{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2023:EMCWN4UVBFSFC3DSIUNBZJETOQ","short_pith_number":"pith:EMCWN4UV","schema_version":"1.0","canonical_sha256":"230566f2950964516c72451a1ca493740402d3aba5373297f9000172bab49c46","source":{"kind":"arxiv","id":"2312.04902","version":2},"attestation_state":"computed","paper":{"title":"BELT: Old-School Backdoor Attacks can Evade the State-of-the-Art Defense with Backdoor Exclusivity Lifting","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Huming Qiu, Junjie Sun, Min Yang, Mi Zhang, Xudong Pan","submitted_at":"2023-12-08T08:35:16Z","abstract_excerpt":"Deep neural networks (DNNs) are susceptible to backdoor attacks, where malicious functionality is embedded to allow attackers to trigger incorrect classifications. Old-school backdoor attacks use strong trigger features that can easily be learned by victim models. Despite robustness against input variation, the robustness however increases the likelihood of unintentional trigger activations. This leaves traces to existing defenses, which find approximate replacements for the original triggers that can activate the backdoor without being identical to the original trigger via, e.g., reverse engi"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2312.04902","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-08T08:35:16Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"32dd1326b5f7244f45ec5d8ccb40c03f998213413a852edcde1e480fc2e2e933","abstract_canon_sha256":"a774e8bee80f32967561ce2854d249f99b8066e97cc2d11f52aa4bc5ce4d8bae"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:11:56.200203Z","signature_b64":"RKH76sTCksV+6PQF7EwXhwP2e1l5iWJgpR03oybLjQf9e86qlQuQC8+nggKtWBvNwjyOiVtRWG8v+Gm6V4+6AQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"230566f2950964516c72451a1ca493740402d3aba5373297f9000172bab49c46","last_reissued_at":"2026-07-05T08:11:56.199734Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:11:56.199734Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"BELT: Old-School Backdoor Attacks can Evade the State-of-the-Art Defense with Backdoor Exclusivity Lifting","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Huming Qiu, Junjie Sun, Min Yang, Mi Zhang, Xudong Pan","submitted_at":"2023-12-08T08:35:16Z","abstract_excerpt":"Deep neural networks (DNNs) are susceptible to backdoor attacks, where malicious functionality is embedded to allow attackers to trigger incorrect classifications. Old-school backdoor attacks use strong trigger features that can easily be learned by victim models. Despite robustness against input variation, the robustness however increases the likelihood of unintentional trigger activations. This leaves traces to existing defenses, which find approximate replacements for the original triggers that can activate the backdoor without being identical to the original trigger via, e.g., reverse engi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.04902","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.04902/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2312.04902","created_at":"2026-07-05T08:11:56.199785+00:00"},{"alias_kind":"arxiv_version","alias_value":"2312.04902v2","created_at":"2026-07-05T08:11:56.199785+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.04902","created_at":"2026-07-05T08:11:56.199785+00:00"},{"alias_kind":"pith_short_12","alias_value":"EMCWN4UVBFSF","created_at":"2026-07-05T08:11:56.199785+00:00"},{"alias_kind":"pith_short_16","alias_value":"EMCWN4UVBFSFC3DS","created_at":"2026-07-05T08:11:56.199785+00:00"},{"alias_kind":"pith_short_8","alias_value":"EMCWN4UV","created_at":"2026-07-05T08:11:56.199785+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/EMCWN4UVBFSFC3DSIUNBZJETOQ","json":"https://pith.science/pith/EMCWN4UVBFSFC3DSIUNBZJETOQ.json","graph_json":"https://pith.science/api/pith-number/EMCWN4UVBFSFC3DSIUNBZJETOQ/graph.json","events_json":"https://pith.science/api/pith-number/EMCWN4UVBFSFC3DSIUNBZJETOQ/events.json","paper":"https://pith.science/paper/EMCWN4UV"},"agent_actions":{"view_html":"https://pith.science/pith/EMCWN4UVBFSFC3DSIUNBZJETOQ","download_json":"https://pith.science/pith/EMCWN4UVBFSFC3DSIUNBZJETOQ.json","view_paper":"https://pith.science/paper/EMCWN4UV","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2312.04902&json=true","fetch_graph":"https://pith.science/api/pith-number/EMCWN4UVBFSFC3DSIUNBZJETOQ/graph.json","fetch_events":"https://pith.science/api/pith-number/EMCWN4UVBFSFC3DSIUNBZJETOQ/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/EMCWN4UVBFSFC3DSIUNBZJETOQ/action/timestamp_anchor","attest_storage":"https://pith.science/pith/EMCWN4UVBFSFC3DSIUNBZJETOQ/action/storage_attestation","attest_author":"https://pith.science/pith/EMCWN4UVBFSFC3DSIUNBZJETOQ/action/author_attestation","sign_citation":"https://pith.science/pith/EMCWN4UVBFSFC3DSIUNBZJETOQ/action/citation_signature","submit_replication":"https://pith.science/pith/EMCWN4UVBFSFC3DSIUNBZJETOQ/action/replication_record"}},"created_at":"2026-07-05T08:11:56.199785+00:00","updated_at":"2026-07-05T08:11:56.199785+00:00"}