{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2019:336HM6FCW27KCD3ORZPIGLWGX5","short_pith_number":"pith:336HM6FC","schema_version":"1.0","canonical_sha256":"defc7678a2b6bea10f6e8e5e832ec6bf5661e3cc3b98ebf873280ef8e6560a97","source":{"kind":"arxiv","id":"1908.03369","version":7},"attestation_state":"computed","paper":{"title":"Februus: Input Purification Defense Against Trojan Attacks on Deep Neural Network Systems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Bao Gia Doan, Damith C. Ranasinghe, Ehsan Abbasnejad","submitted_at":"2019-08-09T08:51:55Z","abstract_excerpt":"We propose Februus; a new idea to neutralize highly potent and insidious Trojan attacks on Deep Neural Network (DNN) systems at run-time. In Trojan attacks, an adversary activates a backdoor crafted in a deep neural network model using a secret trigger, a Trojan, applied to any input to alter the model's decision to a target prediction---a target determined by and only known to the attacker. Februus sanitizes the incoming input by surgically removing the potential trigger artifacts and restoring the input for the classification task. Februus enables effective Trojan mitigation by sanitizing in"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"1908.03369","kind":"arxiv","version":7},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-09T08:51:55Z","cross_cats_sorted":[],"title_canon_sha256":"1c1068e9e2ceafe37b4c192367225087b6e1d0d5898f5d194db2347293f7618d","abstract_canon_sha256":"e9e7c13e47ba8005a0dcc51b85c8e72bd71f0be19003d7e1d8e03a5998e54c06"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:59:53.898545Z","signature_b64":"FTMOEWfslLrfSOBnU+6Wu77VupEulNDOQ92XdscsplNUMgR90hbMRGj+cVDnCZUNTxVk0agzHo1x8PCRKIEtCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"defc7678a2b6bea10f6e8e5e832ec6bf5661e3cc3b98ebf873280ef8e6560a97","last_reissued_at":"2026-07-05T01:59:53.898103Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:59:53.898103Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Februus: Input Purification Defense Against Trojan Attacks on Deep Neural Network Systems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Bao Gia Doan, Damith C. Ranasinghe, Ehsan Abbasnejad","submitted_at":"2019-08-09T08:51:55Z","abstract_excerpt":"We propose Februus; a new idea to neutralize highly potent and insidious Trojan attacks on Deep Neural Network (DNN) systems at run-time. In Trojan attacks, an adversary activates a backdoor crafted in a deep neural network model using a secret trigger, a Trojan, applied to any input to alter the model's decision to a target prediction---a target determined by and only known to the attacker. Februus sanitizes the incoming input by surgically removing the potential trigger artifacts and restoring the input for the classification task. Februus enables effective Trojan mitigation by sanitizing in"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.03369","kind":"arxiv","version":7},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1908.03369/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"1908.03369","created_at":"2026-07-05T01:59:53.898164+00:00"},{"alias_kind":"arxiv_version","alias_value":"1908.03369v7","created_at":"2026-07-05T01:59:53.898164+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.03369","created_at":"2026-07-05T01:59:53.898164+00:00"},{"alias_kind":"pith_short_12","alias_value":"336HM6FCW27K","created_at":"2026-07-05T01:59:53.898164+00:00"},{"alias_kind":"pith_short_16","alias_value":"336HM6FCW27KCD3O","created_at":"2026-07-05T01:59:53.898164+00:00"},{"alias_kind":"pith_short_8","alias_value":"336HM6FC","created_at":"2026-07-05T01:59:53.898164+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/336HM6FCW27KCD3ORZPIGLWGX5","json":"https://pith.science/pith/336HM6FCW27KCD3ORZPIGLWGX5.json","graph_json":"https://pith.science/api/pith-number/336HM6FCW27KCD3ORZPIGLWGX5/graph.json","events_json":"https://pith.science/api/pith-number/336HM6FCW27KCD3ORZPIGLWGX5/events.json","paper":"https://pith.science/paper/336HM6FC"},"agent_actions":{"view_html":"https://pith.science/pith/336HM6FCW27KCD3ORZPIGLWGX5","download_json":"https://pith.science/pith/336HM6FCW27KCD3ORZPIGLWGX5.json","view_paper":"https://pith.science/paper/336HM6FC","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=1908.03369&json=true","fetch_graph":"https://pith.science/api/pith-number/336HM6FCW27KCD3ORZPIGLWGX5/graph.json","fetch_events":"https://pith.science/api/pith-number/336HM6FCW27KCD3ORZPIGLWGX5/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/336HM6FCW27KCD3ORZPIGLWGX5/action/timestamp_anchor","attest_storage":"https://pith.science/pith/336HM6FCW27KCD3ORZPIGLWGX5/action/storage_attestation","attest_author":"https://pith.science/pith/336HM6FCW27KCD3ORZPIGLWGX5/action/author_attestation","sign_citation":"https://pith.science/pith/336HM6FCW27KCD3ORZPIGLWGX5/action/citation_signature","submit_replication":"https://pith.science/pith/336HM6FCW27KCD3ORZPIGLWGX5/action/replication_record"}},"created_at":"2026-07-05T01:59:53.898164+00:00","updated_at":"2026-07-05T01:59:53.898164+00:00"}