{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:2W35J2AR4AJWWQYWOQYSQWJFAK","short_pith_number":"pith:2W35J2AR","canonical_record":{"source":{"id":"2006.12557","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-22T18:34:08Z","cross_cats_sorted":["cs.CR","cs.CV","cs.CY","stat.ML"],"title_canon_sha256":"2f89b6ddca30c9cae768d98dbcd2cff50e8b87a235ea448b372a46d3c5959e30","abstract_canon_sha256":"a74c9409cba773e148b14c6c7bf7cb9b12d44d28e60cb2ca14f066244cbdbe94"},"schema_version":"1.0"},"canonical_sha256":"d5b7d4e811e0136b43167431285925029ad2ba98649fc402f7f91c586931c203","source":{"kind":"arxiv","id":"2006.12557","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2006.12557","created_at":"2026-07-05T02:50:05Z"},{"alias_kind":"arxiv_version","alias_value":"2006.12557v3","created_at":"2026-07-05T02:50:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2006.12557","created_at":"2026-07-05T02:50:05Z"},{"alias_kind":"pith_short_12","alias_value":"2W35J2AR4AJW","created_at":"2026-07-05T02:50:05Z"},{"alias_kind":"pith_short_16","alias_value":"2W35J2AR4AJWWQYW","created_at":"2026-07-05T02:50:05Z"},{"alias_kind":"pith_short_8","alias_value":"2W35J2AR","created_at":"2026-07-05T02:50:05Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:2W35J2AR4AJWWQYWOQYSQWJFAK","target":"record","payload":{"canonical_record":{"source":{"id":"2006.12557","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-22T18:34:08Z","cross_cats_sorted":["cs.CR","cs.CV","cs.CY","stat.ML"],"title_canon_sha256":"2f89b6ddca30c9cae768d98dbcd2cff50e8b87a235ea448b372a46d3c5959e30","abstract_canon_sha256":"a74c9409cba773e148b14c6c7bf7cb9b12d44d28e60cb2ca14f066244cbdbe94"},"schema_version":"1.0"},"canonical_sha256":"d5b7d4e811e0136b43167431285925029ad2ba98649fc402f7f91c586931c203","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:50:05.934405Z","signature_b64":"S6fK4IBEUNgNqkB6XDa2tR6cL3Lm3hWdr1i+DOY7rp/aVKYIfztwRcpUi59rlMuno6kqhspefs38oDn5dL9fDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d5b7d4e811e0136b43167431285925029ad2ba98649fc402f7f91c586931c203","last_reissued_at":"2026-07-05T02:50:05.933996Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:50:05.933996Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2006.12557","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:50:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sbyzSrMiARQhlDoaPs6APGNf0GKwq3WWMoPPDZp7tnqyLxI90qyCsgkpLP2Kd575qqcXYRPv627ks/ynCAiFAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T10:43:47.660081Z"},"content_sha256":"0453c79afb52927f708208439f5a1e97297433867eccab951bcc46e9bf427e69","schema_version":"1.0","event_id":"sha256:0453c79afb52927f708208439f5a1e97297433867eccab951bcc46e9bf427e69"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:2W35J2AR4AJWWQYWOQYSQWJFAK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Just How Toxic is Data Poisoning? A Unified Benchmark for Backdoor and Data Poisoning Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV","cs.CY","stat.ML"],"primary_cat":"cs.LG","authors_text":"Arjun Gupta, Avi Schwarzschild, John P Dickerson, Micah Goldblum, Tom Goldstein","submitted_at":"2020-06-22T18:34:08Z","abstract_excerpt":"Data poisoning and backdoor attacks manipulate training data in order to cause models to fail during inference. A recent survey of industry practitioners found that data poisoning is the number one concern among threats ranging from model stealing to adversarial attacks. However, it remains unclear exactly how dangerous poisoning methods are and which ones are more effective considering that these methods, even ones with identical objectives, have not been tested in consistent or realistic settings. We observe that data poisoning and backdoor attacks are highly sensitive to variations in the t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2006.12557","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2006.12557/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:50:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"t00qwXTfM9nxB8Na2I+GHN0h23Oc2pdmsbiXNAv8XvF5Y4/XbsI5jqRmm3a0TBLGtTvP6/EFhNMoCmYD5diUAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T10:43:47.660659Z"},"content_sha256":"8f147d49d040ecc7a7450d6d84ec4f8c3eba15a471f4382c34e7f7c4fd217190","schema_version":"1.0","event_id":"sha256:8f147d49d040ecc7a7450d6d84ec4f8c3eba15a471f4382c34e7f7c4fd217190"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2W35J2AR4AJWWQYWOQYSQWJFAK/bundle.json","state_url":"https://pith.science/pith/2W35J2AR4AJWWQYWOQYSQWJFAK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2W35J2AR4AJWWQYWOQYSQWJFAK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T10:43:47Z","links":{"resolver":"https://pith.science/pith/2W35J2AR4AJWWQYWOQYSQWJFAK","bundle":"https://pith.science/pith/2W35J2AR4AJWWQYWOQYSQWJFAK/bundle.json","state":"https://pith.science/pith/2W35J2AR4AJWWQYWOQYSQWJFAK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2W35J2AR4AJWWQYWOQYSQWJFAK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:2W35J2AR4AJWWQYWOQYSQWJFAK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a74c9409cba773e148b14c6c7bf7cb9b12d44d28e60cb2ca14f066244cbdbe94","cross_cats_sorted":["cs.CR","cs.CV","cs.CY","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-22T18:34:08Z","title_canon_sha256":"2f89b6ddca30c9cae768d98dbcd2cff50e8b87a235ea448b372a46d3c5959e30"},"schema_version":"1.0","source":{"id":"2006.12557","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2006.12557","created_at":"2026-07-05T02:50:05Z"},{"alias_kind":"arxiv_version","alias_value":"2006.12557v3","created_at":"2026-07-05T02:50:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2006.12557","created_at":"2026-07-05T02:50:05Z"},{"alias_kind":"pith_short_12","alias_value":"2W35J2AR4AJW","created_at":"2026-07-05T02:50:05Z"},{"alias_kind":"pith_short_16","alias_value":"2W35J2AR4AJWWQYW","created_at":"2026-07-05T02:50:05Z"},{"alias_kind":"pith_short_8","alias_value":"2W35J2AR","created_at":"2026-07-05T02:50:05Z"}],"graph_snapshots":[{"event_id":"sha256:8f147d49d040ecc7a7450d6d84ec4f8c3eba15a471f4382c34e7f7c4fd217190","target":"graph","created_at":"2026-07-05T02:50:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2006.12557/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Data poisoning and backdoor attacks manipulate training data in order to cause models to fail during inference. A recent survey of industry practitioners found that data poisoning is the number one concern among threats ranging from model stealing to adversarial attacks. However, it remains unclear exactly how dangerous poisoning methods are and which ones are more effective considering that these methods, even ones with identical objectives, have not been tested in consistent or realistic settings. We observe that data poisoning and backdoor attacks are highly sensitive to variations in the t","authors_text":"Arjun Gupta, Avi Schwarzschild, John P Dickerson, Micah Goldblum, Tom Goldstein","cross_cats":["cs.CR","cs.CV","cs.CY","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-22T18:34:08Z","title":"Just How Toxic is Data Poisoning? A Unified Benchmark for Backdoor and Data Poisoning Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2006.12557","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0453c79afb52927f708208439f5a1e97297433867eccab951bcc46e9bf427e69","target":"record","created_at":"2026-07-05T02:50:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a74c9409cba773e148b14c6c7bf7cb9b12d44d28e60cb2ca14f066244cbdbe94","cross_cats_sorted":["cs.CR","cs.CV","cs.CY","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-22T18:34:08Z","title_canon_sha256":"2f89b6ddca30c9cae768d98dbcd2cff50e8b87a235ea448b372a46d3c5959e30"},"schema_version":"1.0","source":{"id":"2006.12557","kind":"arxiv","version":3}},"canonical_sha256":"d5b7d4e811e0136b43167431285925029ad2ba98649fc402f7f91c586931c203","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d5b7d4e811e0136b43167431285925029ad2ba98649fc402f7f91c586931c203","first_computed_at":"2026-07-05T02:50:05.933996Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:50:05.933996Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"S6fK4IBEUNgNqkB6XDa2tR6cL3Lm3hWdr1i+DOY7rp/aVKYIfztwRcpUi59rlMuno6kqhspefs38oDn5dL9fDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T02:50:05.934405Z","signed_message":"canonical_sha256_bytes"},"source_id":"2006.12557","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0453c79afb52927f708208439f5a1e97297433867eccab951bcc46e9bf427e69","sha256:8f147d49d040ecc7a7450d6d84ec4f8c3eba15a471f4382c34e7f7c4fd217190"],"state_sha256":"74f3ad78a2b6929162b79800083ed326efb3f1e0c874b2d452acd00252215a34"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nDiaO89ZExQgz+swB8o2ukrqg6IJ3I78OSxl9iNR/k5J8KPpwtHq19fyL/2hDedkAmNTrhdL3/ug76bduzpKAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T10:43:47.664165Z","bundle_sha256":"25acac2c0e7abd2bb05a0c38d363765a33c0f278c65ec1cf13088a8eb390fe9a"}}