{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:EJ42BOOONIMXO3IGYJ6WKS3GCC","short_pith_number":"pith:EJ42BOOO","canonical_record":{"source":{"id":"2408.13221","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-23T16:57:27Z","cross_cats_sorted":[],"title_canon_sha256":"3cbf267ad69e6d44e9066ffb7f2b0afacaa7ec538f48e5c7599f061e14cf044c","abstract_canon_sha256":"642246814f449c4bbb99f0abeb7499c2aede0f6ee097b7346d1fb03a5542f989"},"schema_version":"1.0"},"canonical_sha256":"2279a0b9ce6a19776d06c27d654b66109b8fb7065204fcc13f6a80a92722c582","source":{"kind":"arxiv","id":"2408.13221","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.13221","created_at":"2026-07-05T08:58:37Z"},{"alias_kind":"arxiv_version","alias_value":"2408.13221v1","created_at":"2026-07-05T08:58:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.13221","created_at":"2026-07-05T08:58:37Z"},{"alias_kind":"pith_short_12","alias_value":"EJ42BOOONIMX","created_at":"2026-07-05T08:58:37Z"},{"alias_kind":"pith_short_16","alias_value":"EJ42BOOONIMXO3IG","created_at":"2026-07-05T08:58:37Z"},{"alias_kind":"pith_short_8","alias_value":"EJ42BOOO","created_at":"2026-07-05T08:58:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:EJ42BOOONIMXO3IGYJ6WKS3GCC","target":"record","payload":{"canonical_record":{"source":{"id":"2408.13221","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-23T16:57:27Z","cross_cats_sorted":[],"title_canon_sha256":"3cbf267ad69e6d44e9066ffb7f2b0afacaa7ec538f48e5c7599f061e14cf044c","abstract_canon_sha256":"642246814f449c4bbb99f0abeb7499c2aede0f6ee097b7346d1fb03a5542f989"},"schema_version":"1.0"},"canonical_sha256":"2279a0b9ce6a19776d06c27d654b66109b8fb7065204fcc13f6a80a92722c582","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:58:37.178901Z","signature_b64":"a/Z/bJINhAfSuTJdOrbSmoziypv6qBIhZeFCrkeUojevmDuwjorVJdF+QX2FsSSzYc9KxVsZNM4MXGJFyrsUBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2279a0b9ce6a19776d06c27d654b66109b8fb7065204fcc13f6a80a92722c582","last_reissued_at":"2026-07-05T08:58:37.178434Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:58:37.178434Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.13221","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:58:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8laUek3FDOlf+fE8KJl0+OnVX4upSrMFo4/aF8ECdeK18aDTtLO6qw+OkU7yZ959CRlt6zhRgKASk0sxvmvtDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T18:48:25.683408Z"},"content_sha256":"95dd2d0a98b5db6bbe4bb04f444b9132ba26f9d4df68658c5923e58f0e6b6106","schema_version":"1.0","event_id":"sha256:95dd2d0a98b5db6bbe4bb04f444b9132ba26f9d4df68658c5923e58f0e6b6106"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:EJ42BOOONIMXO3IGYJ6WKS3GCC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Protecting against simultaneous data poisoning attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Amartya Sanyal, David Krueger, Neel Alex, Shoaib Ahmed Siddiqui","submitted_at":"2024-08-23T16:57:27Z","abstract_excerpt":"Current backdoor defense methods are evaluated against a single attack at a time. This is unrealistic, as powerful machine learning systems are trained on large datasets scraped from the internet, which may be attacked multiple times by one or more attackers. We demonstrate that simultaneously executed data poisoning attacks can effectively install multiple backdoors in a single model without substantially degrading clean accuracy. Furthermore, we show that existing backdoor defense methods do not effectively prevent attacks in this setting. Finally, we leverage insights into the nature of bac"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.13221","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.13221/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:58:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KGK6fLiwwQS6s7ACDOMDp/phfIEjBr9Z/3PREr5E8tubvFsb7bUQYZP+J9h+FjjAORDSSnFGCaL0LQcBOlz+Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T18:48:25.683984Z"},"content_sha256":"f243762dbe73ff0f7042c710b2bc6c91e49ed4b412f1f4a9a8adb70d5de2d88d","schema_version":"1.0","event_id":"sha256:f243762dbe73ff0f7042c710b2bc6c91e49ed4b412f1f4a9a8adb70d5de2d88d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EJ42BOOONIMXO3IGYJ6WKS3GCC/bundle.json","state_url":"https://pith.science/pith/EJ42BOOONIMXO3IGYJ6WKS3GCC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EJ42BOOONIMXO3IGYJ6WKS3GCC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T18:48:25Z","links":{"resolver":"https://pith.science/pith/EJ42BOOONIMXO3IGYJ6WKS3GCC","bundle":"https://pith.science/pith/EJ42BOOONIMXO3IGYJ6WKS3GCC/bundle.json","state":"https://pith.science/pith/EJ42BOOONIMXO3IGYJ6WKS3GCC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EJ42BOOONIMXO3IGYJ6WKS3GCC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:EJ42BOOONIMXO3IGYJ6WKS3GCC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"642246814f449c4bbb99f0abeb7499c2aede0f6ee097b7346d1fb03a5542f989","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-23T16:57:27Z","title_canon_sha256":"3cbf267ad69e6d44e9066ffb7f2b0afacaa7ec538f48e5c7599f061e14cf044c"},"schema_version":"1.0","source":{"id":"2408.13221","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.13221","created_at":"2026-07-05T08:58:37Z"},{"alias_kind":"arxiv_version","alias_value":"2408.13221v1","created_at":"2026-07-05T08:58:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.13221","created_at":"2026-07-05T08:58:37Z"},{"alias_kind":"pith_short_12","alias_value":"EJ42BOOONIMX","created_at":"2026-07-05T08:58:37Z"},{"alias_kind":"pith_short_16","alias_value":"EJ42BOOONIMXO3IG","created_at":"2026-07-05T08:58:37Z"},{"alias_kind":"pith_short_8","alias_value":"EJ42BOOO","created_at":"2026-07-05T08:58:37Z"}],"graph_snapshots":[{"event_id":"sha256:f243762dbe73ff0f7042c710b2bc6c91e49ed4b412f1f4a9a8adb70d5de2d88d","target":"graph","created_at":"2026-07-05T08:58:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.13221/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Current backdoor defense methods are evaluated against a single attack at a time. This is unrealistic, as powerful machine learning systems are trained on large datasets scraped from the internet, which may be attacked multiple times by one or more attackers. We demonstrate that simultaneously executed data poisoning attacks can effectively install multiple backdoors in a single model without substantially degrading clean accuracy. Furthermore, we show that existing backdoor defense methods do not effectively prevent attacks in this setting. Finally, we leverage insights into the nature of bac","authors_text":"Amartya Sanyal, David Krueger, Neel Alex, Shoaib Ahmed Siddiqui","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-23T16:57:27Z","title":"Protecting against simultaneous data poisoning attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.13221","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:95dd2d0a98b5db6bbe4bb04f444b9132ba26f9d4df68658c5923e58f0e6b6106","target":"record","created_at":"2026-07-05T08:58:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"642246814f449c4bbb99f0abeb7499c2aede0f6ee097b7346d1fb03a5542f989","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-23T16:57:27Z","title_canon_sha256":"3cbf267ad69e6d44e9066ffb7f2b0afacaa7ec538f48e5c7599f061e14cf044c"},"schema_version":"1.0","source":{"id":"2408.13221","kind":"arxiv","version":1}},"canonical_sha256":"2279a0b9ce6a19776d06c27d654b66109b8fb7065204fcc13f6a80a92722c582","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2279a0b9ce6a19776d06c27d654b66109b8fb7065204fcc13f6a80a92722c582","first_computed_at":"2026-07-05T08:58:37.178434Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:58:37.178434Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"a/Z/bJINhAfSuTJdOrbSmoziypv6qBIhZeFCrkeUojevmDuwjorVJdF+QX2FsSSzYc9KxVsZNM4MXGJFyrsUBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:58:37.178901Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.13221","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:95dd2d0a98b5db6bbe4bb04f444b9132ba26f9d4df68658c5923e58f0e6b6106","sha256:f243762dbe73ff0f7042c710b2bc6c91e49ed4b412f1f4a9a8adb70d5de2d88d"],"state_sha256":"321627ccec0fa77363c39464aa57236248de93305ad730964ddc5df8f6c5447d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qCsQ3ycdjoKx4uWDvKBzshL6dRhv/3hG7NvYwcaRlj1P8sBPxRb3DQQhMHpQrhIhkjKxVou7hD/6Y6dJITY8Ag==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T18:48:25.689511Z","bundle_sha256":"cde11e0f5ea0b9e30b2166a435c6d58e5b3da02c318f5d63c2033d85c9c510ee"}}