{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:AT5D6STLQXN5T6JVSEDDYXFIHE","short_pith_number":"pith:AT5D6STL","canonical_record":{"source":{"id":"2106.07925","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-06-15T07:27:39Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"954e4e4333b16771baee97cc84a44a10219992c6629968ee064d4d0c1c98bf3a","abstract_canon_sha256":"d56c1c510a233c794b94eee9a0bbcc2af42005c1e809086cc0fe76dbc8e7e5b4"},"schema_version":"1.0"},"canonical_sha256":"04fa3f4a6b85dbd9f93591063c5ca839289571142639723850e7045ac8880569","source":{"kind":"arxiv","id":"2106.07925","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.07925","created_at":"2026-07-05T02:49:35Z"},{"alias_kind":"arxiv_version","alias_value":"2106.07925v1","created_at":"2026-07-05T02:49:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.07925","created_at":"2026-07-05T02:49:35Z"},{"alias_kind":"pith_short_12","alias_value":"AT5D6STLQXN5","created_at":"2026-07-05T02:49:35Z"},{"alias_kind":"pith_short_16","alias_value":"AT5D6STLQXN5T6JV","created_at":"2026-07-05T02:49:35Z"},{"alias_kind":"pith_short_8","alias_value":"AT5D6STL","created_at":"2026-07-05T02:49:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:AT5D6STLQXN5T6JVSEDDYXFIHE","target":"record","payload":{"canonical_record":{"source":{"id":"2106.07925","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-06-15T07:27:39Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"954e4e4333b16771baee97cc84a44a10219992c6629968ee064d4d0c1c98bf3a","abstract_canon_sha256":"d56c1c510a233c794b94eee9a0bbcc2af42005c1e809086cc0fe76dbc8e7e5b4"},"schema_version":"1.0"},"canonical_sha256":"04fa3f4a6b85dbd9f93591063c5ca839289571142639723850e7045ac8880569","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:49:35.609983Z","signature_b64":"Gv0bgDBHecprEV311EcWsSQ1p17p0vBQfZEboSziCPkK/0nMe2ARd5OPIRdDA3jnaOsu07gpuLrj85a3k+oIBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"04fa3f4a6b85dbd9f93591063c5ca839289571142639723850e7045ac8880569","last_reissued_at":"2026-07-05T02:49:35.609445Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:49:35.609445Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2106.07925","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:49:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WK0f3CgGOCAxHZRtWTwNEj1Pmy188rRES/oljEEyfWXYUPum+cisZgIad51eLNV9kwa+viWuB9s0tp87PJP8Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T02:52:30.992111Z"},"content_sha256":"31bff675037c23767002db6536690927a39f066a8c1232c90462e5c456adae56","schema_version":"1.0","event_id":"sha256:31bff675037c23767002db6536690927a39f066a8c1232c90462e5c456adae56"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:AT5D6STLQXN5T6JVSEDDYXFIHE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Machine Learning with Electronic Health Records is vulnerable to Backdoor Trigger Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Akshay Mehra, Byunggill Joe, Insik Shin, Jihun Hamm","submitted_at":"2021-06-15T07:27:39Z","abstract_excerpt":"Electronic Health Records (EHRs) provide a wealth of information for machine learning algorithms to predict the patient outcome from the data including diagnostic information, vital signals, lab tests, drug administration, and demographic information. Machine learning models can be built, for example, to evaluate patients based on their predicted mortality or morbidity and to predict required resources for efficient resource management in hospitals. In this paper, we demonstrate that an attacker can manipulate the machine learning predictions with EHRs easily and selectively at test time by ba"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.07925","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2106.07925/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:49:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bOWKIFBHyxbL1MYL7MXKPMjBgP/m2s4a8fgpXyVDXN1Uwk+vjMVtSjyVqP8uQ4Uvn0g/pN9Qpjx4ijVfVKoUAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T02:52:30.993025Z"},"content_sha256":"c7f8e009609f56031077837d666bf4eb6193b2f7f3559817e66c77307b946390","schema_version":"1.0","event_id":"sha256:c7f8e009609f56031077837d666bf4eb6193b2f7f3559817e66c77307b946390"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AT5D6STLQXN5T6JVSEDDYXFIHE/bundle.json","state_url":"https://pith.science/pith/AT5D6STLQXN5T6JVSEDDYXFIHE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AT5D6STLQXN5T6JVSEDDYXFIHE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T02:52:31Z","links":{"resolver":"https://pith.science/pith/AT5D6STLQXN5T6JVSEDDYXFIHE","bundle":"https://pith.science/pith/AT5D6STLQXN5T6JVSEDDYXFIHE/bundle.json","state":"https://pith.science/pith/AT5D6STLQXN5T6JVSEDDYXFIHE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AT5D6STLQXN5T6JVSEDDYXFIHE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:AT5D6STLQXN5T6JVSEDDYXFIHE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d56c1c510a233c794b94eee9a0bbcc2af42005c1e809086cc0fe76dbc8e7e5b4","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-06-15T07:27:39Z","title_canon_sha256":"954e4e4333b16771baee97cc84a44a10219992c6629968ee064d4d0c1c98bf3a"},"schema_version":"1.0","source":{"id":"2106.07925","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.07925","created_at":"2026-07-05T02:49:35Z"},{"alias_kind":"arxiv_version","alias_value":"2106.07925v1","created_at":"2026-07-05T02:49:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.07925","created_at":"2026-07-05T02:49:35Z"},{"alias_kind":"pith_short_12","alias_value":"AT5D6STLQXN5","created_at":"2026-07-05T02:49:35Z"},{"alias_kind":"pith_short_16","alias_value":"AT5D6STLQXN5T6JV","created_at":"2026-07-05T02:49:35Z"},{"alias_kind":"pith_short_8","alias_value":"AT5D6STL","created_at":"2026-07-05T02:49:35Z"}],"graph_snapshots":[{"event_id":"sha256:c7f8e009609f56031077837d666bf4eb6193b2f7f3559817e66c77307b946390","target":"graph","created_at":"2026-07-05T02:49:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.07925/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Electronic Health Records (EHRs) provide a wealth of information for machine learning algorithms to predict the patient outcome from the data including diagnostic information, vital signals, lab tests, drug administration, and demographic information. Machine learning models can be built, for example, to evaluate patients based on their predicted mortality or morbidity and to predict required resources for efficient resource management in hospitals. In this paper, we demonstrate that an attacker can manipulate the machine learning predictions with EHRs easily and selectively at test time by ba","authors_text":"Akshay Mehra, Byunggill Joe, Insik Shin, Jihun Hamm","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-06-15T07:27:39Z","title":"Machine Learning with Electronic Health Records is vulnerable to Backdoor Trigger Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.07925","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:31bff675037c23767002db6536690927a39f066a8c1232c90462e5c456adae56","target":"record","created_at":"2026-07-05T02:49:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d56c1c510a233c794b94eee9a0bbcc2af42005c1e809086cc0fe76dbc8e7e5b4","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-06-15T07:27:39Z","title_canon_sha256":"954e4e4333b16771baee97cc84a44a10219992c6629968ee064d4d0c1c98bf3a"},"schema_version":"1.0","source":{"id":"2106.07925","kind":"arxiv","version":1}},"canonical_sha256":"04fa3f4a6b85dbd9f93591063c5ca839289571142639723850e7045ac8880569","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"04fa3f4a6b85dbd9f93591063c5ca839289571142639723850e7045ac8880569","first_computed_at":"2026-07-05T02:49:35.609445Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:49:35.609445Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Gv0bgDBHecprEV311EcWsSQ1p17p0vBQfZEboSziCPkK/0nMe2ARd5OPIRdDA3jnaOsu07gpuLrj85a3k+oIBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T02:49:35.609983Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.07925","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:31bff675037c23767002db6536690927a39f066a8c1232c90462e5c456adae56","sha256:c7f8e009609f56031077837d666bf4eb6193b2f7f3559817e66c77307b946390"],"state_sha256":"7e0ac78a93d2537591491ec7916414322b1193de558e4a33cf44b1a35eb605ee"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UF9jrwhPl2IW08B3awnKBv6EVCMS1bbzhE9/UUuX6CUlGWhT0PYdJbP75HDzT32nJD1YRMh0cNn8+K6DQan2Bw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T02:52:31.010784Z","bundle_sha256":"fbaf255df52404261611a97ca09fcc330076d3d23bdce14c991ac96db53783a7"}}