{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:3HOM2Y5VDSJLNRKKXJQYKPV66Q","short_pith_number":"pith:3HOM2Y5V","canonical_record":{"source":{"id":"2504.18563","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-21T04:00:19Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"2f6d59b388232894ece76dc52f44b9c346cd32763a83a83297f731c0626a7c39","abstract_canon_sha256":"49780be37cc972201706902e40a9375ac5008f01225dd8176766fe6eb3a8d72f"},"schema_version":"1.0"},"canonical_sha256":"d9dccd63b51c92b6c54aba61853ebef41ec3eb50fe6b117b4e8ce74180200a3d","source":{"kind":"arxiv","id":"2504.18563","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.18563","created_at":"2026-07-05T10:54:17Z"},{"alias_kind":"arxiv_version","alias_value":"2504.18563v1","created_at":"2026-07-05T10:54:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.18563","created_at":"2026-07-05T10:54:17Z"},{"alias_kind":"pith_short_12","alias_value":"3HOM2Y5VDSJL","created_at":"2026-07-05T10:54:17Z"},{"alias_kind":"pith_short_16","alias_value":"3HOM2Y5VDSJLNRKK","created_at":"2026-07-05T10:54:17Z"},{"alias_kind":"pith_short_8","alias_value":"3HOM2Y5V","created_at":"2026-07-05T10:54:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:3HOM2Y5VDSJLNRKKXJQYKPV66Q","target":"record","payload":{"canonical_record":{"source":{"id":"2504.18563","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-21T04:00:19Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"2f6d59b388232894ece76dc52f44b9c346cd32763a83a83297f731c0626a7c39","abstract_canon_sha256":"49780be37cc972201706902e40a9375ac5008f01225dd8176766fe6eb3a8d72f"},"schema_version":"1.0"},"canonical_sha256":"d9dccd63b51c92b6c54aba61853ebef41ec3eb50fe6b117b4e8ce74180200a3d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:54:17.229556Z","signature_b64":"hMKNZHZ42jUeGFPd3Ye2uM+dXy9KHJsKPIp+ZumJ409PLjsTic+tm67E1KafL56+b4ZKQbA9hQ1f4jZmbhYNAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d9dccd63b51c92b6c54aba61853ebef41ec3eb50fe6b117b4e8ce74180200a3d","last_reissued_at":"2026-07-05T10:54:17.228968Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:54:17.228968Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.18563","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:54:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ju2Y0yd9OYeIyz8Dm9oYgEs7yA+lZBFp4M0+r1e9C9SEpqJ1HORx5zo3BSrhiwxtm7HXp+XpYLdkx5KjdKnHDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T23:09:37.432478Z"},"content_sha256":"8608b3513751ff610b1b814e811d448e6677b9a89142677bf345ed8ea340e564","schema_version":"1.0","event_id":"sha256:8608b3513751ff610b1b814e811d448e6677b9a89142677bf345ed8ea340e564"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:3HOM2Y5VDSJLNRKKXJQYKPV66Q","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Backdoor Defense in Diffusion Models via Spatial Attention Unlearning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CV"],"primary_cat":"cs.CR","authors_text":"Abha Jha, Ashwath Vaithinathan Aravindan, Atharva Sandeep Bhide, Duygu Nur Yaldiz, Matthew Salaway","submitted_at":"2025-04-21T04:00:19Z","abstract_excerpt":"Text-to-image diffusion models are increasingly vulnerable to backdoor attacks, where malicious modifications to the training data cause the model to generate unintended outputs when specific triggers are present. While classification models have seen extensive development of defense mechanisms, generative models remain largely unprotected due to their high-dimensional output space, which complicates the detection and mitigation of subtle perturbations. Defense strategies for diffusion models, in particular, remain under-explored. In this work, we propose Spatial Attention Unlearning (SAU), a "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.18563","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.18563/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:54:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nmnou/xji3NVHmhC2IRzmPbpR0ERsZItebmHStYDmtAQfh5wuqRO+rDqDk1Qj1TgUudsWMDvbuGqvHKPhb5fAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T23:09:37.432856Z"},"content_sha256":"a61979b11a5521a4cd43d7b477826fcb1757e407ac06144a3c7e5b69e706d607","schema_version":"1.0","event_id":"sha256:a61979b11a5521a4cd43d7b477826fcb1757e407ac06144a3c7e5b69e706d607"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3HOM2Y5VDSJLNRKKXJQYKPV66Q/bundle.json","state_url":"https://pith.science/pith/3HOM2Y5VDSJLNRKKXJQYKPV66Q/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3HOM2Y5VDSJLNRKKXJQYKPV66Q/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T23:09:37Z","links":{"resolver":"https://pith.science/pith/3HOM2Y5VDSJLNRKKXJQYKPV66Q","bundle":"https://pith.science/pith/3HOM2Y5VDSJLNRKKXJQYKPV66Q/bundle.json","state":"https://pith.science/pith/3HOM2Y5VDSJLNRKKXJQYKPV66Q/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3HOM2Y5VDSJLNRKKXJQYKPV66Q/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:3HOM2Y5VDSJLNRKKXJQYKPV66Q","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"49780be37cc972201706902e40a9375ac5008f01225dd8176766fe6eb3a8d72f","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-21T04:00:19Z","title_canon_sha256":"2f6d59b388232894ece76dc52f44b9c346cd32763a83a83297f731c0626a7c39"},"schema_version":"1.0","source":{"id":"2504.18563","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.18563","created_at":"2026-07-05T10:54:17Z"},{"alias_kind":"arxiv_version","alias_value":"2504.18563v1","created_at":"2026-07-05T10:54:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.18563","created_at":"2026-07-05T10:54:17Z"},{"alias_kind":"pith_short_12","alias_value":"3HOM2Y5VDSJL","created_at":"2026-07-05T10:54:17Z"},{"alias_kind":"pith_short_16","alias_value":"3HOM2Y5VDSJLNRKK","created_at":"2026-07-05T10:54:17Z"},{"alias_kind":"pith_short_8","alias_value":"3HOM2Y5V","created_at":"2026-07-05T10:54:17Z"}],"graph_snapshots":[{"event_id":"sha256:a61979b11a5521a4cd43d7b477826fcb1757e407ac06144a3c7e5b69e706d607","target":"graph","created_at":"2026-07-05T10:54:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.18563/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Text-to-image diffusion models are increasingly vulnerable to backdoor attacks, where malicious modifications to the training data cause the model to generate unintended outputs when specific triggers are present. While classification models have seen extensive development of defense mechanisms, generative models remain largely unprotected due to their high-dimensional output space, which complicates the detection and mitigation of subtle perturbations. Defense strategies for diffusion models, in particular, remain under-explored. In this work, we propose Spatial Attention Unlearning (SAU), a ","authors_text":"Abha Jha, Ashwath Vaithinathan Aravindan, Atharva Sandeep Bhide, Duygu Nur Yaldiz, Matthew Salaway","cross_cats":["cs.AI","cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-21T04:00:19Z","title":"Backdoor Defense in Diffusion Models via Spatial Attention Unlearning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.18563","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8608b3513751ff610b1b814e811d448e6677b9a89142677bf345ed8ea340e564","target":"record","created_at":"2026-07-05T10:54:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"49780be37cc972201706902e40a9375ac5008f01225dd8176766fe6eb3a8d72f","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-21T04:00:19Z","title_canon_sha256":"2f6d59b388232894ece76dc52f44b9c346cd32763a83a83297f731c0626a7c39"},"schema_version":"1.0","source":{"id":"2504.18563","kind":"arxiv","version":1}},"canonical_sha256":"d9dccd63b51c92b6c54aba61853ebef41ec3eb50fe6b117b4e8ce74180200a3d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d9dccd63b51c92b6c54aba61853ebef41ec3eb50fe6b117b4e8ce74180200a3d","first_computed_at":"2026-07-05T10:54:17.228968Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:54:17.228968Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"hMKNZHZ42jUeGFPd3Ye2uM+dXy9KHJsKPIp+ZumJ409PLjsTic+tm67E1KafL56+b4ZKQbA9hQ1f4jZmbhYNAA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:54:17.229556Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.18563","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8608b3513751ff610b1b814e811d448e6677b9a89142677bf345ed8ea340e564","sha256:a61979b11a5521a4cd43d7b477826fcb1757e407ac06144a3c7e5b69e706d607"],"state_sha256":"21beff3fe76419aff13076b2a61e995f80bd1eb3506de6bb9fec712e3f069a97"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Gpq9rmzyIS8lUXzZNEmKL+ER5KU7w8hPZzmruF+McSCESxlTvNJwB/NIgCt8ndQeYzn4UbM9/PT8M8T6OWtGAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T23:09:37.435074Z","bundle_sha256":"0448c803f7a65af75eb99c07970a7bd39dadbf426e5cfdf69a37dd1f3fd0f0a9"}}