{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:6KUCX22VNB3SMQSRP6S7X7MFNH","short_pith_number":"pith:6KUCX22V","canonical_record":{"source":{"id":"2303.03323","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-06T17:48:32Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"08c14e35b71cdb6ca694c58e93393b9abede959b90b162b1b6cecca94dcd8075","abstract_canon_sha256":"a9e11e6e71ad9e8cb5b876991814ae1a6b6517d6374dd1639470ecae1d917a99"},"schema_version":"1.0"},"canonical_sha256":"f2a82beb5568772642517fa5fbfd8569cc911fe9632c39a1b7ae21ac19724caa","source":{"kind":"arxiv","id":"2303.03323","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.03323","created_at":"2026-07-05T06:31:09Z"},{"alias_kind":"arxiv_version","alias_value":"2303.03323v3","created_at":"2026-07-05T06:31:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.03323","created_at":"2026-07-05T06:31:09Z"},{"alias_kind":"pith_short_12","alias_value":"6KUCX22VNB3S","created_at":"2026-07-05T06:31:09Z"},{"alias_kind":"pith_short_16","alias_value":"6KUCX22VNB3SMQSR","created_at":"2026-07-05T06:31:09Z"},{"alias_kind":"pith_short_8","alias_value":"6KUCX22V","created_at":"2026-07-05T06:31:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:6KUCX22VNB3SMQSRP6S7X7MFNH","target":"record","payload":{"canonical_record":{"source":{"id":"2303.03323","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-06T17:48:32Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"08c14e35b71cdb6ca694c58e93393b9abede959b90b162b1b6cecca94dcd8075","abstract_canon_sha256":"a9e11e6e71ad9e8cb5b876991814ae1a6b6517d6374dd1639470ecae1d917a99"},"schema_version":"1.0"},"canonical_sha256":"f2a82beb5568772642517fa5fbfd8569cc911fe9632c39a1b7ae21ac19724caa","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:31:09.747008Z","signature_b64":"ylmXkV6mtVoZVLBF5c7DVILg9xUeDRQLeDjVrRUndUgBbvZ2d+1Hb9JhbXAN3njnGFOfXE+GyF14C2Oaus9XAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f2a82beb5568772642517fa5fbfd8569cc911fe9632c39a1b7ae21ac19724caa","last_reissued_at":"2026-07-05T06:31:09.746540Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:31:09.746540Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2303.03323","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:31:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"V1+Z6HslrDQ9irDzREGAiowxjkFGOIsAWIsOGnFV7cs2j6SYhoolkVFJ25r6yKYx6nELCM4Ds4IlZl52dskJCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T12:40:01.330007Z"},"content_sha256":"e3dd88b963a380fcd1e199feb6234d1061e945db7b97b85a25da02953106e134","schema_version":"1.0","event_id":"sha256:e3dd88b963a380fcd1e199feb6234d1061e945db7b97b85a25da02953106e134"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:6KUCX22VNB3SMQSRP6S7X7MFNH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"CleanCLIP: Mitigating Data Poisoning Attacks in Multimodal Contrastive Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Aditya Grover, Fan Yin, Hritik Bansal, Kai-Wei Chang, Nishad Singhi, Yu Yang","submitted_at":"2023-03-06T17:48:32Z","abstract_excerpt":"Multimodal contrastive pretraining has been used to train multimodal representation models, such as CLIP, on large amounts of paired image-text data. However, previous studies have revealed that such models are vulnerable to backdoor attacks. Specifically, when trained on backdoored examples, CLIP learns spurious correlations between the embedded backdoor trigger and the target label, aligning their representations in the joint embedding space. Injecting even a small number of poisoned examples, such as 75 examples in 3 million pretraining data, can significantly manipulate the model's behavio"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.03323","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2303.03323/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:31:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VSi5mrStdbx02TCuB9hYjfFNkp2hm/UwMxa3zzXsCtgyeoWhajkHXvuhJiC2ryMid8OJwiTUjHH8SeGvZMDKCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T12:40:01.330393Z"},"content_sha256":"a3d4ddd80b5fc8c9db5f60cb463e4a3077d99776beb5fe647ca76a1c7c0ac064","schema_version":"1.0","event_id":"sha256:a3d4ddd80b5fc8c9db5f60cb463e4a3077d99776beb5fe647ca76a1c7c0ac064"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6KUCX22VNB3SMQSRP6S7X7MFNH/bundle.json","state_url":"https://pith.science/pith/6KUCX22VNB3SMQSRP6S7X7MFNH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6KUCX22VNB3SMQSRP6S7X7MFNH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T12:40:01Z","links":{"resolver":"https://pith.science/pith/6KUCX22VNB3SMQSRP6S7X7MFNH","bundle":"https://pith.science/pith/6KUCX22VNB3SMQSRP6S7X7MFNH/bundle.json","state":"https://pith.science/pith/6KUCX22VNB3SMQSRP6S7X7MFNH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6KUCX22VNB3SMQSRP6S7X7MFNH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:6KUCX22VNB3SMQSRP6S7X7MFNH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a9e11e6e71ad9e8cb5b876991814ae1a6b6517d6374dd1639470ecae1d917a99","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-06T17:48:32Z","title_canon_sha256":"08c14e35b71cdb6ca694c58e93393b9abede959b90b162b1b6cecca94dcd8075"},"schema_version":"1.0","source":{"id":"2303.03323","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.03323","created_at":"2026-07-05T06:31:09Z"},{"alias_kind":"arxiv_version","alias_value":"2303.03323v3","created_at":"2026-07-05T06:31:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.03323","created_at":"2026-07-05T06:31:09Z"},{"alias_kind":"pith_short_12","alias_value":"6KUCX22VNB3S","created_at":"2026-07-05T06:31:09Z"},{"alias_kind":"pith_short_16","alias_value":"6KUCX22VNB3SMQSR","created_at":"2026-07-05T06:31:09Z"},{"alias_kind":"pith_short_8","alias_value":"6KUCX22V","created_at":"2026-07-05T06:31:09Z"}],"graph_snapshots":[{"event_id":"sha256:a3d4ddd80b5fc8c9db5f60cb463e4a3077d99776beb5fe647ca76a1c7c0ac064","target":"graph","created_at":"2026-07-05T06:31:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2303.03323/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multimodal contrastive pretraining has been used to train multimodal representation models, such as CLIP, on large amounts of paired image-text data. However, previous studies have revealed that such models are vulnerable to backdoor attacks. Specifically, when trained on backdoored examples, CLIP learns spurious correlations between the embedded backdoor trigger and the target label, aligning their representations in the joint embedding space. Injecting even a small number of poisoned examples, such as 75 examples in 3 million pretraining data, can significantly manipulate the model's behavio","authors_text":"Aditya Grover, Fan Yin, Hritik Bansal, Kai-Wei Chang, Nishad Singhi, Yu Yang","cross_cats":["cs.AI","cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-06T17:48:32Z","title":"CleanCLIP: Mitigating Data Poisoning Attacks in Multimodal Contrastive Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.03323","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e3dd88b963a380fcd1e199feb6234d1061e945db7b97b85a25da02953106e134","target":"record","created_at":"2026-07-05T06:31:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a9e11e6e71ad9e8cb5b876991814ae1a6b6517d6374dd1639470ecae1d917a99","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-06T17:48:32Z","title_canon_sha256":"08c14e35b71cdb6ca694c58e93393b9abede959b90b162b1b6cecca94dcd8075"},"schema_version":"1.0","source":{"id":"2303.03323","kind":"arxiv","version":3}},"canonical_sha256":"f2a82beb5568772642517fa5fbfd8569cc911fe9632c39a1b7ae21ac19724caa","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f2a82beb5568772642517fa5fbfd8569cc911fe9632c39a1b7ae21ac19724caa","first_computed_at":"2026-07-05T06:31:09.746540Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:31:09.746540Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ylmXkV6mtVoZVLBF5c7DVILg9xUeDRQLeDjVrRUndUgBbvZ2d+1Hb9JhbXAN3njnGFOfXE+GyF14C2Oaus9XAA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:31:09.747008Z","signed_message":"canonical_sha256_bytes"},"source_id":"2303.03323","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e3dd88b963a380fcd1e199feb6234d1061e945db7b97b85a25da02953106e134","sha256:a3d4ddd80b5fc8c9db5f60cb463e4a3077d99776beb5fe647ca76a1c7c0ac064"],"state_sha256":"f9ad8477cccd25146bc598bd366d28042953dca968abb807b1b1512519247c9c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/JPVOrRGeRuOR1rq4tLK/FRFKqZ2cWreh75KFiUED58wFL9qSo71lNjiX3qlcLTzT8FhhQq897C+2abqboqeDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T12:40:01.332383Z","bundle_sha256":"16c8cf758f959f82a3a132bb89c97c06059101dd173a186621ed25c8710bf417"}}