{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:BMZDOU7SWPE5J4NSXIDLKQNNTN","short_pith_number":"pith:BMZDOU7S","canonical_record":{"source":{"id":"2010.03007","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-06T20:26:16Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"cc75fd90f81a7331d17642bd242f61afd597ba89c35b5bcf7a05a859d0a0905a","abstract_canon_sha256":"e0964abfff40e118a301572a6cca8a7998031ba33be52cc637f488913b598c73"},"schema_version":"1.0"},"canonical_sha256":"0b323753f2b3c9d4f1b2ba06b541ad9b78e7b73f7b72204429ff4543c3533259","source":{"kind":"arxiv","id":"2010.03007","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.03007","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"arxiv_version","alias_value":"2010.03007v2","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.03007","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"pith_short_12","alias_value":"BMZDOU7SWPE5","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"pith_short_16","alias_value":"BMZDOU7SWPE5J4NS","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"pith_short_8","alias_value":"BMZDOU7S","created_at":"2026-07-05T01:41:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:BMZDOU7SWPE5J4NSXIDLKQNNTN","target":"record","payload":{"canonical_record":{"source":{"id":"2010.03007","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-06T20:26:16Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"cc75fd90f81a7331d17642bd242f61afd597ba89c35b5bcf7a05a859d0a0905a","abstract_canon_sha256":"e0964abfff40e118a301572a6cca8a7998031ba33be52cc637f488913b598c73"},"schema_version":"1.0"},"canonical_sha256":"0b323753f2b3c9d4f1b2ba06b541ad9b78e7b73f7b72204429ff4543c3533259","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:41:20.837984Z","signature_b64":"z05sAMtJdxxIpV6I+Mdc0ZTBdryOeu0lYPPzvj3TQSRKyEeI7lDbS/I8HsxbltH/uP5osKkgonBrDE/mQZVzBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0b323753f2b3c9d4f1b2ba06b541ad9b78e7b73f7b72204429ff4543c3533259","last_reissued_at":"2026-07-05T01:41:20.837499Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:41:20.837499Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2010.03007","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:41:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HoW6CjT8uk85RVOZB+8YJ+Kl+nrAlgD9hqD1/P36dwvuRp5IgoJjlDDE0M2m/4Mtlt4bCPWdMYC9wOSgfRinBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T23:38:06.892996Z"},"content_sha256":"e0e880871551ada11bc9cd7e2ccd34392c56fa2c86efb9a27d866513caada093","schema_version":"1.0","event_id":"sha256:e0e880871551ada11bc9cd7e2ccd34392c56fa2c86efb9a27d866513caada093"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:BMZDOU7SWPE5J4NSXIDLKQNNTN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"BAAAN: Backdoor Attacks Against Autoencoder and GAN-Based Machine Learning Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Ahmed Salem, Mathias Humbert, Michael Backes, Yang Zhang, Yannick Sautter","submitted_at":"2020-10-06T20:26:16Z","abstract_excerpt":"The tremendous progress of autoencoders and generative adversarial networks (GANs) has led to their application to multiple critical tasks, such as fraud detection and sanitized data generation. This increasing adoption has fostered the study of security and privacy risks stemming from these models. However, previous works have mainly focused on membership inference attacks. In this work, we explore one of the most severe attacks against machine learning models, namely the backdoor attack, against both autoencoders and GANs. The backdoor attack is a training time attack where the adversary imp"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.03007","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2010.03007/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:41:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FLrMsetBMhrpoF8OZDTCe1B0OiTpFZjXLu8OWKKPIfreFeQcpx3nKslvtYibuCZrEdJ/1ysN8deDFlm1DO68CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T23:38:06.893533Z"},"content_sha256":"963df5752996e25867d6783377c38721974dc282f2806d804ee8f97f8d5b1b99","schema_version":"1.0","event_id":"sha256:963df5752996e25867d6783377c38721974dc282f2806d804ee8f97f8d5b1b99"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BMZDOU7SWPE5J4NSXIDLKQNNTN/bundle.json","state_url":"https://pith.science/pith/BMZDOU7SWPE5J4NSXIDLKQNNTN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BMZDOU7SWPE5J4NSXIDLKQNNTN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T23:38:06Z","links":{"resolver":"https://pith.science/pith/BMZDOU7SWPE5J4NSXIDLKQNNTN","bundle":"https://pith.science/pith/BMZDOU7SWPE5J4NSXIDLKQNNTN/bundle.json","state":"https://pith.science/pith/BMZDOU7SWPE5J4NSXIDLKQNNTN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BMZDOU7SWPE5J4NSXIDLKQNNTN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:BMZDOU7SWPE5J4NSXIDLKQNNTN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e0964abfff40e118a301572a6cca8a7998031ba33be52cc637f488913b598c73","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-06T20:26:16Z","title_canon_sha256":"cc75fd90f81a7331d17642bd242f61afd597ba89c35b5bcf7a05a859d0a0905a"},"schema_version":"1.0","source":{"id":"2010.03007","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.03007","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"arxiv_version","alias_value":"2010.03007v2","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.03007","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"pith_short_12","alias_value":"BMZDOU7SWPE5","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"pith_short_16","alias_value":"BMZDOU7SWPE5J4NS","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"pith_short_8","alias_value":"BMZDOU7S","created_at":"2026-07-05T01:41:20Z"}],"graph_snapshots":[{"event_id":"sha256:963df5752996e25867d6783377c38721974dc282f2806d804ee8f97f8d5b1b99","target":"graph","created_at":"2026-07-05T01:41:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2010.03007/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The tremendous progress of autoencoders and generative adversarial networks (GANs) has led to their application to multiple critical tasks, such as fraud detection and sanitized data generation. This increasing adoption has fostered the study of security and privacy risks stemming from these models. However, previous works have mainly focused on membership inference attacks. In this work, we explore one of the most severe attacks against machine learning models, namely the backdoor attack, against both autoencoders and GANs. The backdoor attack is a training time attack where the adversary imp","authors_text":"Ahmed Salem, Mathias Humbert, Michael Backes, Yang Zhang, Yannick Sautter","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-06T20:26:16Z","title":"BAAAN: Backdoor Attacks Against Autoencoder and GAN-Based Machine Learning Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.03007","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e0e880871551ada11bc9cd7e2ccd34392c56fa2c86efb9a27d866513caada093","target":"record","created_at":"2026-07-05T01:41:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e0964abfff40e118a301572a6cca8a7998031ba33be52cc637f488913b598c73","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-06T20:26:16Z","title_canon_sha256":"cc75fd90f81a7331d17642bd242f61afd597ba89c35b5bcf7a05a859d0a0905a"},"schema_version":"1.0","source":{"id":"2010.03007","kind":"arxiv","version":2}},"canonical_sha256":"0b323753f2b3c9d4f1b2ba06b541ad9b78e7b73f7b72204429ff4543c3533259","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0b323753f2b3c9d4f1b2ba06b541ad9b78e7b73f7b72204429ff4543c3533259","first_computed_at":"2026-07-05T01:41:20.837499Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:41:20.837499Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"z05sAMtJdxxIpV6I+Mdc0ZTBdryOeu0lYPPzvj3TQSRKyEeI7lDbS/I8HsxbltH/uP5osKkgonBrDE/mQZVzBg==","signature_status":"signed_v1","signed_at":"2026-07-05T01:41:20.837984Z","signed_message":"canonical_sha256_bytes"},"source_id":"2010.03007","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e0e880871551ada11bc9cd7e2ccd34392c56fa2c86efb9a27d866513caada093","sha256:963df5752996e25867d6783377c38721974dc282f2806d804ee8f97f8d5b1b99"],"state_sha256":"c8582f6a769d8ff8cf3d8fe4808d92da7982300c3ce78955d33993770bc336c5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rSkL1PIeKPbzJhaQv2nzgpN6zKTtAIuj+dg6kWetCtGQUj4t9SnQUUTgQRC+RFS5eXsHSaIaF4YVGmn/mAikAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T23:38:06.898465Z","bundle_sha256":"8437d6e6a1c427315f061dfefc90d4b3cf3a28ef3cd916fa60f3aa09a721e9fe"}}