canon_sha256":"884453ca3a6931c6d70bfa7f5626c548c49880fdf8b12d81dd4966ee3230059e"},"schema_version":"1.0"},"canonical_sha256":"4e5877afa46819b1ca50f0536bd9031e621002cd394c28b72f52ecf533b538d2","source":{"kind":"arxiv","id":"2003.06693","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2003.06693","created_at":"2026-07-05T01:37:53Z"},{"alias_kind":"arxiv_version","alias_value":"2003.06693v2","created_at":"2026-07-05T01:37:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2003.06693","created_at":"2026-07-05T01:37:53Z"},{"alias_kind":"pith_short_12","alias_value":"JZMHPL5ENAM3","created_at":"2026-07-05T01:37:53Z"},{"alias_kind":"pith_short_16","alias_value":"JZMHPL5ENAM3DSSQ","created_at":"2026-07-05T01:37:53Z"},{"alias_kind":"pith_short_8","alias_value":"JZMHPL5E","created_at":"2026-07-05T01:37:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:JZMHPL5ENAM3DSSQ6BJWXWIDDZ","target":"record","payload":{"canonical_record":{"source":{"id":"2003.06693","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-14T19:57:31Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"dc9076f172315c6ce39ca27000e0fd8c8dffcf09414b01f01bae478a7501219d","abstract_canon_sha256":"884453ca3a6931c6d70bfa7f5626c548c49880fdf8b12d81dd4966ee3230059e"},"schema_version":"1.0"},"canonical_sha256":"4e5877afa46819b1ca50f0536bd9031e621002cd394c28b72f52ecf533b538d2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:37:53.654035Z","signature_b64":"UmTVoFz1N/QHSpzDSwFNFNzTNSMrSqDWkpI01wytq8UxUaYwJOzktkJ7BPMbkrEVV26M54QGvqNOgRYMIsoPAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4e5877afa46819b1ca50f0536bd9031e621002cd394c28b72f52ecf533b538d2","last_reissued_at":"2026-07-05T01:37:53.653556Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:37:53.653556Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2003.06693","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:37:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"P2hStrxrSmf/EywQkK4s/q+E2ImAdqkfzZzpmyMBTKkiCLPWeuB7NLW4Ghu5D6FWkQgP9gcFjsUe+hL8GamJBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-21T12:49:57.969200Z"},"content_sha256":"b781fdae0ec5b0e02705c8b6255873b07ba40901891bbbe0bd778a9172664fed","schema_version":"1.0","event_id":"sha256:b781fdae0ec5b0e02705c8b6255873b07ba40901891bbbe0bd778a9172664fed"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:JZMHPL5ENAM3DSSQ6BJWXWIDDZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Certified Defenses for Adversarial Patches","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","stat.ML"],"primary_cat":"cs.CR","authors_text":"Ahmed Abdelkader, Chen Zhu, Christoph Studer, Ping-yeh Chiang, Renkun Ni, Tom Goldstein","submitted_at":"2020-03-14T19:57:31Z","abstract_excerpt":"Adversarial patch attacks are among one of the most practical threat models against real-world computer vision systems. This paper studies certified and empirical defenses against patch attacks. We begin with a set of experiments showing that most existing defenses, which work by pre-processing input images to mitigate adversarial patches, are easily broken by simple white-box adversaries. Motivated by this finding, we propose the first certified defense against patch attacks, and propose faster methods for its training. Furthermore, we experiment with different patch shapes for testing, obtai"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2003.06693","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2003.06693/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:37:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Qn8lWfzD4eglYbjuGFpmUJYQlR5a4BGDRBpPT4TeHoCGXrcovRJ2kFRE9QzpdvvTPmn9LUVFE0J2rNVbikTwBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-21T12:49:57.969588Z"},"content_sha256":"7b2e0c2fa254042c5af99e4be10bdf88acd21216d9e8b0195362d154f5bf9c26","schema_version":"1.0","event_id":"sha256:7b2e0c2fa254042c5af99e4be10bdf88acd21216d9e8b0195362d154f5bf9c26"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JZMHPL5ENAM3DSSQ6BJWXWIDDZ/bundle.json","state_url":"https://pith.science/pith/JZMHPL5ENAM3DSSQ6BJWXWIDDZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JZMHPL5ENAM3DSSQ6BJWXWIDDZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-21T12:49:57Z","links":{"resolver":"https://pith.science/pith/JZMHPL5ENAM3DSSQ6BJWXWIDDZ","bundle":"https://pith.science/pith/JZMHPL5ENAM3DSSQ6BJWXWIDDZ/bundle.json","state":"https://pith.science/pith/JZMHPL5ENAM3DSSQ6BJWXWIDDZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JZMHPL5ENAM3DSSQ6BJWXWIDDZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:JZMHPL5ENAM3DSSQ6BJWXWIDDZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"884453ca3a6931c6d70bfa7f5626c548c49880fdf8b12d81dd4966ee3230059e","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-14T19:57:31Z","title_canon_sha256":"dc9076f172315c6ce39ca27000e0fd8c8dffcf09414b01f01bae478a7501219d"},"schema_version":"1.0","source":{"id":"2003.06693","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2003.06693","created_at":"2026-07-05T01:37:53Z"},{"alias_kind":"arxiv_version","alias_value":"2003.06693v2","created_at":"2026-07-05T01:37:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2003.06693","created_at":"2026-07-05T01:37:53Z"},{"alias_kind":"pith_short_12","alias_value":"JZMHPL5ENAM3","created_at":"2026-07-05T01:37:53Z"},{"alias_kind":"pith_short_16","alias_value":"JZMHPL5ENAM3DSSQ","created_at":"2026-07-05T01:37:53Z"},{"alias_kind":"pith_short_8","alias_value":"JZMHPL5E","created_at":"2026-07-05T01:37:53Z"}],"graph_snapshots":[{"event_id":"sha256:7b2e0c2fa254042c5af99e4be10bdf88acd21216d9e8b0195362d154f5bf9c26","target":"graph","created_at":"2026-07-05T01:37:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2003.06693/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial patch attacks are among one of the most practical threat models against real-world computer vision systems. This paper studies certified and empirical defenses against patch attacks. We begin with a set of experiments showing that most existing defenses, which work by pre-processing input images to mitigate adversarial patches, are easily broken by simple white-box adversaries. Motivated by this finding, we propose the first certified defense against patch attacks, and propose faster methods for its training. Furthermore, we experiment with different patch shapes for testing, obtai","authors_text":"Ahmed Abdelkader, Chen Zhu, Christoph Studer, Ping-yeh Chiang, Renkun Ni, Tom Goldstein","cross_cats":["cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-14T19:57:31Z","title":"Certified Defenses for Adversarial Patches"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2003.06693","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b781fdae0ec5b0e02705c8b6255873b07ba40901891bbbe0bd778a9172664fed","target":"record","created_at":"2026-07-05T01:37:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"884453ca3a6931c6d70bfa7f5626c548c49880fdf8b12d81dd4966ee3230059e","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-14T19:57:31Z","title_canon_sha256":"dc9076f172315c6ce39ca27000e0fd8c8dffcf09414b01f01bae478a7501219d"},"schema_version":"1.0","source":{"id":"2003.06693","kind":"arxiv","version":2}},"canonical_sha256":"4e5877afa46819b1ca50f0536bd9031e621002cd394c28b72f52ecf533b538d2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4e5877afa46819b1ca50f0536bd9031e621002cd394c28b72f52ecf533b538d2","first_computed_at":"2026-07-05T01:37:53.653556Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:37:53.653556Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"UmTVoFz1N/QHSpzDSwFNFNzTNSMrSqDWkpI01wytq8UxUaYwJOzktkJ7BPMbkrEVV26M54QGvqNOgRYMIsoPAg==","signature_status":"signed_v1","signed_at":"2026-07-05T01:37:53.654035Z","signed_message":"canonical_sha256_bytes"},"source_id":"2003.06693","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b781fdae0ec5b0e02705c8b6255873b07ba40901891bbbe0bd778a9172664fed","sha256:7b2e0c2fa254042c5af99e4be10bdf88acd21216d9e8b0195362d154f5bf9c26"],"state_sha256":"7091cc8580b0a3f4eb8876a613f4cc9d01fd347a53cd384cb3734c386334a4b1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ynciMFQgagdpbf/4No5qDWBISiQql/AW8pQg20YeGmtN2GeLReJmbMwyWea/geQri42cNvUDWPNhXCAjt4HtBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-21T12:49:57.972058Z","bundle_sha256":"2baf5526bf4500b3f6568fa900978794bd1282cbecbe9b8577a46d63190e1cfd"}}