{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:34QDCFTSFZILBJSECEBFVC5TMD","short_pith_number":"pith:34QDCFTS","canonical_record":{"source":{"id":"2311.02373","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-11-04T11:00:31Z","cross_cats_sorted":[],"title_canon_sha256":"1c3f37874fdf4c28f5a7f8696af0d9d127ea115326edec25f32b10d1a5f7aeae","abstract_canon_sha256":"16694908af3706fb67e314274b975a5c3626e7b366e4948a042e729c8c041190"},"schema_version":"1.0"},"canonical_sha256":"df203116722e50b0a64411025a8bb360f0009aa45e9e7e3ed9d0adbdeccbcbac","source":{"kind":"arxiv","id":"2311.02373","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.02373","created_at":"2026-07-05T08:32:09Z"},{"alias_kind":"arxiv_version","alias_value":"2311.02373v2","created_at":"2026-07-05T08:32:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.02373","created_at":"2026-07-05T08:32:09Z"},{"alias_kind":"pith_short_12","alias_value":"34QDCFTSFZIL","created_at":"2026-07-05T08:32:09Z"},{"alias_kind":"pith_short_16","alias_value":"34QDCFTSFZILBJSE","created_at":"2026-07-05T08:32:09Z"},{"alias_kind":"pith_short_8","alias_value":"34QDCFTS","created_at":"2026-07-05T08:32:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:34QDCFTSFZILBJSECEBFVC5TMD","target":"record","payload":{"canonical_record":{"source":{"id":"2311.02373","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-11-04T11:00:31Z","cross_cats_sorted":[],"title_canon_sha256":"1c3f37874fdf4c28f5a7f8696af0d9d127ea115326edec25f32b10d1a5f7aeae","abstract_canon_sha256":"16694908af3706fb67e314274b975a5c3626e7b366e4948a042e729c8c041190"},"schema_version":"1.0"},"canonical_sha256":"df203116722e50b0a64411025a8bb360f0009aa45e9e7e3ed9d0adbdeccbcbac","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:32:09.755510Z","signature_b64":"k4lkJ6bC34qz7Xd3xOrFT8zNqQftR7Q3xGeGKBPUIQpC/VKvb4BOxJxYjk3R+IWgjKD5B4LsloDK/b4e1JCYCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"df203116722e50b0a64411025a8bb360f0009aa45e9e7e3ed9d0adbdeccbcbac","last_reissued_at":"2026-07-05T08:32:09.754921Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:32:09.754921Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2311.02373","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:32:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FslSgmVu3RrDmSWHftgQxqqMVdGnOPtsfnzR/6uNNDV00qkHAormGotcPbguN2Upmfx7ah/voFNILyPl5jJmBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T16:33:49.409418Z"},"content_sha256":"2c15b5de206628b8686b499c1d41ce7e3b01a1e61707b1062ed1222ce5e27b23","schema_version":"1.0","event_id":"sha256:2c15b5de206628b8686b499c1d41ce7e3b01a1e61707b1062ed1222ce5e27b23"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:34QDCFTSFZILBJSECEBFVC5TMD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"From Trojan Horses to Castle Walls: Unveiling Bilateral Data Poisoning Effects in Diffusion Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Bingquan Shen, Gaowen Liu, H. Vicky Zhao, Ramana Rao Kompella, Sijia Liu, Yuguang Yao, Zhuoshi Pan","submitted_at":"2023-11-04T11:00:31Z","abstract_excerpt":"While state-of-the-art diffusion models (DMs) excel in image generation, concerns regarding their security persist. Earlier research highlighted DMs' vulnerability to data poisoning attacks, but these studies placed stricter requirements than conventional methods like `BadNets' in image classification. This is because the art necessitates modifications to the diffusion training and sampling procedures. Unlike the prior work, we investigate whether BadNets-like data poisoning methods can directly degrade the generation by DMs. In other words, if only the training dataset is contaminated (withou"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.02373","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.02373/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:32:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ul0xLmso1AeMgO81QYzTQLTsthbCZoGb5On6NkVGrE8nZ3qKWTik2gUk4Beij7LIZ3MDY23xRtPqfb/GAAOVBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T16:33:49.409932Z"},"content_sha256":"bd10babd74e7c45fa197ecc446a4005384add929070877e72e3039649240b063","schema_version":"1.0","event_id":"sha256:bd10babd74e7c45fa197ecc446a4005384add929070877e72e3039649240b063"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/34QDCFTSFZILBJSECEBFVC5TMD/bundle.json","state_url":"https://pith.science/pith/34QDCFTSFZILBJSECEBFVC5TMD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/34QDCFTSFZILBJSECEBFVC5TMD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T16:33:49Z","links":{"resolver":"https://pith.science/pith/34QDCFTSFZILBJSECEBFVC5TMD","bundle":"https://pith.science/pith/34QDCFTSFZILBJSECEBFVC5TMD/bundle.json","state":"https://pith.science/pith/34QDCFTSFZILBJSECEBFVC5TMD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/34QDCFTSFZILBJSECEBFVC5TMD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:34QDCFTSFZILBJSECEBFVC5TMD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"16694908af3706fb67e314274b975a5c3626e7b366e4948a042e729c8c041190","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-11-04T11:00:31Z","title_canon_sha256":"1c3f37874fdf4c28f5a7f8696af0d9d127ea115326edec25f32b10d1a5f7aeae"},"schema_version":"1.0","source":{"id":"2311.02373","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.02373","created_at":"2026-07-05T08:32:09Z"},{"alias_kind":"arxiv_version","alias_value":"2311.02373v2","created_at":"2026-07-05T08:32:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.02373","created_at":"2026-07-05T08:32:09Z"},{"alias_kind":"pith_short_12","alias_value":"34QDCFTSFZIL","created_at":"2026-07-05T08:32:09Z"},{"alias_kind":"pith_short_16","alias_value":"34QDCFTSFZILBJSE","created_at":"2026-07-05T08:32:09Z"},{"alias_kind":"pith_short_8","alias_value":"34QDCFTS","created_at":"2026-07-05T08:32:09Z"}],"graph_snapshots":[{"event_id":"sha256:bd10babd74e7c45fa197ecc446a4005384add929070877e72e3039649240b063","target":"graph","created_at":"2026-07-05T08:32:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.02373/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While state-of-the-art diffusion models (DMs) excel in image generation, concerns regarding their security persist. Earlier research highlighted DMs' vulnerability to data poisoning attacks, but these studies placed stricter requirements than conventional methods like `BadNets' in image classification. This is because the art necessitates modifications to the diffusion training and sampling procedures. Unlike the prior work, we investigate whether BadNets-like data poisoning methods can directly degrade the generation by DMs. In other words, if only the training dataset is contaminated (withou","authors_text":"Bingquan Shen, Gaowen Liu, H. Vicky Zhao, Ramana Rao Kompella, Sijia Liu, Yuguang Yao, Zhuoshi Pan","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-11-04T11:00:31Z","title":"From Trojan Horses to Castle Walls: Unveiling Bilateral Data Poisoning Effects in Diffusion Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.02373","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2c15b5de206628b8686b499c1d41ce7e3b01a1e61707b1062ed1222ce5e27b23","target":"record","created_at":"2026-07-05T08:32:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"16694908af3706fb67e314274b975a5c3626e7b366e4948a042e729c8c041190","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-11-04T11:00:31Z","title_canon_sha256":"1c3f37874fdf4c28f5a7f8696af0d9d127ea115326edec25f32b10d1a5f7aeae"},"schema_version":"1.0","source":{"id":"2311.02373","kind":"arxiv","version":2}},"canonical_sha256":"df203116722e50b0a64411025a8bb360f0009aa45e9e7e3ed9d0adbdeccbcbac","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"df203116722e50b0a64411025a8bb360f0009aa45e9e7e3ed9d0adbdeccbcbac","first_computed_at":"2026-07-05T08:32:09.754921Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:32:09.754921Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"k4lkJ6bC34qz7Xd3xOrFT8zNqQftR7Q3xGeGKBPUIQpC/VKvb4BOxJxYjk3R+IWgjKD5B4LsloDK/b4e1JCYCw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:32:09.755510Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.02373","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2c15b5de206628b8686b499c1d41ce7e3b01a1e61707b1062ed1222ce5e27b23","sha256:bd10babd74e7c45fa197ecc446a4005384add929070877e72e3039649240b063"],"state_sha256":"8e5923b2fe782a2b37cce130812779520d21c53f416295b323fa351972999a0b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ozGRjIXRT3o+lW4cHyjN5HKWO+rk6jc5CuTvprdxVtYMMzNmxpHrOr7bf6D9g9bc5hSsi5DjDRt8wsJe3909AA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T16:33:49.414155Z","bundle_sha256":"f7686df2a4401d8015f943ddec3b83e32ae42540f548edb4835bb7a0e11aebd5"}}