{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:26SM5M2C3R5IQXV3LIRXUA2P7P","short_pith_number":"pith:26SM5M2C","canonical_record":{"source":{"id":"2106.06361","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-06-11T13:03:17Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"8f5a4bcc6e01a9c1cbe97a537d779cd66f3c483041b414ad81cb0be5e6f0687e","abstract_canon_sha256":"9eaa8d1f175f8fb0f2f19dc12a4b6dd0cd106134ea01c7f5aa492f692a4f6715"},"schema_version":"1.0"},"canonical_sha256":"d7a4ceb342dc7a885ebb5a237a034ffbc60dac04277693539473e2346f2d14a6","source":{"kind":"arxiv","id":"2106.06361","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.06361","created_at":"2026-07-05T02:48:28Z"},{"alias_kind":"arxiv_version","alias_value":"2106.06361v1","created_at":"2026-07-05T02:48:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.06361","created_at":"2026-07-05T02:48:28Z"},{"alias_kind":"pith_short_12","alias_value":"26SM5M2C3R5I","created_at":"2026-07-05T02:48:28Z"},{"alias_kind":"pith_short_16","alias_value":"26SM5M2C3R5IQXV3","created_at":"2026-07-05T02:48:28Z"},{"alias_kind":"pith_short_8","alias_value":"26SM5M2C","created_at":"2026-07-05T02:48:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:26SM5M2C3R5IQXV3LIRXUA2P7P","target":"record","payload":{"canonical_record":{"source":{"id":"2106.06361","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-06-11T13:03:17Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"8f5a4bcc6e01a9c1cbe97a537d779cd66f3c483041b414ad81cb0be5e6f0687e","abstract_canon_sha256":"9eaa8d1f175f8fb0f2f19dc12a4b6dd0cd106134ea01c7f5aa492f692a4f6715"},"schema_version":"1.0"},"canonical_sha256":"d7a4ceb342dc7a885ebb5a237a034ffbc60dac04277693539473e2346f2d14a6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:48:28.960733Z","signature_b64":"MNdl6dZ1e0LLrNbfxIHbdCZobsTWJi3R4GmXbdLWkRiTcVwfB2OqN52mJx7Ftvx19pbgXq7nQpi2z5r/bo+vCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d7a4ceb342dc7a885ebb5a237a034ffbc60dac04277693539473e2346f2d14a6","last_reissued_at":"2026-07-05T02:48:28.960298Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:48:28.960298Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2106.06361","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:48:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"S554Vxma3DGX+Ze7/Trqwkxc1RSbjEms9Yr/reDEbjvJWgoRfwPVaWGsQWWXhF+aQzrfESIqg173w0MLD2bqDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T17:45:59.836194Z"},"content_sha256":"ba0db5db8796fb70d0afdfe7eee63ad24155e18fc80ee1344a0504fdaa4f0102","schema_version":"1.0","event_id":"sha256:ba0db5db8796fb70d0afdfe7eee63ad24155e18fc80ee1344a0504fdaa4f0102"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:26SM5M2C3R5IQXV3LIRXUA2P7P","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Turn the Combination Lock: Learnable Textual Backdoor Attacks via Word Substitution","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CL","authors_text":"Fanchao Qi, Maosong Sun, Sophia Xu, Yuan Yao, Zhiyuan Liu","submitted_at":"2021-06-11T13:03:17Z","abstract_excerpt":"Recent studies show that neural natural language processing (NLP) models are vulnerable to backdoor attacks. Injected with backdoors, models perform normally on benign examples but produce attacker-specified predictions when the backdoor is activated, presenting serious security threats to real-world applications. Since existing textual backdoor attacks pay little attention to the invisibility of backdoors, they can be easily detected and blocked. In this work, we present invisible backdoors that are activated by a learnable combination of word substitution. We show that NLP models can be inje"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.06361","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2106.06361/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:48:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+WexbpfEM9NDFALCBmPYC9oaQk511eGUfbOnaPObByZ984Ng/ZkA7TJqC/gdel7F2r/kk5rRB+TdgWL+QX2RAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T17:45:59.836783Z"},"content_sha256":"3713733786615e3e62093de0b031a66f5c7ff9ab86ae738c8f1d87e33fe88348","schema_version":"1.0","event_id":"sha256:3713733786615e3e62093de0b031a66f5c7ff9ab86ae738c8f1d87e33fe88348"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/26SM5M2C3R5IQXV3LIRXUA2P7P/bundle.json","state_url":"https://pith.science/pith/26SM5M2C3R5IQXV3LIRXUA2P7P/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/26SM5M2C3R5IQXV3LIRXUA2P7P/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T17:45:59Z","links":{"resolver":"https://pith.science/pith/26SM5M2C3R5IQXV3LIRXUA2P7P","bundle":"https://pith.science/pith/26SM5M2C3R5IQXV3LIRXUA2P7P/bundle.json","state":"https://pith.science/pith/26SM5M2C3R5IQXV3LIRXUA2P7P/state.json","well_known_bundle":"https://pith.science/.well-known/pith/26SM5M2C3R5IQXV3LIRXUA2P7P/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:26SM5M2C3R5IQXV3LIRXUA2P7P","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9eaa8d1f175f8fb0f2f19dc12a4b6dd0cd106134ea01c7f5aa492f692a4f6715","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-06-11T13:03:17Z","title_canon_sha256":"8f5a4bcc6e01a9c1cbe97a537d779cd66f3c483041b414ad81cb0be5e6f0687e"},"schema_version":"1.0","source":{"id":"2106.06361","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.06361","created_at":"2026-07-05T02:48:28Z"},{"alias_kind":"arxiv_version","alias_value":"2106.06361v1","created_at":"2026-07-05T02:48:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.06361","created_at":"2026-07-05T02:48:28Z"},{"alias_kind":"pith_short_12","alias_value":"26SM5M2C3R5I","created_at":"2026-07-05T02:48:28Z"},{"alias_kind":"pith_short_16","alias_value":"26SM5M2C3R5IQXV3","created_at":"2026-07-05T02:48:28Z"},{"alias_kind":"pith_short_8","alias_value":"26SM5M2C","created_at":"2026-07-05T02:48:28Z"}],"graph_snapshots":[{"event_id":"sha256:3713733786615e3e62093de0b031a66f5c7ff9ab86ae738c8f1d87e33fe88348","target":"graph","created_at":"2026-07-05T02:48:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.06361/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent studies show that neural natural language processing (NLP) models are vulnerable to backdoor attacks. Injected with backdoors, models perform normally on benign examples but produce attacker-specified predictions when the backdoor is activated, presenting serious security threats to real-world applications. Since existing textual backdoor attacks pay little attention to the invisibility of backdoors, they can be easily detected and blocked. In this work, we present invisible backdoors that are activated by a learnable combination of word substitution. We show that NLP models can be inje","authors_text":"Fanchao Qi, Maosong Sun, Sophia Xu, Yuan Yao, Zhiyuan Liu","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-06-11T13:03:17Z","title":"Turn the Combination Lock: Learnable Textual Backdoor Attacks via Word Substitution"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.06361","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ba0db5db8796fb70d0afdfe7eee63ad24155e18fc80ee1344a0504fdaa4f0102","target":"record","created_at":"2026-07-05T02:48:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9eaa8d1f175f8fb0f2f19dc12a4b6dd0cd106134ea01c7f5aa492f692a4f6715","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-06-11T13:03:17Z","title_canon_sha256":"8f5a4bcc6e01a9c1cbe97a537d779cd66f3c483041b414ad81cb0be5e6f0687e"},"schema_version":"1.0","source":{"id":"2106.06361","kind":"arxiv","version":1}},"canonical_sha256":"d7a4ceb342dc7a885ebb5a237a034ffbc60dac04277693539473e2346f2d14a6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d7a4ceb342dc7a885ebb5a237a034ffbc60dac04277693539473e2346f2d14a6","first_computed_at":"2026-07-05T02:48:28.960298Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:48:28.960298Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MNdl6dZ1e0LLrNbfxIHbdCZobsTWJi3R4GmXbdLWkRiTcVwfB2OqN52mJx7Ftvx19pbgXq7nQpi2z5r/bo+vCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T02:48:28.960733Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.06361","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ba0db5db8796fb70d0afdfe7eee63ad24155e18fc80ee1344a0504fdaa4f0102","sha256:3713733786615e3e62093de0b031a66f5c7ff9ab86ae738c8f1d87e33fe88348"],"state_sha256":"73387b66471577aec7d4c84397630a7b06c53c62fde08dc70c3d19ab82f8418c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"f7Uk4r+S2PzaoyA516Oy0Qs1tRcjXWrJydbBafJnFb3AjV8IhH2zQbfNxaLW+D3mpPtB7JwfBzC1kqItwvwLBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T17:45:59.840134Z","bundle_sha256":"cc346797d72631c51919ec80f5b9a27a423c8f691f162c7a7dbedc606ebc92c6"}}