{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:CU32QHAKNLWYHRHDIT7BI6NNJO","short_pith_number":"pith:CU32QHAK","canonical_record":{"source":{"id":"2509.05318","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-30T06:35:32Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"5c1bef6a1928bf8857042ad44d09af0cf18eacd383bfa2c7466e8f54ef2b1abb","abstract_canon_sha256":"b03a589c2e317c2e08c25110cb7d2bd2ba0a1f72690f3d7d3b36c8f17ec3004f"},"schema_version":"1.0"},"canonical_sha256":"1537a81c0a6aed83c4e344fe1479ad4b9300d9ae4e794dd231310c4c25ba9e48","source":{"kind":"arxiv","id":"2509.05318","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.05318","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"arxiv_version","alias_value":"2509.05318v1","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.05318","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"pith_short_12","alias_value":"CU32QHAKNLWY","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"pith_short_16","alias_value":"CU32QHAKNLWYHRHD","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"pith_short_8","alias_value":"CU32QHAK","created_at":"2026-07-05T12:05:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:CU32QHAKNLWYHRHDIT7BI6NNJO","target":"record","payload":{"canonical_record":{"source":{"id":"2509.05318","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-30T06:35:32Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"5c1bef6a1928bf8857042ad44d09af0cf18eacd383bfa2c7466e8f54ef2b1abb","abstract_canon_sha256":"b03a589c2e317c2e08c25110cb7d2bd2ba0a1f72690f3d7d3b36c8f17ec3004f"},"schema_version":"1.0"},"canonical_sha256":"1537a81c0a6aed83c4e344fe1479ad4b9300d9ae4e794dd231310c4c25ba9e48","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:05:44.836409Z","signature_b64":"A1fU+nGaFyanFzyLa55H0HCzv4B6fhiz7oDoWRk0+KTsbNv+8BeDoVh/oD7MdIVHKSt+3yqdJ/ZAxr2Xj87ADg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1537a81c0a6aed83c4e344fe1479ad4b9300d9ae4e794dd231310c4c25ba9e48","last_reissued_at":"2026-07-05T12:05:44.835943Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:05:44.835943Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.05318","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:05:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"f3VoEJRyqV7n3BaLW4IgOHOW/QQdOqD4ueQOLsewHrHMTNK/DdV3wriBL6LfTkLDje+a2y2GK6FJAXc5RzytDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T15:36:56.145551Z"},"content_sha256":"af4889dcd45cc3544ecca1cfb059addf3d8d9cc34de89ceaf590719a02ee7db9","schema_version":"1.0","event_id":"sha256:af4889dcd45cc3544ecca1cfb059addf3d8d9cc34de89ceaf590719a02ee7db9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:CU32QHAKNLWYHRHDIT7BI6NNJO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Backdoor Samples Detection Based on Perturbation Discrepancy Consistency in Pre-trained Language Models","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Guojun Peng, Jianming Fu, Lixin Zou, Li Zheng, Yanzhen Ren, Zuquan Peng","submitted_at":"2025-08-30T06:35:32Z","abstract_excerpt":"The use of unvetted third-party and internet data renders pre-trained models susceptible to backdoor attacks. Detecting backdoor samples is critical to prevent backdoor activation during inference or injection during training. However, existing detection methods often require the defender to have access to the poisoned models, extra clean samples, or significant computational resources to detect backdoor samples, limiting their practicality. To address this limitation, we propose a backdoor sample detection method based on perturbatio\\textbf{N} discr\\textbf{E}pancy consis\\textbf{T}ency \\textbf"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.05318","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.05318/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:05:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"f1ne+U+q6NldNdDMUSeKYo4IuVxmqnFTY17LoGGxXnpKNaQ7eg4X+/aCmWgdicN5thborBUg4TBRDVlZtk2iCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T15:36:56.146037Z"},"content_sha256":"a88be5993733a3413dbe09026f192955709c04737ca84ce29a3dbe89fb1d2dfb","schema_version":"1.0","event_id":"sha256:a88be5993733a3413dbe09026f192955709c04737ca84ce29a3dbe89fb1d2dfb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CU32QHAKNLWYHRHDIT7BI6NNJO/bundle.json","state_url":"https://pith.science/pith/CU32QHAKNLWYHRHDIT7BI6NNJO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CU32QHAKNLWYHRHDIT7BI6NNJO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T15:36:56Z","links":{"resolver":"https://pith.science/pith/CU32QHAKNLWYHRHDIT7BI6NNJO","bundle":"https://pith.science/pith/CU32QHAKNLWYHRHDIT7BI6NNJO/bundle.json","state":"https://pith.science/pith/CU32QHAKNLWYHRHDIT7BI6NNJO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CU32QHAKNLWYHRHDIT7BI6NNJO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:CU32QHAKNLWYHRHDIT7BI6NNJO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b03a589c2e317c2e08c25110cb7d2bd2ba0a1f72690f3d7d3b36c8f17ec3004f","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-30T06:35:32Z","title_canon_sha256":"5c1bef6a1928bf8857042ad44d09af0cf18eacd383bfa2c7466e8f54ef2b1abb"},"schema_version":"1.0","source":{"id":"2509.05318","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.05318","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"arxiv_version","alias_value":"2509.05318v1","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.05318","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"pith_short_12","alias_value":"CU32QHAKNLWY","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"pith_short_16","alias_value":"CU32QHAKNLWYHRHD","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"pith_short_8","alias_value":"CU32QHAK","created_at":"2026-07-05T12:05:44Z"}],"graph_snapshots":[{"event_id":"sha256:a88be5993733a3413dbe09026f192955709c04737ca84ce29a3dbe89fb1d2dfb","target":"graph","created_at":"2026-07-05T12:05:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.05318/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The use of unvetted third-party and internet data renders pre-trained models susceptible to backdoor attacks. Detecting backdoor samples is critical to prevent backdoor activation during inference or injection during training. However, existing detection methods often require the defender to have access to the poisoned models, extra clean samples, or significant computational resources to detect backdoor samples, limiting their practicality. To address this limitation, we propose a backdoor sample detection method based on perturbatio\\textbf{N} discr\\textbf{E}pancy consis\\textbf{T}ency \\textbf","authors_text":"Guojun Peng, Jianming Fu, Lixin Zou, Li Zheng, Yanzhen Ren, Zuquan Peng","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-30T06:35:32Z","title":"Backdoor Samples Detection Based on Perturbation Discrepancy Consistency in Pre-trained Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.05318","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:af4889dcd45cc3544ecca1cfb059addf3d8d9cc34de89ceaf590719a02ee7db9","target":"record","created_at":"2026-07-05T12:05:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b03a589c2e317c2e08c25110cb7d2bd2ba0a1f72690f3d7d3b36c8f17ec3004f","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-30T06:35:32Z","title_canon_sha256":"5c1bef6a1928bf8857042ad44d09af0cf18eacd383bfa2c7466e8f54ef2b1abb"},"schema_version":"1.0","source":{"id":"2509.05318","kind":"arxiv","version":1}},"canonical_sha256":"1537a81c0a6aed83c4e344fe1479ad4b9300d9ae4e794dd231310c4c25ba9e48","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1537a81c0a6aed83c4e344fe1479ad4b9300d9ae4e794dd231310c4c25ba9e48","first_computed_at":"2026-07-05T12:05:44.835943Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:05:44.835943Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"A1fU+nGaFyanFzyLa55H0HCzv4B6fhiz7oDoWRk0+KTsbNv+8BeDoVh/oD7MdIVHKSt+3yqdJ/ZAxr2Xj87ADg==","signature_status":"signed_v1","signed_at":"2026-07-05T12:05:44.836409Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.05318","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:af4889dcd45cc3544ecca1cfb059addf3d8d9cc34de89ceaf590719a02ee7db9","sha256:a88be5993733a3413dbe09026f192955709c04737ca84ce29a3dbe89fb1d2dfb"],"state_sha256":"c6b14abba90bb3753ff61415c01b96414e0261defc1932e3adda17bc12ab6743"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mz9FcPbLdcWQODDzjl6y4X/j1PbPTsvksDpdKyunNuokweH60ITN61Kooq7Wuzg7D7W6lpLQdAU2lFtRHh0JBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T15:36:56.150853Z","bundle_sha256":"e828e7b42d8a641a711599e62dac3fc85b8d113671b5e7e95cea5b8f866714fc"}}