{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:B4QG7OHHK4D4RZNG4MREHONFDA","short_pith_number":"pith:B4QG7OHH","canonical_record":{"source":{"id":"2202.03423","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-02-05T03:34:01Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"9c875e08ab4d3e1c72cce46c83ab3d3854942213cdb4543fbce6bdddbd5a15b2","abstract_canon_sha256":"f9f120cecdf8f5a0e95a24e1e23d54085091a2b5d1c1665a0b634fc0936c5088"},"schema_version":"1.0"},"canonical_sha256":"0f206fb8e75707c8e5a6e32243b9a51830f9334e97f4d5ff2e53fdcbd4c9401d","source":{"kind":"arxiv","id":"2202.03423","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.03423","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"arxiv_version","alias_value":"2202.03423v1","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.03423","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"pith_short_12","alias_value":"B4QG7OHHK4D4","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"pith_short_16","alias_value":"B4QG7OHHK4D4RZNG","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"pith_short_8","alias_value":"B4QG7OHH","created_at":"2026-07-05T03:54:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:B4QG7OHHK4D4RZNG4MREHONFDA","target":"record","payload":{"canonical_record":{"source":{"id":"2202.03423","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-02-05T03:34:01Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"9c875e08ab4d3e1c72cce46c83ab3d3854942213cdb4543fbce6bdddbd5a15b2","abstract_canon_sha256":"f9f120cecdf8f5a0e95a24e1e23d54085091a2b5d1c1665a0b634fc0936c5088"},"schema_version":"1.0"},"canonical_sha256":"0f206fb8e75707c8e5a6e32243b9a51830f9334e97f4d5ff2e53fdcbd4c9401d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:54:44.164079Z","signature_b64":"s1rOE4hcdK5eoaqFTazIuTTKkZO13fig7Dd1KaCWcl1KWoVdXUrKjD44UBrtSIE9lDC8rxJ40Tdx/Q99TxW9Cw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0f206fb8e75707c8e5a6e32243b9a51830f9334e97f4d5ff2e53fdcbd4c9401d","last_reissued_at":"2026-07-05T03:54:44.163674Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:54:44.163674Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2202.03423","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:54:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Nn18ZNA3mNEABu91e23N0DlOTGgiRnu4TqRozeI3erVq+fOZ66kTvXBemRv5WupQJuu5N0nO4BMTutUeD+KXAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:01:05.933943Z"},"content_sha256":"f5773a9fcabb9f3347cdc0bb0d0fdf4c0bab3868aa95c696a06d31b4ea9ee044","schema_version":"1.0","event_id":"sha256:f5773a9fcabb9f3347cdc0bb0d0fdf4c0bab3868aa95c696a06d31b4ea9ee044"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:B4QG7OHHK4D4RZNG4MREHONFDA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Backdoor Defense via Decoupling the Training Process","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Baoyuan Wu, Kui Ren, Kunzhe Huang, Yiming Li, Zhan Qin","submitted_at":"2022-02-05T03:34:01Z","abstract_excerpt":"Recent studies have revealed that deep neural networks (DNNs) are vulnerable to backdoor attacks, where attackers embed hidden backdoors in the DNN model by poisoning a few training samples. The attacked model behaves normally on benign samples, whereas its prediction will be maliciously changed when the backdoor is activated. We reveal that poisoned samples tend to cluster together in the feature space of the attacked DNN model, which is mostly due to the end-to-end supervised training paradigm. Inspired by this observation, we propose a novel backdoor defense via decoupling the original end-"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.03423","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2202.03423/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:54:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pSyCzv4XyWBjR9VU/2jnSAqwsSCQsr9oR+c3ILzPjboX/iLasDXfu7RXorshMUDxeW+/9smMvswZGzB8u8brAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:01:05.934784Z"},"content_sha256":"b14193b092878670272b572e371b070ccf1708f7b71e75f3ca7cb1290a78b4e9","schema_version":"1.0","event_id":"sha256:b14193b092878670272b572e371b070ccf1708f7b71e75f3ca7cb1290a78b4e9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/B4QG7OHHK4D4RZNG4MREHONFDA/bundle.json","state_url":"https://pith.science/pith/B4QG7OHHK4D4RZNG4MREHONFDA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/B4QG7OHHK4D4RZNG4MREHONFDA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T18:01:05Z","links":{"resolver":"https://pith.science/pith/B4QG7OHHK4D4RZNG4MREHONFDA","bundle":"https://pith.science/pith/B4QG7OHHK4D4RZNG4MREHONFDA/bundle.json","state":"https://pith.science/pith/B4QG7OHHK4D4RZNG4MREHONFDA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/B4QG7OHHK4D4RZNG4MREHONFDA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:B4QG7OHHK4D4RZNG4MREHONFDA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f9f120cecdf8f5a0e95a24e1e23d54085091a2b5d1c1665a0b634fc0936c5088","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-02-05T03:34:01Z","title_canon_sha256":"9c875e08ab4d3e1c72cce46c83ab3d3854942213cdb4543fbce6bdddbd5a15b2"},"schema_version":"1.0","source":{"id":"2202.03423","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.03423","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"arxiv_version","alias_value":"2202.03423v1","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.03423","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"pith_short_12","alias_value":"B4QG7OHHK4D4","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"pith_short_16","alias_value":"B4QG7OHHK4D4RZNG","created_at":"2026-07-05T03:54:44Z"},{"alias_kind":"pith_short_8","alias_value":"B4QG7OHH","created_at":"2026-07-05T03:54:44Z"}],"graph_snapshots":[{"event_id":"sha256:b14193b092878670272b572e371b070ccf1708f7b71e75f3ca7cb1290a78b4e9","target":"graph","created_at":"2026-07-05T03:54:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.03423/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent studies have revealed that deep neural networks (DNNs) are vulnerable to backdoor attacks, where attackers embed hidden backdoors in the DNN model by poisoning a few training samples. The attacked model behaves normally on benign samples, whereas its prediction will be maliciously changed when the backdoor is activated. We reveal that poisoned samples tend to cluster together in the feature space of the attacked DNN model, which is mostly due to the end-to-end supervised training paradigm. Inspired by this observation, we propose a novel backdoor defense via decoupling the original end-","authors_text":"Baoyuan Wu, Kui Ren, Kunzhe Huang, Yiming Li, Zhan Qin","cross_cats":["cs.CV","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-02-05T03:34:01Z","title":"Backdoor Defense via Decoupling the Training Process"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.03423","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f5773a9fcabb9f3347cdc0bb0d0fdf4c0bab3868aa95c696a06d31b4ea9ee044","target":"record","created_at":"2026-07-05T03:54:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f9f120cecdf8f5a0e95a24e1e23d54085091a2b5d1c1665a0b634fc0936c5088","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-02-05T03:34:01Z","title_canon_sha256":"9c875e08ab4d3e1c72cce46c83ab3d3854942213cdb4543fbce6bdddbd5a15b2"},"schema_version":"1.0","source":{"id":"2202.03423","kind":"arxiv","version":1}},"canonical_sha256":"0f206fb8e75707c8e5a6e32243b9a51830f9334e97f4d5ff2e53fdcbd4c9401d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0f206fb8e75707c8e5a6e32243b9a51830f9334e97f4d5ff2e53fdcbd4c9401d","first_computed_at":"2026-07-05T03:54:44.163674Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:54:44.163674Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"s1rOE4hcdK5eoaqFTazIuTTKkZO13fig7Dd1KaCWcl1KWoVdXUrKjD44UBrtSIE9lDC8rxJ40Tdx/Q99TxW9Cw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:54:44.164079Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.03423","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f5773a9fcabb9f3347cdc0bb0d0fdf4c0bab3868aa95c696a06d31b4ea9ee044","sha256:b14193b092878670272b572e371b070ccf1708f7b71e75f3ca7cb1290a78b4e9"],"state_sha256":"3cdb1794a15d2e3dd2f36ac69449907a3e7ffd60fe517366f70bed7badf4dcdc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ywupkVMpucXUa+0IgJQNtiRXVM7ryYfjuGte7hGVgZLlrsiAac1xrIL2v8B+Xfcw2iGFiZR9gYPLYBi3jRuIDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T18:01:05.943166Z","bundle_sha256":"b38e30434b2b7bf2b38a7662fffdcd76665a6256d6f90ee40f52bf8bd1df795a"}}