{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:M2WP2TO6TAPNUQ755V5QLLIK6B","short_pith_number":"pith:M2WP2TO6","canonical_record":{"source":{"id":"2404.01828","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-04-02T10:41:51Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"e5aa33397b2ff992fa2f2e4be5370db97a315136d4d16e014dab9cf093188101","abstract_canon_sha256":"fc0b88b6f28e0e07a8e612fc563f95390f16a6ca1a7c656631fa26924936b6fd"},"schema_version":"1.0"},"canonical_sha256":"66acfd4dde981eda43fded7b05ad0af0530d1fe3320d6b5c8d4645b439cc3cbc","source":{"kind":"arxiv","id":"2404.01828","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.01828","created_at":"2026-07-05T08:03:32Z"},{"alias_kind":"arxiv_version","alias_value":"2404.01828v1","created_at":"2026-07-05T08:03:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.01828","created_at":"2026-07-05T08:03:32Z"},{"alias_kind":"pith_short_12","alias_value":"M2WP2TO6TAPN","created_at":"2026-07-05T08:03:32Z"},{"alias_kind":"pith_short_16","alias_value":"M2WP2TO6TAPNUQ75","created_at":"2026-07-05T08:03:32Z"},{"alias_kind":"pith_short_8","alias_value":"M2WP2TO6","created_at":"2026-07-05T08:03:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:M2WP2TO6TAPNUQ755V5QLLIK6B","target":"record","payload":{"canonical_record":{"source":{"id":"2404.01828","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-04-02T10:41:51Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"e5aa33397b2ff992fa2f2e4be5370db97a315136d4d16e014dab9cf093188101","abstract_canon_sha256":"fc0b88b6f28e0e07a8e612fc563f95390f16a6ca1a7c656631fa26924936b6fd"},"schema_version":"1.0"},"canonical_sha256":"66acfd4dde981eda43fded7b05ad0af0530d1fe3320d6b5c8d4645b439cc3cbc","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:03:32.178897Z","signature_b64":"u6euPOSUBs2uJwANShQiGMSK2H+EEqbmw3kWEKyT/g7qoGrf45d9Tl1rKp2eAn6jaunjalUEXWfPFJQj53PwAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"66acfd4dde981eda43fded7b05ad0af0530d1fe3320d6b5c8d4645b439cc3cbc","last_reissued_at":"2026-07-05T08:03:32.178453Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:03:32.178453Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.01828","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:03:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2q8sub9eqqBt1GX9gcb4JBCaSkWc488ZlHo2/mc38WQSNt5jDqzvRPgJit0wsIpB2y4x3n1x/+o/TQKmauLbBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T15:57:33.960769Z"},"content_sha256":"88e778708e32380835ef8a3b18b93711aaa1880a3337cbd3fecb366f5db52162","schema_version":"1.0","event_id":"sha256:88e778708e32380835ef8a3b18b93711aaa1880a3337cbd3fecb366f5db52162"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:M2WP2TO6TAPNUQ755V5QLLIK6B","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Defense without Forgetting: Continual Adversarial Defense with Anisotropic & Isotropic Pseudo Replay","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Yuhang Zhou, Zhongyun Hua","submitted_at":"2024-04-02T10:41:51Z","abstract_excerpt":"Deep neural networks have demonstrated susceptibility to adversarial attacks. Adversarial defense techniques often focus on one-shot setting to maintain robustness against attack. However, new attacks can emerge in sequences in real-world deployment scenarios. As a result, it is crucial for a defense model to constantly adapt to new attacks, but the adaptation process can lead to catastrophic forgetting of previously defended against attacks. In this paper, we discuss for the first time the concept of continual adversarial defense under a sequence of attacks, and propose a lifelong defense bas"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.01828","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.01828/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:03:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"V69Gbnjt0AeAhM7AERDhbwb6Urf7RbvocFOF9Rln0TInmIq00qvQKEnLITY88DGMtQfofDwwtqR5TI3/OZmqAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T15:57:33.961993Z"},"content_sha256":"6d0c9b29ab24e9993827dca37de18a8ce642102d80b13e6ae192b8aa6e6c07f6","schema_version":"1.0","event_id":"sha256:6d0c9b29ab24e9993827dca37de18a8ce642102d80b13e6ae192b8aa6e6c07f6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/M2WP2TO6TAPNUQ755V5QLLIK6B/bundle.json","state_url":"https://pith.science/pith/M2WP2TO6TAPNUQ755V5QLLIK6B/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/M2WP2TO6TAPNUQ755V5QLLIK6B/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T15:57:33Z","links":{"resolver":"https://pith.science/pith/M2WP2TO6TAPNUQ755V5QLLIK6B","bundle":"https://pith.science/pith/M2WP2TO6TAPNUQ755V5QLLIK6B/bundle.json","state":"https://pith.science/pith/M2WP2TO6TAPNUQ755V5QLLIK6B/state.json","well_known_bundle":"https://pith.science/.well-known/pith/M2WP2TO6TAPNUQ755V5QLLIK6B/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:M2WP2TO6TAPNUQ755V5QLLIK6B","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fc0b88b6f28e0e07a8e612fc563f95390f16a6ca1a7c656631fa26924936b6fd","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-04-02T10:41:51Z","title_canon_sha256":"e5aa33397b2ff992fa2f2e4be5370db97a315136d4d16e014dab9cf093188101"},"schema_version":"1.0","source":{"id":"2404.01828","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.01828","created_at":"2026-07-05T08:03:32Z"},{"alias_kind":"arxiv_version","alias_value":"2404.01828v1","created_at":"2026-07-05T08:03:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.01828","created_at":"2026-07-05T08:03:32Z"},{"alias_kind":"pith_short_12","alias_value":"M2WP2TO6TAPN","created_at":"2026-07-05T08:03:32Z"},{"alias_kind":"pith_short_16","alias_value":"M2WP2TO6TAPNUQ75","created_at":"2026-07-05T08:03:32Z"},{"alias_kind":"pith_short_8","alias_value":"M2WP2TO6","created_at":"2026-07-05T08:03:32Z"}],"graph_snapshots":[{"event_id":"sha256:6d0c9b29ab24e9993827dca37de18a8ce642102d80b13e6ae192b8aa6e6c07f6","target":"graph","created_at":"2026-07-05T08:03:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.01828/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks have demonstrated susceptibility to adversarial attacks. Adversarial defense techniques often focus on one-shot setting to maintain robustness against attack. However, new attacks can emerge in sequences in real-world deployment scenarios. As a result, it is crucial for a defense model to constantly adapt to new attacks, but the adaptation process can lead to catastrophic forgetting of previously defended against attacks. In this paper, we discuss for the first time the concept of continual adversarial defense under a sequence of attacks, and propose a lifelong defense bas","authors_text":"Yuhang Zhou, Zhongyun Hua","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-04-02T10:41:51Z","title":"Defense without Forgetting: Continual Adversarial Defense with Anisotropic & Isotropic Pseudo Replay"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.01828","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:88e778708e32380835ef8a3b18b93711aaa1880a3337cbd3fecb366f5db52162","target":"record","created_at":"2026-07-05T08:03:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fc0b88b6f28e0e07a8e612fc563f95390f16a6ca1a7c656631fa26924936b6fd","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-04-02T10:41:51Z","title_canon_sha256":"e5aa33397b2ff992fa2f2e4be5370db97a315136d4d16e014dab9cf093188101"},"schema_version":"1.0","source":{"id":"2404.01828","kind":"arxiv","version":1}},"canonical_sha256":"66acfd4dde981eda43fded7b05ad0af0530d1fe3320d6b5c8d4645b439cc3cbc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"66acfd4dde981eda43fded7b05ad0af0530d1fe3320d6b5c8d4645b439cc3cbc","first_computed_at":"2026-07-05T08:03:32.178453Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:03:32.178453Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"u6euPOSUBs2uJwANShQiGMSK2H+EEqbmw3kWEKyT/g7qoGrf45d9Tl1rKp2eAn6jaunjalUEXWfPFJQj53PwAg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:03:32.178897Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.01828","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:88e778708e32380835ef8a3b18b93711aaa1880a3337cbd3fecb366f5db52162","sha256:6d0c9b29ab24e9993827dca37de18a8ce642102d80b13e6ae192b8aa6e6c07f6"],"state_sha256":"d5548497b25f335466e84adad3d06f93657ea705c7ec656ee2dabb93d973d591"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"unGTkbMLzCSe11xVplJeb1m3+W7dLHYfdjrLcsH5+ll1muLx1FhPnNNxeWqdskqzlJ8ay0S/DQ8nrR6g/2tGAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T15:57:33.971982Z","bundle_sha256":"422b3937b6db60d50e84300ee43d44cd5b62126be90265d70d905e207c126398"}}