{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:5KE3JX4F62BCL2JQ3YUPIBWGU5","short_pith_number":"pith:5KE3JX4F","canonical_record":{"source":{"id":"2202.10627","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-22T02:24:46Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"d8f628621c531bafbddf9d549020e6910146fdce78188bcf5ef5a9d0f6cc9665","abstract_canon_sha256":"3e7d476cbd4cffed9533249a8340fa4670ca1939c404ba4fe18329fe906d3636"},"schema_version":"1.0"},"canonical_sha256":"ea89b4df85f68225e930de28f406c6a747f34be4c141221ac384a81c80a1c11b","source":{"kind":"arxiv","id":"2202.10627","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.10627","created_at":"2026-07-05T03:59:06Z"},{"alias_kind":"arxiv_version","alias_value":"2202.10627v1","created_at":"2026-07-05T03:59:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.10627","created_at":"2026-07-05T03:59:06Z"},{"alias_kind":"pith_short_12","alias_value":"5KE3JX4F62BC","created_at":"2026-07-05T03:59:06Z"},{"alias_kind":"pith_short_16","alias_value":"5KE3JX4F62BCL2JQ","created_at":"2026-07-05T03:59:06Z"},{"alias_kind":"pith_short_8","alias_value":"5KE3JX4F","created_at":"2026-07-05T03:59:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:5KE3JX4F62BCL2JQ3YUPIBWGU5","target":"record","payload":{"canonical_record":{"source":{"id":"2202.10627","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-22T02:24:46Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"d8f628621c531bafbddf9d549020e6910146fdce78188bcf5ef5a9d0f6cc9665","abstract_canon_sha256":"3e7d476cbd4cffed9533249a8340fa4670ca1939c404ba4fe18329fe906d3636"},"schema_version":"1.0"},"canonical_sha256":"ea89b4df85f68225e930de28f406c6a747f34be4c141221ac384a81c80a1c11b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:59:06.684143Z","signature_b64":"VFVea7DpRZz6y0DDaxG/uyx2NYT6C2rQQoTn4v2mnM+c4a5aOEFoWmPDkKGfO3/0OudUx/LYeFYQMiXdawEZDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ea89b4df85f68225e930de28f406c6a747f34be4c141221ac384a81c80a1c11b","last_reissued_at":"2026-07-05T03:59:06.683487Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:59:06.683487Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2202.10627","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:59:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/jKUbc94+wpoQomFCd/kon1XfDTPcUmcgIJdpHbG4TSkOdwgoV3dvogzcf/9Wysi7sk5LlC2/F4oVI0NC3omDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T08:03:26.164330Z"},"content_sha256":"4b4eb4aaeaf087b107dcaf939a95c1192e495b93816e84fec59b37e991d7197b","schema_version":"1.0","event_id":"sha256:4b4eb4aaeaf087b107dcaf939a95c1192e495b93816e84fec59b37e991d7197b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:5KE3JX4F62BCL2JQ3YUPIBWGU5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Effectiveness of Adversarial Training against Backdoor Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Dongxian Wu, Gang Niu, Guanhao Gan, Jingfeng Zhang, Masashi Sugiyama, Shu-Tao Xia, Yinghua Gao","submitted_at":"2022-02-22T02:24:46Z","abstract_excerpt":"DNNs' demand for massive data forces practitioners to collect data from the Internet without careful check due to the unacceptable cost, which brings potential risks of backdoor attacks. A backdoored model always predicts a target class in the presence of a predefined trigger pattern, which can be easily realized via poisoning a small amount of data. In general, adversarial training is believed to defend against backdoor attacks since it helps models to keep their prediction unchanged even if we perturb the input image (as long as within a feasible range). Unfortunately, few previous studies s"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.10627","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2202.10627/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:59:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uHH3nQbcTR9dIM6Pw4x7qb9CO0NkjRvQgHtdRqzhI3pDGYJBz91Jo1wW0sug2UnFXW9lFNA7LFIEZ+r9upsGDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T08:03:26.164699Z"},"content_sha256":"2a0aa355435c85d097a76fedf0cd6d26e94ab32a16bd8f5f663ef89b200ce105","schema_version":"1.0","event_id":"sha256:2a0aa355435c85d097a76fedf0cd6d26e94ab32a16bd8f5f663ef89b200ce105"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5KE3JX4F62BCL2JQ3YUPIBWGU5/bundle.json","state_url":"https://pith.science/pith/5KE3JX4F62BCL2JQ3YUPIBWGU5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5KE3JX4F62BCL2JQ3YUPIBWGU5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T08:03:26Z","links":{"resolver":"https://pith.science/pith/5KE3JX4F62BCL2JQ3YUPIBWGU5","bundle":"https://pith.science/pith/5KE3JX4F62BCL2JQ3YUPIBWGU5/bundle.json","state":"https://pith.science/pith/5KE3JX4F62BCL2JQ3YUPIBWGU5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5KE3JX4F62BCL2JQ3YUPIBWGU5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:5KE3JX4F62BCL2JQ3YUPIBWGU5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3e7d476cbd4cffed9533249a8340fa4670ca1939c404ba4fe18329fe906d3636","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-22T02:24:46Z","title_canon_sha256":"d8f628621c531bafbddf9d549020e6910146fdce78188bcf5ef5a9d0f6cc9665"},"schema_version":"1.0","source":{"id":"2202.10627","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.10627","created_at":"2026-07-05T03:59:06Z"},{"alias_kind":"arxiv_version","alias_value":"2202.10627v1","created_at":"2026-07-05T03:59:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.10627","created_at":"2026-07-05T03:59:06Z"},{"alias_kind":"pith_short_12","alias_value":"5KE3JX4F62BC","created_at":"2026-07-05T03:59:06Z"},{"alias_kind":"pith_short_16","alias_value":"5KE3JX4F62BCL2JQ","created_at":"2026-07-05T03:59:06Z"},{"alias_kind":"pith_short_8","alias_value":"5KE3JX4F","created_at":"2026-07-05T03:59:06Z"}],"graph_snapshots":[{"event_id":"sha256:2a0aa355435c85d097a76fedf0cd6d26e94ab32a16bd8f5f663ef89b200ce105","target":"graph","created_at":"2026-07-05T03:59:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.10627/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"DNNs' demand for massive data forces practitioners to collect data from the Internet without careful check due to the unacceptable cost, which brings potential risks of backdoor attacks. A backdoored model always predicts a target class in the presence of a predefined trigger pattern, which can be easily realized via poisoning a small amount of data. In general, adversarial training is believed to defend against backdoor attacks since it helps models to keep their prediction unchanged even if we perturb the input image (as long as within a feasible range). Unfortunately, few previous studies s","authors_text":"Dongxian Wu, Gang Niu, Guanhao Gan, Jingfeng Zhang, Masashi Sugiyama, Shu-Tao Xia, Yinghua Gao","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-22T02:24:46Z","title":"On the Effectiveness of Adversarial Training against Backdoor Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.10627","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4b4eb4aaeaf087b107dcaf939a95c1192e495b93816e84fec59b37e991d7197b","target":"record","created_at":"2026-07-05T03:59:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3e7d476cbd4cffed9533249a8340fa4670ca1939c404ba4fe18329fe906d3636","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-22T02:24:46Z","title_canon_sha256":"d8f628621c531bafbddf9d549020e6910146fdce78188bcf5ef5a9d0f6cc9665"},"schema_version":"1.0","source":{"id":"2202.10627","kind":"arxiv","version":1}},"canonical_sha256":"ea89b4df85f68225e930de28f406c6a747f34be4c141221ac384a81c80a1c11b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ea89b4df85f68225e930de28f406c6a747f34be4c141221ac384a81c80a1c11b","first_computed_at":"2026-07-05T03:59:06.683487Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:59:06.683487Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"VFVea7DpRZz6y0DDaxG/uyx2NYT6C2rQQoTn4v2mnM+c4a5aOEFoWmPDkKGfO3/0OudUx/LYeFYQMiXdawEZDA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:59:06.684143Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.10627","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4b4eb4aaeaf087b107dcaf939a95c1192e495b93816e84fec59b37e991d7197b","sha256:2a0aa355435c85d097a76fedf0cd6d26e94ab32a16bd8f5f663ef89b200ce105"],"state_sha256":"cbc143f5d9189a704ff13993adcb84e477e4f8358a60a34c4c4d4f21ac0e7fb7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ttZegT7Vrrybf+gDcu2lmYajDxagdmEe8Ely9flXrbK4Kiem8+4RrHtXD6J7W1J1je6+Cp97dMaPVfwDmpr3Dw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T08:03:26.166602Z","bundle_sha256":"ab901e28947631256c8850276cfc3bc9edfcbb2573d40a5905293a4b3bb34777"}}