{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:5V2GT4HD5ZAWEGRNHD3ZTYGM34","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4f506a8e24a437243b00851a61199e76e777c726e6aee0c3b1aef877c6ef2e1b","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-01-24T09:09:12Z","title_canon_sha256":"29f951483dd4dd98c14bdd1d4ebe4cc25c571fa9ba655ba452af67703f931cf4"},"schema_version":"1.0","source":{"id":"2201.09538","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.09538","created_at":"2026-07-05T03:50:58Z"},{"alias_kind":"arxiv_version","alias_value":"2201.09538v1","created_at":"2026-07-05T03:50:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.09538","created_at":"2026-07-05T03:50:58Z"},{"alias_kind":"pith_short_12","alias_value":"5V2GT4HD5ZAW","created_at":"2026-07-05T03:50:58Z"},{"alias_kind":"pith_short_16","alias_value":"5V2GT4HD5ZAWEGRN","created_at":"2026-07-05T03:50:58Z"},{"alias_kind":"pith_short_8","alias_value":"5V2GT4HD","created_at":"2026-07-05T03:50:58Z"}],"graph_snapshots":[{"event_id":"sha256:79fbd64e5ed7a09080e28cf6c0497b921ca024c01460d1bcb5fcd07b4e796ef3","target":"graph","created_at":"2026-07-05T03:50:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2201.09538/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor injection attack is an emerging threat to the security of neural networks, however, there still exist limited effective defense methods against the attack. In this paper, we propose BAERASE, a novel method that can erase the backdoor injected into the victim model through machine unlearning. Specifically, BAERASE mainly implements backdoor defense in two key steps. First, trigger pattern recovery is conducted to extract the trigger patterns infected by the victim model. Here, the trigger pattern recovery problem is equivalent to the one of extracting an unknown noise distribution from","authors_text":"Cen Chen, Jianfeng Ma, Li Wang, Mingyuan Fan, Ximeng Liu, Yang Liu, Zhuo Ma","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-01-24T09:09:12Z","title":"Backdoor Defense with Machine Unlearning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.09538","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:514f901fba61dcd1a69b43429d7b1621b336d50e0f3b2a80ce5446b9d06bc07e","target":"record","created_at":"2026-07-05T03:50:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4f506a8e24a437243b00851a61199e76e777c726e6aee0c3b1aef877c6ef2e1b","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-01-24T09:09:12Z","title_canon_sha256":"29f951483dd4dd98c14bdd1d4ebe4cc25c571fa9ba655ba452af67703f931cf4"},"schema_version":"1.0","source":{"id":"2201.09538","kind":"arxiv","version":1}},"canonical_sha256":"ed7469f0e3ee41621a2d38f799e0ccdf213707489a439a09fda12160cdf4ce46","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ed7469f0e3ee41621a2d38f799e0ccdf213707489a439a09fda12160cdf4ce46","first_computed_at":"2026-07-05T03:50:58.472890Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:50:58.472890Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"L2XSUnbSxZ6clOJKAyzckJg5gbGxVjBr+UuT4At24H/y5o4nmTSbqHzS9IMVaIRxAi8YlB7iWGYgnLq7yvnCBg==","signature_status":"signed_v1","signed_at":"2026-07-05T03:50:58.473287Z","signed_message":"canonical_sha256_bytes"},"source_id":"2201.09538","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:514f901fba61dcd1a69b43429d7b1621b336d50e0f3b2a80ce5446b9d06bc07e","sha256:79fbd64e5ed7a09080e28cf6c0497b921ca024c01460d1bcb5fcd07b4e796ef3"],"state_sha256":"c7e07793b0216930d4d200a678b5e0bbc42ce6106e642732e2a2e14ed48203eb"}