{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:EMCWN4UVBFSFC3DSIUNBZJETOQ","short_pith_number":"pith:EMCWN4UV","canonical_record":{"source":{"id":"2312.04902","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-08T08:35:16Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"32dd1326b5f7244f45ec5d8ccb40c03f998213413a852edcde1e480fc2e2e933","abstract_canon_sha256":"a774e8bee80f32967561ce2854d249f99b8066e97cc2d11f52aa4bc5ce4d8bae"},"schema_version":"1.0"},"canonical_sha256":"230566f2950964516c72451a1ca493740402d3aba5373297f9000172bab49c46","source":{"kind":"arxiv","id":"2312.04902","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.04902","created_at":"2026-07-05T08:11:56Z"},{"alias_kind":"arxiv_version","alias_value":"2312.04902v2","created_at":"2026-07-05T08:11:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.04902","created_at":"2026-07-05T08:11:56Z"},{"alias_kind":"pith_short_12","alias_value":"EMCWN4UVBFSF","created_at":"2026-07-05T08:11:56Z"},{"alias_kind":"pith_short_16","alias_value":"EMCWN4UVBFSFC3DS","created_at":"2026-07-05T08:11:56Z"},{"alias_kind":"pith_short_8","alias_value":"EMCWN4UV","created_at":"2026-07-05T08:11:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:EMCWN4UVBFSFC3DSIUNBZJETOQ","target":"record","payload":{"canonical_record":{"source":{"id":"2312.04902","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-08T08:35:16Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"32dd1326b5f7244f45ec5d8ccb40c03f998213413a852edcde1e480fc2e2e933","abstract_canon_sha256":"a774e8bee80f32967561ce2854d249f99b8066e97cc2d11f52aa4bc5ce4d8bae"},"schema_version":"1.0"},"canonical_sha256":"230566f2950964516c72451a1ca493740402d3aba5373297f9000172bab49c46","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:11:56.200203Z","signature_b64":"RKH76sTCksV+6PQF7EwXhwP2e1l5iWJgpR03oybLjQf9e86qlQuQC8+nggKtWBvNwjyOiVtRWG8v+Gm6V4+6AQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"230566f2950964516c72451a1ca493740402d3aba5373297f9000172bab49c46","last_reissued_at":"2026-07-05T08:11:56.199734Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:11:56.199734Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.04902","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:11:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hgVgQ3RNRkgtr1GYtMG0/72pFizjIjQQQ1KuK0Gep65md1i+eKKL0O1rLeaaoj3zn4TqfbbdLfLYTovNhUCTDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T20:08:27.250242Z"},"content_sha256":"ffc1e54603a64f5651a525c95b678230c7111b78ec865968af5325c8e1682cb3","schema_version":"1.0","event_id":"sha256:ffc1e54603a64f5651a525c95b678230c7111b78ec865968af5325c8e1682cb3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:EMCWN4UVBFSFC3DSIUNBZJETOQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"BELT: Old-School Backdoor Attacks can Evade the State-of-the-Art Defense with Backdoor Exclusivity Lifting","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Huming Qiu, Junjie Sun, Min Yang, Mi Zhang, Xudong Pan","submitted_at":"2023-12-08T08:35:16Z","abstract_excerpt":"Deep neural networks (DNNs) are susceptible to backdoor attacks, where malicious functionality is embedded to allow attackers to trigger incorrect classifications. Old-school backdoor attacks use strong trigger features that can easily be learned by victim models. Despite robustness against input variation, the robustness however increases the likelihood of unintentional trigger activations. This leaves traces to existing defenses, which find approximate replacements for the original triggers that can activate the backdoor without being identical to the original trigger via, e.g., reverse engi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.04902","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.04902/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:11:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vXSfitrdZnLJzESe2iOcTNYKk7PkgTUV60AmY2SPM2SD75RA+QTdGRxWEyYFQsI95xHsOSr5F4yMLBDxoksHAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T20:08:27.250748Z"},"content_sha256":"88185972f67fcb5902f4651a6749ed7c7dde82db02b8194dc97920ac2b4867cf","schema_version":"1.0","event_id":"sha256:88185972f67fcb5902f4651a6749ed7c7dde82db02b8194dc97920ac2b4867cf"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EMCWN4UVBFSFC3DSIUNBZJETOQ/bundle.json","state_url":"https://pith.science/pith/EMCWN4UVBFSFC3DSIUNBZJETOQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EMCWN4UVBFSFC3DSIUNBZJETOQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T20:08:27Z","links":{"resolver":"https://pith.science/pith/EMCWN4UVBFSFC3DSIUNBZJETOQ","bundle":"https://pith.science/pith/EMCWN4UVBFSFC3DSIUNBZJETOQ/bundle.json","state":"https://pith.science/pith/EMCWN4UVBFSFC3DSIUNBZJETOQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EMCWN4UVBFSFC3DSIUNBZJETOQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:EMCWN4UVBFSFC3DSIUNBZJETOQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a774e8bee80f32967561ce2854d249f99b8066e97cc2d11f52aa4bc5ce4d8bae","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-08T08:35:16Z","title_canon_sha256":"32dd1326b5f7244f45ec5d8ccb40c03f998213413a852edcde1e480fc2e2e933"},"schema_version":"1.0","source":{"id":"2312.04902","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.04902","created_at":"2026-07-05T08:11:56Z"},{"alias_kind":"arxiv_version","alias_value":"2312.04902v2","created_at":"2026-07-05T08:11:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.04902","created_at":"2026-07-05T08:11:56Z"},{"alias_kind":"pith_short_12","alias_value":"EMCWN4UVBFSF","created_at":"2026-07-05T08:11:56Z"},{"alias_kind":"pith_short_16","alias_value":"EMCWN4UVBFSFC3DS","created_at":"2026-07-05T08:11:56Z"},{"alias_kind":"pith_short_8","alias_value":"EMCWN4UV","created_at":"2026-07-05T08:11:56Z"}],"graph_snapshots":[{"event_id":"sha256:88185972f67fcb5902f4651a6749ed7c7dde82db02b8194dc97920ac2b4867cf","target":"graph","created_at":"2026-07-05T08:11:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.04902/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) are susceptible to backdoor attacks, where malicious functionality is embedded to allow attackers to trigger incorrect classifications. Old-school backdoor attacks use strong trigger features that can easily be learned by victim models. Despite robustness against input variation, the robustness however increases the likelihood of unintentional trigger activations. This leaves traces to existing defenses, which find approximate replacements for the original triggers that can activate the backdoor without being identical to the original trigger via, e.g., reverse engi","authors_text":"Huming Qiu, Junjie Sun, Min Yang, Mi Zhang, Xudong Pan","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-08T08:35:16Z","title":"BELT: Old-School Backdoor Attacks can Evade the State-of-the-Art Defense with Backdoor Exclusivity Lifting"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.04902","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ffc1e54603a64f5651a525c95b678230c7111b78ec865968af5325c8e1682cb3","target":"record","created_at":"2026-07-05T08:11:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a774e8bee80f32967561ce2854d249f99b8066e97cc2d11f52aa4bc5ce4d8bae","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-08T08:35:16Z","title_canon_sha256":"32dd1326b5f7244f45ec5d8ccb40c03f998213413a852edcde1e480fc2e2e933"},"schema_version":"1.0","source":{"id":"2312.04902","kind":"arxiv","version":2}},"canonical_sha256":"230566f2950964516c72451a1ca493740402d3aba5373297f9000172bab49c46","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"230566f2950964516c72451a1ca493740402d3aba5373297f9000172bab49c46","first_computed_at":"2026-07-05T08:11:56.199734Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:11:56.199734Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RKH76sTCksV+6PQF7EwXhwP2e1l5iWJgpR03oybLjQf9e86qlQuQC8+nggKtWBvNwjyOiVtRWG8v+Gm6V4+6AQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:11:56.200203Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.04902","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ffc1e54603a64f5651a525c95b678230c7111b78ec865968af5325c8e1682cb3","sha256:88185972f67fcb5902f4651a6749ed7c7dde82db02b8194dc97920ac2b4867cf"],"state_sha256":"ce6043c9708e94f795cd66f634ac8e6f7576158108855ba43d9ba0eaa9288328"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OwyviMb4Hc11+sMHAW/mPwQu4VGiRt89o2nvOSU33sAk5EOITVmKsbVFtv1s5h5y4Y0KCg7Mvdvesh6NkAMEDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T20:08:27.254140Z","bundle_sha256":"0aa987038d97aeeacf87fc97383d93691bd229b77673d658c349cb26e8041374"}}