{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:D4GKLXERA42X5W7K7WRJCNI7LU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c2cd700698f757b32e0ceb12202c606d122acb4a4374d396a1bfd3382cca1295","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-12T08:48:38Z","title_canon_sha256":"93fa27abe7526b8b6a72bbff937f20d1bb4a240962b35ec4ca8a03bf2b06b0c1"},"schema_version":"1.0","source":{"id":"2309.06055","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.06055","created_at":"2026-07-05T09:44:05Z"},{"alias_kind":"arxiv_version","alias_value":"2309.06055v5","created_at":"2026-07-05T09:44:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.06055","created_at":"2026-07-05T09:44:05Z"},{"alias_kind":"pith_short_12","alias_value":"D4GKLXERA42X","created_at":"2026-07-05T09:44:05Z"},{"alias_kind":"pith_short_16","alias_value":"D4GKLXERA42X5W7K","created_at":"2026-07-05T09:44:05Z"},{"alias_kind":"pith_short_8","alias_value":"D4GKLXER","created_at":"2026-07-05T09:44:05Z"}],"graph_snapshots":[{"event_id":"sha256:401f01bc143b03994725fd908126131722d9e5045b0d990eba71d45ca8b53671","target":"graph","created_at":"2026-07-05T09:44:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.06055/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Language Models (LMs) are becoming increasingly popular in real-world applications. Outsourcing model training and data hosting to third-party platforms has become a standard method for reducing costs. In such a situation, the attacker can manipulate the training process or data to inject a backdoor into models. Backdoor attacks are a serious threat where malicious behavior is activated when triggers are present, otherwise, the model operates normally.\n  However, there is still no systematic and comprehensive review of LMs from the attacker's capabilities and purposes on different backdoor att","authors_text":"Gongshen Liu, Haodong Zhao, Pengzhou Cheng, Wei Du, Wei Lu, Zongru Wu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-12T08:48:38Z","title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.06055","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3ee8b9e2bf98ab74a26ea4d5ad43f3eda1ce185885bd1e17caefbf385862c8d0","target":"record","created_at":"2026-07-05T09:44:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c2cd700698f757b32e0ceb12202c606d122acb4a4374d396a1bfd3382cca1295","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-12T08:48:38Z","title_canon_sha256":"93fa27abe7526b8b6a72bbff937f20d1bb4a240962b35ec4ca8a03bf2b06b0c1"},"schema_version":"1.0","source":{"id":"2309.06055","kind":"arxiv","version":5}},"canonical_sha256":"1f0ca5dc9107357edbeafda291351f5d1f49a119d5fb9964b7b40dc4e2301b96","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1f0ca5dc9107357edbeafda291351f5d1f49a119d5fb9964b7b40dc4e2301b96","first_computed_at":"2026-07-05T09:44:05.294193Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:44:05.294193Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"994SH6gFDjIngDRRFcj9H5b0uL4hqQZpIxRb/IT06BsRWbcVAtnFGonwE3Hsbt/3O56lBL1nUQ4QEHSXmi3BDA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:44:05.294729Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.06055","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3ee8b9e2bf98ab74a26ea4d5ad43f3eda1ce185885bd1e17caefbf385862c8d0","sha256:401f01bc143b03994725fd908126131722d9e5045b0d990eba71d45ca8b53671"],"state_sha256":"c24b17b8321710c1c9742c98cc05c7175bac0950020469464d310476a9e82e4e"}