{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:7IVTTIUF37WOUUGWNCGWRB3ESW","short_pith_number":"pith:7IVTTIUF","canonical_record":{"source":{"id":"2506.10722","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-12T14:12:15Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"bf6ff282cc1f85c5120c7765945497b4924d0ca0ef2fc04417e843868547b6e6","abstract_canon_sha256":"3cce951ddb22c4ff671d4ad6697ca60b012d7ed79539f204df322ffeefb5d5c9"},"schema_version":"1.0"},"canonical_sha256":"fa2b39a285dfecea50d6688d68876495b9d344a7b1e313217872f242df4ff222","source":{"kind":"arxiv","id":"2506.10722","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.10722","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"arxiv_version","alias_value":"2506.10722v1","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.10722","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"pith_short_12","alias_value":"7IVTTIUF37WO","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"pith_short_16","alias_value":"7IVTTIUF37WOUUGW","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"pith_short_8","alias_value":"7IVTTIUF","created_at":"2026-07-05T11:20:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:7IVTTIUF37WOUUGWNCGWRB3ESW","target":"record","payload":{"canonical_record":{"source":{"id":"2506.10722","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-12T14:12:15Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"bf6ff282cc1f85c5120c7765945497b4924d0ca0ef2fc04417e843868547b6e6","abstract_canon_sha256":"3cce951ddb22c4ff671d4ad6697ca60b012d7ed79539f204df322ffeefb5d5c9"},"schema_version":"1.0"},"canonical_sha256":"fa2b39a285dfecea50d6688d68876495b9d344a7b1e313217872f242df4ff222","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:20:29.175628Z","signature_b64":"ELEK1iiBnOwJqgGZMaSo3F5ZQVOLRCXUzUYkFmKmvU8/APog+Jqgl+b/ZIinEVaVbVt21a3v9fLw9PTFJua1Dg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fa2b39a285dfecea50d6688d68876495b9d344a7b1e313217872f242df4ff222","last_reissued_at":"2026-07-05T11:20:29.175066Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:20:29.175066Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.10722","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:20:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IdJevrjVavOC11Fv3MK2i7eYr/cL/0sTFg3mVO2DoMBwpKJVqHsIq2e9Cy3E86fZup0yx/ugMVTCEJA6vzDECg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T15:03:07.382718Z"},"content_sha256":"93d3ad524ca56c3f14b496cbd4e7ac76d7905a3923ba04414759f28d1411eff2","schema_version":"1.0","event_id":"sha256:93d3ad524ca56c3f14b496cbd4e7ac76d7905a3923ba04414759f28d1411eff2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:7IVTTIUF37WOUUGWNCGWRB3ESW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TED-LaST: Towards Robust Backdoor Defense Against Adaptive Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Leo Yu Zhang, Nan Sun, Shang Gao, Wei Luo, Xiaoxing Mo, Yuxuan Cheng","submitted_at":"2025-06-12T14:12:15Z","abstract_excerpt":"Deep Neural Networks (DNNs) are vulnerable to backdoor attacks, where attackers implant hidden triggers during training to maliciously control model behavior. Topological Evolution Dynamics (TED) has recently emerged as a powerful tool for detecting backdoor attacks in DNNs. However, TED can be vulnerable to backdoor attacks that adaptively distort topological representation distributions across network layers. To address this limitation, we propose TED-LaST (Topological Evolution Dynamics against Laundry, Slow release, and Target mapping attack strategies), a novel defense strategy that enhan"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.10722","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.10722/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:20:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NZlR81Ixe66y2/fVBgtyX6PUU1uLP5adYIKYsWB86NkgvFLiQygGrGF3l3kvxkCrnzdwuXPM3BdnwY5d9jMHAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T15:03:07.383270Z"},"content_sha256":"a7749354953ef2d85c353bdb8fe5a2d11996580abaa1da1dcad6b74b302962d3","schema_version":"1.0","event_id":"sha256:a7749354953ef2d85c353bdb8fe5a2d11996580abaa1da1dcad6b74b302962d3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7IVTTIUF37WOUUGWNCGWRB3ESW/bundle.json","state_url":"https://pith.science/pith/7IVTTIUF37WOUUGWNCGWRB3ESW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7IVTTIUF37WOUUGWNCGWRB3ESW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T15:03:07Z","links":{"resolver":"https://pith.science/pith/7IVTTIUF37WOUUGWNCGWRB3ESW","bundle":"https://pith.science/pith/7IVTTIUF37WOUUGWNCGWRB3ESW/bundle.json","state":"https://pith.science/pith/7IVTTIUF37WOUUGWNCGWRB3ESW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7IVTTIUF37WOUUGWNCGWRB3ESW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:7IVTTIUF37WOUUGWNCGWRB3ESW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3cce951ddb22c4ff671d4ad6697ca60b012d7ed79539f204df322ffeefb5d5c9","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-12T14:12:15Z","title_canon_sha256":"bf6ff282cc1f85c5120c7765945497b4924d0ca0ef2fc04417e843868547b6e6"},"schema_version":"1.0","source":{"id":"2506.10722","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.10722","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"arxiv_version","alias_value":"2506.10722v1","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.10722","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"pith_short_12","alias_value":"7IVTTIUF37WO","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"pith_short_16","alias_value":"7IVTTIUF37WOUUGW","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"pith_short_8","alias_value":"7IVTTIUF","created_at":"2026-07-05T11:20:29Z"}],"graph_snapshots":[{"event_id":"sha256:a7749354953ef2d85c353bdb8fe5a2d11996580abaa1da1dcad6b74b302962d3","target":"graph","created_at":"2026-07-05T11:20:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.10722/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep Neural Networks (DNNs) are vulnerable to backdoor attacks, where attackers implant hidden triggers during training to maliciously control model behavior. Topological Evolution Dynamics (TED) has recently emerged as a powerful tool for detecting backdoor attacks in DNNs. However, TED can be vulnerable to backdoor attacks that adaptively distort topological representation distributions across network layers. To address this limitation, we propose TED-LaST (Topological Evolution Dynamics against Laundry, Slow release, and Target mapping attack strategies), a novel defense strategy that enhan","authors_text":"Leo Yu Zhang, Nan Sun, Shang Gao, Wei Luo, Xiaoxing Mo, Yuxuan Cheng","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-12T14:12:15Z","title":"TED-LaST: Towards Robust Backdoor Defense Against Adaptive Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.10722","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:93d3ad524ca56c3f14b496cbd4e7ac76d7905a3923ba04414759f28d1411eff2","target":"record","created_at":"2026-07-05T11:20:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3cce951ddb22c4ff671d4ad6697ca60b012d7ed79539f204df322ffeefb5d5c9","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-12T14:12:15Z","title_canon_sha256":"bf6ff282cc1f85c5120c7765945497b4924d0ca0ef2fc04417e843868547b6e6"},"schema_version":"1.0","source":{"id":"2506.10722","kind":"arxiv","version":1}},"canonical_sha256":"fa2b39a285dfecea50d6688d68876495b9d344a7b1e313217872f242df4ff222","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fa2b39a285dfecea50d6688d68876495b9d344a7b1e313217872f242df4ff222","first_computed_at":"2026-07-05T11:20:29.175066Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:20:29.175066Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ELEK1iiBnOwJqgGZMaSo3F5ZQVOLRCXUzUYkFmKmvU8/APog+Jqgl+b/ZIinEVaVbVt21a3v9fLw9PTFJua1Dg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:20:29.175628Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.10722","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:93d3ad524ca56c3f14b496cbd4e7ac76d7905a3923ba04414759f28d1411eff2","sha256:a7749354953ef2d85c353bdb8fe5a2d11996580abaa1da1dcad6b74b302962d3"],"state_sha256":"6ddb303b78ee126ab9e7119b122382c35a238479aacc0f37eedb667674a997a1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eli2fh7QCChQAwDic/0OPGTmYkW4Q2voGEaMPjkdiQplEQiVuL+/Gk+6oeKG5+C0ybtIrxrt5pTzOEjdJfIdDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T15:03:07.387837Z","bundle_sha256":"58627cc320ab5d1737b2586b30d72329ac31f20012d3f2adb14945c112e0c585"}}