{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:EDXCGWHSUR525L6W5XHLNJ5AAF","short_pith_number":"pith:EDXCGWHS","canonical_record":{"source":{"id":"2412.11441","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-16T04:47:55Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"f61dd8c49be94b739e054c7e9a10d5ebf1e956bcecccb93fc64257e23adfc284","abstract_canon_sha256":"b85b8a2df9e20da7e198ac2fc473433c56a98b71a3916d238e759551966906cb"},"schema_version":"1.0"},"canonical_sha256":"20ee2358f2a47baeafd6edceb6a7a0015387186d183a6434e4b6e613365b4194","source":{"kind":"arxiv","id":"2412.11441","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.11441","created_at":"2026-07-05T10:21:27Z"},{"alias_kind":"arxiv_version","alias_value":"2412.11441v3","created_at":"2026-07-05T10:21:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.11441","created_at":"2026-07-05T10:21:27Z"},{"alias_kind":"pith_short_12","alias_value":"EDXCGWHSUR52","created_at":"2026-07-05T10:21:27Z"},{"alias_kind":"pith_short_16","alias_value":"EDXCGWHSUR525L6W","created_at":"2026-07-05T10:21:27Z"},{"alias_kind":"pith_short_8","alias_value":"EDXCGWHS","created_at":"2026-07-05T10:21:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:EDXCGWHSUR525L6W5XHLNJ5AAF","target":"record","payload":{"canonical_record":{"source":{"id":"2412.11441","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-16T04:47:55Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"f61dd8c49be94b739e054c7e9a10d5ebf1e956bcecccb93fc64257e23adfc284","abstract_canon_sha256":"b85b8a2df9e20da7e198ac2fc473433c56a98b71a3916d238e759551966906cb"},"schema_version":"1.0"},"canonical_sha256":"20ee2358f2a47baeafd6edceb6a7a0015387186d183a6434e4b6e613365b4194","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:21:27.302219Z","signature_b64":"MAqMKoJGWhHxJul0t1gIXN4V1wu6ckTsd9u6I47JV7YJdYULsuWBHrroGCE67OXiYo/PnzP6PwbaMy/WZbBxCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"20ee2358f2a47baeafd6edceb6a7a0015387186d183a6434e4b6e613365b4194","last_reissued_at":"2026-07-05T10:21:27.301694Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:21:27.301694Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.11441","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:21:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hEyPtEWKa/oOWlbBVkAzQMggwsiNk+ci/YZWaOVao8WyeDNVHVDLqOsTVerQo01x/6lG13patL/GxEONi7fIAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T11:00:20.711963Z"},"content_sha256":"70310ffef8e9310e4034fdf4fd006c9d573ea34581caa2c664a082ed1daed3e3","schema_version":"1.0","event_id":"sha256:70310ffef8e9310e4034fdf4fd006c9d573ea34581caa2c664a082ed1daed3e3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:EDXCGWHSUR525L6W5XHLNJ5AAF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"UIBDiffusion: Universal Imperceptible Backdoor Attack for Diffusion Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Bingyin Zhao, Biplab Sikdar, Feng Luo, Rui Chu, Yingjie Lao, Yuning Han","submitted_at":"2024-12-16T04:47:55Z","abstract_excerpt":"Recent studies show that diffusion models (DMs) are vulnerable to backdoor attacks. Existing backdoor attacks impose unconcealed triggers (e.g., a gray box and eyeglasses) that contain evident patterns, rendering remarkable attack effects yet easy detection upon human inspection and defensive algorithms. While it is possible to improve stealthiness by reducing the strength of the backdoor, doing so can significantly compromise its generality and effectiveness. In this paper, we propose UIBDiffusion, the universal imperceptible backdoor attack for diffusion models, which allows us to achieve su"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.11441","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.11441/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:21:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vFEfBoWw02v1Czp7lfWV2+eCcBfLPIgst5lNh23Re0bHb9BG33NaYZYZDL9wqCSFN0/L4DnC/Z9daqKvK9ObDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T11:00:20.712464Z"},"content_sha256":"3333e0a8cd1072331e57dc1e4c87971453e0e0a64839e4cbe8c5b9fac6ba0df5","schema_version":"1.0","event_id":"sha256:3333e0a8cd1072331e57dc1e4c87971453e0e0a64839e4cbe8c5b9fac6ba0df5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EDXCGWHSUR525L6W5XHLNJ5AAF/bundle.json","state_url":"https://pith.science/pith/EDXCGWHSUR525L6W5XHLNJ5AAF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EDXCGWHSUR525L6W5XHLNJ5AAF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T11:00:20Z","links":{"resolver":"https://pith.science/pith/EDXCGWHSUR525L6W5XHLNJ5AAF","bundle":"https://pith.science/pith/EDXCGWHSUR525L6W5XHLNJ5AAF/bundle.json","state":"https://pith.science/pith/EDXCGWHSUR525L6W5XHLNJ5AAF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EDXCGWHSUR525L6W5XHLNJ5AAF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:EDXCGWHSUR525L6W5XHLNJ5AAF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b85b8a2df9e20da7e198ac2fc473433c56a98b71a3916d238e759551966906cb","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-16T04:47:55Z","title_canon_sha256":"f61dd8c49be94b739e054c7e9a10d5ebf1e956bcecccb93fc64257e23adfc284"},"schema_version":"1.0","source":{"id":"2412.11441","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.11441","created_at":"2026-07-05T10:21:27Z"},{"alias_kind":"arxiv_version","alias_value":"2412.11441v3","created_at":"2026-07-05T10:21:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.11441","created_at":"2026-07-05T10:21:27Z"},{"alias_kind":"pith_short_12","alias_value":"EDXCGWHSUR52","created_at":"2026-07-05T10:21:27Z"},{"alias_kind":"pith_short_16","alias_value":"EDXCGWHSUR525L6W","created_at":"2026-07-05T10:21:27Z"},{"alias_kind":"pith_short_8","alias_value":"EDXCGWHS","created_at":"2026-07-05T10:21:27Z"}],"graph_snapshots":[{"event_id":"sha256:3333e0a8cd1072331e57dc1e4c87971453e0e0a64839e4cbe8c5b9fac6ba0df5","target":"graph","created_at":"2026-07-05T10:21:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.11441/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent studies show that diffusion models (DMs) are vulnerable to backdoor attacks. Existing backdoor attacks impose unconcealed triggers (e.g., a gray box and eyeglasses) that contain evident patterns, rendering remarkable attack effects yet easy detection upon human inspection and defensive algorithms. While it is possible to improve stealthiness by reducing the strength of the backdoor, doing so can significantly compromise its generality and effectiveness. In this paper, we propose UIBDiffusion, the universal imperceptible backdoor attack for diffusion models, which allows us to achieve su","authors_text":"Bingyin Zhao, Biplab Sikdar, Feng Luo, Rui Chu, Yingjie Lao, Yuning Han","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-16T04:47:55Z","title":"UIBDiffusion: Universal Imperceptible Backdoor Attack for Diffusion Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.11441","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:70310ffef8e9310e4034fdf4fd006c9d573ea34581caa2c664a082ed1daed3e3","target":"record","created_at":"2026-07-05T10:21:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b85b8a2df9e20da7e198ac2fc473433c56a98b71a3916d238e759551966906cb","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-16T04:47:55Z","title_canon_sha256":"f61dd8c49be94b739e054c7e9a10d5ebf1e956bcecccb93fc64257e23adfc284"},"schema_version":"1.0","source":{"id":"2412.11441","kind":"arxiv","version":3}},"canonical_sha256":"20ee2358f2a47baeafd6edceb6a7a0015387186d183a6434e4b6e613365b4194","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"20ee2358f2a47baeafd6edceb6a7a0015387186d183a6434e4b6e613365b4194","first_computed_at":"2026-07-05T10:21:27.301694Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:21:27.301694Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MAqMKoJGWhHxJul0t1gIXN4V1wu6ckTsd9u6I47JV7YJdYULsuWBHrroGCE67OXiYo/PnzP6PwbaMy/WZbBxCw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:21:27.302219Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.11441","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:70310ffef8e9310e4034fdf4fd006c9d573ea34581caa2c664a082ed1daed3e3","sha256:3333e0a8cd1072331e57dc1e4c87971453e0e0a64839e4cbe8c5b9fac6ba0df5"],"state_sha256":"c50bda7e1ba44359417e8283bb404324c5a4ce88ad10cb17d9d143735116f950"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4I4abIecituCajKm3a6fLHC5ZnUz+YUcyvbiPf8afhFguu+IHB6uqTEluqW7VnqAxFcroNUMy2DQP72FjQWoCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T11:00:20.716581Z","bundle_sha256":"a36120db1463b858758eb60e7a8b17dc42f831fced294ddf89cefbd50b125eb6"}}