{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:432JTDM6PKLVD47VCTKSPFLCOP","short_pith_number":"pith:432JTDM6","canonical_record":{"source":{"id":"2109.01300","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-09-03T03:59:10Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"fdc197e4a316704d4ed7f951409576235fcdbd7f4a322152e857f38419d6afed","abstract_canon_sha256":"d5de12f3b9e9c8b3f04c22740f88c5394e9065924ff5473b6234593ecaebfa32"},"schema_version":"1.0"},"canonical_sha256":"e6f4998d9e7a9751f3f514d527956273f7c2cb18ed0b509e64b541f6a07bca01","source":{"kind":"arxiv","id":"2109.01300","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.01300","created_at":"2026-07-05T04:01:31Z"},{"alias_kind":"arxiv_version","alias_value":"2109.01300v2","created_at":"2026-07-05T04:01:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.01300","created_at":"2026-07-05T04:01:31Z"},{"alias_kind":"pith_short_12","alias_value":"432JTDM6PKLV","created_at":"2026-07-05T04:01:31Z"},{"alias_kind":"pith_short_16","alias_value":"432JTDM6PKLVD47V","created_at":"2026-07-05T04:01:31Z"},{"alias_kind":"pith_short_8","alias_value":"432JTDM6","created_at":"2026-07-05T04:01:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:432JTDM6PKLVD47VCTKSPFLCOP","target":"record","payload":{"canonical_record":{"source":{"id":"2109.01300","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-09-03T03:59:10Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"fdc197e4a316704d4ed7f951409576235fcdbd7f4a322152e857f38419d6afed","abstract_canon_sha256":"d5de12f3b9e9c8b3f04c22740f88c5394e9065924ff5473b6234593ecaebfa32"},"schema_version":"1.0"},"canonical_sha256":"e6f4998d9e7a9751f3f514d527956273f7c2cb18ed0b509e64b541f6a07bca01","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:01:31.737523Z","signature_b64":"dti0U+Mf09cIQLP//4SpL5J4eMKOoIYH24HYf7uyU5msGhCP+ag1D51QaPsyxPdLKzfZNWWmFgBj+8oVIOHCCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e6f4998d9e7a9751f3f514d527956273f7c2cb18ed0b509e64b541f6a07bca01","last_reissued_at":"2026-07-05T04:01:31.737071Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:01:31.737071Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2109.01300","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:01:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lde0gSXlCBwWh4nvhhk51g3PsWeEUWEprEciZOYgxN5kqaLMmsoMXI5Tr81QZa6yKvevlApCF7b8ZsUw2nFCCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T18:25:42.890870Z"},"content_sha256":"23bf702048c6160d3e210676bade866732d4ba691d7d6f3a4a42575517654e63","schema_version":"1.0","event_id":"sha256:23bf702048c6160d3e210676bade866732d4ba691d7d6f3a4a42575517654e63"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:432JTDM6PKLVD47VCTKSPFLCOP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"How to Inject Backdoors with Better Consistency: Logit Anchoring on Clean Data","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Lichao Sun, Lingjuan Lyu, Weiqiang Wang, Xu Sun, Zhiyuan Zhang","submitted_at":"2021-09-03T03:59:10Z","abstract_excerpt":"Since training a large-scale backdoored model from scratch requires a large training dataset, several recent attacks have considered to inject backdoors into a trained clean model without altering model behaviors on the clean data. Previous work finds that backdoors can be injected into a trained clean model with Adversarial Weight Perturbation (AWP). Here AWPs refers to the variations of parameters that are small in backdoor learning. In this work, we observe an interesting phenomenon that the variations of parameters are always AWPs when tuning the trained clean model to inject backdoors. We"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.01300","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2109.01300/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:01:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7vjQQRWAn/W4xbabiY+njcXpSLQiDDPtXQcJ/aw88dYtdDWOVIVzo8w4NxgUdckvmiGZ4C7sSTjA062Mcw/kDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T18:25:42.891382Z"},"content_sha256":"5e9982f9ebc0c6d9fc42bda4c2feb79c428397ebc546886aab1b969444490817","schema_version":"1.0","event_id":"sha256:5e9982f9ebc0c6d9fc42bda4c2feb79c428397ebc546886aab1b969444490817"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/432JTDM6PKLVD47VCTKSPFLCOP/bundle.json","state_url":"https://pith.science/pith/432JTDM6PKLVD47VCTKSPFLCOP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/432JTDM6PKLVD47VCTKSPFLCOP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T18:25:42Z","links":{"resolver":"https://pith.science/pith/432JTDM6PKLVD47VCTKSPFLCOP","bundle":"https://pith.science/pith/432JTDM6PKLVD47VCTKSPFLCOP/bundle.json","state":"https://pith.science/pith/432JTDM6PKLVD47VCTKSPFLCOP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/432JTDM6PKLVD47VCTKSPFLCOP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:432JTDM6PKLVD47VCTKSPFLCOP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d5de12f3b9e9c8b3f04c22740f88c5394e9065924ff5473b6234593ecaebfa32","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-09-03T03:59:10Z","title_canon_sha256":"fdc197e4a316704d4ed7f951409576235fcdbd7f4a322152e857f38419d6afed"},"schema_version":"1.0","source":{"id":"2109.01300","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.01300","created_at":"2026-07-05T04:01:31Z"},{"alias_kind":"arxiv_version","alias_value":"2109.01300v2","created_at":"2026-07-05T04:01:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.01300","created_at":"2026-07-05T04:01:31Z"},{"alias_kind":"pith_short_12","alias_value":"432JTDM6PKLV","created_at":"2026-07-05T04:01:31Z"},{"alias_kind":"pith_short_16","alias_value":"432JTDM6PKLVD47V","created_at":"2026-07-05T04:01:31Z"},{"alias_kind":"pith_short_8","alias_value":"432JTDM6","created_at":"2026-07-05T04:01:31Z"}],"graph_snapshots":[{"event_id":"sha256:5e9982f9ebc0c6d9fc42bda4c2feb79c428397ebc546886aab1b969444490817","target":"graph","created_at":"2026-07-05T04:01:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2109.01300/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Since training a large-scale backdoored model from scratch requires a large training dataset, several recent attacks have considered to inject backdoors into a trained clean model without altering model behaviors on the clean data. Previous work finds that backdoors can be injected into a trained clean model with Adversarial Weight Perturbation (AWP). Here AWPs refers to the variations of parameters that are small in backdoor learning. In this work, we observe an interesting phenomenon that the variations of parameters are always AWPs when tuning the trained clean model to inject backdoors. We","authors_text":"Lichao Sun, Lingjuan Lyu, Weiqiang Wang, Xu Sun, Zhiyuan Zhang","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-09-03T03:59:10Z","title":"How to Inject Backdoors with Better Consistency: Logit Anchoring on Clean Data"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.01300","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:23bf702048c6160d3e210676bade866732d4ba691d7d6f3a4a42575517654e63","target":"record","created_at":"2026-07-05T04:01:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d5de12f3b9e9c8b3f04c22740f88c5394e9065924ff5473b6234593ecaebfa32","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-09-03T03:59:10Z","title_canon_sha256":"fdc197e4a316704d4ed7f951409576235fcdbd7f4a322152e857f38419d6afed"},"schema_version":"1.0","source":{"id":"2109.01300","kind":"arxiv","version":2}},"canonical_sha256":"e6f4998d9e7a9751f3f514d527956273f7c2cb18ed0b509e64b541f6a07bca01","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e6f4998d9e7a9751f3f514d527956273f7c2cb18ed0b509e64b541f6a07bca01","first_computed_at":"2026-07-05T04:01:31.737071Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:01:31.737071Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"dti0U+Mf09cIQLP//4SpL5J4eMKOoIYH24HYf7uyU5msGhCP+ag1D51QaPsyxPdLKzfZNWWmFgBj+8oVIOHCCg==","signature_status":"signed_v1","signed_at":"2026-07-05T04:01:31.737523Z","signed_message":"canonical_sha256_bytes"},"source_id":"2109.01300","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:23bf702048c6160d3e210676bade866732d4ba691d7d6f3a4a42575517654e63","sha256:5e9982f9ebc0c6d9fc42bda4c2feb79c428397ebc546886aab1b969444490817"],"state_sha256":"e496e38cd40d75f4b012f1e74e6e2f47c24300b8a4a7330051df2c3cdd38ffd8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M7cvEzx+Gnvsqt8nzFHYj6AK2SrJBrrHo82V9fGC1QOMv5JPlTZJknL53p+E5OF8aWsH1uox9isHABaas7mjAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T18:25:42.896064Z","bundle_sha256":"65cd0133b07db3aa09282e1fe2c02ce1c3bd0d9c919fe677773816cdaaac4d9c"}}