{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:53MGPZZZ2SMUSLAQHSQRYNWHW5","short_pith_number":"pith:53MGPZZZ","canonical_record":{"source":{"id":"2212.09067","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-12-18T11:30:59Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"b66198dd38d343980bc558f560f4765ba5fb923bbe2aa377d83663a80877d814","abstract_canon_sha256":"48243d00798718d6933fe1b87be581746cff67b5f67b9e19540c50c42cdb7f95"},"schema_version":"1.0"},"canonical_sha256":"eed867e739d499492c103ca11c36c7b775ed2ce6e302fe9f90ab5edd4c32c33a","source":{"kind":"arxiv","id":"2212.09067","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.09067","created_at":"2026-07-05T05:26:17Z"},{"alias_kind":"arxiv_version","alias_value":"2212.09067v1","created_at":"2026-07-05T05:26:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.09067","created_at":"2026-07-05T05:26:17Z"},{"alias_kind":"pith_short_12","alias_value":"53MGPZZZ2SMU","created_at":"2026-07-05T05:26:17Z"},{"alias_kind":"pith_short_16","alias_value":"53MGPZZZ2SMUSLAQ","created_at":"2026-07-05T05:26:17Z"},{"alias_kind":"pith_short_8","alias_value":"53MGPZZZ","created_at":"2026-07-05T05:26:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:53MGPZZZ2SMUSLAQHSQRYNWHW5","target":"record","payload":{"canonical_record":{"source":{"id":"2212.09067","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-12-18T11:30:59Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"b66198dd38d343980bc558f560f4765ba5fb923bbe2aa377d83663a80877d814","abstract_canon_sha256":"48243d00798718d6933fe1b87be581746cff67b5f67b9e19540c50c42cdb7f95"},"schema_version":"1.0"},"canonical_sha256":"eed867e739d499492c103ca11c36c7b775ed2ce6e302fe9f90ab5edd4c32c33a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:26:17.634025Z","signature_b64":"ZCJAlaC6Ur4FWGX+ziQlQIsJEfP6lXIBb+Q19JXdRq008ZKJcUE5DWP/TQ1dRZv+rNaV9py6NkejsEtGzYCfBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"eed867e739d499492c103ca11c36c7b775ed2ce6e302fe9f90ab5edd4c32c33a","last_reissued_at":"2026-07-05T05:26:17.633490Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:26:17.633490Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2212.09067","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:26:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"X//WMcArkxXR6nxRdh11uPQBmQ/ECZpB28rpKv6v3W/6PD6OLJdP04fo56UM57Kj6Pz5fXxwiwlqQl5bUVy7AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T19:35:19.627469Z"},"content_sha256":"0593a1bc14b39e875ac4fb99b7ec349ed089d84f38f57459f0cac6b3ae58f42f","schema_version":"1.0","event_id":"sha256:0593a1bc14b39e875ac4fb99b7ec349ed089d84f38f57459f0cac6b3ae58f42f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:53MGPZZZ2SMUSLAQHSQRYNWHW5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Mathias Humbert, Pascal Berrang, Xinlei He, Yang Zhang, Zeyang Sha","submitted_at":"2022-12-18T11:30:59Z","abstract_excerpt":"Backdoor attacks represent one of the major threats to machine learning models. Various efforts have been made to mitigate backdoors. However, existing defenses have become increasingly complex and often require high computational resources or may also jeopardize models' utility. In this work, we show that fine-tuning, one of the most common and easy-to-adopt machine learning training operations, can effectively remove backdoors from machine learning models while maintaining high model utility. Extensive experiments over three machine learning paradigms show that fine-tuning and our newly prop"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.09067","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2212.09067/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:26:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/DR+B2tW+/HUIXg8dedl021950KXAxYhntFhs1z2cApbxD7v/SX8x64wdKOwj2tnMD/80hvHcB9syDrMor6bCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T19:35:19.630671Z"},"content_sha256":"f259c1d5d66c4971bcefdf3acef1313115c910b33e069694ca2d6e48fa4f1440","schema_version":"1.0","event_id":"sha256:f259c1d5d66c4971bcefdf3acef1313115c910b33e069694ca2d6e48fa4f1440"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/53MGPZZZ2SMUSLAQHSQRYNWHW5/bundle.json","state_url":"https://pith.science/pith/53MGPZZZ2SMUSLAQHSQRYNWHW5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/53MGPZZZ2SMUSLAQHSQRYNWHW5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T19:35:19Z","links":{"resolver":"https://pith.science/pith/53MGPZZZ2SMUSLAQHSQRYNWHW5","bundle":"https://pith.science/pith/53MGPZZZ2SMUSLAQHSQRYNWHW5/bundle.json","state":"https://pith.science/pith/53MGPZZZ2SMUSLAQHSQRYNWHW5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/53MGPZZZ2SMUSLAQHSQRYNWHW5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:53MGPZZZ2SMUSLAQHSQRYNWHW5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"48243d00798718d6933fe1b87be581746cff67b5f67b9e19540c50c42cdb7f95","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-12-18T11:30:59Z","title_canon_sha256":"b66198dd38d343980bc558f560f4765ba5fb923bbe2aa377d83663a80877d814"},"schema_version":"1.0","source":{"id":"2212.09067","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.09067","created_at":"2026-07-05T05:26:17Z"},{"alias_kind":"arxiv_version","alias_value":"2212.09067v1","created_at":"2026-07-05T05:26:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.09067","created_at":"2026-07-05T05:26:17Z"},{"alias_kind":"pith_short_12","alias_value":"53MGPZZZ2SMU","created_at":"2026-07-05T05:26:17Z"},{"alias_kind":"pith_short_16","alias_value":"53MGPZZZ2SMUSLAQ","created_at":"2026-07-05T05:26:17Z"},{"alias_kind":"pith_short_8","alias_value":"53MGPZZZ","created_at":"2026-07-05T05:26:17Z"}],"graph_snapshots":[{"event_id":"sha256:f259c1d5d66c4971bcefdf3acef1313115c910b33e069694ca2d6e48fa4f1440","target":"graph","created_at":"2026-07-05T05:26:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2212.09067/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attacks represent one of the major threats to machine learning models. Various efforts have been made to mitigate backdoors. However, existing defenses have become increasingly complex and often require high computational resources or may also jeopardize models' utility. In this work, we show that fine-tuning, one of the most common and easy-to-adopt machine learning training operations, can effectively remove backdoors from machine learning models while maintaining high model utility. Extensive experiments over three machine learning paradigms show that fine-tuning and our newly prop","authors_text":"Mathias Humbert, Pascal Berrang, Xinlei He, Yang Zhang, Zeyang Sha","cross_cats":["cs.CV","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-12-18T11:30:59Z","title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.09067","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0593a1bc14b39e875ac4fb99b7ec349ed089d84f38f57459f0cac6b3ae58f42f","target":"record","created_at":"2026-07-05T05:26:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"48243d00798718d6933fe1b87be581746cff67b5f67b9e19540c50c42cdb7f95","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-12-18T11:30:59Z","title_canon_sha256":"b66198dd38d343980bc558f560f4765ba5fb923bbe2aa377d83663a80877d814"},"schema_version":"1.0","source":{"id":"2212.09067","kind":"arxiv","version":1}},"canonical_sha256":"eed867e739d499492c103ca11c36c7b775ed2ce6e302fe9f90ab5edd4c32c33a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"eed867e739d499492c103ca11c36c7b775ed2ce6e302fe9f90ab5edd4c32c33a","first_computed_at":"2026-07-05T05:26:17.633490Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:26:17.633490Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZCJAlaC6Ur4FWGX+ziQlQIsJEfP6lXIBb+Q19JXdRq008ZKJcUE5DWP/TQ1dRZv+rNaV9py6NkejsEtGzYCfBg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:26:17.634025Z","signed_message":"canonical_sha256_bytes"},"source_id":"2212.09067","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0593a1bc14b39e875ac4fb99b7ec349ed089d84f38f57459f0cac6b3ae58f42f","sha256:f259c1d5d66c4971bcefdf3acef1313115c910b33e069694ca2d6e48fa4f1440"],"state_sha256":"0ddcab2cc8de295934a993b659884b4abc8c80fc07b5f44753961e56a40ec26a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vg8WNLx0ZLopLmEDPRsJT0hpdle6lME94nlccrVfzdXnsH3b2TpiDCwXBJx/r3wOk3PVZzn8O4vL+jNcZz4gBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T19:35:19.648435Z","bundle_sha256":"47c7c49dd62ccd711af233eee74fb79d5aef25de99884a2c11dc349135ae6231"}}