{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:3Q6PEBPVZZLF6IWP7H7X2YGXN2","short_pith_number":"pith:3Q6PEBPV","canonical_record":{"source":{"id":"2407.08159","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-11T03:25:40Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"76539079ee4c9ae1b0db8c5177d82f312a1a9d35db3f80ef3d1bde589ab21af2","abstract_canon_sha256":"a3ae0c4ee821874349f45336c6dcc0b25d92c095251c6ccff4fd4469d1d97ecf"},"schema_version":"1.0"},"canonical_sha256":"dc3cf205f5ce565f22cff9ff7d60d76eaee3d749ed9722a52427b3ae0b688392","source":{"kind":"arxiv","id":"2407.08159","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.08159","created_at":"2026-07-05T10:58:17Z"},{"alias_kind":"arxiv_version","alias_value":"2407.08159v4","created_at":"2026-07-05T10:58:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.08159","created_at":"2026-07-05T10:58:17Z"},{"alias_kind":"pith_short_12","alias_value":"3Q6PEBPVZZLF","created_at":"2026-07-05T10:58:17Z"},{"alias_kind":"pith_short_16","alias_value":"3Q6PEBPVZZLF6IWP","created_at":"2026-07-05T10:58:17Z"},{"alias_kind":"pith_short_8","alias_value":"3Q6PEBPV","created_at":"2026-07-05T10:58:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:3Q6PEBPVZZLF6IWP7H7X2YGXN2","target":"record","payload":{"canonical_record":{"source":{"id":"2407.08159","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-11T03:25:40Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"76539079ee4c9ae1b0db8c5177d82f312a1a9d35db3f80ef3d1bde589ab21af2","abstract_canon_sha256":"a3ae0c4ee821874349f45336c6dcc0b25d92c095251c6ccff4fd4469d1d97ecf"},"schema_version":"1.0"},"canonical_sha256":"dc3cf205f5ce565f22cff9ff7d60d76eaee3d749ed9722a52427b3ae0b688392","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:58:17.086113Z","signature_b64":"DtYMltM7+o1Kek9xilTWs0fC1Ul+sGIynRV5pNauoeHbJ2JKvXMm1yZuNJ8cQjdBhyNs48U+6dR5+UQC4d1uDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dc3cf205f5ce565f22cff9ff7d60d76eaee3d749ed9722a52427b3ae0b688392","last_reissued_at":"2026-07-05T10:58:17.085505Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:58:17.085505Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.08159","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:58:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"s3g5InHjf4KMF2rgBjwYnuogJCnLqL44pbcz5rX61NgyFI9nSYkX5CiHPu3gPBUuVvowUKYW+xem6d65Ne+2CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T14:40:22.350734Z"},"content_sha256":"72083319367d57fd3806e342448ce38937183f60778e2e0b201d9906c90754b4","schema_version":"1.0","event_id":"sha256:72083319367d57fd3806e342448ce38937183f60778e2e0b201d9906c90754b4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:3Q6PEBPVZZLF6IWP7H7X2YGXN2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Model-agnostic clean-label backdoor mitigation in cybersecurity environments","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Alina Oprea, Giorgio Severi, John Holodnak, Kendra Kratkiewicz, Michael J. De Lucia, Rauf Izmailov, Simona Boboila","submitted_at":"2024-07-11T03:25:40Z","abstract_excerpt":"The training phase of machine learning models is a delicate step, especially in cybersecurity contexts. Recent research has surfaced a series of insidious training-time attacks that inject backdoors in models designed for security classification tasks without altering the training labels. With this work, we propose new techniques that leverage insights in cybersecurity threat models to effectively mitigate these clean-label poisoning attacks, while preserving the model utility. By performing density-based clustering on a carefully chosen feature subspace, and progressively isolating the suspic"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.08159","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.08159/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:58:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gIYJ5Q09/muapjewQ+P5bCg9phd3QwwXUI32SkHebybcGBTx/UUHoWSTi5BJNQuZwcRYgMjub6PE7ggMiLVqAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T14:40:22.351310Z"},"content_sha256":"a18edfdbb3bdc8a957daab3969863b737342104a513abbc706bcc41b762f059b","schema_version":"1.0","event_id":"sha256:a18edfdbb3bdc8a957daab3969863b737342104a513abbc706bcc41b762f059b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3Q6PEBPVZZLF6IWP7H7X2YGXN2/bundle.json","state_url":"https://pith.science/pith/3Q6PEBPVZZLF6IWP7H7X2YGXN2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3Q6PEBPVZZLF6IWP7H7X2YGXN2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T14:40:22Z","links":{"resolver":"https://pith.science/pith/3Q6PEBPVZZLF6IWP7H7X2YGXN2","bundle":"https://pith.science/pith/3Q6PEBPVZZLF6IWP7H7X2YGXN2/bundle.json","state":"https://pith.science/pith/3Q6PEBPVZZLF6IWP7H7X2YGXN2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3Q6PEBPVZZLF6IWP7H7X2YGXN2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:3Q6PEBPVZZLF6IWP7H7X2YGXN2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a3ae0c4ee821874349f45336c6dcc0b25d92c095251c6ccff4fd4469d1d97ecf","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-11T03:25:40Z","title_canon_sha256":"76539079ee4c9ae1b0db8c5177d82f312a1a9d35db3f80ef3d1bde589ab21af2"},"schema_version":"1.0","source":{"id":"2407.08159","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.08159","created_at":"2026-07-05T10:58:17Z"},{"alias_kind":"arxiv_version","alias_value":"2407.08159v4","created_at":"2026-07-05T10:58:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.08159","created_at":"2026-07-05T10:58:17Z"},{"alias_kind":"pith_short_12","alias_value":"3Q6PEBPVZZLF","created_at":"2026-07-05T10:58:17Z"},{"alias_kind":"pith_short_16","alias_value":"3Q6PEBPVZZLF6IWP","created_at":"2026-07-05T10:58:17Z"},{"alias_kind":"pith_short_8","alias_value":"3Q6PEBPV","created_at":"2026-07-05T10:58:17Z"}],"graph_snapshots":[{"event_id":"sha256:a18edfdbb3bdc8a957daab3969863b737342104a513abbc706bcc41b762f059b","target":"graph","created_at":"2026-07-05T10:58:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.08159/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The training phase of machine learning models is a delicate step, especially in cybersecurity contexts. Recent research has surfaced a series of insidious training-time attacks that inject backdoors in models designed for security classification tasks without altering the training labels. With this work, we propose new techniques that leverage insights in cybersecurity threat models to effectively mitigate these clean-label poisoning attacks, while preserving the model utility. By performing density-based clustering on a carefully chosen feature subspace, and progressively isolating the suspic","authors_text":"Alina Oprea, Giorgio Severi, John Holodnak, Kendra Kratkiewicz, Michael J. De Lucia, Rauf Izmailov, Simona Boboila","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-11T03:25:40Z","title":"Model-agnostic clean-label backdoor mitigation in cybersecurity environments"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.08159","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:72083319367d57fd3806e342448ce38937183f60778e2e0b201d9906c90754b4","target":"record","created_at":"2026-07-05T10:58:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a3ae0c4ee821874349f45336c6dcc0b25d92c095251c6ccff4fd4469d1d97ecf","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-11T03:25:40Z","title_canon_sha256":"76539079ee4c9ae1b0db8c5177d82f312a1a9d35db3f80ef3d1bde589ab21af2"},"schema_version":"1.0","source":{"id":"2407.08159","kind":"arxiv","version":4}},"canonical_sha256":"dc3cf205f5ce565f22cff9ff7d60d76eaee3d749ed9722a52427b3ae0b688392","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dc3cf205f5ce565f22cff9ff7d60d76eaee3d749ed9722a52427b3ae0b688392","first_computed_at":"2026-07-05T10:58:17.085505Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:58:17.085505Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"DtYMltM7+o1Kek9xilTWs0fC1Ul+sGIynRV5pNauoeHbJ2JKvXMm1yZuNJ8cQjdBhyNs48U+6dR5+UQC4d1uDg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:58:17.086113Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.08159","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:72083319367d57fd3806e342448ce38937183f60778e2e0b201d9906c90754b4","sha256:a18edfdbb3bdc8a957daab3969863b737342104a513abbc706bcc41b762f059b"],"state_sha256":"fdbf8d8afc43264c860f42883a6b750f0fd86637212c8e92165bcd6bd1b11551"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pUYhqIaYPFnpQrswtAHATlsBncyRbiTXv2w5NL9dneXnOc9If6Nt0D/rOhBFGDpAXIQONSPP+md0/FweL2DFBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T14:40:22.355293Z","bundle_sha256":"010aff38216a0c171475d19952ba307201d71e21f3314b07005abcff46d827de"}}