{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:EVKK4TPG2ST3N7AIVFICRU3373","short_pith_number":"pith:EVKK4TPG","canonical_record":{"source":{"id":"2402.08577","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-13T16:28:28Z","cross_cats_sorted":["cs.CR","cs.CV","cs.LG","cs.MM"],"title_canon_sha256":"8f85d2dfa6fc77cb74c6d1ef93331a4997775644c05dea7eb7461ae1ab49b58d","abstract_canon_sha256":"1a2d39b2275e3f7dff7a0eb8b434a7e203438cbd246d643ef1d46044a8a5bb2c"},"schema_version":"1.0"},"canonical_sha256":"2554ae4de6d4a7b6fc08a95028d37bfef72055650c65eb855a3d1cfb46be8e26","source":{"kind":"arxiv","id":"2402.08577","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.08577","created_at":"2026-07-05T07:44:48Z"},{"alias_kind":"arxiv_version","alias_value":"2402.08577v1","created_at":"2026-07-05T07:44:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.08577","created_at":"2026-07-05T07:44:48Z"},{"alias_kind":"pith_short_12","alias_value":"EVKK4TPG2ST3","created_at":"2026-07-05T07:44:48Z"},{"alias_kind":"pith_short_16","alias_value":"EVKK4TPG2ST3N7AI","created_at":"2026-07-05T07:44:48Z"},{"alias_kind":"pith_short_8","alias_value":"EVKK4TPG","created_at":"2026-07-05T07:44:48Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:EVKK4TPG2ST3N7AIVFICRU3373","target":"record","payload":{"canonical_record":{"source":{"id":"2402.08577","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-13T16:28:28Z","cross_cats_sorted":["cs.CR","cs.CV","cs.LG","cs.MM"],"title_canon_sha256":"8f85d2dfa6fc77cb74c6d1ef93331a4997775644c05dea7eb7461ae1ab49b58d","abstract_canon_sha256":"1a2d39b2275e3f7dff7a0eb8b434a7e203438cbd246d643ef1d46044a8a5bb2c"},"schema_version":"1.0"},"canonical_sha256":"2554ae4de6d4a7b6fc08a95028d37bfef72055650c65eb855a3d1cfb46be8e26","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:44:48.458308Z","signature_b64":"Tyox27oVADjEliDWEMZdx6nepdekai3h4Iita4K6sfXJtvUlGpZYUMb6HR3DJeXyEmQ/8fIL4V5mjQrpLrimAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2554ae4de6d4a7b6fc08a95028d37bfef72055650c65eb855a3d1cfb46be8e26","last_reissued_at":"2026-07-05T07:44:48.457756Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:44:48.457756Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.08577","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:44:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Z0feGhGPW+dMwvNKcDgiXTI3V0tgcblUaEfbcHuAQM5uf8Z0trchqIE94tKkNbm1FmwivnDeHM5PJhujqGBBCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T19:03:27.031875Z"},"content_sha256":"7af0afd797d247334edf8c842f12e9654d852664ac0cc6f25f6a16e5e5feb3bf","schema_version":"1.0","event_id":"sha256:7af0afd797d247334edf8c842f12e9654d852664ac0cc6f25f6a16e5e5feb3bf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:EVKK4TPG2ST3N7AIVFICRU3373","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV","cs.LG","cs.MM"],"primary_cat":"cs.CL","authors_text":"Chao Du, Dong Lu, Min Lin, Qian Liu, Tianyu Pang, Xianjun Yang","submitted_at":"2024-02-13T16:28:28Z","abstract_excerpt":"Backdoor attacks are commonly executed by contaminating training data, such that a trigger can activate predetermined harmful effects during the test phase. In this work, we present AnyDoor, a test-time backdoor attack against multimodal large language models (MLLMs), which involves injecting the backdoor into the textual modality using adversarial test images (sharing the same universal perturbation), without requiring access to or modification of the training data. AnyDoor employs similar techniques used in universal adversarial attacks, but distinguishes itself by its ability to decouple th"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.08577","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.08577/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:44:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tgflK7iZz9bWRi4YFkufuq0SGLxpmQEH7l7GvwqIYlriUiQu4Tz0KEZGxRE1wgJrB0guA/KRccSpUC6xj/h+Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T19:03:27.032385Z"},"content_sha256":"3fa969b576756f47370b6cab755de0d9132639adaaf9b9c572670cde48a6c8eb","schema_version":"1.0","event_id":"sha256:3fa969b576756f47370b6cab755de0d9132639adaaf9b9c572670cde48a6c8eb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EVKK4TPG2ST3N7AIVFICRU3373/bundle.json","state_url":"https://pith.science/pith/EVKK4TPG2ST3N7AIVFICRU3373/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EVKK4TPG2ST3N7AIVFICRU3373/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T19:03:27Z","links":{"resolver":"https://pith.science/pith/EVKK4TPG2ST3N7AIVFICRU3373","bundle":"https://pith.science/pith/EVKK4TPG2ST3N7AIVFICRU3373/bundle.json","state":"https://pith.science/pith/EVKK4TPG2ST3N7AIVFICRU3373/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EVKK4TPG2ST3N7AIVFICRU3373/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:EVKK4TPG2ST3N7AIVFICRU3373","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1a2d39b2275e3f7dff7a0eb8b434a7e203438cbd246d643ef1d46044a8a5bb2c","cross_cats_sorted":["cs.CR","cs.CV","cs.LG","cs.MM"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-13T16:28:28Z","title_canon_sha256":"8f85d2dfa6fc77cb74c6d1ef93331a4997775644c05dea7eb7461ae1ab49b58d"},"schema_version":"1.0","source":{"id":"2402.08577","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.08577","created_at":"2026-07-05T07:44:48Z"},{"alias_kind":"arxiv_version","alias_value":"2402.08577v1","created_at":"2026-07-05T07:44:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.08577","created_at":"2026-07-05T07:44:48Z"},{"alias_kind":"pith_short_12","alias_value":"EVKK4TPG2ST3","created_at":"2026-07-05T07:44:48Z"},{"alias_kind":"pith_short_16","alias_value":"EVKK4TPG2ST3N7AI","created_at":"2026-07-05T07:44:48Z"},{"alias_kind":"pith_short_8","alias_value":"EVKK4TPG","created_at":"2026-07-05T07:44:48Z"}],"graph_snapshots":[{"event_id":"sha256:3fa969b576756f47370b6cab755de0d9132639adaaf9b9c572670cde48a6c8eb","target":"graph","created_at":"2026-07-05T07:44:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.08577/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attacks are commonly executed by contaminating training data, such that a trigger can activate predetermined harmful effects during the test phase. In this work, we present AnyDoor, a test-time backdoor attack against multimodal large language models (MLLMs), which involves injecting the backdoor into the textual modality using adversarial test images (sharing the same universal perturbation), without requiring access to or modification of the training data. AnyDoor employs similar techniques used in universal adversarial attacks, but distinguishes itself by its ability to decouple th","authors_text":"Chao Du, Dong Lu, Min Lin, Qian Liu, Tianyu Pang, Xianjun Yang","cross_cats":["cs.CR","cs.CV","cs.LG","cs.MM"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.08577","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7af0afd797d247334edf8c842f12e9654d852664ac0cc6f25f6a16e5e5feb3bf","target":"record","created_at":"2026-07-05T07:44:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1a2d39b2275e3f7dff7a0eb8b434a7e203438cbd246d643ef1d46044a8a5bb2c","cross_cats_sorted":["cs.CR","cs.CV","cs.LG","cs.MM"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-13T16:28:28Z","title_canon_sha256":"8f85d2dfa6fc77cb74c6d1ef93331a4997775644c05dea7eb7461ae1ab49b58d"},"schema_version":"1.0","source":{"id":"2402.08577","kind":"arxiv","version":1}},"canonical_sha256":"2554ae4de6d4a7b6fc08a95028d37bfef72055650c65eb855a3d1cfb46be8e26","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2554ae4de6d4a7b6fc08a95028d37bfef72055650c65eb855a3d1cfb46be8e26","first_computed_at":"2026-07-05T07:44:48.457756Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:44:48.457756Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Tyox27oVADjEliDWEMZdx6nepdekai3h4Iita4K6sfXJtvUlGpZYUMb6HR3DJeXyEmQ/8fIL4V5mjQrpLrimAg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:44:48.458308Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.08577","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7af0afd797d247334edf8c842f12e9654d852664ac0cc6f25f6a16e5e5feb3bf","sha256:3fa969b576756f47370b6cab755de0d9132639adaaf9b9c572670cde48a6c8eb"],"state_sha256":"62f1cd1ab49ac8c28a2085591ddb091f4a3c5a63799741aad07fc7290cf4e896"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eQxK7z5iT6mSNCUiIqt6XDIpD2GxRep8BsPQj4F7D3/ijusUy/Yo0pdh2mAKYhP80Qs3Asfwhm1lA5sMjglVBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T19:03:27.040725Z","bundle_sha256":"9027d649ba3a022b9d0282d7f979c9b2616f6d65d3c06bbf2963e77771888f03"}}