{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2023:EJYUUBM5LEFV5AFWYZWC6O2MIU","short_pith_number":"pith:EJYUUBM5","schema_version":"1.0","canonical_sha256":"22714a059d590b5e80b6c66c2f3b4c451a5b2eb7dc9b72b774935e97dfe5194f","source":{"kind":"arxiv","id":"2304.10985","version":3},"attestation_state":"computed","paper":{"title":"INK: Inheritable Natural Backdoor Attack Against Model Distillation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CV"],"primary_cat":"cs.CR","authors_text":"Bangzhou Xin, Chao Shen, Kangyi Ding, Li Yan, Ming Yi, Xiaolei Liu, Yixiao Xu","submitted_at":"2023-04-21T14:35:47Z","abstract_excerpt":"Deep learning models are vulnerable to backdoor attacks, where attackers inject malicious behavior through data poisoning and later exploit triggers to manipulate deployed models. To improve the stealth and effectiveness of backdoors, prior studies have introduced various imperceptible attack methods targeting both defense mechanisms and manual inspection. However, all poisoning-based attacks still rely on privileged access to the training dataset. Consequently, model distillation using a trusted dataset has emerged as an effective defense against these attacks. To bridge this gap, we introduc"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2304.10985","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-04-21T14:35:47Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"49cbb4a17e530eea00fdcc1c336c7023ab0d63725eaa8db03f2bfc74b72bca98","abstract_canon_sha256":"80e8550a3990c7b462ec355efd215f2d314c0c686ac69adf958512b8059f5cfb"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:04:27.902345Z","signature_b64":"1PazGy0Nwadb1BioGlZwY8WupaIMkzQbGRZN3Wai1ZY9zK7sGKtyRPRMjZGtU6tZ6A6oOIiqagxHAZskRoqTDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"22714a059d590b5e80b6c66c2f3b4c451a5b2eb7dc9b72b774935e97dfe5194f","last_reissued_at":"2026-07-05T09:04:27.901856Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:04:27.901856Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"INK: Inheritable Natural Backdoor Attack Against Model Distillation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CV"],"primary_cat":"cs.CR","authors_text":"Bangzhou Xin, Chao Shen, Kangyi Ding, Li Yan, Ming Yi, Xiaolei Liu, Yixiao Xu","submitted_at":"2023-04-21T14:35:47Z","abstract_excerpt":"Deep learning models are vulnerable to backdoor attacks, where attackers inject malicious behavior through data poisoning and later exploit triggers to manipulate deployed models. To improve the stealth and effectiveness of backdoors, prior studies have introduced various imperceptible attack methods targeting both defense mechanisms and manual inspection. However, all poisoning-based attacks still rely on privileged access to the training dataset. Consequently, model distillation using a trusted dataset has emerged as an effective defense against these attacks. To bridge this gap, we introduc"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.10985","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2304.10985/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2304.10985","created_at":"2026-07-05T09:04:27.901914+00:00"},{"alias_kind":"arxiv_version","alias_value":"2304.10985v3","created_at":"2026-07-05T09:04:27.901914+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.10985","created_at":"2026-07-05T09:04:27.901914+00:00"},{"alias_kind":"pith_short_12","alias_value":"EJYUUBM5LEFV","created_at":"2026-07-05T09:04:27.901914+00:00"},{"alias_kind":"pith_short_16","alias_value":"EJYUUBM5LEFV5AFW","created_at":"2026-07-05T09:04:27.901914+00:00"},{"alias_kind":"pith_short_8","alias_value":"EJYUUBM5","created_at":"2026-07-05T09:04:27.901914+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/EJYUUBM5LEFV5AFWYZWC6O2MIU","json":"https://pith.science/pith/EJYUUBM5LEFV5AFWYZWC6O2MIU.json","graph_json":"https://pith.science/api/pith-number/EJYUUBM5LEFV5AFWYZWC6O2MIU/graph.json","events_json":"https://pith.science/api/pith-number/EJYUUBM5LEFV5AFWYZWC6O2MIU/events.json","paper":"https://pith.science/paper/EJYUUBM5"},"agent_actions":{"view_html":"https://pith.science/pith/EJYUUBM5LEFV5AFWYZWC6O2MIU","download_json":"https://pith.science/pith/EJYUUBM5LEFV5AFWYZWC6O2MIU.json","view_paper":"https://pith.science/paper/EJYUUBM5","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2304.10985&json=true","fetch_graph":"https://pith.science/api/pith-number/EJYUUBM5LEFV5AFWYZWC6O2MIU/graph.json","fetch_events":"https://pith.science/api/pith-number/EJYUUBM5LEFV5AFWYZWC6O2MIU/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/EJYUUBM5LEFV5AFWYZWC6O2MIU/action/timestamp_anchor","attest_storage":"https://pith.science/pith/EJYUUBM5LEFV5AFWYZWC6O2MIU/action/storage_attestation","attest_author":"https://pith.science/pith/EJYUUBM5LEFV5AFWYZWC6O2MIU/action/author_attestation","sign_citation":"https://pith.science/pith/EJYUUBM5LEFV5AFWYZWC6O2MIU/action/citation_signature","submit_replication":"https://pith.science/pith/EJYUUBM5LEFV5AFWYZWC6O2MIU/action/replication_record"}},"created_at":"2026-07-05T09:04:27.901914+00:00","updated_at":"2026-07-05T09:04:27.901914+00:00"}