{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:3TL7NEOETYZEFKTGFKMQZ5FLED","short_pith_number":"pith:3TL7NEOE","canonical_record":{"source":{"id":"2206.10673","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2022-06-21T18:52:25Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"e3177a8fd5956eedd15630f37b3c127a1a93709a68b8f49b5d49e662796fd642","abstract_canon_sha256":"c9585721664a4ab05516dc87d4074046f58d314fda4b9ec5c533a859feee90e4"},"schema_version":"1.0"},"canonical_sha256":"dcd7f691c49e3242aa662a990cf4ab20e16ed003dbe2eb554025728148e314dc","source":{"kind":"arxiv","id":"2206.10673","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2206.10673","created_at":"2026-07-05T04:33:54Z"},{"alias_kind":"arxiv_version","alias_value":"2206.10673v1","created_at":"2026-07-05T04:33:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2206.10673","created_at":"2026-07-05T04:33:54Z"},{"alias_kind":"pith_short_12","alias_value":"3TL7NEOETYZE","created_at":"2026-07-05T04:33:54Z"},{"alias_kind":"pith_short_16","alias_value":"3TL7NEOETYZEFKTG","created_at":"2026-07-05T04:33:54Z"},{"alias_kind":"pith_short_8","alias_value":"3TL7NEOE","created_at":"2026-07-05T04:33:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:3TL7NEOETYZEFKTGFKMQZ5FLED","target":"record","payload":{"canonical_record":{"source":{"id":"2206.10673","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2022-06-21T18:52:25Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"e3177a8fd5956eedd15630f37b3c127a1a93709a68b8f49b5d49e662796fd642","abstract_canon_sha256":"c9585721664a4ab05516dc87d4074046f58d314fda4b9ec5c533a859feee90e4"},"schema_version":"1.0"},"canonical_sha256":"dcd7f691c49e3242aa662a990cf4ab20e16ed003dbe2eb554025728148e314dc","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:33:54.347397Z","signature_b64":"Jhau/OhRBXxNjQLe0v+8ZGR8gDWsqJ2qsg8j1xLr/GdPO1CfJxW5b0qaFoxHSmo/LQKd9GfCxJK3d0V3Fck0Ag==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dcd7f691c49e3242aa662a990cf4ab20e16ed003dbe2eb554025728148e314dc","last_reissued_at":"2026-07-05T04:33:54.346975Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:33:54.346975Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2206.10673","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:33:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aZeH10ygBSpVhmW62H+Uhc9uJN3LCY335+1UtjfpHOvu5K16nnslfOeLnzfvhogGCho7kG5mQ6Q7ws0mE/KVAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T16:02:57.226445Z"},"content_sha256":"c2c461ecfb9db64f8293047a8b0b13a90a9a78be32d7d58824c12140d831bac2","schema_version":"1.0","event_id":"sha256:c2c461ecfb9db64f8293047a8b0b13a90a9a78be32d7d58824c12140d831bac2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:3TL7NEOETYZEFKTGFKMQZ5FLED","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Natural Backdoor Datasets","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CV","authors_text":"Arjun Nitin Bhagoji, Ben Y. Zhao, Emilio Andere, Emily Wenger, Haitao Zheng, Josephine Passananti, Roma Bhattacharjee","submitted_at":"2022-06-21T18:52:25Z","abstract_excerpt":"Extensive literature on backdoor poison attacks has studied attacks and defenses for backdoors using \"digital trigger patterns.\" In contrast, \"physical backdoors\" use physical objects as triggers, have only recently been identified, and are qualitatively different enough to resist all defenses targeting digital trigger backdoors. Research on physical backdoors is limited by access to large datasets containing real images of physical objects co-located with targets of classification. Building these datasets is time- and labor-intensive. This works seeks to address the challenge of accessibility"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2206.10673","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2206.10673/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:33:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pKgti/n8bWUGavgc7TX6RnxOpVy64R1XQZikoj36GGNvoHlea2xE0BK5CN5+sEbJmYoG0MRQk0ILcmqH3Ti/DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T16:02:57.226979Z"},"content_sha256":"4f9dceb565017ccd16d5b8004b4a7c78606e4f081d840e8da4f0270a9b4896bc","schema_version":"1.0","event_id":"sha256:4f9dceb565017ccd16d5b8004b4a7c78606e4f081d840e8da4f0270a9b4896bc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3TL7NEOETYZEFKTGFKMQZ5FLED/bundle.json","state_url":"https://pith.science/pith/3TL7NEOETYZEFKTGFKMQZ5FLED/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3TL7NEOETYZEFKTGFKMQZ5FLED/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T16:02:57Z","links":{"resolver":"https://pith.science/pith/3TL7NEOETYZEFKTGFKMQZ5FLED","bundle":"https://pith.science/pith/3TL7NEOETYZEFKTGFKMQZ5FLED/bundle.json","state":"https://pith.science/pith/3TL7NEOETYZEFKTGFKMQZ5FLED/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3TL7NEOETYZEFKTGFKMQZ5FLED/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:3TL7NEOETYZEFKTGFKMQZ5FLED","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c9585721664a4ab05516dc87d4074046f58d314fda4b9ec5c533a859feee90e4","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2022-06-21T18:52:25Z","title_canon_sha256":"e3177a8fd5956eedd15630f37b3c127a1a93709a68b8f49b5d49e662796fd642"},"schema_version":"1.0","source":{"id":"2206.10673","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2206.10673","created_at":"2026-07-05T04:33:54Z"},{"alias_kind":"arxiv_version","alias_value":"2206.10673v1","created_at":"2026-07-05T04:33:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2206.10673","created_at":"2026-07-05T04:33:54Z"},{"alias_kind":"pith_short_12","alias_value":"3TL7NEOETYZE","created_at":"2026-07-05T04:33:54Z"},{"alias_kind":"pith_short_16","alias_value":"3TL7NEOETYZEFKTG","created_at":"2026-07-05T04:33:54Z"},{"alias_kind":"pith_short_8","alias_value":"3TL7NEOE","created_at":"2026-07-05T04:33:54Z"}],"graph_snapshots":[{"event_id":"sha256:4f9dceb565017ccd16d5b8004b4a7c78606e4f081d840e8da4f0270a9b4896bc","target":"graph","created_at":"2026-07-05T04:33:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2206.10673/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Extensive literature on backdoor poison attacks has studied attacks and defenses for backdoors using \"digital trigger patterns.\" In contrast, \"physical backdoors\" use physical objects as triggers, have only recently been identified, and are qualitatively different enough to resist all defenses targeting digital trigger backdoors. Research on physical backdoors is limited by access to large datasets containing real images of physical objects co-located with targets of classification. Building these datasets is time- and labor-intensive. This works seeks to address the challenge of accessibility","authors_text":"Arjun Nitin Bhagoji, Ben Y. Zhao, Emilio Andere, Emily Wenger, Haitao Zheng, Josephine Passananti, Roma Bhattacharjee","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2022-06-21T18:52:25Z","title":"Natural Backdoor Datasets"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2206.10673","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c2c461ecfb9db64f8293047a8b0b13a90a9a78be32d7d58824c12140d831bac2","target":"record","created_at":"2026-07-05T04:33:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c9585721664a4ab05516dc87d4074046f58d314fda4b9ec5c533a859feee90e4","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2022-06-21T18:52:25Z","title_canon_sha256":"e3177a8fd5956eedd15630f37b3c127a1a93709a68b8f49b5d49e662796fd642"},"schema_version":"1.0","source":{"id":"2206.10673","kind":"arxiv","version":1}},"canonical_sha256":"dcd7f691c49e3242aa662a990cf4ab20e16ed003dbe2eb554025728148e314dc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dcd7f691c49e3242aa662a990cf4ab20e16ed003dbe2eb554025728148e314dc","first_computed_at":"2026-07-05T04:33:54.346975Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:33:54.346975Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Jhau/OhRBXxNjQLe0v+8ZGR8gDWsqJ2qsg8j1xLr/GdPO1CfJxW5b0qaFoxHSmo/LQKd9GfCxJK3d0V3Fck0Ag==","signature_status":"signed_v1","signed_at":"2026-07-05T04:33:54.347397Z","signed_message":"canonical_sha256_bytes"},"source_id":"2206.10673","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c2c461ecfb9db64f8293047a8b0b13a90a9a78be32d7d58824c12140d831bac2","sha256:4f9dceb565017ccd16d5b8004b4a7c78606e4f081d840e8da4f0270a9b4896bc"],"state_sha256":"155854033244d2509892daeb92b87ab465122fb973f1243c0f02729d3f86a4ae"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BtZdINyXD4fQudeMBh53A9ExhA5+jDmjkApq3u1h0ebGSV9Jmy6hToRcNM+dwbOmUeDtSmRPsDRNXc/G3tOMAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T16:02:57.232222Z","bundle_sha256":"c800acaa133f53acc7946a14ca21b22645d6df7107c5e6a7c7bcec308fc7e6d9"}}