{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:2GNRRRAISHGIBEEFMLTOPQUGUM","short_pith_number":"pith:2GNRRRAI","canonical_record":{"source":{"id":"2208.10608","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-08-22T21:27:09Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"e905e48df4bc38631b1d1cbcd88576029628b8582b6a8a551bca323342e3be6b","abstract_canon_sha256":"18470c120b3e2a6a0e37ea167c513af05c027b6965c2fecaf2e0105c739abfed"},"schema_version":"1.0"},"canonical_sha256":"d19b18c40891cc80908562e6e7c286a305ec8452450c31d8570efb4ffb850f08","source":{"kind":"arxiv","id":"2208.10608","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2208.10608","created_at":"2026-07-05T04:50:37Z"},{"alias_kind":"arxiv_version","alias_value":"2208.10608v1","created_at":"2026-07-05T04:50:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2208.10608","created_at":"2026-07-05T04:50:37Z"},{"alias_kind":"pith_short_12","alias_value":"2GNRRRAISHGI","created_at":"2026-07-05T04:50:37Z"},{"alias_kind":"pith_short_16","alias_value":"2GNRRRAISHGIBEEF","created_at":"2026-07-05T04:50:37Z"},{"alias_kind":"pith_short_8","alias_value":"2GNRRRAI","created_at":"2026-07-05T04:50:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:2GNRRRAISHGIBEEFMLTOPQUGUM","target":"record","payload":{"canonical_record":{"source":{"id":"2208.10608","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-08-22T21:27:09Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"e905e48df4bc38631b1d1cbcd88576029628b8582b6a8a551bca323342e3be6b","abstract_canon_sha256":"18470c120b3e2a6a0e37ea167c513af05c027b6965c2fecaf2e0105c739abfed"},"schema_version":"1.0"},"canonical_sha256":"d19b18c40891cc80908562e6e7c286a305ec8452450c31d8570efb4ffb850f08","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:50:37.462564Z","signature_b64":"4H5AbfQWAqU7s06NMbLnW//eqcpOQRx6fBMjWQtlXkTkqm1t8mgpISJnhFavukEEQXFnspgwkSLw7GUHW5JwCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d19b18c40891cc80908562e6e7c286a305ec8452450c31d8570efb4ffb850f08","last_reissued_at":"2026-07-05T04:50:37.462108Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:50:37.462108Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2208.10608","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:50:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Bm2sE6Tf82Te3XxwF06owpv76ja7vWpDaharLyEvL9rG69PN5iLgW9ZAHvQA46LhSV3hUc/EXb4Yo5uFHYLIDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-10T21:07:41.182349Z"},"content_sha256":"c5c52f837dfec800191918bb7f654fe114530768ec9cbaaf467b6e543c554121","schema_version":"1.0","event_id":"sha256:c5c52f837dfec800191918bb7f654fe114530768ec9cbaaf467b6e543c554121"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:2GNRRRAISHGIBEEFMLTOPQUGUM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"RIBAC: Towards Robust and Imperceptible Backdoor Attack against Compact DNN","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.CR","authors_text":"Bo Yuan, Cong Shi, Huy Phan, Jian Liu, Tianfang Zhang, Tianming Zhao, Yan Wang, Yingying Chen, Yi Xie, Zhuohang Li","submitted_at":"2022-08-22T21:27:09Z","abstract_excerpt":"Recently backdoor attack has become an emerging threat to the security of deep neural network (DNN) models. To date, most of the existing studies focus on backdoor attack against the uncompressed model; while the vulnerability of compressed DNNs, which are widely used in the practical applications, is little exploited yet. In this paper, we propose to study and develop Robust and Imperceptible Backdoor Attack against Compact DNN models (RIBAC). By performing systematic analysis and exploration on the important design knobs, we propose a framework that can learn the proper trigger patterns, mod"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2208.10608","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2208.10608/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:50:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eUcX4i/iK1qNKtdHQ4K1DThpDped+ofPdqGlUiwqqvRsFc9Xv3lEVzBfrM4647pNru+AF0Ikgww2A2QD8qRYAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-10T21:07:41.182749Z"},"content_sha256":"faa074217f59765ed9d32550ad262022991f6abab772a71313766a5ce2435d0c","schema_version":"1.0","event_id":"sha256:faa074217f59765ed9d32550ad262022991f6abab772a71313766a5ce2435d0c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2GNRRRAISHGIBEEFMLTOPQUGUM/bundle.json","state_url":"https://pith.science/pith/2GNRRRAISHGIBEEFMLTOPQUGUM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2GNRRRAISHGIBEEFMLTOPQUGUM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-10T21:07:41Z","links":{"resolver":"https://pith.science/pith/2GNRRRAISHGIBEEFMLTOPQUGUM","bundle":"https://pith.science/pith/2GNRRRAISHGIBEEFMLTOPQUGUM/bundle.json","state":"https://pith.science/pith/2GNRRRAISHGIBEEFMLTOPQUGUM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2GNRRRAISHGIBEEFMLTOPQUGUM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:2GNRRRAISHGIBEEFMLTOPQUGUM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"18470c120b3e2a6a0e37ea167c513af05c027b6965c2fecaf2e0105c739abfed","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-08-22T21:27:09Z","title_canon_sha256":"e905e48df4bc38631b1d1cbcd88576029628b8582b6a8a551bca323342e3be6b"},"schema_version":"1.0","source":{"id":"2208.10608","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2208.10608","created_at":"2026-07-05T04:50:37Z"},{"alias_kind":"arxiv_version","alias_value":"2208.10608v1","created_at":"2026-07-05T04:50:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2208.10608","created_at":"2026-07-05T04:50:37Z"},{"alias_kind":"pith_short_12","alias_value":"2GNRRRAISHGI","created_at":"2026-07-05T04:50:37Z"},{"alias_kind":"pith_short_16","alias_value":"2GNRRRAISHGIBEEF","created_at":"2026-07-05T04:50:37Z"},{"alias_kind":"pith_short_8","alias_value":"2GNRRRAI","created_at":"2026-07-05T04:50:37Z"}],"graph_snapshots":[{"event_id":"sha256:faa074217f59765ed9d32550ad262022991f6abab772a71313766a5ce2435d0c","target":"graph","created_at":"2026-07-05T04:50:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2208.10608/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recently backdoor attack has become an emerging threat to the security of deep neural network (DNN) models. To date, most of the existing studies focus on backdoor attack against the uncompressed model; while the vulnerability of compressed DNNs, which are widely used in the practical applications, is little exploited yet. In this paper, we propose to study and develop Robust and Imperceptible Backdoor Attack against Compact DNN models (RIBAC). By performing systematic analysis and exploration on the important design knobs, we propose a framework that can learn the proper trigger patterns, mod","authors_text":"Bo Yuan, Cong Shi, Huy Phan, Jian Liu, Tianfang Zhang, Tianming Zhao, Yan Wang, Yingying Chen, Yi Xie, Zhuohang Li","cross_cats":["cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-08-22T21:27:09Z","title":"RIBAC: Towards Robust and Imperceptible Backdoor Attack against Compact DNN"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2208.10608","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c5c52f837dfec800191918bb7f654fe114530768ec9cbaaf467b6e543c554121","target":"record","created_at":"2026-07-05T04:50:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"18470c120b3e2a6a0e37ea167c513af05c027b6965c2fecaf2e0105c739abfed","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-08-22T21:27:09Z","title_canon_sha256":"e905e48df4bc38631b1d1cbcd88576029628b8582b6a8a551bca323342e3be6b"},"schema_version":"1.0","source":{"id":"2208.10608","kind":"arxiv","version":1}},"canonical_sha256":"d19b18c40891cc80908562e6e7c286a305ec8452450c31d8570efb4ffb850f08","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d19b18c40891cc80908562e6e7c286a305ec8452450c31d8570efb4ffb850f08","first_computed_at":"2026-07-05T04:50:37.462108Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:50:37.462108Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4H5AbfQWAqU7s06NMbLnW//eqcpOQRx6fBMjWQtlXkTkqm1t8mgpISJnhFavukEEQXFnspgwkSLw7GUHW5JwCg==","signature_status":"signed_v1","signed_at":"2026-07-05T04:50:37.462564Z","signed_message":"canonical_sha256_bytes"},"source_id":"2208.10608","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c5c52f837dfec800191918bb7f654fe114530768ec9cbaaf467b6e543c554121","sha256:faa074217f59765ed9d32550ad262022991f6abab772a71313766a5ce2435d0c"],"state_sha256":"292ea16822a4d3598c5144169148542e024a7c9e449d33a023e4d5ca87b0900f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8+pUC6lUoS7y7OeEI3aqmq6AYa/JQtFbeLefQ1WZ2LeO7cxoCBYX5M40ueSC2iB0FnaCVzkxs9f1tkwvXkRHAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-10T21:07:41.184948Z","bundle_sha256":"96f26a5f748989f366dc41d6184e6a0056423f539388c039deb9789fb8116a18"}}