{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:6HGZYY5TGCB4CKV7NCSNQBZPPX","short_pith_number":"pith:6HGZYY5T","canonical_record":{"source":{"id":"2209.05244","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-09-12T13:37:06Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"355975f41b58e2e428e2efa641172e9771fec15e99d8eea72c80a6faf27fadbe","abstract_canon_sha256":"c146d4b8a440e2fc42e9403c6cce1a8499c32ecfcee8773f54c8c6e5dbfdd88a"},"schema_version":"1.0"},"canonical_sha256":"f1cd9c63b33083c12abf68a4d8072f7df4173ed48ff7b8576240bc72f49fd484","source":{"kind":"arxiv","id":"2209.05244","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2209.05244","created_at":"2026-07-05T05:23:11Z"},{"alias_kind":"arxiv_version","alias_value":"2209.05244v3","created_at":"2026-07-05T05:23:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2209.05244","created_at":"2026-07-05T05:23:11Z"},{"alias_kind":"pith_short_12","alias_value":"6HGZYY5TGCB4","created_at":"2026-07-05T05:23:11Z"},{"alias_kind":"pith_short_16","alias_value":"6HGZYY5TGCB4CKV7","created_at":"2026-07-05T05:23:11Z"},{"alias_kind":"pith_short_8","alias_value":"6HGZYY5T","created_at":"2026-07-05T05:23:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:6HGZYY5TGCB4CKV7NCSNQBZPPX","target":"record","payload":{"canonical_record":{"source":{"id":"2209.05244","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-09-12T13:37:06Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"355975f41b58e2e428e2efa641172e9771fec15e99d8eea72c80a6faf27fadbe","abstract_canon_sha256":"c146d4b8a440e2fc42e9403c6cce1a8499c32ecfcee8773f54c8c6e5dbfdd88a"},"schema_version":"1.0"},"canonical_sha256":"f1cd9c63b33083c12abf68a4d8072f7df4173ed48ff7b8576240bc72f49fd484","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:23:11.820969Z","signature_b64":"unCUAxPcflNanzVT+fOQG58iMb/0sChmjuiImcvuswY297dBWD8/+LYDp6PcFtQh0k/bIawGKdLuDsA1LcOhAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f1cd9c63b33083c12abf68a4d8072f7df4173ed48ff7b8576240bc72f49fd484","last_reissued_at":"2026-07-05T05:23:11.820436Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:23:11.820436Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2209.05244","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:23:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8b4MBbfo+j37Ay/7aOujE5Y4xGcNj4O9NuN4rFSPIu2w54F95ko1z55ps2u/cEz2mCwH+2ng56BamZlXp/k4AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T09:23:30.495148Z"},"content_sha256":"717b9a93137d35e88fe73d121bd5520eb3b6686ce1654e9a6d270592e7d2c991","schema_version":"1.0","event_id":"sha256:717b9a93137d35e88fe73d121bd5520eb3b6686ce1654e9a6d270592e7d2c991"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:6HGZYY5TGCB4CKV7NCSNQBZPPX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Universal Backdoor Attacks Detection via Adaptive Adversarial Probe","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CV","authors_text":"Aishan Liu, Ding Liang, Huafeng Shi, Ruijia Wu, Rui Min, Siyuan Liang, Yichao Wu, Yuhang Wang","submitted_at":"2022-09-12T13:37:06Z","abstract_excerpt":"Extensive evidence has demonstrated that deep neural networks (DNNs) are vulnerable to backdoor attacks, which motivates the development of backdoor attacks detection. Most detection methods are designed to verify whether a model is infected with presumed types of backdoor attacks, yet the adversary is likely to generate diverse backdoor attacks in practice that are unforeseen to defenders, which challenge current detection strategies. In this paper, we focus on this more challenging scenario and propose a universal backdoor attacks detection method named Adaptive Adversarial Probe (A2P). Spec"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2209.05244","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2209.05244/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:23:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8dOzOOsj/bmAQcXvLOFL2dmaB+EfWcSDVXzrxUsi2C1485U2Syr+y22Ks7MLEyCCtxYxMLTlIwHqLrc82whHDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T09:23:30.495703Z"},"content_sha256":"9f56dcb1f5080ed5756eb348c905e76c919575e78b2a20d1c639d6fa6643e8f4","schema_version":"1.0","event_id":"sha256:9f56dcb1f5080ed5756eb348c905e76c919575e78b2a20d1c639d6fa6643e8f4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6HGZYY5TGCB4CKV7NCSNQBZPPX/bundle.json","state_url":"https://pith.science/pith/6HGZYY5TGCB4CKV7NCSNQBZPPX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6HGZYY5TGCB4CKV7NCSNQBZPPX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T09:23:30Z","links":{"resolver":"https://pith.science/pith/6HGZYY5TGCB4CKV7NCSNQBZPPX","bundle":"https://pith.science/pith/6HGZYY5TGCB4CKV7NCSNQBZPPX/bundle.json","state":"https://pith.science/pith/6HGZYY5TGCB4CKV7NCSNQBZPPX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6HGZYY5TGCB4CKV7NCSNQBZPPX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:6HGZYY5TGCB4CKV7NCSNQBZPPX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c146d4b8a440e2fc42e9403c6cce1a8499c32ecfcee8773f54c8c6e5dbfdd88a","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-09-12T13:37:06Z","title_canon_sha256":"355975f41b58e2e428e2efa641172e9771fec15e99d8eea72c80a6faf27fadbe"},"schema_version":"1.0","source":{"id":"2209.05244","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2209.05244","created_at":"2026-07-05T05:23:11Z"},{"alias_kind":"arxiv_version","alias_value":"2209.05244v3","created_at":"2026-07-05T05:23:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2209.05244","created_at":"2026-07-05T05:23:11Z"},{"alias_kind":"pith_short_12","alias_value":"6HGZYY5TGCB4","created_at":"2026-07-05T05:23:11Z"},{"alias_kind":"pith_short_16","alias_value":"6HGZYY5TGCB4CKV7","created_at":"2026-07-05T05:23:11Z"},{"alias_kind":"pith_short_8","alias_value":"6HGZYY5T","created_at":"2026-07-05T05:23:11Z"}],"graph_snapshots":[{"event_id":"sha256:9f56dcb1f5080ed5756eb348c905e76c919575e78b2a20d1c639d6fa6643e8f4","target":"graph","created_at":"2026-07-05T05:23:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2209.05244/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Extensive evidence has demonstrated that deep neural networks (DNNs) are vulnerable to backdoor attacks, which motivates the development of backdoor attacks detection. Most detection methods are designed to verify whether a model is infected with presumed types of backdoor attacks, yet the adversary is likely to generate diverse backdoor attacks in practice that are unforeseen to defenders, which challenge current detection strategies. In this paper, we focus on this more challenging scenario and propose a universal backdoor attacks detection method named Adaptive Adversarial Probe (A2P). Spec","authors_text":"Aishan Liu, Ding Liang, Huafeng Shi, Ruijia Wu, Rui Min, Siyuan Liang, Yichao Wu, Yuhang Wang","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-09-12T13:37:06Z","title":"Universal Backdoor Attacks Detection via Adaptive Adversarial Probe"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2209.05244","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:717b9a93137d35e88fe73d121bd5520eb3b6686ce1654e9a6d270592e7d2c991","target":"record","created_at":"2026-07-05T05:23:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c146d4b8a440e2fc42e9403c6cce1a8499c32ecfcee8773f54c8c6e5dbfdd88a","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-09-12T13:37:06Z","title_canon_sha256":"355975f41b58e2e428e2efa641172e9771fec15e99d8eea72c80a6faf27fadbe"},"schema_version":"1.0","source":{"id":"2209.05244","kind":"arxiv","version":3}},"canonical_sha256":"f1cd9c63b33083c12abf68a4d8072f7df4173ed48ff7b8576240bc72f49fd484","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f1cd9c63b33083c12abf68a4d8072f7df4173ed48ff7b8576240bc72f49fd484","first_computed_at":"2026-07-05T05:23:11.820436Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:23:11.820436Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"unCUAxPcflNanzVT+fOQG58iMb/0sChmjuiImcvuswY297dBWD8/+LYDp6PcFtQh0k/bIawGKdLuDsA1LcOhAg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:23:11.820969Z","signed_message":"canonical_sha256_bytes"},"source_id":"2209.05244","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:717b9a93137d35e88fe73d121bd5520eb3b6686ce1654e9a6d270592e7d2c991","sha256:9f56dcb1f5080ed5756eb348c905e76c919575e78b2a20d1c639d6fa6643e8f4"],"state_sha256":"6cb76b172962472fb375c8757f504c43cd47cd6944ae22b36588befaed54e2c5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"D+3lPH85Q1XSsXVG4T8xXGiyOQPZx0+QJBx4fbNQoYZy7knuW9uXByyt/41GdmXrmW3cqV5ZpBa6vNAX60YRCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T09:23:30.499257Z","bundle_sha256":"ff46b67c97961c0066425ce71686e625e7b0ce8739bbc7d31a3b93e2ab12f407"}}