{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:BSY4UKLAWZY5MX5ZVZDEBW5W3R","short_pith_number":"pith:BSY4UKLA","canonical_record":{"source":{"id":"2109.05507","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-09-12T12:44:52Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"c1fb6b7dc0ed882f059c20302d8dfdfb8d88e3a6a7983aebc5d56dd528250366","abstract_canon_sha256":"3797c42d2bcbc6980d7ca7eae1c0d398932f1424f2962217ffe3014e30e9028e"},"schema_version":"1.0"},"canonical_sha256":"0cb1ca2960b671d65fb9ae4640dbb6dc48bdd32da5069a46de863c5a22d76032","source":{"kind":"arxiv","id":"2109.05507","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.05507","created_at":"2026-07-05T05:31:11Z"},{"alias_kind":"arxiv_version","alias_value":"2109.05507v3","created_at":"2026-07-05T05:31:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.05507","created_at":"2026-07-05T05:31:11Z"},{"alias_kind":"pith_short_12","alias_value":"BSY4UKLAWZY5","created_at":"2026-07-05T05:31:11Z"},{"alias_kind":"pith_short_16","alias_value":"BSY4UKLAWZY5MX5Z","created_at":"2026-07-05T05:31:11Z"},{"alias_kind":"pith_short_8","alias_value":"BSY4UKLA","created_at":"2026-07-05T05:31:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:BSY4UKLAWZY5MX5ZVZDEBW5W3R","target":"record","payload":{"canonical_record":{"source":{"id":"2109.05507","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-09-12T12:44:52Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"c1fb6b7dc0ed882f059c20302d8dfdfb8d88e3a6a7983aebc5d56dd528250366","abstract_canon_sha256":"3797c42d2bcbc6980d7ca7eae1c0d398932f1424f2962217ffe3014e30e9028e"},"schema_version":"1.0"},"canonical_sha256":"0cb1ca2960b671d65fb9ae4640dbb6dc48bdd32da5069a46de863c5a22d76032","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:31:11.128834Z","signature_b64":"VzteA0oRMA9xVcSybc+hiW4FMS+CVnlIf9qlgkmF6lPcH6Y73BbJqwRvFuEPLP8FZbx755bAVMe/Bw0HIeo6Dw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0cb1ca2960b671d65fb9ae4640dbb6dc48bdd32da5069a46de863c5a22d76032","last_reissued_at":"2026-07-05T05:31:11.128444Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:31:11.128444Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2109.05507","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:31:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YJtG0jjtsLT0ZXOwQYkQ2GI14sTp1duxq3elIEdSLPrKotLvL72kq8uh5ANk+aRqdMNrEgBSRCMzGFeZ9sFoCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T10:30:03.518319Z"},"content_sha256":"23707b0b99af44f322f8a0ad39d5a967eacb9ce7153a63a93e0ddf33b8270395","schema_version":"1.0","event_id":"sha256:23707b0b99af44f322f8a0ad39d5a967eacb9ce7153a63a93e0ddf33b8270395"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:BSY4UKLAWZY5MX5ZVZDEBW5W3R","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Check Your Other Door! Creating Backdoor Attacks in the Frequency Domain","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Bernard Ghanem, Hasan Abed Al Kader Hammoud","submitted_at":"2021-09-12T12:44:52Z","abstract_excerpt":"Deep Neural Networks (DNNs) are ubiquitous and span a variety of applications ranging from image classification to real-time object detection. As DNN models become more sophisticated, the computational cost of training these models becomes a burden. For this reason, outsourcing the training process has been the go-to option for many DNN users. Unfortunately, this comes at the cost of vulnerability to backdoor attacks. These attacks aim to establish hidden backdoors in the DNN so that it performs well on clean samples, but outputs a particular target label when a trigger is applied to the input"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.05507","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2109.05507/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:31:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mFnL4DhdDmK9l+JTKHVGsECDVYUM0LcO1OzbgHFMZVqddGRCLDbIpN2SGANOZ0NT7fYgU/S98LSfQL/TipGmDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T10:30:03.518819Z"},"content_sha256":"fbb4b9c585c8f3ceb7fdf2254ca66bc08ef75bf02e063293cb9a949fef5e7698","schema_version":"1.0","event_id":"sha256:fbb4b9c585c8f3ceb7fdf2254ca66bc08ef75bf02e063293cb9a949fef5e7698"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BSY4UKLAWZY5MX5ZVZDEBW5W3R/bundle.json","state_url":"https://pith.science/pith/BSY4UKLAWZY5MX5ZVZDEBW5W3R/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BSY4UKLAWZY5MX5ZVZDEBW5W3R/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T10:30:03Z","links":{"resolver":"https://pith.science/pith/BSY4UKLAWZY5MX5ZVZDEBW5W3R","bundle":"https://pith.science/pith/BSY4UKLAWZY5MX5ZVZDEBW5W3R/bundle.json","state":"https://pith.science/pith/BSY4UKLAWZY5MX5ZVZDEBW5W3R/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BSY4UKLAWZY5MX5ZVZDEBW5W3R/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:BSY4UKLAWZY5MX5ZVZDEBW5W3R","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3797c42d2bcbc6980d7ca7eae1c0d398932f1424f2962217ffe3014e30e9028e","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-09-12T12:44:52Z","title_canon_sha256":"c1fb6b7dc0ed882f059c20302d8dfdfb8d88e3a6a7983aebc5d56dd528250366"},"schema_version":"1.0","source":{"id":"2109.05507","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.05507","created_at":"2026-07-05T05:31:11Z"},{"alias_kind":"arxiv_version","alias_value":"2109.05507v3","created_at":"2026-07-05T05:31:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.05507","created_at":"2026-07-05T05:31:11Z"},{"alias_kind":"pith_short_12","alias_value":"BSY4UKLAWZY5","created_at":"2026-07-05T05:31:11Z"},{"alias_kind":"pith_short_16","alias_value":"BSY4UKLAWZY5MX5Z","created_at":"2026-07-05T05:31:11Z"},{"alias_kind":"pith_short_8","alias_value":"BSY4UKLA","created_at":"2026-07-05T05:31:11Z"}],"graph_snapshots":[{"event_id":"sha256:fbb4b9c585c8f3ceb7fdf2254ca66bc08ef75bf02e063293cb9a949fef5e7698","target":"graph","created_at":"2026-07-05T05:31:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2109.05507/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep Neural Networks (DNNs) are ubiquitous and span a variety of applications ranging from image classification to real-time object detection. As DNN models become more sophisticated, the computational cost of training these models becomes a burden. For this reason, outsourcing the training process has been the go-to option for many DNN users. Unfortunately, this comes at the cost of vulnerability to backdoor attacks. These attacks aim to establish hidden backdoors in the DNN so that it performs well on clean samples, but outputs a particular target label when a trigger is applied to the input","authors_text":"Bernard Ghanem, Hasan Abed Al Kader Hammoud","cross_cats":["cs.CV","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-09-12T12:44:52Z","title":"Check Your Other Door! Creating Backdoor Attacks in the Frequency Domain"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.05507","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:23707b0b99af44f322f8a0ad39d5a967eacb9ce7153a63a93e0ddf33b8270395","target":"record","created_at":"2026-07-05T05:31:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3797c42d2bcbc6980d7ca7eae1c0d398932f1424f2962217ffe3014e30e9028e","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-09-12T12:44:52Z","title_canon_sha256":"c1fb6b7dc0ed882f059c20302d8dfdfb8d88e3a6a7983aebc5d56dd528250366"},"schema_version":"1.0","source":{"id":"2109.05507","kind":"arxiv","version":3}},"canonical_sha256":"0cb1ca2960b671d65fb9ae4640dbb6dc48bdd32da5069a46de863c5a22d76032","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0cb1ca2960b671d65fb9ae4640dbb6dc48bdd32da5069a46de863c5a22d76032","first_computed_at":"2026-07-05T05:31:11.128444Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:31:11.128444Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"VzteA0oRMA9xVcSybc+hiW4FMS+CVnlIf9qlgkmF6lPcH6Y73BbJqwRvFuEPLP8FZbx755bAVMe/Bw0HIeo6Dw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:31:11.128834Z","signed_message":"canonical_sha256_bytes"},"source_id":"2109.05507","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:23707b0b99af44f322f8a0ad39d5a967eacb9ce7153a63a93e0ddf33b8270395","sha256:fbb4b9c585c8f3ceb7fdf2254ca66bc08ef75bf02e063293cb9a949fef5e7698"],"state_sha256":"283dbd0f19b637638eb3230adeb5582456f1c66361ba988a2586937d5b0aef3f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"00yy8GyEGMWalr8LSX3fbHNmeIg4VyLWzb8TyHLzxMdNcE3VlY0H8nTAa3OVfI/DopSnsu5NVZbIcB4rm5SCCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T10:30:03.523350Z","bundle_sha256":"44f836ab04e30c8f42c8f8d271f20b011dac1fd6af67e490088eb53e50b29c23"}}