{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:CZFJ5XSY2SJU4KGIZPDZWTWJWS","short_pith_number":"pith:CZFJ5XSY","canonical_record":{"source":{"id":"2305.02394","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-03T19:29:26Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"acc45937ba5e3801b60ae90bf66a2827e4db70af98fbde9cb536e6c15b6f6f01","abstract_canon_sha256":"4b1b8ab8e4948b6a8529d94f09313724a36fd0d4a83b2a212487b66946a25404"},"schema_version":"1.0"},"canonical_sha256":"164a9ede58d4934e28c8cbc79b4ec9b4ba4416fbdf338bf2aa1e2487f8023c1d","source":{"kind":"arxiv","id":"2305.02394","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.02394","created_at":"2026-07-05T06:37:58Z"},{"alias_kind":"arxiv_version","alias_value":"2305.02394v2","created_at":"2026-07-05T06:37:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.02394","created_at":"2026-07-05T06:37:58Z"},{"alias_kind":"pith_short_12","alias_value":"CZFJ5XSY2SJU","created_at":"2026-07-05T06:37:58Z"},{"alias_kind":"pith_short_16","alias_value":"CZFJ5XSY2SJU4KGI","created_at":"2026-07-05T06:37:58Z"},{"alias_kind":"pith_short_8","alias_value":"CZFJ5XSY","created_at":"2026-07-05T06:37:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:CZFJ5XSY2SJU4KGIZPDZWTWJWS","target":"record","payload":{"canonical_record":{"source":{"id":"2305.02394","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-03T19:29:26Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"acc45937ba5e3801b60ae90bf66a2827e4db70af98fbde9cb536e6c15b6f6f01","abstract_canon_sha256":"4b1b8ab8e4948b6a8529d94f09313724a36fd0d4a83b2a212487b66946a25404"},"schema_version":"1.0"},"canonical_sha256":"164a9ede58d4934e28c8cbc79b4ec9b4ba4416fbdf338bf2aa1e2487f8023c1d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:37:58.905816Z","signature_b64":"NmyYwveLDWfqh79BhGoqq0+y5iebAwTMNwsfJ4r6d6r6Cp+vgpAm1OC71y5EF4MbwjsFYDOAdCCKcpk8TODvBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"164a9ede58d4934e28c8cbc79b4ec9b4ba4416fbdf338bf2aa1e2487f8023c1d","last_reissued_at":"2026-07-05T06:37:58.905283Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:37:58.905283Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.02394","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:37:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LUlnh4G+53QcGNmQFjFRwSrozZYkxlmu2ak7alKpB0QTN+ApjfNs36cy2y9ijy8kAGDzJUvVSzT/wNdZ8JhVBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T20:21:44.792937Z"},"content_sha256":"6b1e041165571258dbe82bdf47d347a0bce8f8597d2a8579c825ab835cd50dd9","schema_version":"1.0","event_id":"sha256:6b1e041165571258dbe82bdf47d347a0bce8f8597d2a8579c825ab835cd50dd9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:CZFJ5XSY2SJU4KGIZPDZWTWJWS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Defending against Insertion-based Textual Backdoor Attacks via Attribution","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG"],"primary_cat":"cs.CL","authors_text":"Chaowei Xiao, Jiazhao Li, V.G. Vinod Vydiswaran, Wei Ping, Zhuofeng Wu","submitted_at":"2023-05-03T19:29:26Z","abstract_excerpt":"Textual backdoor attack, as a novel attack model, has been shown to be effective in adding a backdoor to the model during training. Defending against such backdoor attacks has become urgent and important. In this paper, we propose AttDef, an efficient attribution-based pipeline to defend against two insertion-based poisoning attacks, BadNL and InSent. Specifically, we regard the tokens with larger attribution scores as potential triggers since larger attribution words contribute more to the false prediction results and therefore are more likely to be poison triggers. Additionally, we further u"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.02394","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.02394/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:37:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OxnYUg8HY7YsrCV6ora1w9cvDDjolr+hfSib1RlN/iZE383nUN44QGeoej3sV4xJv/YloRuAC0h4JAzxMLQ6AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T20:21:44.793447Z"},"content_sha256":"7793a6acfee4cdc5d559cf18849ffcb048338f394c6ac76880ee29f748ecc33c","schema_version":"1.0","event_id":"sha256:7793a6acfee4cdc5d559cf18849ffcb048338f394c6ac76880ee29f748ecc33c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CZFJ5XSY2SJU4KGIZPDZWTWJWS/bundle.json","state_url":"https://pith.science/pith/CZFJ5XSY2SJU4KGIZPDZWTWJWS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CZFJ5XSY2SJU4KGIZPDZWTWJWS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T20:21:44Z","links":{"resolver":"https://pith.science/pith/CZFJ5XSY2SJU4KGIZPDZWTWJWS","bundle":"https://pith.science/pith/CZFJ5XSY2SJU4KGIZPDZWTWJWS/bundle.json","state":"https://pith.science/pith/CZFJ5XSY2SJU4KGIZPDZWTWJWS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CZFJ5XSY2SJU4KGIZPDZWTWJWS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:CZFJ5XSY2SJU4KGIZPDZWTWJWS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4b1b8ab8e4948b6a8529d94f09313724a36fd0d4a83b2a212487b66946a25404","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-03T19:29:26Z","title_canon_sha256":"acc45937ba5e3801b60ae90bf66a2827e4db70af98fbde9cb536e6c15b6f6f01"},"schema_version":"1.0","source":{"id":"2305.02394","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.02394","created_at":"2026-07-05T06:37:58Z"},{"alias_kind":"arxiv_version","alias_value":"2305.02394v2","created_at":"2026-07-05T06:37:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.02394","created_at":"2026-07-05T06:37:58Z"},{"alias_kind":"pith_short_12","alias_value":"CZFJ5XSY2SJU","created_at":"2026-07-05T06:37:58Z"},{"alias_kind":"pith_short_16","alias_value":"CZFJ5XSY2SJU4KGI","created_at":"2026-07-05T06:37:58Z"},{"alias_kind":"pith_short_8","alias_value":"CZFJ5XSY","created_at":"2026-07-05T06:37:58Z"}],"graph_snapshots":[{"event_id":"sha256:7793a6acfee4cdc5d559cf18849ffcb048338f394c6ac76880ee29f748ecc33c","target":"graph","created_at":"2026-07-05T06:37:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.02394/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Textual backdoor attack, as a novel attack model, has been shown to be effective in adding a backdoor to the model during training. Defending against such backdoor attacks has become urgent and important. In this paper, we propose AttDef, an efficient attribution-based pipeline to defend against two insertion-based poisoning attacks, BadNL and InSent. Specifically, we regard the tokens with larger attribution scores as potential triggers since larger attribution words contribute more to the false prediction results and therefore are more likely to be poison triggers. Additionally, we further u","authors_text":"Chaowei Xiao, Jiazhao Li, V.G. Vinod Vydiswaran, Wei Ping, Zhuofeng Wu","cross_cats":["cs.AI","cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-03T19:29:26Z","title":"Defending against Insertion-based Textual Backdoor Attacks via Attribution"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.02394","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6b1e041165571258dbe82bdf47d347a0bce8f8597d2a8579c825ab835cd50dd9","target":"record","created_at":"2026-07-05T06:37:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4b1b8ab8e4948b6a8529d94f09313724a36fd0d4a83b2a212487b66946a25404","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-03T19:29:26Z","title_canon_sha256":"acc45937ba5e3801b60ae90bf66a2827e4db70af98fbde9cb536e6c15b6f6f01"},"schema_version":"1.0","source":{"id":"2305.02394","kind":"arxiv","version":2}},"canonical_sha256":"164a9ede58d4934e28c8cbc79b4ec9b4ba4416fbdf338bf2aa1e2487f8023c1d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"164a9ede58d4934e28c8cbc79b4ec9b4ba4416fbdf338bf2aa1e2487f8023c1d","first_computed_at":"2026-07-05T06:37:58.905283Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:37:58.905283Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NmyYwveLDWfqh79BhGoqq0+y5iebAwTMNwsfJ4r6d6r6Cp+vgpAm1OC71y5EF4MbwjsFYDOAdCCKcpk8TODvBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:37:58.905816Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.02394","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6b1e041165571258dbe82bdf47d347a0bce8f8597d2a8579c825ab835cd50dd9","sha256:7793a6acfee4cdc5d559cf18849ffcb048338f394c6ac76880ee29f748ecc33c"],"state_sha256":"b3e9a8fe645e7785084334bb5e92ddc880be09000abeec469a9ff190f8a42a04"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wM6WBJuDX3io7VCsprwY3XKW46hkcc9k/mt0NhKRhIRP4pApaS5nX5dvtMuutysVjirVWk76fHBO7F7AzBO1BA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T20:21:44.798774Z","bundle_sha256":"85acbdd3706bf64f065cad42bba1f509bf5c6cb066cbd761c41ec2c6b35d5606"}}