{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2024:BITE7BHAHLVJNGGYATD2MHAMRN","short_pith_number":"pith:BITE7BHA","schema_version":"1.0","canonical_sha256":"0a264f84e03aea9698d804c7a61c0c8b45cfadff1f7aae39f0be6d507adaa770","source":{"kind":"arxiv","id":"2409.14200","version":1},"attestation_state":"computed","paper":{"title":"Data-centric NLP Backdoor Defense from the Lens of Memorization","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CL","authors_text":"Juan Zhai, Mengnan Du, Mingyu Jin, Shiqing Ma, Zhenting Wang, Zhizhi Wang","submitted_at":"2024-09-21T17:12:18Z","abstract_excerpt":"Backdoor attack is a severe threat to the trustworthiness of DNN-based language models. In this paper, we first extend the definition of memorization of language models from sample-wise to more fine-grained sentence element-wise (e.g., word, phrase, structure, and style), and then point out that language model backdoors are a type of element-wise memorization. Through further analysis, we find that the strength of such memorization is positively correlated to the frequency of duplicated elements in the training dataset. In conclusion, duplicated sentence elements are necessary for successful b"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2409.14200","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-09-21T17:12:18Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"cf023c44494bd579a1845a2668ef20a1a59eff5a24f5ddf2606c9fac67888697","abstract_canon_sha256":"026b4bcb838066f1c4582cbfd3ad494dd4716d5755aff0534106d486449e6a7c"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:10:13.233170Z","signature_b64":"q+FMB1v49S5nDNsxo4QQdEFkpygo5ZhPNl6KMgISPAuLQsvt8ckgFTCCmd/TyL9BCxr7fV3+n+449tJG+3ThCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0a264f84e03aea9698d804c7a61c0c8b45cfadff1f7aae39f0be6d507adaa770","last_reissued_at":"2026-07-05T09:10:13.232680Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:10:13.232680Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Data-centric NLP Backdoor Defense from the Lens of Memorization","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CL","authors_text":"Juan Zhai, Mengnan Du, Mingyu Jin, Shiqing Ma, Zhenting Wang, Zhizhi Wang","submitted_at":"2024-09-21T17:12:18Z","abstract_excerpt":"Backdoor attack is a severe threat to the trustworthiness of DNN-based language models. In this paper, we first extend the definition of memorization of language models from sample-wise to more fine-grained sentence element-wise (e.g., word, phrase, structure, and style), and then point out that language model backdoors are a type of element-wise memorization. Through further analysis, we find that the strength of such memorization is positively correlated to the frequency of duplicated elements in the training dataset. In conclusion, duplicated sentence elements are necessary for successful b"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.14200","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.14200/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2409.14200","created_at":"2026-07-05T09:10:13.232742+00:00"},{"alias_kind":"arxiv_version","alias_value":"2409.14200v1","created_at":"2026-07-05T09:10:13.232742+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.14200","created_at":"2026-07-05T09:10:13.232742+00:00"},{"alias_kind":"pith_short_12","alias_value":"BITE7BHAHLVJ","created_at":"2026-07-05T09:10:13.232742+00:00"},{"alias_kind":"pith_short_16","alias_value":"BITE7BHAHLVJNGGY","created_at":"2026-07-05T09:10:13.232742+00:00"},{"alias_kind":"pith_short_8","alias_value":"BITE7BHA","created_at":"2026-07-05T09:10:13.232742+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":0,"sample":[{"citing_arxiv_id":"2502.05206","citing_title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","ref_index":175,"is_internal_anchor":false}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/BITE7BHAHLVJNGGYATD2MHAMRN","json":"https://pith.science/pith/BITE7BHAHLVJNGGYATD2MHAMRN.json","graph_json":"https://pith.science/api/pith-number/BITE7BHAHLVJNGGYATD2MHAMRN/graph.json","events_json":"https://pith.science/api/pith-number/BITE7BHAHLVJNGGYATD2MHAMRN/events.json","paper":"https://pith.science/paper/BITE7BHA"},"agent_actions":{"view_html":"https://pith.science/pith/BITE7BHAHLVJNGGYATD2MHAMRN","download_json":"https://pith.science/pith/BITE7BHAHLVJNGGYATD2MHAMRN.json","view_paper":"https://pith.science/paper/BITE7BHA","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2409.14200&json=true","fetch_graph":"https://pith.science/api/pith-number/BITE7BHAHLVJNGGYATD2MHAMRN/graph.json","fetch_events":"https://pith.science/api/pith-number/BITE7BHAHLVJNGGYATD2MHAMRN/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/BITE7BHAHLVJNGGYATD2MHAMRN/action/timestamp_anchor","attest_storage":"https://pith.science/pith/BITE7BHAHLVJNGGYATD2MHAMRN/action/storage_attestation","attest_author":"https://pith.science/pith/BITE7BHAHLVJNGGYATD2MHAMRN/action/author_attestation","sign_citation":"https://pith.science/pith/BITE7BHAHLVJNGGYATD2MHAMRN/action/citation_signature","submit_replication":"https://pith.science/pith/BITE7BHAHLVJNGGYATD2MHAMRN/action/replication_record"}},"created_at":"2026-07-05T09:10:13.232742+00:00","updated_at":"2026-07-05T09:10:13.232742+00:00"}