{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:2MOBH4M4S7UIZH7GQE465IGSB2","short_pith_number":"pith:2MOBH4M4","canonical_record":{"source":{"id":"2012.02275","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2020-12-03T21:21:33Z","cross_cats_sorted":["cs.AI","cs.CV","cs.IT","math.IT"],"title_canon_sha256":"64a316374ac460670bcd8dac821da160cf1914c83975c93d86cf99e08f5dccfa","abstract_canon_sha256":"4fc9bfc980a1bbd4e12483ff93fe351762afc77b98022e916103779c7e3bac4c"},"schema_version":"1.0"},"canonical_sha256":"d31c13f19c97e88c9fe68139eea0d20eadc9509b2d4a87b7b5f90b56bee4111e","source":{"kind":"arxiv","id":"2012.02275","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2012.02275","created_at":"2026-07-05T01:56:58Z"},{"alias_kind":"arxiv_version","alias_value":"2012.02275v1","created_at":"2026-07-05T01:56:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.02275","created_at":"2026-07-05T01:56:58Z"},{"alias_kind":"pith_short_12","alias_value":"2MOBH4M4S7UI","created_at":"2026-07-05T01:56:58Z"},{"alias_kind":"pith_short_16","alias_value":"2MOBH4M4S7UIZH7G","created_at":"2026-07-05T01:56:58Z"},{"alias_kind":"pith_short_8","alias_value":"2MOBH4M4","created_at":"2026-07-05T01:56:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:2MOBH4M4S7UIZH7GQE465IGSB2","target":"record","payload":{"canonical_record":{"source":{"id":"2012.02275","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2020-12-03T21:21:33Z","cross_cats_sorted":["cs.AI","cs.CV","cs.IT","math.IT"],"title_canon_sha256":"64a316374ac460670bcd8dac821da160cf1914c83975c93d86cf99e08f5dccfa","abstract_canon_sha256":"4fc9bfc980a1bbd4e12483ff93fe351762afc77b98022e916103779c7e3bac4c"},"schema_version":"1.0"},"canonical_sha256":"d31c13f19c97e88c9fe68139eea0d20eadc9509b2d4a87b7b5f90b56bee4111e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:56:58.020145Z","signature_b64":"eZeQY02+X+aIZTEjN9SzSTGjfhV0Dzy1cSoTLHobY5Lv/KSxVRF3tDJ38qFpbIkByYuAdWov3ahHYp9iARRLDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d31c13f19c97e88c9fe68139eea0d20eadc9509b2d4a87b7b5f90b56bee4111e","last_reissued_at":"2026-07-05T01:56:58.019716Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:56:58.019716Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2012.02275","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:56:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ow+nEyZcvqNmFTPVo5CXCnP20Xusl26aKwOe1tg1fI8aqd4kPcsTAALyxIEgdLostDBuYXx9rM0QNAiRAimGCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T04:58:31.381938Z"},"content_sha256":"ff7c4ad3afb01459e0ffa8657bfc3f045ce2a0a581c8135cdceedae1d00ff2b3","schema_version":"1.0","event_id":"sha256:ff7c4ad3afb01459e0ffa8657bfc3f045ce2a0a581c8135cdceedae1d00ff2b3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:2MOBH4M4S7UIZH7GQE465IGSB2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Detecting Trojaned DNNs Using Counterfactual Attributions","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CV","cs.IT","math.IT"],"primary_cat":"cs.LG","authors_text":"Ajay Divakaran, Anirban Roy, Indranil Sur, Karan Sikka, Susmit Jha","submitted_at":"2020-12-03T21:21:33Z","abstract_excerpt":"We target the problem of detecting Trojans or backdoors in DNNs. Such models behave normally with typical inputs but produce specific incorrect predictions for inputs poisoned with a Trojan trigger. Our approach is based on a novel observation that the trigger behavior depends on a few ghost neurons that activate on trigger pattern and exhibit abnormally higher relative attribution for wrong decisions when activated. Further, these trigger neurons are also active on normal inputs of the target class. Thus, we use counterfactual attributions to localize these ghost neurons from clean inputs and"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.02275","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2012.02275/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:56:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bCEWavS1ZA78UY/S6gLQOD6p8beKYOjlKwOTXe4+qPFpIkwOUKxdxRwVjvOAH6rb+maI9Nlg15gAfXs67GcBDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T04:58:31.382420Z"},"content_sha256":"455670555879b9319c543c0cc5f9ec8cef6c881596c5e5adbf38de976439f8de","schema_version":"1.0","event_id":"sha256:455670555879b9319c543c0cc5f9ec8cef6c881596c5e5adbf38de976439f8de"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2MOBH4M4S7UIZH7GQE465IGSB2/bundle.json","state_url":"https://pith.science/pith/2MOBH4M4S7UIZH7GQE465IGSB2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2MOBH4M4S7UIZH7GQE465IGSB2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T04:58:31Z","links":{"resolver":"https://pith.science/pith/2MOBH4M4S7UIZH7GQE465IGSB2","bundle":"https://pith.science/pith/2MOBH4M4S7UIZH7GQE465IGSB2/bundle.json","state":"https://pith.science/pith/2MOBH4M4S7UIZH7GQE465IGSB2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2MOBH4M4S7UIZH7GQE465IGSB2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:2MOBH4M4S7UIZH7GQE465IGSB2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4fc9bfc980a1bbd4e12483ff93fe351762afc77b98022e916103779c7e3bac4c","cross_cats_sorted":["cs.AI","cs.CV","cs.IT","math.IT"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2020-12-03T21:21:33Z","title_canon_sha256":"64a316374ac460670bcd8dac821da160cf1914c83975c93d86cf99e08f5dccfa"},"schema_version":"1.0","source":{"id":"2012.02275","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2012.02275","created_at":"2026-07-05T01:56:58Z"},{"alias_kind":"arxiv_version","alias_value":"2012.02275v1","created_at":"2026-07-05T01:56:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.02275","created_at":"2026-07-05T01:56:58Z"},{"alias_kind":"pith_short_12","alias_value":"2MOBH4M4S7UI","created_at":"2026-07-05T01:56:58Z"},{"alias_kind":"pith_short_16","alias_value":"2MOBH4M4S7UIZH7G","created_at":"2026-07-05T01:56:58Z"},{"alias_kind":"pith_short_8","alias_value":"2MOBH4M4","created_at":"2026-07-05T01:56:58Z"}],"graph_snapshots":[{"event_id":"sha256:455670555879b9319c543c0cc5f9ec8cef6c881596c5e5adbf38de976439f8de","target":"graph","created_at":"2026-07-05T01:56:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2012.02275/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We target the problem of detecting Trojans or backdoors in DNNs. Such models behave normally with typical inputs but produce specific incorrect predictions for inputs poisoned with a Trojan trigger. Our approach is based on a novel observation that the trigger behavior depends on a few ghost neurons that activate on trigger pattern and exhibit abnormally higher relative attribution for wrong decisions when activated. Further, these trigger neurons are also active on normal inputs of the target class. Thus, we use counterfactual attributions to localize these ghost neurons from clean inputs and","authors_text":"Ajay Divakaran, Anirban Roy, Indranil Sur, Karan Sikka, Susmit Jha","cross_cats":["cs.AI","cs.CV","cs.IT","math.IT"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2020-12-03T21:21:33Z","title":"Detecting Trojaned DNNs Using Counterfactual Attributions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.02275","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ff7c4ad3afb01459e0ffa8657bfc3f045ce2a0a581c8135cdceedae1d00ff2b3","target":"record","created_at":"2026-07-05T01:56:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4fc9bfc980a1bbd4e12483ff93fe351762afc77b98022e916103779c7e3bac4c","cross_cats_sorted":["cs.AI","cs.CV","cs.IT","math.IT"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2020-12-03T21:21:33Z","title_canon_sha256":"64a316374ac460670bcd8dac821da160cf1914c83975c93d86cf99e08f5dccfa"},"schema_version":"1.0","source":{"id":"2012.02275","kind":"arxiv","version":1}},"canonical_sha256":"d31c13f19c97e88c9fe68139eea0d20eadc9509b2d4a87b7b5f90b56bee4111e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d31c13f19c97e88c9fe68139eea0d20eadc9509b2d4a87b7b5f90b56bee4111e","first_computed_at":"2026-07-05T01:56:58.019716Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:56:58.019716Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"eZeQY02+X+aIZTEjN9SzSTGjfhV0Dzy1cSoTLHobY5Lv/KSxVRF3tDJ38qFpbIkByYuAdWov3ahHYp9iARRLDg==","signature_status":"signed_v1","signed_at":"2026-07-05T01:56:58.020145Z","signed_message":"canonical_sha256_bytes"},"source_id":"2012.02275","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ff7c4ad3afb01459e0ffa8657bfc3f045ce2a0a581c8135cdceedae1d00ff2b3","sha256:455670555879b9319c543c0cc5f9ec8cef6c881596c5e5adbf38de976439f8de"],"state_sha256":"138eca06735d426b3a5413c7ac9e4d5369dd1baa18fff6274b2da336aa84c322"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4pFX6IGYzcLEP9dAm4PY90Z9dsobEHAiD/ANjB029ystDNXqoW34bL2i+IkOlq+IRz3Y7WScnqnfyRhpmdxfAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T04:58:31.385746Z","bundle_sha256":"d079855bb90127a4a0ad1257f878a5bed610257612afd2e65eb7e6fb2836dadc"}}