{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:CEXGKYWLBHN5Y3NVVKM4BWA3V4","short_pith_number":"pith:CEXGKYWL","canonical_record":{"source":{"id":"2212.02582","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-12-05T20:21:31Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"e95fb78628baed73917c317a61c8b1e2dcbfa173ea9864de46a32f557c6cfd3a","abstract_canon_sha256":"4909959cea9d5d73546d58d4232aae16d8c0b880601c5b728380efd5b5b5c17d"},"schema_version":"1.0"},"canonical_sha256":"112e6562cb09dbdc6db5aa99c0d81baf292208552a5dba216b4301fddc7e0bdf","source":{"kind":"arxiv","id":"2212.02582","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.02582","created_at":"2026-07-05T05:22:32Z"},{"alias_kind":"arxiv_version","alias_value":"2212.02582v1","created_at":"2026-07-05T05:22:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.02582","created_at":"2026-07-05T05:22:32Z"},{"alias_kind":"pith_short_12","alias_value":"CEXGKYWLBHN5","created_at":"2026-07-05T05:22:32Z"},{"alias_kind":"pith_short_16","alias_value":"CEXGKYWLBHN5Y3NV","created_at":"2026-07-05T05:22:32Z"},{"alias_kind":"pith_short_8","alias_value":"CEXGKYWL","created_at":"2026-07-05T05:22:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:CEXGKYWLBHN5Y3NVVKM4BWA3V4","target":"record","payload":{"canonical_record":{"source":{"id":"2212.02582","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-12-05T20:21:31Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"e95fb78628baed73917c317a61c8b1e2dcbfa173ea9864de46a32f557c6cfd3a","abstract_canon_sha256":"4909959cea9d5d73546d58d4232aae16d8c0b880601c5b728380efd5b5b5c17d"},"schema_version":"1.0"},"canonical_sha256":"112e6562cb09dbdc6db5aa99c0d81baf292208552a5dba216b4301fddc7e0bdf","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:22:32.488502Z","signature_b64":"CCk8BdQNXnTtin9X2okw9yj7BX/SiqaohmpV2fGwN8RuuIKMhYSTiWx9b+PpXC7Tfd1jfqu1HncZMttchSy/CA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"112e6562cb09dbdc6db5aa99c0d81baf292208552a5dba216b4301fddc7e0bdf","last_reissued_at":"2026-07-05T05:22:32.488118Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:22:32.488118Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2212.02582","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:22:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1O6C9yG/fNyYpejVzv59/P7ejLHgOPsUXiF2Q/j+2NFerEGPhqTT+GYqcAoqOiMWB16Yi6zy8U0Efhx00snxAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T11:37:13.082484Z"},"content_sha256":"ee5a42bf2039858d9ddfde59d014349db727fb7d1d99eaf3323470167982bc3e","schema_version":"1.0","event_id":"sha256:ee5a42bf2039858d9ddfde59d014349db727fb7d1d99eaf3323470167982bc3e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:CEXGKYWLBHN5Y3NVVKM4BWA3V4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Rethinking Backdoor Data Poisoning Attacks in the Context of Semi-Supervised Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Marissa Connor, Vincent Emanuele","submitted_at":"2022-12-05T20:21:31Z","abstract_excerpt":"Semi-supervised learning methods can train high-accuracy machine learning models with a fraction of the labeled training samples required for traditional supervised learning. Such methods do not typically involve close review of the unlabeled training samples, making them tempting targets for data poisoning attacks. In this paper we investigate the vulnerabilities of semi-supervised learning methods to backdoor data poisoning attacks on the unlabeled samples. We show that simple poisoning attacks that influence the distribution of the poisoned samples' predicted labels are highly effective - a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.02582","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2212.02582/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:22:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VDshM1E5IlfO8vHW+WXC4hM9fD3F20mcrpl4xZBRod0NfQqUCLXmBjMqMHuyZPdqusoG6YwPw3luwqlCgd9QDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T11:37:13.082857Z"},"content_sha256":"ffd69358e6bf23c0191fba76b64689e887c7dab3b50fb4c22a602cfd2bcfce9b","schema_version":"1.0","event_id":"sha256:ffd69358e6bf23c0191fba76b64689e887c7dab3b50fb4c22a602cfd2bcfce9b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CEXGKYWLBHN5Y3NVVKM4BWA3V4/bundle.json","state_url":"https://pith.science/pith/CEXGKYWLBHN5Y3NVVKM4BWA3V4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CEXGKYWLBHN5Y3NVVKM4BWA3V4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T11:37:13Z","links":{"resolver":"https://pith.science/pith/CEXGKYWLBHN5Y3NVVKM4BWA3V4","bundle":"https://pith.science/pith/CEXGKYWLBHN5Y3NVVKM4BWA3V4/bundle.json","state":"https://pith.science/pith/CEXGKYWLBHN5Y3NVVKM4BWA3V4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CEXGKYWLBHN5Y3NVVKM4BWA3V4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:CEXGKYWLBHN5Y3NVVKM4BWA3V4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4909959cea9d5d73546d58d4232aae16d8c0b880601c5b728380efd5b5b5c17d","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-12-05T20:21:31Z","title_canon_sha256":"e95fb78628baed73917c317a61c8b1e2dcbfa173ea9864de46a32f557c6cfd3a"},"schema_version":"1.0","source":{"id":"2212.02582","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.02582","created_at":"2026-07-05T05:22:32Z"},{"alias_kind":"arxiv_version","alias_value":"2212.02582v1","created_at":"2026-07-05T05:22:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.02582","created_at":"2026-07-05T05:22:32Z"},{"alias_kind":"pith_short_12","alias_value":"CEXGKYWLBHN5","created_at":"2026-07-05T05:22:32Z"},{"alias_kind":"pith_short_16","alias_value":"CEXGKYWLBHN5Y3NV","created_at":"2026-07-05T05:22:32Z"},{"alias_kind":"pith_short_8","alias_value":"CEXGKYWL","created_at":"2026-07-05T05:22:32Z"}],"graph_snapshots":[{"event_id":"sha256:ffd69358e6bf23c0191fba76b64689e887c7dab3b50fb4c22a602cfd2bcfce9b","target":"graph","created_at":"2026-07-05T05:22:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2212.02582/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Semi-supervised learning methods can train high-accuracy machine learning models with a fraction of the labeled training samples required for traditional supervised learning. Such methods do not typically involve close review of the unlabeled training samples, making them tempting targets for data poisoning attacks. In this paper we investigate the vulnerabilities of semi-supervised learning methods to backdoor data poisoning attacks on the unlabeled samples. We show that simple poisoning attacks that influence the distribution of the poisoned samples' predicted labels are highly effective - a","authors_text":"Marissa Connor, Vincent Emanuele","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-12-05T20:21:31Z","title":"Rethinking Backdoor Data Poisoning Attacks in the Context of Semi-Supervised Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.02582","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ee5a42bf2039858d9ddfde59d014349db727fb7d1d99eaf3323470167982bc3e","target":"record","created_at":"2026-07-05T05:22:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4909959cea9d5d73546d58d4232aae16d8c0b880601c5b728380efd5b5b5c17d","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-12-05T20:21:31Z","title_canon_sha256":"e95fb78628baed73917c317a61c8b1e2dcbfa173ea9864de46a32f557c6cfd3a"},"schema_version":"1.0","source":{"id":"2212.02582","kind":"arxiv","version":1}},"canonical_sha256":"112e6562cb09dbdc6db5aa99c0d81baf292208552a5dba216b4301fddc7e0bdf","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"112e6562cb09dbdc6db5aa99c0d81baf292208552a5dba216b4301fddc7e0bdf","first_computed_at":"2026-07-05T05:22:32.488118Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:22:32.488118Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"CCk8BdQNXnTtin9X2okw9yj7BX/SiqaohmpV2fGwN8RuuIKMhYSTiWx9b+PpXC7Tfd1jfqu1HncZMttchSy/CA==","signature_status":"signed_v1","signed_at":"2026-07-05T05:22:32.488502Z","signed_message":"canonical_sha256_bytes"},"source_id":"2212.02582","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ee5a42bf2039858d9ddfde59d014349db727fb7d1d99eaf3323470167982bc3e","sha256:ffd69358e6bf23c0191fba76b64689e887c7dab3b50fb4c22a602cfd2bcfce9b"],"state_sha256":"58f13593f191acd4515aa6978e729c9e387ca560167902bbd455a4f79db87065"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XMzcc76Ao/c+qEyj64B5HfkPutqD/rp8rN8g4Iu+yaWyqn/v4moG7VRO9CY7wYkfxa+sHVkHf17QmSH8FO9GBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T11:37:13.084769Z","bundle_sha256":"a16e02cc17156177b349ad97366f6718989fc0ae6c3faad98fcd1bca5c8c343e"}}