{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:D4GKLXERA42X5W7K7WRJCNI7LU","short_pith_number":"pith:D4GKLXER","canonical_record":{"source":{"id":"2309.06055","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-12T08:48:38Z","cross_cats_sorted":[],"title_canon_sha256":"93fa27abe7526b8b6a72bbff937f20d1bb4a240962b35ec4ca8a03bf2b06b0c1","abstract_canon_sha256":"c2cd700698f757b32e0ceb12202c606d122acb4a4374d396a1bfd3382cca1295"},"schema_version":"1.0"},"canonical_sha256":"1f0ca5dc9107357edbeafda291351f5d1f49a119d5fb9964b7b40dc4e2301b96","source":{"kind":"arxiv","id":"2309.06055","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.06055","created_at":"2026-07-05T09:44:05Z"},{"alias_kind":"arxiv_version","alias_value":"2309.06055v5","created_at":"2026-07-05T09:44:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.06055","created_at":"2026-07-05T09:44:05Z"},{"alias_kind":"pith_short_12","alias_value":"D4GKLXERA42X","created_at":"2026-07-05T09:44:05Z"},{"alias_kind":"pith_short_16","alias_value":"D4GKLXERA42X5W7K","created_at":"2026-07-05T09:44:05Z"},{"alias_kind":"pith_short_8","alias_value":"D4GKLXER","created_at":"2026-07-05T09:44:05Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:D4GKLXERA42X5W7K7WRJCNI7LU","target":"record","payload":{"canonical_record":{"source":{"id":"2309.06055","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-12T08:48:38Z","cross_cats_sorted":[],"title_canon_sha256":"93fa27abe7526b8b6a72bbff937f20d1bb4a240962b35ec4ca8a03bf2b06b0c1","abstract_canon_sha256":"c2cd700698f757b32e0ceb12202c606d122acb4a4374d396a1bfd3382cca1295"},"schema_version":"1.0"},"canonical_sha256":"1f0ca5dc9107357edbeafda291351f5d1f49a119d5fb9964b7b40dc4e2301b96","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:44:05.294729Z","signature_b64":"994SH6gFDjIngDRRFcj9H5b0uL4hqQZpIxRb/IT06BsRWbcVAtnFGonwE3Hsbt/3O56lBL1nUQ4QEHSXmi3BDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1f0ca5dc9107357edbeafda291351f5d1f49a119d5fb9964b7b40dc4e2301b96","last_reissued_at":"2026-07-05T09:44:05.294193Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:44:05.294193Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.06055","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:44:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Q0H/dZBCkJWHD6nSZ5TYk6R3aMZikgJkdrAO2haXdlmQuXDlMhsw+l2iS0YNqP6G90jdKtu9K9ZsXorOxxK4AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T09:02:12.178382Z"},"content_sha256":"3ee8b9e2bf98ab74a26ea4d5ad43f3eda1ce185885bd1e17caefbf385862c8d0","schema_version":"1.0","event_id":"sha256:3ee8b9e2bf98ab74a26ea4d5ad43f3eda1ce185885bd1e17caefbf385862c8d0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:D4GKLXERA42X5W7K7WRJCNI7LU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Gongshen Liu, Haodong Zhao, Pengzhou Cheng, Wei Du, Wei Lu, Zongru Wu","submitted_at":"2023-09-12T08:48:38Z","abstract_excerpt":"Language Models (LMs) are becoming increasingly popular in real-world applications. Outsourcing model training and data hosting to third-party platforms has become a standard method for reducing costs. In such a situation, the attacker can manipulate the training process or data to inject a backdoor into models. Backdoor attacks are a serious threat where malicious behavior is activated when triggers are present, otherwise, the model operates normally.\n  However, there is still no systematic and comprehensive review of LMs from the attacker's capabilities and purposes on different backdoor att"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.06055","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.06055/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:44:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ia9P5UI+ewfnlQuv9PpDeTMnTLXv83SbJ2PT5AKRbxMwSfQBy7bsLj6Q75IrQtZhH9v/cFUfdkAu3wfQmaKmAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T09:02:12.179030Z"},"content_sha256":"401f01bc143b03994725fd908126131722d9e5045b0d990eba71d45ca8b53671","schema_version":"1.0","event_id":"sha256:401f01bc143b03994725fd908126131722d9e5045b0d990eba71d45ca8b53671"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/D4GKLXERA42X5W7K7WRJCNI7LU/bundle.json","state_url":"https://pith.science/pith/D4GKLXERA42X5W7K7WRJCNI7LU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/D4GKLXERA42X5W7K7WRJCNI7LU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T09:02:12Z","links":{"resolver":"https://pith.science/pith/D4GKLXERA42X5W7K7WRJCNI7LU","bundle":"https://pith.science/pith/D4GKLXERA42X5W7K7WRJCNI7LU/bundle.json","state":"https://pith.science/pith/D4GKLXERA42X5W7K7WRJCNI7LU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/D4GKLXERA42X5W7K7WRJCNI7LU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:D4GKLXERA42X5W7K7WRJCNI7LU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c2cd700698f757b32e0ceb12202c606d122acb4a4374d396a1bfd3382cca1295","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-12T08:48:38Z","title_canon_sha256":"93fa27abe7526b8b6a72bbff937f20d1bb4a240962b35ec4ca8a03bf2b06b0c1"},"schema_version":"1.0","source":{"id":"2309.06055","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.06055","created_at":"2026-07-05T09:44:05Z"},{"alias_kind":"arxiv_version","alias_value":"2309.06055v5","created_at":"2026-07-05T09:44:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.06055","created_at":"2026-07-05T09:44:05Z"},{"alias_kind":"pith_short_12","alias_value":"D4GKLXERA42X","created_at":"2026-07-05T09:44:05Z"},{"alias_kind":"pith_short_16","alias_value":"D4GKLXERA42X5W7K","created_at":"2026-07-05T09:44:05Z"},{"alias_kind":"pith_short_8","alias_value":"D4GKLXER","created_at":"2026-07-05T09:44:05Z"}],"graph_snapshots":[{"event_id":"sha256:401f01bc143b03994725fd908126131722d9e5045b0d990eba71d45ca8b53671","target":"graph","created_at":"2026-07-05T09:44:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.06055/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Language Models (LMs) are becoming increasingly popular in real-world applications. Outsourcing model training and data hosting to third-party platforms has become a standard method for reducing costs. In such a situation, the attacker can manipulate the training process or data to inject a backdoor into models. Backdoor attacks are a serious threat where malicious behavior is activated when triggers are present, otherwise, the model operates normally.\n  However, there is still no systematic and comprehensive review of LMs from the attacker's capabilities and purposes on different backdoor att","authors_text":"Gongshen Liu, Haodong Zhao, Pengzhou Cheng, Wei Du, Wei Lu, Zongru Wu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-12T08:48:38Z","title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.06055","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3ee8b9e2bf98ab74a26ea4d5ad43f3eda1ce185885bd1e17caefbf385862c8d0","target":"record","created_at":"2026-07-05T09:44:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c2cd700698f757b32e0ceb12202c606d122acb4a4374d396a1bfd3382cca1295","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-12T08:48:38Z","title_canon_sha256":"93fa27abe7526b8b6a72bbff937f20d1bb4a240962b35ec4ca8a03bf2b06b0c1"},"schema_version":"1.0","source":{"id":"2309.06055","kind":"arxiv","version":5}},"canonical_sha256":"1f0ca5dc9107357edbeafda291351f5d1f49a119d5fb9964b7b40dc4e2301b96","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1f0ca5dc9107357edbeafda291351f5d1f49a119d5fb9964b7b40dc4e2301b96","first_computed_at":"2026-07-05T09:44:05.294193Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:44:05.294193Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"994SH6gFDjIngDRRFcj9H5b0uL4hqQZpIxRb/IT06BsRWbcVAtnFGonwE3Hsbt/3O56lBL1nUQ4QEHSXmi3BDA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:44:05.294729Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.06055","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3ee8b9e2bf98ab74a26ea4d5ad43f3eda1ce185885bd1e17caefbf385862c8d0","sha256:401f01bc143b03994725fd908126131722d9e5045b0d990eba71d45ca8b53671"],"state_sha256":"c24b17b8321710c1c9742c98cc05c7175bac0950020469464d310476a9e82e4e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cPhws0zaAJZGU52ASW7BU4fYj0PvPjnqE9kyRmWrc9mR9oOjT2eIG/MVpkMpjuj5RC+90JTQSSvDW/JfNkb5DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T09:02:12.184375Z","bundle_sha256":"2d6bd0639ec14af3e0e2c34ded6aa3c4e76046ebdbdc950e1fd925e9bbe5be05"}}