{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:C3AR6MO5PMIFISTR45VG22K6P3","short_pith_number":"pith:C3AR6MO5","canonical_record":{"source":{"id":"2307.07328","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-07-14T13:12:21Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"e4f3dc5b70254051aa3965854db530eafa0ce7296a08fd2c7ef5a9c08906140b","abstract_canon_sha256":"db05734603e2769bd5dbb87989f2b3f1e16e32fd14a34635abe9b77484c2b7e1"},"schema_version":"1.0"},"canonical_sha256":"16c11f31dd7b10544a71e76a6d695e7ecb415b152bae627e0367a2b80d0f227a","source":{"kind":"arxiv","id":"2307.07328","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.07328","created_at":"2026-07-05T06:30:54Z"},{"alias_kind":"arxiv_version","alias_value":"2307.07328v1","created_at":"2026-07-05T06:30:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.07328","created_at":"2026-07-05T06:30:54Z"},{"alias_kind":"pith_short_12","alias_value":"C3AR6MO5PMIF","created_at":"2026-07-05T06:30:54Z"},{"alias_kind":"pith_short_16","alias_value":"C3AR6MO5PMIFISTR","created_at":"2026-07-05T06:30:54Z"},{"alias_kind":"pith_short_8","alias_value":"C3AR6MO5","created_at":"2026-07-05T06:30:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:C3AR6MO5PMIFISTR45VG22K6P3","target":"record","payload":{"canonical_record":{"source":{"id":"2307.07328","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-07-14T13:12:21Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"e4f3dc5b70254051aa3965854db530eafa0ce7296a08fd2c7ef5a9c08906140b","abstract_canon_sha256":"db05734603e2769bd5dbb87989f2b3f1e16e32fd14a34635abe9b77484c2b7e1"},"schema_version":"1.0"},"canonical_sha256":"16c11f31dd7b10544a71e76a6d695e7ecb415b152bae627e0367a2b80d0f227a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:30:54.150636Z","signature_b64":"Y8D9x/sCd2Q9iFbRkyn7xZWB+LiX7PBa1qiuywEviX5wFxGFsTnTIXdl9FsR0zfXHkm4/IfXBMjvpK6PUUQbAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"16c11f31dd7b10544a71e76a6d695e7ecb415b152bae627e0367a2b80d0f227a","last_reissued_at":"2026-07-05T06:30:54.150226Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:30:54.150226Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2307.07328","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:30:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sjsXFOSgemCrlKNC8Zm6Mzqha4QTlX822s5dJBtsQSoWjRPAUl9P/pwnN5QTm+ee3Up+4mz+E763FE6uu1ZeDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T14:55:54.945303Z"},"content_sha256":"489c83662afe5503928334ee52bf2bb3a79caed1d878da1d793b9a89a4d7b120","schema_version":"1.0","event_id":"sha256:489c83662afe5503928334ee52bf2bb3a79caed1d878da1d793b9a89a4d7b120"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:C3AR6MO5PMIFISTR45VG22K6P3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Boosting Backdoor Attack with A Learnable Poisoning Sample Selection Strategy","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Baoyuan Wu, Li Shen, Mingda Zhang, Shaokui Wei, Yanbo Fan, Zihao Zhu","submitted_at":"2023-07-14T13:12:21Z","abstract_excerpt":"Data-poisoning based backdoor attacks aim to insert backdoor into models by manipulating training datasets without controlling the training process of the target model. Existing attack methods mainly focus on designing triggers or fusion strategies between triggers and benign samples. However, they often randomly select samples to be poisoned, disregarding the varying importance of each poisoning sample in terms of backdoor injection. A recent selection strategy filters a fixed-size poisoning sample pool by recording forgetting events, but it fails to consider the remaining samples outside the"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.07328","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2307.07328/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:30:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SQ1/3tnJfVy2dOCg5GQJG52TwptQJGtw8A+lK8h+/7fj8dFSPddXnBwPYkHLZkkSH0Npulo9Pe6ktL/UIMaOBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T14:55:54.945898Z"},"content_sha256":"8b8664f1afc734f8373c58e0ba29d4ae346da559d405f97605e4130361c57272","schema_version":"1.0","event_id":"sha256:8b8664f1afc734f8373c58e0ba29d4ae346da559d405f97605e4130361c57272"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/C3AR6MO5PMIFISTR45VG22K6P3/bundle.json","state_url":"https://pith.science/pith/C3AR6MO5PMIFISTR45VG22K6P3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/C3AR6MO5PMIFISTR45VG22K6P3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T14:55:54Z","links":{"resolver":"https://pith.science/pith/C3AR6MO5PMIFISTR45VG22K6P3","bundle":"https://pith.science/pith/C3AR6MO5PMIFISTR45VG22K6P3/bundle.json","state":"https://pith.science/pith/C3AR6MO5PMIFISTR45VG22K6P3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/C3AR6MO5PMIFISTR45VG22K6P3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:C3AR6MO5PMIFISTR45VG22K6P3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"db05734603e2769bd5dbb87989f2b3f1e16e32fd14a34635abe9b77484c2b7e1","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-07-14T13:12:21Z","title_canon_sha256":"e4f3dc5b70254051aa3965854db530eafa0ce7296a08fd2c7ef5a9c08906140b"},"schema_version":"1.0","source":{"id":"2307.07328","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.07328","created_at":"2026-07-05T06:30:54Z"},{"alias_kind":"arxiv_version","alias_value":"2307.07328v1","created_at":"2026-07-05T06:30:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.07328","created_at":"2026-07-05T06:30:54Z"},{"alias_kind":"pith_short_12","alias_value":"C3AR6MO5PMIF","created_at":"2026-07-05T06:30:54Z"},{"alias_kind":"pith_short_16","alias_value":"C3AR6MO5PMIFISTR","created_at":"2026-07-05T06:30:54Z"},{"alias_kind":"pith_short_8","alias_value":"C3AR6MO5","created_at":"2026-07-05T06:30:54Z"}],"graph_snapshots":[{"event_id":"sha256:8b8664f1afc734f8373c58e0ba29d4ae346da559d405f97605e4130361c57272","target":"graph","created_at":"2026-07-05T06:30:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2307.07328/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Data-poisoning based backdoor attacks aim to insert backdoor into models by manipulating training datasets without controlling the training process of the target model. Existing attack methods mainly focus on designing triggers or fusion strategies between triggers and benign samples. However, they often randomly select samples to be poisoned, disregarding the varying importance of each poisoning sample in terms of backdoor injection. A recent selection strategy filters a fixed-size poisoning sample pool by recording forgetting events, but it fails to consider the remaining samples outside the","authors_text":"Baoyuan Wu, Li Shen, Mingda Zhang, Shaokui Wei, Yanbo Fan, Zihao Zhu","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-07-14T13:12:21Z","title":"Boosting Backdoor Attack with A Learnable Poisoning Sample Selection Strategy"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.07328","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:489c83662afe5503928334ee52bf2bb3a79caed1d878da1d793b9a89a4d7b120","target":"record","created_at":"2026-07-05T06:30:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"db05734603e2769bd5dbb87989f2b3f1e16e32fd14a34635abe9b77484c2b7e1","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-07-14T13:12:21Z","title_canon_sha256":"e4f3dc5b70254051aa3965854db530eafa0ce7296a08fd2c7ef5a9c08906140b"},"schema_version":"1.0","source":{"id":"2307.07328","kind":"arxiv","version":1}},"canonical_sha256":"16c11f31dd7b10544a71e76a6d695e7ecb415b152bae627e0367a2b80d0f227a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"16c11f31dd7b10544a71e76a6d695e7ecb415b152bae627e0367a2b80d0f227a","first_computed_at":"2026-07-05T06:30:54.150226Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:30:54.150226Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Y8D9x/sCd2Q9iFbRkyn7xZWB+LiX7PBa1qiuywEviX5wFxGFsTnTIXdl9FsR0zfXHkm4/IfXBMjvpK6PUUQbAg==","signature_status":"signed_v1","signed_at":"2026-07-05T06:30:54.150636Z","signed_message":"canonical_sha256_bytes"},"source_id":"2307.07328","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:489c83662afe5503928334ee52bf2bb3a79caed1d878da1d793b9a89a4d7b120","sha256:8b8664f1afc734f8373c58e0ba29d4ae346da559d405f97605e4130361c57272"],"state_sha256":"3013e2b8205fc3801564ae71a4054aa337c5ffe90589d7ac5458c386113d3c84"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hfm3ItfreBKU0FkNhcBPnbrm//000jxdPVJMuDG1KXHAo7FGnp6NgdIrPvCBdFLhUtgb88DRNva2klBF/FgsDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T14:55:54.950200Z","bundle_sha256":"bdfe88fe35afba8538a04a3e2b7de247882976d6145109991c87695d015f0c8e"}}