{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:YMXUN2TYCEPR2J57KNIEXT66QL","short_pith_number":"pith:YMXUN2TY","canonical_record":{"source":{"id":"1911.10695","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-25T04:14:02Z","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"title_canon_sha256":"1cdb18136ec58b1ef5e86b1c72d2973c1e18179870bd4ab079521309d6ece8da","abstract_canon_sha256":"d755125815456d6964e607e7b7c52b19f2f1ec74520d0f2a5a9b4109ba791c18"},"schema_version":"1.0"},"canonical_sha256":"c32f46ea78111f1d27bf53504bcfde82c1e1664dc70f3542c07192e386aa54a6","source":{"kind":"arxiv","id":"1911.10695","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.10695","created_at":"2026-07-05T00:50:44Z"},{"alias_kind":"arxiv_version","alias_value":"1911.10695v3","created_at":"2026-07-05T00:50:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.10695","created_at":"2026-07-05T00:50:44Z"},{"alias_kind":"pith_short_12","alias_value":"YMXUN2TYCEPR","created_at":"2026-07-05T00:50:44Z"},{"alias_kind":"pith_short_16","alias_value":"YMXUN2TYCEPR2J57","created_at":"2026-07-05T00:50:44Z"},{"alias_kind":"pith_short_8","alias_value":"YMXUN2TY","created_at":"2026-07-05T00:50:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:YMXUN2TYCEPR2J57KNIEXT66QL","target":"record","payload":{"canonical_record":{"source":{"id":"1911.10695","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-25T04:14:02Z","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"title_canon_sha256":"1cdb18136ec58b1ef5e86b1c72d2973c1e18179870bd4ab079521309d6ece8da","abstract_canon_sha256":"d755125815456d6964e607e7b7c52b19f2f1ec74520d0f2a5a9b4109ba791c18"},"schema_version":"1.0"},"canonical_sha256":"c32f46ea78111f1d27bf53504bcfde82c1e1664dc70f3542c07192e386aa54a6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:50:44.441630Z","signature_b64":"Fr5U+nlFHnJj+p06GH74sMBJdvcBVbDAnJ+lYlVZjWNc08encOZUbofbyXyPMatdNq/pkU/VjXEMlVhQ+xc1Cw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c32f46ea78111f1d27bf53504bcfde82c1e1664dc70f3542c07192e386aa54a6","last_reissued_at":"2026-07-05T00:50:44.441155Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:50:44.441155Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1911.10695","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:50:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7MKs6rxEgNSSbGBoM0IVlx2iKe8lfxRS950gv3IDbZkNib2iLlB+LlM4LUN9VZqHMqh7b/0kUHWw2p9TB2ypBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T15:50:52.588430Z"},"content_sha256":"f293ab9786198bba0842979a1b301021028fcdc9c38bfd2e6637188bc00d62d7","schema_version":"1.0","event_id":"sha256:f293ab9786198bba0842979a1b301021028fcdc9c38bfd2e6637188bc00d62d7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:YMXUN2TYCEPR2J57KNIEXT66QL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"When NAS Meets Robustness: In Search of Robust Architectures against Adversarial Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV","stat.ML"],"primary_cat":"cs.LG","authors_text":"Dahua Lin, Minghao Guo, Rui Xu, Yuzhe Yang, Ziwei Liu","submitted_at":"2019-11-25T04:14:02Z","abstract_excerpt":"Recent advances in adversarial attacks uncover the intrinsic vulnerability of modern deep neural networks. Since then, extensive efforts have been devoted to enhancing the robustness of deep networks via specialized learning algorithms and loss functions. In this work, we take an architectural perspective and investigate the patterns of network architectures that are resilient to adversarial attacks. To obtain the large number of networks needed for this study, we adopt one-shot neural architecture search, training a large network for once and then finetuning the sub-networks sampled therefrom"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.10695","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1911.10695/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:50:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7AKWz5gjj2ZvmdQ5N1XlFanBHTBlibK6Jekbh2r6HiLr03kk3QTAHxO3ZXChoacTihEtg9IJcL6WCd1uBTH/CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T15:50:52.593306Z"},"content_sha256":"40e22fdf761ea219405572e758fbf06ac438097696e0e39bbc6dc5654cb7dc8c","schema_version":"1.0","event_id":"sha256:40e22fdf761ea219405572e758fbf06ac438097696e0e39bbc6dc5654cb7dc8c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YMXUN2TYCEPR2J57KNIEXT66QL/bundle.json","state_url":"https://pith.science/pith/YMXUN2TYCEPR2J57KNIEXT66QL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YMXUN2TYCEPR2J57KNIEXT66QL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T15:50:52Z","links":{"resolver":"https://pith.science/pith/YMXUN2TYCEPR2J57KNIEXT66QL","bundle":"https://pith.science/pith/YMXUN2TYCEPR2J57KNIEXT66QL/bundle.json","state":"https://pith.science/pith/YMXUN2TYCEPR2J57KNIEXT66QL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YMXUN2TYCEPR2J57KNIEXT66QL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:YMXUN2TYCEPR2J57KNIEXT66QL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d755125815456d6964e607e7b7c52b19f2f1ec74520d0f2a5a9b4109ba791c18","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-25T04:14:02Z","title_canon_sha256":"1cdb18136ec58b1ef5e86b1c72d2973c1e18179870bd4ab079521309d6ece8da"},"schema_version":"1.0","source":{"id":"1911.10695","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.10695","created_at":"2026-07-05T00:50:44Z"},{"alias_kind":"arxiv_version","alias_value":"1911.10695v3","created_at":"2026-07-05T00:50:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.10695","created_at":"2026-07-05T00:50:44Z"},{"alias_kind":"pith_short_12","alias_value":"YMXUN2TYCEPR","created_at":"2026-07-05T00:50:44Z"},{"alias_kind":"pith_short_16","alias_value":"YMXUN2TYCEPR2J57","created_at":"2026-07-05T00:50:44Z"},{"alias_kind":"pith_short_8","alias_value":"YMXUN2TY","created_at":"2026-07-05T00:50:44Z"}],"graph_snapshots":[{"event_id":"sha256:40e22fdf761ea219405572e758fbf06ac438097696e0e39bbc6dc5654cb7dc8c","target":"graph","created_at":"2026-07-05T00:50:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1911.10695/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent advances in adversarial attacks uncover the intrinsic vulnerability of modern deep neural networks. Since then, extensive efforts have been devoted to enhancing the robustness of deep networks via specialized learning algorithms and loss functions. In this work, we take an architectural perspective and investigate the patterns of network architectures that are resilient to adversarial attacks. To obtain the large number of networks needed for this study, we adopt one-shot neural architecture search, training a large network for once and then finetuning the sub-networks sampled therefrom","authors_text":"Dahua Lin, Minghao Guo, Rui Xu, Yuzhe Yang, Ziwei Liu","cross_cats":["cs.CR","cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-25T04:14:02Z","title":"When NAS Meets Robustness: In Search of Robust Architectures against Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.10695","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f293ab9786198bba0842979a1b301021028fcdc9c38bfd2e6637188bc00d62d7","target":"record","created_at":"2026-07-05T00:50:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d755125815456d6964e607e7b7c52b19f2f1ec74520d0f2a5a9b4109ba791c18","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-25T04:14:02Z","title_canon_sha256":"1cdb18136ec58b1ef5e86b1c72d2973c1e18179870bd4ab079521309d6ece8da"},"schema_version":"1.0","source":{"id":"1911.10695","kind":"arxiv","version":3}},"canonical_sha256":"c32f46ea78111f1d27bf53504bcfde82c1e1664dc70f3542c07192e386aa54a6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c32f46ea78111f1d27bf53504bcfde82c1e1664dc70f3542c07192e386aa54a6","first_computed_at":"2026-07-05T00:50:44.441155Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:50:44.441155Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Fr5U+nlFHnJj+p06GH74sMBJdvcBVbDAnJ+lYlVZjWNc08encOZUbofbyXyPMatdNq/pkU/VjXEMlVhQ+xc1Cw==","signature_status":"signed_v1","signed_at":"2026-07-05T00:50:44.441630Z","signed_message":"canonical_sha256_bytes"},"source_id":"1911.10695","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f293ab9786198bba0842979a1b301021028fcdc9c38bfd2e6637188bc00d62d7","sha256:40e22fdf761ea219405572e758fbf06ac438097696e0e39bbc6dc5654cb7dc8c"],"state_sha256":"e7f0275924eeeaa8cb956db8d07b1c7cd5d5144e43bdf4f3072a41b08faf8bc9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"75mrvfa6O8ggGgJlD3BwNNxTNePc/MCjMUkNo4q2yJiRQBK51Xldl7hcDe9Ra11TE9N3Ngewd2eeXZoKEDBTBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T15:50:52.942888Z","bundle_sha256":"e9ac1c3ab06cd9d1b1e4b28aff05cae47c21f0024b8257faa18b0f577b0a6069"}}