{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:4N4G3S6SKVFCZTMXG27SRQMNBO","short_pith_number":"pith:4N4G3S6S","canonical_record":{"source":{"id":"2306.08313","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-14T07:33:04Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"82fdc551a40d6451cae0d9feba596928651b6f85978ead8ebd9977fec68fc223","abstract_canon_sha256":"16250329f26da6b22b6ae44666573630a5e04fc9751463b06384605d23ee2477"},"schema_version":"1.0"},"canonical_sha256":"e3786dcbd2554a2ccd9736bf28c18d0b9dd2774c553fa9569c4fcf1b3f4c8615","source":{"kind":"arxiv","id":"2306.08313","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.08313","created_at":"2026-07-05T09:12:55Z"},{"alias_kind":"arxiv_version","alias_value":"2306.08313v3","created_at":"2026-07-05T09:12:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.08313","created_at":"2026-07-05T09:12:55Z"},{"alias_kind":"pith_short_12","alias_value":"4N4G3S6SKVFC","created_at":"2026-07-05T09:12:55Z"},{"alias_kind":"pith_short_16","alias_value":"4N4G3S6SKVFCZTMX","created_at":"2026-07-05T09:12:55Z"},{"alias_kind":"pith_short_8","alias_value":"4N4G3S6S","created_at":"2026-07-05T09:12:55Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:4N4G3S6SKVFCZTMXG27SRQMNBO","target":"record","payload":{"canonical_record":{"source":{"id":"2306.08313","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-14T07:33:04Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"82fdc551a40d6451cae0d9feba596928651b6f85978ead8ebd9977fec68fc223","abstract_canon_sha256":"16250329f26da6b22b6ae44666573630a5e04fc9751463b06384605d23ee2477"},"schema_version":"1.0"},"canonical_sha256":"e3786dcbd2554a2ccd9736bf28c18d0b9dd2774c553fa9569c4fcf1b3f4c8615","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:12:55.232501Z","signature_b64":"B35a1cR0Z0d6iyZ11SeGdoXK+Ge+8S7atqlD0IMgeRB87y5/cO/tjxAGMyJsstV0/bK1UE5r9BNM+HZ+RfpfCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e3786dcbd2554a2ccd9736bf28c18d0b9dd2774c553fa9569c4fcf1b3f4c8615","last_reissued_at":"2026-07-05T09:12:55.231898Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:12:55.231898Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.08313","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:12:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CwGRXiFXektwa2F2iWtBpE7wM5KrtaD7NRMvKNFytXC6rdtrnp32Cav24RxdNy4GKBQwJDanlwOr+rsGlaeUDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T19:32:10.482812Z"},"content_sha256":"e53a89d4ce38a5f5074608a38e714a55bbb6adff63f0d15fb61ccfb7000c7ec0","schema_version":"1.0","event_id":"sha256:e53a89d4ce38a5f5074608a38e714a55bbb6adff63f0d15fb61ccfb7000c7ec0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:4N4G3S6SKVFCZTMXG27SRQMNBO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Proxy Attack-Free Strategy for Practically Improving the Poisoning Efficiency in Backdoor Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.CR","authors_text":"Beihao Xia, Bin Li, Hong Sun, Pengfei Xia, Qinglang Guo, Wei Zhang, Xue Rui, Zhangjie Fu, Ziqiang Li","submitted_at":"2023-06-14T07:33:04Z","abstract_excerpt":"Poisoning efficiency is crucial in poisoning-based backdoor attacks, as attackers aim to minimize the number of poisoning samples while maximizing attack efficacy. Recent studies have sought to enhance poisoning efficiency by selecting effective samples. However, these studies typically rely on a proxy backdoor injection task to identify an efficient set of poisoning samples. This proxy attack-based approach can lead to performance degradation if the proxy attack settings differ from those of the actual victims, due to the shortcut nature of backdoor learning. Furthermore, proxy attack-based m"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.08313","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.08313/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:12:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"leDE9SQwLt/Zd7vrV3ZOwrOzelfDpffO3EhS4Q+JQZrmAq4jzbyuxaKP1ViVGgUSeH+05ZjE1L0dmR4TzQn1Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T19:32:10.483394Z"},"content_sha256":"9bb8b8cbfbc3f3749854bae7a8c0ad486bb11cf6c78f68ce9bbb3a072ae6a8cb","schema_version":"1.0","event_id":"sha256:9bb8b8cbfbc3f3749854bae7a8c0ad486bb11cf6c78f68ce9bbb3a072ae6a8cb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4N4G3S6SKVFCZTMXG27SRQMNBO/bundle.json","state_url":"https://pith.science/pith/4N4G3S6SKVFCZTMXG27SRQMNBO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4N4G3S6SKVFCZTMXG27SRQMNBO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T19:32:10Z","links":{"resolver":"https://pith.science/pith/4N4G3S6SKVFCZTMXG27SRQMNBO","bundle":"https://pith.science/pith/4N4G3S6SKVFCZTMXG27SRQMNBO/bundle.json","state":"https://pith.science/pith/4N4G3S6SKVFCZTMXG27SRQMNBO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4N4G3S6SKVFCZTMXG27SRQMNBO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:4N4G3S6SKVFCZTMXG27SRQMNBO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"16250329f26da6b22b6ae44666573630a5e04fc9751463b06384605d23ee2477","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-14T07:33:04Z","title_canon_sha256":"82fdc551a40d6451cae0d9feba596928651b6f85978ead8ebd9977fec68fc223"},"schema_version":"1.0","source":{"id":"2306.08313","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.08313","created_at":"2026-07-05T09:12:55Z"},{"alias_kind":"arxiv_version","alias_value":"2306.08313v3","created_at":"2026-07-05T09:12:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.08313","created_at":"2026-07-05T09:12:55Z"},{"alias_kind":"pith_short_12","alias_value":"4N4G3S6SKVFC","created_at":"2026-07-05T09:12:55Z"},{"alias_kind":"pith_short_16","alias_value":"4N4G3S6SKVFCZTMX","created_at":"2026-07-05T09:12:55Z"},{"alias_kind":"pith_short_8","alias_value":"4N4G3S6S","created_at":"2026-07-05T09:12:55Z"}],"graph_snapshots":[{"event_id":"sha256:9bb8b8cbfbc3f3749854bae7a8c0ad486bb11cf6c78f68ce9bbb3a072ae6a8cb","target":"graph","created_at":"2026-07-05T09:12:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.08313/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Poisoning efficiency is crucial in poisoning-based backdoor attacks, as attackers aim to minimize the number of poisoning samples while maximizing attack efficacy. Recent studies have sought to enhance poisoning efficiency by selecting effective samples. However, these studies typically rely on a proxy backdoor injection task to identify an efficient set of poisoning samples. This proxy attack-based approach can lead to performance degradation if the proxy attack settings differ from those of the actual victims, due to the shortcut nature of backdoor learning. Furthermore, proxy attack-based m","authors_text":"Beihao Xia, Bin Li, Hong Sun, Pengfei Xia, Qinglang Guo, Wei Zhang, Xue Rui, Zhangjie Fu, Ziqiang Li","cross_cats":["cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-14T07:33:04Z","title":"A Proxy Attack-Free Strategy for Practically Improving the Poisoning Efficiency in Backdoor Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.08313","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e53a89d4ce38a5f5074608a38e714a55bbb6adff63f0d15fb61ccfb7000c7ec0","target":"record","created_at":"2026-07-05T09:12:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"16250329f26da6b22b6ae44666573630a5e04fc9751463b06384605d23ee2477","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-14T07:33:04Z","title_canon_sha256":"82fdc551a40d6451cae0d9feba596928651b6f85978ead8ebd9977fec68fc223"},"schema_version":"1.0","source":{"id":"2306.08313","kind":"arxiv","version":3}},"canonical_sha256":"e3786dcbd2554a2ccd9736bf28c18d0b9dd2774c553fa9569c4fcf1b3f4c8615","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e3786dcbd2554a2ccd9736bf28c18d0b9dd2774c553fa9569c4fcf1b3f4c8615","first_computed_at":"2026-07-05T09:12:55.231898Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:12:55.231898Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"B35a1cR0Z0d6iyZ11SeGdoXK+Ge+8S7atqlD0IMgeRB87y5/cO/tjxAGMyJsstV0/bK1UE5r9BNM+HZ+RfpfCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:12:55.232501Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.08313","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e53a89d4ce38a5f5074608a38e714a55bbb6adff63f0d15fb61ccfb7000c7ec0","sha256:9bb8b8cbfbc3f3749854bae7a8c0ad486bb11cf6c78f68ce9bbb3a072ae6a8cb"],"state_sha256":"81ea6d510e24f668925683af7858a4b1a1833a2d5465e882b5e906c9ad83855a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XJmPDBoR5qIPIT2tt28PcnTBt7KV7ZHDLOVO5TOxkSQoinaTvAJVpc1LeYcOw4bV02H3ZAI6yKgF3W093hqbDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T19:32:10.487460Z","bundle_sha256":"1586b61763136f0d919a952d6a676f044e994c00fede78aa01406ed780ee2132"}}