{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:C25CIWKFBZTBBVZTTNYUGNHA2U","short_pith_number":"pith:C25CIWKF","canonical_record":{"source":{"id":"2411.09585","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-14T16:54:06Z","cross_cats_sorted":[],"title_canon_sha256":"8f6977c2d0e168aca0bee6a6816348bd2172b687ba57b51f4b41c66207a1fea9","abstract_canon_sha256":"b62a0c3e644403ec1383b46a7ac192e03dc3657514c4cb01657e8cd5856f4b76"},"schema_version":"1.0"},"canonical_sha256":"16ba2459450e6610d7339b714334e0d51b580d81a78ccfef2802286da744cd78","source":{"kind":"arxiv","id":"2411.09585","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.09585","created_at":"2026-07-05T10:12:23Z"},{"alias_kind":"arxiv_version","alias_value":"2411.09585v2","created_at":"2026-07-05T10:12:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.09585","created_at":"2026-07-05T10:12:23Z"},{"alias_kind":"pith_short_12","alias_value":"C25CIWKFBZTB","created_at":"2026-07-05T10:12:23Z"},{"alias_kind":"pith_short_16","alias_value":"C25CIWKFBZTBBVZT","created_at":"2026-07-05T10:12:23Z"},{"alias_kind":"pith_short_8","alias_value":"C25CIWKF","created_at":"2026-07-05T10:12:23Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:C25CIWKFBZTBBVZTTNYUGNHA2U","target":"record","payload":{"canonical_record":{"source":{"id":"2411.09585","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-14T16:54:06Z","cross_cats_sorted":[],"title_canon_sha256":"8f6977c2d0e168aca0bee6a6816348bd2172b687ba57b51f4b41c66207a1fea9","abstract_canon_sha256":"b62a0c3e644403ec1383b46a7ac192e03dc3657514c4cb01657e8cd5856f4b76"},"schema_version":"1.0"},"canonical_sha256":"16ba2459450e6610d7339b714334e0d51b580d81a78ccfef2802286da744cd78","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:12:23.410606Z","signature_b64":"2MImyPyddbBjp69tm+P1Cy8LTOgrQQcrqcHSZq+JFvPemWtTU6aV9Mv8m0c9IA/+1X0DUI7AXnmkQZJhD6WxDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"16ba2459450e6610d7339b714334e0d51b580d81a78ccfef2802286da744cd78","last_reissued_at":"2026-07-05T10:12:23.410100Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:12:23.410100Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.09585","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:12:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pOOvAQmvpP3uRAfVhQV37gs0fYQD9KF4SfR6i1PI42JZA/JeXlZEYgZT29G8cDJD1Q+7hyZVNwTivkJAGn9gCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T22:08:15.578915Z"},"content_sha256":"f1a08e493b29972a5ca1013dc5625ce9080b1322f1b7b967cccb067f2323aae2","schema_version":"1.0","event_id":"sha256:f1a08e493b29972a5ca1013dc5625ce9080b1322f1b7b967cccb067f2323aae2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:C25CIWKFBZTBBVZTTNYUGNHA2U","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Backdoor Mitigation by Distance-Driven Detoxification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Hongyuan Zha, Jiayin Liu, Shaokui Wei","submitted_at":"2024-11-14T16:54:06Z","abstract_excerpt":"Backdoor attacks undermine the integrity of machine learning models by allowing attackers to manipulate predictions using poisoned training data. Such attacks lead to targeted misclassification when specific triggers are present, while the model behaves normally under other conditions. This paper considers a post-training backdoor defense task, aiming to detoxify the backdoors in pre-trained models. We begin by analyzing the underlying issues of vanilla fine-tuning and observe that it is often trapped in regions with low loss for both clean and poisoned samples. Motivated by such observations,"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.09585","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.09585/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:12:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"m3Sz+mw6z1Vhy+zQ80U289y19gdJdvQM4ZLJC5zdvuwJMHwU1svrk3V+ghaok1D+qLFVih+xE/CGwvDPcuwbBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T22:08:15.579547Z"},"content_sha256":"8d709670b6c846ebcab0a738d2dae2334db8e0198637c13ac095c7d7c05694f3","schema_version":"1.0","event_id":"sha256:8d709670b6c846ebcab0a738d2dae2334db8e0198637c13ac095c7d7c05694f3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/C25CIWKFBZTBBVZTTNYUGNHA2U/bundle.json","state_url":"https://pith.science/pith/C25CIWKFBZTBBVZTTNYUGNHA2U/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/C25CIWKFBZTBBVZTTNYUGNHA2U/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T22:08:15Z","links":{"resolver":"https://pith.science/pith/C25CIWKFBZTBBVZTTNYUGNHA2U","bundle":"https://pith.science/pith/C25CIWKFBZTBBVZTTNYUGNHA2U/bundle.json","state":"https://pith.science/pith/C25CIWKFBZTBBVZTTNYUGNHA2U/state.json","well_known_bundle":"https://pith.science/.well-known/pith/C25CIWKFBZTBBVZTTNYUGNHA2U/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:C25CIWKFBZTBBVZTTNYUGNHA2U","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b62a0c3e644403ec1383b46a7ac192e03dc3657514c4cb01657e8cd5856f4b76","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-14T16:54:06Z","title_canon_sha256":"8f6977c2d0e168aca0bee6a6816348bd2172b687ba57b51f4b41c66207a1fea9"},"schema_version":"1.0","source":{"id":"2411.09585","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.09585","created_at":"2026-07-05T10:12:23Z"},{"alias_kind":"arxiv_version","alias_value":"2411.09585v2","created_at":"2026-07-05T10:12:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.09585","created_at":"2026-07-05T10:12:23Z"},{"alias_kind":"pith_short_12","alias_value":"C25CIWKFBZTB","created_at":"2026-07-05T10:12:23Z"},{"alias_kind":"pith_short_16","alias_value":"C25CIWKFBZTBBVZT","created_at":"2026-07-05T10:12:23Z"},{"alias_kind":"pith_short_8","alias_value":"C25CIWKF","created_at":"2026-07-05T10:12:23Z"}],"graph_snapshots":[{"event_id":"sha256:8d709670b6c846ebcab0a738d2dae2334db8e0198637c13ac095c7d7c05694f3","target":"graph","created_at":"2026-07-05T10:12:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.09585/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attacks undermine the integrity of machine learning models by allowing attackers to manipulate predictions using poisoned training data. Such attacks lead to targeted misclassification when specific triggers are present, while the model behaves normally under other conditions. This paper considers a post-training backdoor defense task, aiming to detoxify the backdoors in pre-trained models. We begin by analyzing the underlying issues of vanilla fine-tuning and observe that it is often trapped in regions with low loss for both clean and poisoned samples. Motivated by such observations,","authors_text":"Hongyuan Zha, Jiayin Liu, Shaokui Wei","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-14T16:54:06Z","title":"Backdoor Mitigation by Distance-Driven Detoxification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.09585","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f1a08e493b29972a5ca1013dc5625ce9080b1322f1b7b967cccb067f2323aae2","target":"record","created_at":"2026-07-05T10:12:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b62a0c3e644403ec1383b46a7ac192e03dc3657514c4cb01657e8cd5856f4b76","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-14T16:54:06Z","title_canon_sha256":"8f6977c2d0e168aca0bee6a6816348bd2172b687ba57b51f4b41c66207a1fea9"},"schema_version":"1.0","source":{"id":"2411.09585","kind":"arxiv","version":2}},"canonical_sha256":"16ba2459450e6610d7339b714334e0d51b580d81a78ccfef2802286da744cd78","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"16ba2459450e6610d7339b714334e0d51b580d81a78ccfef2802286da744cd78","first_computed_at":"2026-07-05T10:12:23.410100Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:12:23.410100Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2MImyPyddbBjp69tm+P1Cy8LTOgrQQcrqcHSZq+JFvPemWtTU6aV9Mv8m0c9IA/+1X0DUI7AXnmkQZJhD6WxDA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:12:23.410606Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.09585","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f1a08e493b29972a5ca1013dc5625ce9080b1322f1b7b967cccb067f2323aae2","sha256:8d709670b6c846ebcab0a738d2dae2334db8e0198637c13ac095c7d7c05694f3"],"state_sha256":"6834ef07b6a4a165132ca6a41d0572950c6a9e518359e468ee129413f46ee164"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iSo4I6C52APzM3XcGeExZxiNdSw17K3XQhLYEKWCOe55e9HvXtuFKlgSztNvH7PkOHvQi3F9crogS2fwUkVXAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T22:08:15.586135Z","bundle_sha256":"3f25e8a01cfd6d86042b03c66843d17d178fbda530ed35a1fb0ef7863f41c659"}}