{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:B6EGUQ3OSDOWBTLL2AHBATXJRA","short_pith_number":"pith:B6EGUQ3O","canonical_record":{"source":{"id":"2301.06241","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-16T02:59:40Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"dfbefd224c3a26e12c1340133deea0597227882a6d341e58d265cc713e97e8ba","abstract_canon_sha256":"9fab7ff55bdba212671677e690e626d82f0ea083d23861a3d9a7c92554f256ae"},"schema_version":"1.0"},"canonical_sha256":"0f886a436e90dd60cd6bd00e104ee98805eaffde842cb116474e8fed43bd3fed","source":{"kind":"arxiv","id":"2301.06241","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2301.06241","created_at":"2026-07-05T05:33:29Z"},{"alias_kind":"arxiv_version","alias_value":"2301.06241v1","created_at":"2026-07-05T05:33:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.06241","created_at":"2026-07-05T05:33:29Z"},{"alias_kind":"pith_short_12","alias_value":"B6EGUQ3OSDOW","created_at":"2026-07-05T05:33:29Z"},{"alias_kind":"pith_short_16","alias_value":"B6EGUQ3OSDOWBTLL","created_at":"2026-07-05T05:33:29Z"},{"alias_kind":"pith_short_8","alias_value":"B6EGUQ3O","created_at":"2026-07-05T05:33:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:B6EGUQ3OSDOWBTLL2AHBATXJRA","target":"record","payload":{"canonical_record":{"source":{"id":"2301.06241","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-16T02:59:40Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"dfbefd224c3a26e12c1340133deea0597227882a6d341e58d265cc713e97e8ba","abstract_canon_sha256":"9fab7ff55bdba212671677e690e626d82f0ea083d23861a3d9a7c92554f256ae"},"schema_version":"1.0"},"canonical_sha256":"0f886a436e90dd60cd6bd00e104ee98805eaffde842cb116474e8fed43bd3fed","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:33:29.543514Z","signature_b64":"xwuHwZWPdHFExeYj17TKPKZgIngUm3pWaKtsGjHfeDWSQEPD0h3E6wSkrdRicP9GGKVDE8oMcY/GfZFMXnY+Bg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0f886a436e90dd60cd6bd00e104ee98805eaffde842cb116474e8fed43bd3fed","last_reissued_at":"2026-07-05T05:33:29.543090Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:33:29.543090Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2301.06241","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:33:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PdfoIHMlytamICnPCa4sZkHL/+Nvhz4n5jfeCjwokxEfbzD34yknWd+SETeGFwoLwlGxoCLSdn4exofgcGGKDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T15:47:38.119272Z"},"content_sha256":"5068ba52d554b17d2164e8c24331d09f594ec2c8f8edd5223b6b0b47d46b3699","schema_version":"1.0","event_id":"sha256:5068ba52d554b17d2164e8c24331d09f594ec2c8f8edd5223b6b0b47d46b3699"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:B6EGUQ3OSDOWBTLL2AHBATXJRA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Guangyu Shen, Guanhong Tao, Kaiyuan Zhang, Qiuling Xu, Shengwei An, Shiqing Ma, Shiwei Feng, Siyuan Cheng, Xiangyu Zhang, Xiangzhe Xu, Yingqi Liu","submitted_at":"2023-01-16T02:59:40Z","abstract_excerpt":"Deep Learning backdoor attacks have a threat model similar to traditional cyber attacks. Attack forensics, a critical counter-measure for traditional cyber attacks, is hence of importance for defending model backdoor attacks. In this paper, we propose a novel model backdoor forensics technique. Given a few attack samples such as inputs with backdoor triggers, which may represent different types of backdoors, our technique automatically decomposes them to clean inputs and the corresponding triggers. It then clusters the triggers based on their properties to allow automatic attack categorization"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.06241","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2301.06241/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:33:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ODlHV/Ixn62r8F8q6gO5SXdH5Ezm6FeRIrxGpL/wfuoz6rdRCkLkVBZ50zW2vfatXu/bnAeLJVx0FbgFVfCABw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T15:47:38.119662Z"},"content_sha256":"c7545d7c27ca312a7111c0eb903ec3b5a9c18f80b180f7cd1b6b2333c8f31c18","schema_version":"1.0","event_id":"sha256:c7545d7c27ca312a7111c0eb903ec3b5a9c18f80b180f7cd1b6b2333c8f31c18"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/B6EGUQ3OSDOWBTLL2AHBATXJRA/bundle.json","state_url":"https://pith.science/pith/B6EGUQ3OSDOWBTLL2AHBATXJRA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/B6EGUQ3OSDOWBTLL2AHBATXJRA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T15:47:38Z","links":{"resolver":"https://pith.science/pith/B6EGUQ3OSDOWBTLL2AHBATXJRA","bundle":"https://pith.science/pith/B6EGUQ3OSDOWBTLL2AHBATXJRA/bundle.json","state":"https://pith.science/pith/B6EGUQ3OSDOWBTLL2AHBATXJRA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/B6EGUQ3OSDOWBTLL2AHBATXJRA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:B6EGUQ3OSDOWBTLL2AHBATXJRA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9fab7ff55bdba212671677e690e626d82f0ea083d23861a3d9a7c92554f256ae","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-16T02:59:40Z","title_canon_sha256":"dfbefd224c3a26e12c1340133deea0597227882a6d341e58d265cc713e97e8ba"},"schema_version":"1.0","source":{"id":"2301.06241","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2301.06241","created_at":"2026-07-05T05:33:29Z"},{"alias_kind":"arxiv_version","alias_value":"2301.06241v1","created_at":"2026-07-05T05:33:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.06241","created_at":"2026-07-05T05:33:29Z"},{"alias_kind":"pith_short_12","alias_value":"B6EGUQ3OSDOW","created_at":"2026-07-05T05:33:29Z"},{"alias_kind":"pith_short_16","alias_value":"B6EGUQ3OSDOWBTLL","created_at":"2026-07-05T05:33:29Z"},{"alias_kind":"pith_short_8","alias_value":"B6EGUQ3O","created_at":"2026-07-05T05:33:29Z"}],"graph_snapshots":[{"event_id":"sha256:c7545d7c27ca312a7111c0eb903ec3b5a9c18f80b180f7cd1b6b2333c8f31c18","target":"graph","created_at":"2026-07-05T05:33:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2301.06241/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep Learning backdoor attacks have a threat model similar to traditional cyber attacks. Attack forensics, a critical counter-measure for traditional cyber attacks, is hence of importance for defending model backdoor attacks. In this paper, we propose a novel model backdoor forensics technique. Given a few attack samples such as inputs with backdoor triggers, which may represent different types of backdoors, our technique automatically decomposes them to clean inputs and the corresponding triggers. It then clusters the triggers based on their properties to allow automatic attack categorization","authors_text":"Guangyu Shen, Guanhong Tao, Kaiyuan Zhang, Qiuling Xu, Shengwei An, Shiqing Ma, Shiwei Feng, Siyuan Cheng, Xiangyu Zhang, Xiangzhe Xu, Yingqi Liu","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-16T02:59:40Z","title":"BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.06241","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5068ba52d554b17d2164e8c24331d09f594ec2c8f8edd5223b6b0b47d46b3699","target":"record","created_at":"2026-07-05T05:33:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9fab7ff55bdba212671677e690e626d82f0ea083d23861a3d9a7c92554f256ae","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-16T02:59:40Z","title_canon_sha256":"dfbefd224c3a26e12c1340133deea0597227882a6d341e58d265cc713e97e8ba"},"schema_version":"1.0","source":{"id":"2301.06241","kind":"arxiv","version":1}},"canonical_sha256":"0f886a436e90dd60cd6bd00e104ee98805eaffde842cb116474e8fed43bd3fed","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0f886a436e90dd60cd6bd00e104ee98805eaffde842cb116474e8fed43bd3fed","first_computed_at":"2026-07-05T05:33:29.543090Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:33:29.543090Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xwuHwZWPdHFExeYj17TKPKZgIngUm3pWaKtsGjHfeDWSQEPD0h3E6wSkrdRicP9GGKVDE8oMcY/GfZFMXnY+Bg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:33:29.543514Z","signed_message":"canonical_sha256_bytes"},"source_id":"2301.06241","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5068ba52d554b17d2164e8c24331d09f594ec2c8f8edd5223b6b0b47d46b3699","sha256:c7545d7c27ca312a7111c0eb903ec3b5a9c18f80b180f7cd1b6b2333c8f31c18"],"state_sha256":"bb96af57b2faf0630bc1b7f0a01f2ca014bdd82edfda7e32411c3c001e159fc4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ejYj+iiIizjH6BGuDvGmNtnvhFNWKr3kzl1mcLqXtVwkk2x3PYUIK1XmjOgBT1Qo/LOIVZPYM58fDaFgVT2uDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T15:47:38.121618Z","bundle_sha256":"b3b800a575c822731dd3ed4463e63b2c50055b21f6e908d771dd642699bdbdfc"}}