{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:DQFHKLQWTO2KZBGZQV2TPIS7EW","short_pith_number":"pith:DQFHKLQW","canonical_record":{"source":{"id":"2505.06413","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-09T20:28:17Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c05b94c7d02151cb7fc29641a8a90c412e22b63c139b1fb4c884a0b3cfe99c66","abstract_canon_sha256":"9a7c538da45d60a95933508378c0436f03b11c81d63a63bc564a74017452d6c7"},"schema_version":"1.0"},"canonical_sha256":"1c0a752e169bb4ac84d9857537a25f25a31cb2ee8c2b913db7e64128c05275c9","source":{"kind":"arxiv","id":"2505.06413","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.06413","created_at":"2026-07-05T11:01:09Z"},{"alias_kind":"arxiv_version","alias_value":"2505.06413v1","created_at":"2026-07-05T11:01:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.06413","created_at":"2026-07-05T11:01:09Z"},{"alias_kind":"pith_short_12","alias_value":"DQFHKLQWTO2K","created_at":"2026-07-05T11:01:09Z"},{"alias_kind":"pith_short_16","alias_value":"DQFHKLQWTO2KZBGZ","created_at":"2026-07-05T11:01:09Z"},{"alias_kind":"pith_short_8","alias_value":"DQFHKLQW","created_at":"2026-07-05T11:01:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:DQFHKLQWTO2KZBGZQV2TPIS7EW","target":"record","payload":{"canonical_record":{"source":{"id":"2505.06413","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-09T20:28:17Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c05b94c7d02151cb7fc29641a8a90c412e22b63c139b1fb4c884a0b3cfe99c66","abstract_canon_sha256":"9a7c538da45d60a95933508378c0436f03b11c81d63a63bc564a74017452d6c7"},"schema_version":"1.0"},"canonical_sha256":"1c0a752e169bb4ac84d9857537a25f25a31cb2ee8c2b913db7e64128c05275c9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:01:09.113733Z","signature_b64":"IGE3WvlvacHduR66KEadI2vq/h5ty6DxBjQxtX6my+utFiJEowNVwJ7LNhmMVE/3Bagvb2ZiQNucEn7PPgnFAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1c0a752e169bb4ac84d9857537a25f25a31cb2ee8c2b913db7e64128c05275c9","last_reissued_at":"2026-07-05T11:01:09.113231Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:01:09.113231Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.06413","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:01:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QK2wHLE4xjDpuHbIv6qCKFnxZrEA2L/iplqJ3o2mMZ8JqVzF9mznZffGFlJcuokiQRgSBhQI9MulaTSHVDLKBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T10:35:47.471908Z"},"content_sha256":"5783b1a3703a0a5d85d064da3509c71cbb9c2740da94e9f26539157924bf67fb","schema_version":"1.0","event_id":"sha256:5783b1a3703a0a5d85d064da3509c71cbb9c2740da94e9f26539157924bf67fb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:DQFHKLQWTO2KZBGZQV2TPIS7EW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Dacheng Tao, Koushik Howlader, Liwen Wang, Ming Liu, Siyuan Liang, Wensheng Zhang","submitted_at":"2025-05-09T20:28:17Z","abstract_excerpt":"Vision-Language Models (VLMs) have been integrated into autonomous driving systems to enhance reasoning capabilities through tasks such as Visual Question Answering (VQA). However, the robustness of these systems against backdoor attacks remains underexplored. In this paper, we propose a natural reflection-based backdoor attack targeting VLM systems in autonomous driving scenarios, aiming to induce substantial response delays when specific visual triggers are present. We embed faint reflection patterns, mimicking natural surfaces such as glass or water, into a subset of images in the DriveLM d"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.06413","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.06413/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:01:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KWH94+O+6MYYI5fY89i6idkFi0dxR1qXD2FLFZFRGag+OC9KNn99r2yHIkIcys/cZ4wwz35jWkXwWXMr2Hj/Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T10:35:47.472410Z"},"content_sha256":"7e97b285389db93210146c955bdd8fdb94b30868b8442489c940ec588a47cbb8","schema_version":"1.0","event_id":"sha256:7e97b285389db93210146c955bdd8fdb94b30868b8442489c940ec588a47cbb8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DQFHKLQWTO2KZBGZQV2TPIS7EW/bundle.json","state_url":"https://pith.science/pith/DQFHKLQWTO2KZBGZQV2TPIS7EW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DQFHKLQWTO2KZBGZQV2TPIS7EW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T10:35:47Z","links":{"resolver":"https://pith.science/pith/DQFHKLQWTO2KZBGZQV2TPIS7EW","bundle":"https://pith.science/pith/DQFHKLQWTO2KZBGZQV2TPIS7EW/bundle.json","state":"https://pith.science/pith/DQFHKLQWTO2KZBGZQV2TPIS7EW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DQFHKLQWTO2KZBGZQV2TPIS7EW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:DQFHKLQWTO2KZBGZQV2TPIS7EW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9a7c538da45d60a95933508378c0436f03b11c81d63a63bc564a74017452d6c7","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-09T20:28:17Z","title_canon_sha256":"c05b94c7d02151cb7fc29641a8a90c412e22b63c139b1fb4c884a0b3cfe99c66"},"schema_version":"1.0","source":{"id":"2505.06413","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.06413","created_at":"2026-07-05T11:01:09Z"},{"alias_kind":"arxiv_version","alias_value":"2505.06413v1","created_at":"2026-07-05T11:01:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.06413","created_at":"2026-07-05T11:01:09Z"},{"alias_kind":"pith_short_12","alias_value":"DQFHKLQWTO2K","created_at":"2026-07-05T11:01:09Z"},{"alias_kind":"pith_short_16","alias_value":"DQFHKLQWTO2KZBGZ","created_at":"2026-07-05T11:01:09Z"},{"alias_kind":"pith_short_8","alias_value":"DQFHKLQW","created_at":"2026-07-05T11:01:09Z"}],"graph_snapshots":[{"event_id":"sha256:7e97b285389db93210146c955bdd8fdb94b30868b8442489c940ec588a47cbb8","target":"graph","created_at":"2026-07-05T11:01:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.06413/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision-Language Models (VLMs) have been integrated into autonomous driving systems to enhance reasoning capabilities through tasks such as Visual Question Answering (VQA). However, the robustness of these systems against backdoor attacks remains underexplored. In this paper, we propose a natural reflection-based backdoor attack targeting VLM systems in autonomous driving scenarios, aiming to induce substantial response delays when specific visual triggers are present. We embed faint reflection patterns, mimicking natural surfaces such as glass or water, into a subset of images in the DriveLM d","authors_text":"Dacheng Tao, Koushik Howlader, Liwen Wang, Ming Liu, Siyuan Liang, Wensheng Zhang","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.06413","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5783b1a3703a0a5d85d064da3509c71cbb9c2740da94e9f26539157924bf67fb","target":"record","created_at":"2026-07-05T11:01:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9a7c538da45d60a95933508378c0436f03b11c81d63a63bc564a74017452d6c7","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-09T20:28:17Z","title_canon_sha256":"c05b94c7d02151cb7fc29641a8a90c412e22b63c139b1fb4c884a0b3cfe99c66"},"schema_version":"1.0","source":{"id":"2505.06413","kind":"arxiv","version":1}},"canonical_sha256":"1c0a752e169bb4ac84d9857537a25f25a31cb2ee8c2b913db7e64128c05275c9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1c0a752e169bb4ac84d9857537a25f25a31cb2ee8c2b913db7e64128c05275c9","first_computed_at":"2026-07-05T11:01:09.113231Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:01:09.113231Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IGE3WvlvacHduR66KEadI2vq/h5ty6DxBjQxtX6my+utFiJEowNVwJ7LNhmMVE/3Bagvb2ZiQNucEn7PPgnFAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:01:09.113733Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.06413","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5783b1a3703a0a5d85d064da3509c71cbb9c2740da94e9f26539157924bf67fb","sha256:7e97b285389db93210146c955bdd8fdb94b30868b8442489c940ec588a47cbb8"],"state_sha256":"acd709b3a58f153fe4594e1bbef3993688f14769faa5cfafb2961d2a64700d5b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vkSuVkdt1vb5nQcixvlz0gqXogFHgfRR/1YJx2gsMDuqdF4nd/HRFms2gvnK1ZnpK6eldPnQyCvjhDNa76B9Dw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T10:35:47.476296Z","bundle_sha256":"868adaf99859a5fa84640bee01c78cda4d6ee7e304ff159e0827c2f8c60e589c"}}