{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:336HM6FCW27KCD3ORZPIGLWGX5","short_pith_number":"pith:336HM6FC","canonical_record":{"source":{"id":"1908.03369","kind":"arxiv","version":7},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-09T08:51:55Z","cross_cats_sorted":[],"title_canon_sha256":"1c1068e9e2ceafe37b4c192367225087b6e1d0d5898f5d194db2347293f7618d","abstract_canon_sha256":"e9e7c13e47ba8005a0dcc51b85c8e72bd71f0be19003d7e1d8e03a5998e54c06"},"schema_version":"1.0"},"canonical_sha256":"defc7678a2b6bea10f6e8e5e832ec6bf5661e3cc3b98ebf873280ef8e6560a97","source":{"kind":"arxiv","id":"1908.03369","version":7},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.03369","created_at":"2026-07-05T01:59:53Z"},{"alias_kind":"arxiv_version","alias_value":"1908.03369v7","created_at":"2026-07-05T01:59:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.03369","created_at":"2026-07-05T01:59:53Z"},{"alias_kind":"pith_short_12","alias_value":"336HM6FCW27K","created_at":"2026-07-05T01:59:53Z"},{"alias_kind":"pith_short_16","alias_value":"336HM6FCW27KCD3O","created_at":"2026-07-05T01:59:53Z"},{"alias_kind":"pith_short_8","alias_value":"336HM6FC","created_at":"2026-07-05T01:59:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:336HM6FCW27KCD3ORZPIGLWGX5","target":"record","payload":{"canonical_record":{"source":{"id":"1908.03369","kind":"arxiv","version":7},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-09T08:51:55Z","cross_cats_sorted":[],"title_canon_sha256":"1c1068e9e2ceafe37b4c192367225087b6e1d0d5898f5d194db2347293f7618d","abstract_canon_sha256":"e9e7c13e47ba8005a0dcc51b85c8e72bd71f0be19003d7e1d8e03a5998e54c06"},"schema_version":"1.0"},"canonical_sha256":"defc7678a2b6bea10f6e8e5e832ec6bf5661e3cc3b98ebf873280ef8e6560a97","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:59:53.898545Z","signature_b64":"FTMOEWfslLrfSOBnU+6Wu77VupEulNDOQ92XdscsplNUMgR90hbMRGj+cVDnCZUNTxVk0agzHo1x8PCRKIEtCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"defc7678a2b6bea10f6e8e5e832ec6bf5661e3cc3b98ebf873280ef8e6560a97","last_reissued_at":"2026-07-05T01:59:53.898103Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:59:53.898103Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1908.03369","source_version":7,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:59:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+/uHjv/oJphWSE6qB6e9L20FlJ7GQXyXPwJpfmUNo3nGTUup3CYflDBlLh1rSL1YL48WbNRReSHdXzC4211GDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T05:43:43.591736Z"},"content_sha256":"4c81c4286726966752e81c176d97d98caf276d8faab54ee845b89df4d1c295b4","schema_version":"1.0","event_id":"sha256:4c81c4286726966752e81c176d97d98caf276d8faab54ee845b89df4d1c295b4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:336HM6FCW27KCD3ORZPIGLWGX5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Februus: Input Purification Defense Against Trojan Attacks on Deep Neural Network Systems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Bao Gia Doan, Damith C. Ranasinghe, Ehsan Abbasnejad","submitted_at":"2019-08-09T08:51:55Z","abstract_excerpt":"We propose Februus; a new idea to neutralize highly potent and insidious Trojan attacks on Deep Neural Network (DNN) systems at run-time. In Trojan attacks, an adversary activates a backdoor crafted in a deep neural network model using a secret trigger, a Trojan, applied to any input to alter the model's decision to a target prediction---a target determined by and only known to the attacker. Februus sanitizes the incoming input by surgically removing the potential trigger artifacts and restoring the input for the classification task. Februus enables effective Trojan mitigation by sanitizing in"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.03369","kind":"arxiv","version":7},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1908.03369/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:59:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yqKcASH7huHNiD3W7B+s3RjLcsZ6IJEaOkr5sf7NNmR2hdpWoO5InE3VhiWEjR6i+ZOlc6QTt9AGTETUe7bSDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T05:43:43.592701Z"},"content_sha256":"fb2a2f91693bcff701e207116ebfe85429258d190d24a1b99cc1b869e9136c8c","schema_version":"1.0","event_id":"sha256:fb2a2f91693bcff701e207116ebfe85429258d190d24a1b99cc1b869e9136c8c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/336HM6FCW27KCD3ORZPIGLWGX5/bundle.json","state_url":"https://pith.science/pith/336HM6FCW27KCD3ORZPIGLWGX5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/336HM6FCW27KCD3ORZPIGLWGX5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T05:43:43Z","links":{"resolver":"https://pith.science/pith/336HM6FCW27KCD3ORZPIGLWGX5","bundle":"https://pith.science/pith/336HM6FCW27KCD3ORZPIGLWGX5/bundle.json","state":"https://pith.science/pith/336HM6FCW27KCD3ORZPIGLWGX5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/336HM6FCW27KCD3ORZPIGLWGX5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:336HM6FCW27KCD3ORZPIGLWGX5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e9e7c13e47ba8005a0dcc51b85c8e72bd71f0be19003d7e1d8e03a5998e54c06","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-09T08:51:55Z","title_canon_sha256":"1c1068e9e2ceafe37b4c192367225087b6e1d0d5898f5d194db2347293f7618d"},"schema_version":"1.0","source":{"id":"1908.03369","kind":"arxiv","version":7}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.03369","created_at":"2026-07-05T01:59:53Z"},{"alias_kind":"arxiv_version","alias_value":"1908.03369v7","created_at":"2026-07-05T01:59:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.03369","created_at":"2026-07-05T01:59:53Z"},{"alias_kind":"pith_short_12","alias_value":"336HM6FCW27K","created_at":"2026-07-05T01:59:53Z"},{"alias_kind":"pith_short_16","alias_value":"336HM6FCW27KCD3O","created_at":"2026-07-05T01:59:53Z"},{"alias_kind":"pith_short_8","alias_value":"336HM6FC","created_at":"2026-07-05T01:59:53Z"}],"graph_snapshots":[{"event_id":"sha256:fb2a2f91693bcff701e207116ebfe85429258d190d24a1b99cc1b869e9136c8c","target":"graph","created_at":"2026-07-05T01:59:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1908.03369/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We propose Februus; a new idea to neutralize highly potent and insidious Trojan attacks on Deep Neural Network (DNN) systems at run-time. In Trojan attacks, an adversary activates a backdoor crafted in a deep neural network model using a secret trigger, a Trojan, applied to any input to alter the model's decision to a target prediction---a target determined by and only known to the attacker. Februus sanitizes the incoming input by surgically removing the potential trigger artifacts and restoring the input for the classification task. Februus enables effective Trojan mitigation by sanitizing in","authors_text":"Bao Gia Doan, Damith C. Ranasinghe, Ehsan Abbasnejad","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-09T08:51:55Z","title":"Februus: Input Purification Defense Against Trojan Attacks on Deep Neural Network Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.03369","kind":"arxiv","version":7},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4c81c4286726966752e81c176d97d98caf276d8faab54ee845b89df4d1c295b4","target":"record","created_at":"2026-07-05T01:59:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e9e7c13e47ba8005a0dcc51b85c8e72bd71f0be19003d7e1d8e03a5998e54c06","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-09T08:51:55Z","title_canon_sha256":"1c1068e9e2ceafe37b4c192367225087b6e1d0d5898f5d194db2347293f7618d"},"schema_version":"1.0","source":{"id":"1908.03369","kind":"arxiv","version":7}},"canonical_sha256":"defc7678a2b6bea10f6e8e5e832ec6bf5661e3cc3b98ebf873280ef8e6560a97","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"defc7678a2b6bea10f6e8e5e832ec6bf5661e3cc3b98ebf873280ef8e6560a97","first_computed_at":"2026-07-05T01:59:53.898103Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:59:53.898103Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FTMOEWfslLrfSOBnU+6Wu77VupEulNDOQ92XdscsplNUMgR90hbMRGj+cVDnCZUNTxVk0agzHo1x8PCRKIEtCw==","signature_status":"signed_v1","signed_at":"2026-07-05T01:59:53.898545Z","signed_message":"canonical_sha256_bytes"},"source_id":"1908.03369","source_kind":"arxiv","source_version":7}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4c81c4286726966752e81c176d97d98caf276d8faab54ee845b89df4d1c295b4","sha256:fb2a2f91693bcff701e207116ebfe85429258d190d24a1b99cc1b869e9136c8c"],"state_sha256":"25c5d87f1f690f758c72ac0fe011a39de2baf7e0df2d9961ae35d7f5faa6c1d0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DwryvcLpLiCzbDvasm8L3ohepOY8zLr/rlOrkWrWemXj+fyARyxwUrXlvIH4BhKv9pTHStGrHityhApnLyxPCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T05:43:43.599558Z","bundle_sha256":"1797cf0eea3701b65df97cbfe5de33376b6672b60d4e43e8046f00fc32666945"}}