{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:7ZG6KZRHSRFGEKUFRJ2TZZEZMB","short_pith_number":"pith:7ZG6KZRH","canonical_record":{"source":{"id":"2410.00296","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-01T00:37:29Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"6202966e18123639417487bb47b4673991126e9a9ad3023c8e8a2951e834bfac","abstract_canon_sha256":"1e5e66b0ca0ea40c3cd30c087aee1d2ed670ee2a48a03e72a5d3967b9edff07d"},"schema_version":"1.0"},"canonical_sha256":"fe4de56627944a622a858a753ce4996073131ea88c58bbb5592ca84503166ff8","source":{"kind":"arxiv","id":"2410.00296","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.00296","created_at":"2026-07-05T09:14:02Z"},{"alias_kind":"arxiv_version","alias_value":"2410.00296v1","created_at":"2026-07-05T09:14:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.00296","created_at":"2026-07-05T09:14:02Z"},{"alias_kind":"pith_short_12","alias_value":"7ZG6KZRHSRFG","created_at":"2026-07-05T09:14:02Z"},{"alias_kind":"pith_short_16","alias_value":"7ZG6KZRHSRFGEKUF","created_at":"2026-07-05T09:14:02Z"},{"alias_kind":"pith_short_8","alias_value":"7ZG6KZRH","created_at":"2026-07-05T09:14:02Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:7ZG6KZRHSRFGEKUFRJ2TZZEZMB","target":"record","payload":{"canonical_record":{"source":{"id":"2410.00296","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-01T00:37:29Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"6202966e18123639417487bb47b4673991126e9a9ad3023c8e8a2951e834bfac","abstract_canon_sha256":"1e5e66b0ca0ea40c3cd30c087aee1d2ed670ee2a48a03e72a5d3967b9edff07d"},"schema_version":"1.0"},"canonical_sha256":"fe4de56627944a622a858a753ce4996073131ea88c58bbb5592ca84503166ff8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:14:02.723847Z","signature_b64":"xfsOcaj4FVWXbqqRXyYKEWpQO8RQnNEd46oIOfjY4v2+s5uOYRQhFfgTUQH4brvBj4svQCC9WZ9d6z2M06mrAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fe4de56627944a622a858a753ce4996073131ea88c58bbb5592ca84503166ff8","last_reissued_at":"2026-07-05T09:14:02.723248Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:14:02.723248Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.00296","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:14:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ow1EtW6T8yCFxZojLsR2Q73SBNQXu/YaE6qSRTdXxcOtintm1qzV+qY9xWYnP54qSQhWr+8lkA4GG+Y7IojhBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T15:08:46.348551Z"},"content_sha256":"1b6d643cbbd4269eb4040b6ea89c75304dde1d1b3968a91cc6ab5e78753f8efb","schema_version":"1.0","event_id":"sha256:1b6d643cbbd4269eb4040b6ea89c75304dde1d1b3968a91cc6ab5e78753f8efb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:7ZG6KZRHSRFGEKUFRJ2TZZEZMB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"VLMGuard: Defending VLMs against Malicious Prompts via Unlabeled Data","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Ahmed Salem, Emily Lawton, Jack W. Stokes, Reshmi Ghosh, Robert Sim, Vitor Carvalho, Xuefeng Du, Yixuan Li","submitted_at":"2024-10-01T00:37:29Z","abstract_excerpt":"Vision-language models (VLMs) are essential for contextual understanding of both visual and textual information. However, their vulnerability to adversarially manipulated inputs presents significant risks, leading to compromised outputs and raising concerns about the reliability in VLM-integrated applications. Detecting these malicious prompts is thus crucial for maintaining trust in VLM generations. A major challenge in developing a safeguarding prompt classifier is the lack of a large amount of labeled benign and malicious data. To address the issue, we introduce VLMGuard, a novel learning f"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.00296","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.00296/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:14:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3ves0HkR8zI+GHh1eZyWH5t77gxub2zZu4FbtP4EreGeM5UteS5CN0pPlba5tlOKCTm1URfp4yl78vGMt63cAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T15:08:46.349207Z"},"content_sha256":"dca2a50ce0abafbe625eaee83598e17803009452fef7edf77b83244cb5f67355","schema_version":"1.0","event_id":"sha256:dca2a50ce0abafbe625eaee83598e17803009452fef7edf77b83244cb5f67355"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7ZG6KZRHSRFGEKUFRJ2TZZEZMB/bundle.json","state_url":"https://pith.science/pith/7ZG6KZRHSRFGEKUFRJ2TZZEZMB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7ZG6KZRHSRFGEKUFRJ2TZZEZMB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T15:08:46Z","links":{"resolver":"https://pith.science/pith/7ZG6KZRHSRFGEKUFRJ2TZZEZMB","bundle":"https://pith.science/pith/7ZG6KZRHSRFGEKUFRJ2TZZEZMB/bundle.json","state":"https://pith.science/pith/7ZG6KZRHSRFGEKUFRJ2TZZEZMB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7ZG6KZRHSRFGEKUFRJ2TZZEZMB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:7ZG6KZRHSRFGEKUFRJ2TZZEZMB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1e5e66b0ca0ea40c3cd30c087aee1d2ed670ee2a48a03e72a5d3967b9edff07d","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-01T00:37:29Z","title_canon_sha256":"6202966e18123639417487bb47b4673991126e9a9ad3023c8e8a2951e834bfac"},"schema_version":"1.0","source":{"id":"2410.00296","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.00296","created_at":"2026-07-05T09:14:02Z"},{"alias_kind":"arxiv_version","alias_value":"2410.00296v1","created_at":"2026-07-05T09:14:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.00296","created_at":"2026-07-05T09:14:02Z"},{"alias_kind":"pith_short_12","alias_value":"7ZG6KZRHSRFG","created_at":"2026-07-05T09:14:02Z"},{"alias_kind":"pith_short_16","alias_value":"7ZG6KZRHSRFGEKUF","created_at":"2026-07-05T09:14:02Z"},{"alias_kind":"pith_short_8","alias_value":"7ZG6KZRH","created_at":"2026-07-05T09:14:02Z"}],"graph_snapshots":[{"event_id":"sha256:dca2a50ce0abafbe625eaee83598e17803009452fef7edf77b83244cb5f67355","target":"graph","created_at":"2026-07-05T09:14:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.00296/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision-language models (VLMs) are essential for contextual understanding of both visual and textual information. However, their vulnerability to adversarially manipulated inputs presents significant risks, leading to compromised outputs and raising concerns about the reliability in VLM-integrated applications. Detecting these malicious prompts is thus crucial for maintaining trust in VLM generations. A major challenge in developing a safeguarding prompt classifier is the lack of a large amount of labeled benign and malicious data. To address the issue, we introduce VLMGuard, a novel learning f","authors_text":"Ahmed Salem, Emily Lawton, Jack W. Stokes, Reshmi Ghosh, Robert Sim, Vitor Carvalho, Xuefeng Du, Yixuan Li","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-01T00:37:29Z","title":"VLMGuard: Defending VLMs against Malicious Prompts via Unlabeled Data"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.00296","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1b6d643cbbd4269eb4040b6ea89c75304dde1d1b3968a91cc6ab5e78753f8efb","target":"record","created_at":"2026-07-05T09:14:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1e5e66b0ca0ea40c3cd30c087aee1d2ed670ee2a48a03e72a5d3967b9edff07d","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-01T00:37:29Z","title_canon_sha256":"6202966e18123639417487bb47b4673991126e9a9ad3023c8e8a2951e834bfac"},"schema_version":"1.0","source":{"id":"2410.00296","kind":"arxiv","version":1}},"canonical_sha256":"fe4de56627944a622a858a753ce4996073131ea88c58bbb5592ca84503166ff8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fe4de56627944a622a858a753ce4996073131ea88c58bbb5592ca84503166ff8","first_computed_at":"2026-07-05T09:14:02.723248Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:14:02.723248Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xfsOcaj4FVWXbqqRXyYKEWpQO8RQnNEd46oIOfjY4v2+s5uOYRQhFfgTUQH4brvBj4svQCC9WZ9d6z2M06mrAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:14:02.723847Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.00296","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1b6d643cbbd4269eb4040b6ea89c75304dde1d1b3968a91cc6ab5e78753f8efb","sha256:dca2a50ce0abafbe625eaee83598e17803009452fef7edf77b83244cb5f67355"],"state_sha256":"bf898fd1e428912f22e437ff22cd12544c3da619d9b5738844f76960df69e914"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"k7/T6sA9pRVED8+oyob8yrijeAX53IT4lWrOk9WxwvmPvg4NsDP+0DzAfik9jqHgyIHvhEBBgWQ0wtLngrUODg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T15:08:46.383152Z","bundle_sha256":"b679fe0ba1f47ce8c610b664762f3d18369fcec96ecaff20f4f1036cf003c8c0"}}