{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:CN2VNV2X2GN6RBENCRLHEAZ7AG","short_pith_number":"pith:CN2VNV2X","canonical_record":{"source":{"id":"2411.17453","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-26T14:12:09Z","cross_cats_sorted":[],"title_canon_sha256":"e58755661a53cca74c86ba41307aad9f0d925170055b99a56c54565ec385d5bf","abstract_canon_sha256":"b102dc757a9fc9b1da34ae596bd802f628d462774e6eb7abc56c07667c8648f4"},"schema_version":"1.0"},"canonical_sha256":"137556d757d19be8848d145672033f01ad183f3ebeabc0bf040a3b0bfe187169","source":{"kind":"arxiv","id":"2411.17453","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.17453","created_at":"2026-07-05T11:19:22Z"},{"alias_kind":"arxiv_version","alias_value":"2411.17453v2","created_at":"2026-07-05T11:19:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.17453","created_at":"2026-07-05T11:19:22Z"},{"alias_kind":"pith_short_12","alias_value":"CN2VNV2X2GN6","created_at":"2026-07-05T11:19:22Z"},{"alias_kind":"pith_short_16","alias_value":"CN2VNV2X2GN6RBEN","created_at":"2026-07-05T11:19:22Z"},{"alias_kind":"pith_short_8","alias_value":"CN2VNV2X","created_at":"2026-07-05T11:19:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:CN2VNV2X2GN6RBENCRLHEAZ7AG","target":"record","payload":{"canonical_record":{"source":{"id":"2411.17453","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-26T14:12:09Z","cross_cats_sorted":[],"title_canon_sha256":"e58755661a53cca74c86ba41307aad9f0d925170055b99a56c54565ec385d5bf","abstract_canon_sha256":"b102dc757a9fc9b1da34ae596bd802f628d462774e6eb7abc56c07667c8648f4"},"schema_version":"1.0"},"canonical_sha256":"137556d757d19be8848d145672033f01ad183f3ebeabc0bf040a3b0bfe187169","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:19:22.737576Z","signature_b64":"IxHK9tYT0kQtEDANJ1+YApi6KCsunkg4YJRh+5itPGv+rP4xkH8lvYUkWh9/11MfSuD/i3qdk/nKooxPG4vIBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"137556d757d19be8848d145672033f01ad183f3ebeabc0bf040a3b0bfe187169","last_reissued_at":"2026-07-05T11:19:22.737087Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:19:22.737087Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.17453","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:19:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"d6bQar4h9cRWhVrmhGUQX6u6gq1B4qgl1jaVlcZSHxT9yN+gf8Vbl6pEMsELetS4uFbWZrASZ3vMOSc2IS2TAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T07:46:39.123019Z"},"content_sha256":"80fc1aee58717c008e39d6510377268c5622fed5cc56b7436210ce7c67b2ccc1","schema_version":"1.0","event_id":"sha256:80fc1aee58717c008e39d6510377268c5622fed5cc56b7436210ce7c67b2ccc1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:CN2VNV2X2GN6RBENCRLHEAZ7AG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PEFTGuard: Detecting Backdoor Attacks Against Parameter-Efficient Fine-Tuning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chenhao Lin, Rongmao Chen, Tianshuo Cong, Xingshuo Han, Xinlei He, Xinyi Huang, Yule Liu, Zhen Sun","submitted_at":"2024-11-26T14:12:09Z","abstract_excerpt":"Fine-tuning is an essential process to improve the performance of Large Language Models (LLMs) in specific domains, with Parameter-Efficient Fine-Tuning (PEFT) gaining popularity due to its capacity to reduce computational demands through the integration of low-rank adapters. These lightweight adapters, such as LoRA, can be shared and utilized on open-source platforms. However, adversaries could exploit this mechanism to inject backdoors into these adapters, resulting in malicious behaviors like incorrect or harmful outputs, which pose serious security risks to the community. Unfortunately, fe"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.17453","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.17453/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:19:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RUBS6nGIBHkLCAznFC9482yz+EIMCPLT8H3ckrL6hPvzFA32DA8zCbR7vAFObV0r78Dp9Zggs8Shylf8qF//Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T07:46:39.123518Z"},"content_sha256":"3d1ef665115830f751ce2522bffb65b8a27c78a1e1a04edbf828fa4802f5901f","schema_version":"1.0","event_id":"sha256:3d1ef665115830f751ce2522bffb65b8a27c78a1e1a04edbf828fa4802f5901f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CN2VNV2X2GN6RBENCRLHEAZ7AG/bundle.json","state_url":"https://pith.science/pith/CN2VNV2X2GN6RBENCRLHEAZ7AG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CN2VNV2X2GN6RBENCRLHEAZ7AG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T07:46:39Z","links":{"resolver":"https://pith.science/pith/CN2VNV2X2GN6RBENCRLHEAZ7AG","bundle":"https://pith.science/pith/CN2VNV2X2GN6RBENCRLHEAZ7AG/bundle.json","state":"https://pith.science/pith/CN2VNV2X2GN6RBENCRLHEAZ7AG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CN2VNV2X2GN6RBENCRLHEAZ7AG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:CN2VNV2X2GN6RBENCRLHEAZ7AG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b102dc757a9fc9b1da34ae596bd802f628d462774e6eb7abc56c07667c8648f4","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-26T14:12:09Z","title_canon_sha256":"e58755661a53cca74c86ba41307aad9f0d925170055b99a56c54565ec385d5bf"},"schema_version":"1.0","source":{"id":"2411.17453","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.17453","created_at":"2026-07-05T11:19:22Z"},{"alias_kind":"arxiv_version","alias_value":"2411.17453v2","created_at":"2026-07-05T11:19:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.17453","created_at":"2026-07-05T11:19:22Z"},{"alias_kind":"pith_short_12","alias_value":"CN2VNV2X2GN6","created_at":"2026-07-05T11:19:22Z"},{"alias_kind":"pith_short_16","alias_value":"CN2VNV2X2GN6RBEN","created_at":"2026-07-05T11:19:22Z"},{"alias_kind":"pith_short_8","alias_value":"CN2VNV2X","created_at":"2026-07-05T11:19:22Z"}],"graph_snapshots":[{"event_id":"sha256:3d1ef665115830f751ce2522bffb65b8a27c78a1e1a04edbf828fa4802f5901f","target":"graph","created_at":"2026-07-05T11:19:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.17453/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Fine-tuning is an essential process to improve the performance of Large Language Models (LLMs) in specific domains, with Parameter-Efficient Fine-Tuning (PEFT) gaining popularity due to its capacity to reduce computational demands through the integration of low-rank adapters. These lightweight adapters, such as LoRA, can be shared and utilized on open-source platforms. However, adversaries could exploit this mechanism to inject backdoors into these adapters, resulting in malicious behaviors like incorrect or harmful outputs, which pose serious security risks to the community. Unfortunately, fe","authors_text":"Chenhao Lin, Rongmao Chen, Tianshuo Cong, Xingshuo Han, Xinlei He, Xinyi Huang, Yule Liu, Zhen Sun","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-26T14:12:09Z","title":"PEFTGuard: Detecting Backdoor Attacks Against Parameter-Efficient Fine-Tuning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.17453","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:80fc1aee58717c008e39d6510377268c5622fed5cc56b7436210ce7c67b2ccc1","target":"record","created_at":"2026-07-05T11:19:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b102dc757a9fc9b1da34ae596bd802f628d462774e6eb7abc56c07667c8648f4","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-26T14:12:09Z","title_canon_sha256":"e58755661a53cca74c86ba41307aad9f0d925170055b99a56c54565ec385d5bf"},"schema_version":"1.0","source":{"id":"2411.17453","kind":"arxiv","version":2}},"canonical_sha256":"137556d757d19be8848d145672033f01ad183f3ebeabc0bf040a3b0bfe187169","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"137556d757d19be8848d145672033f01ad183f3ebeabc0bf040a3b0bfe187169","first_computed_at":"2026-07-05T11:19:22.737087Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:19:22.737087Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IxHK9tYT0kQtEDANJ1+YApi6KCsunkg4YJRh+5itPGv+rP4xkH8lvYUkWh9/11MfSuD/i3qdk/nKooxPG4vIBA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:19:22.737576Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.17453","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:80fc1aee58717c008e39d6510377268c5622fed5cc56b7436210ce7c67b2ccc1","sha256:3d1ef665115830f751ce2522bffb65b8a27c78a1e1a04edbf828fa4802f5901f"],"state_sha256":"6143b5a8342c13bf33cdf47b5878425ca02c41e6ff06768e28fbf886e3ea65db"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Idl0HWYSc6X4VNZCvDVrFVqfxHOL7GKUQ4iC69RjG+MUMw6c/uSwytSblFSvx9KW5Bv3J8jakBdcdXxe1Ut4DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T07:46:39.127411Z","bundle_sha256":"8b8662d730f9cdd94b4ea3171591b19bdddccfa641eeebe0995a66718562cfec"}}