{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:F52Y35NOLHI743A274XOZHWQZA","short_pith_number":"pith:F52Y35NO","canonical_record":{"source":{"id":"2305.11596","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-19T11:18:20Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"4cce99c43494fe747f45517ff4dceb8a86812d7ed59c10b00e4142a2b8f33a66","abstract_canon_sha256":"5075016035c6e51a8ad982ce70d11ca64aeabd13b8d5fb07495380b4f1c18a2d"},"schema_version":"1.0"},"canonical_sha256":"2f758df5ae59d1fe6c1aff2eec9ed0c82073f3309981014e27a8e28bb0934c9f","source":{"kind":"arxiv","id":"2305.11596","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.11596","created_at":"2026-07-05T07:02:50Z"},{"alias_kind":"arxiv_version","alias_value":"2305.11596v2","created_at":"2026-07-05T07:02:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.11596","created_at":"2026-07-05T07:02:50Z"},{"alias_kind":"pith_short_12","alias_value":"F52Y35NOLHI7","created_at":"2026-07-05T07:02:50Z"},{"alias_kind":"pith_short_16","alias_value":"F52Y35NOLHI743A2","created_at":"2026-07-05T07:02:50Z"},{"alias_kind":"pith_short_8","alias_value":"F52Y35NO","created_at":"2026-07-05T07:02:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:F52Y35NOLHI743A274XOZHWQZA","target":"record","payload":{"canonical_record":{"source":{"id":"2305.11596","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-19T11:18:20Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"4cce99c43494fe747f45517ff4dceb8a86812d7ed59c10b00e4142a2b8f33a66","abstract_canon_sha256":"5075016035c6e51a8ad982ce70d11ca64aeabd13b8d5fb07495380b4f1c18a2d"},"schema_version":"1.0"},"canonical_sha256":"2f758df5ae59d1fe6c1aff2eec9ed0c82073f3309981014e27a8e28bb0934c9f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:02:50.168104Z","signature_b64":"O5J1p5juh0vR7bS90UCgQf0R4IGxD38oa12q5c6mVm5y4JfvuqaO2naUtCR+vwjrJx15ZUpTEFQDOdrKhzZgCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2f758df5ae59d1fe6c1aff2eec9ed0c82073f3309981014e27a8e28bb0934c9f","last_reissued_at":"2026-07-05T07:02:50.167582Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:02:50.167582Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.11596","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:02:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"APE9qS7ImJcLjsXJy3T3DWkZ5tSdBgATMTYFKa9BE4dAYJLde/CwqU9ZNYRmY36WBZY0k876nkvhWdvtcm45CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-24T01:41:43.463932Z"},"content_sha256":"7ec011528ba090d98720502962eb2bb1733a46d00e447afb30d48eb8ae1a1d2a","schema_version":"1.0","event_id":"sha256:7ec011528ba090d98720502962eb2bb1733a46d00e447afb30d48eb8ae1a1d2a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:F52Y35NOLHI743A274XOZHWQZA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Mitigating Backdoor Poisoning Attacks through the Lens of Spurious Correlation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CL","authors_text":"Benjamin Rubinstein, Jun Wang, Qiongkai Xu, Trevor Cohn, Xuanli He","submitted_at":"2023-05-19T11:18:20Z","abstract_excerpt":"Modern NLP models are often trained over large untrusted datasets, raising the potential for a malicious adversary to compromise model behaviour. For instance, backdoors can be implanted through crafting training instances with a specific textual trigger and a target label. This paper posits that backdoor poisoning attacks exhibit \\emph{spurious correlation} between simple text features and classification labels, and accordingly, proposes methods for mitigating spurious correlation as means of defence. Our empirical study reveals that the malicious triggers are highly correlated to their targe"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.11596","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.11596/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:02:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AEXvtZOTxPM1OYk05YFSil0MPst7nxREMxyEnawbUrThX3a+gz5C3F1ibxI6BKlK7qpKnZSjJP7RYJ1U/WP0Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-24T01:41:43.465008Z"},"content_sha256":"c354161d244b631143099b7ef68328b42fa86766aa620d6499b3d6b85f0b18bb","schema_version":"1.0","event_id":"sha256:c354161d244b631143099b7ef68328b42fa86766aa620d6499b3d6b85f0b18bb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/F52Y35NOLHI743A274XOZHWQZA/bundle.json","state_url":"https://pith.science/pith/F52Y35NOLHI743A274XOZHWQZA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/F52Y35NOLHI743A274XOZHWQZA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-24T01:41:43Z","links":{"resolver":"https://pith.science/pith/F52Y35NOLHI743A274XOZHWQZA","bundle":"https://pith.science/pith/F52Y35NOLHI743A274XOZHWQZA/bundle.json","state":"https://pith.science/pith/F52Y35NOLHI743A274XOZHWQZA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/F52Y35NOLHI743A274XOZHWQZA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:F52Y35NOLHI743A274XOZHWQZA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5075016035c6e51a8ad982ce70d11ca64aeabd13b8d5fb07495380b4f1c18a2d","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-19T11:18:20Z","title_canon_sha256":"4cce99c43494fe747f45517ff4dceb8a86812d7ed59c10b00e4142a2b8f33a66"},"schema_version":"1.0","source":{"id":"2305.11596","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.11596","created_at":"2026-07-05T07:02:50Z"},{"alias_kind":"arxiv_version","alias_value":"2305.11596v2","created_at":"2026-07-05T07:02:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.11596","created_at":"2026-07-05T07:02:50Z"},{"alias_kind":"pith_short_12","alias_value":"F52Y35NOLHI7","created_at":"2026-07-05T07:02:50Z"},{"alias_kind":"pith_short_16","alias_value":"F52Y35NOLHI743A2","created_at":"2026-07-05T07:02:50Z"},{"alias_kind":"pith_short_8","alias_value":"F52Y35NO","created_at":"2026-07-05T07:02:50Z"}],"graph_snapshots":[{"event_id":"sha256:c354161d244b631143099b7ef68328b42fa86766aa620d6499b3d6b85f0b18bb","target":"graph","created_at":"2026-07-05T07:02:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.11596/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Modern NLP models are often trained over large untrusted datasets, raising the potential for a malicious adversary to compromise model behaviour. For instance, backdoors can be implanted through crafting training instances with a specific textual trigger and a target label. This paper posits that backdoor poisoning attacks exhibit \\emph{spurious correlation} between simple text features and classification labels, and accordingly, proposes methods for mitigating spurious correlation as means of defence. Our empirical study reveals that the malicious triggers are highly correlated to their targe","authors_text":"Benjamin Rubinstein, Jun Wang, Qiongkai Xu, Trevor Cohn, Xuanli He","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-19T11:18:20Z","title":"Mitigating Backdoor Poisoning Attacks through the Lens of Spurious Correlation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.11596","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7ec011528ba090d98720502962eb2bb1733a46d00e447afb30d48eb8ae1a1d2a","target":"record","created_at":"2026-07-05T07:02:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5075016035c6e51a8ad982ce70d11ca64aeabd13b8d5fb07495380b4f1c18a2d","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-19T11:18:20Z","title_canon_sha256":"4cce99c43494fe747f45517ff4dceb8a86812d7ed59c10b00e4142a2b8f33a66"},"schema_version":"1.0","source":{"id":"2305.11596","kind":"arxiv","version":2}},"canonical_sha256":"2f758df5ae59d1fe6c1aff2eec9ed0c82073f3309981014e27a8e28bb0934c9f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2f758df5ae59d1fe6c1aff2eec9ed0c82073f3309981014e27a8e28bb0934c9f","first_computed_at":"2026-07-05T07:02:50.167582Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:02:50.167582Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"O5J1p5juh0vR7bS90UCgQf0R4IGxD38oa12q5c6mVm5y4JfvuqaO2naUtCR+vwjrJx15ZUpTEFQDOdrKhzZgCA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:02:50.168104Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.11596","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7ec011528ba090d98720502962eb2bb1733a46d00e447afb30d48eb8ae1a1d2a","sha256:c354161d244b631143099b7ef68328b42fa86766aa620d6499b3d6b85f0b18bb"],"state_sha256":"51a3727cb48883154c2d3f8cf6bbb28f2d50fdd293a30641f1863778193e1358"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4mLBGKBkR8hcudWrtLIliTp204V+XiV/Gnr3Q8Vrjc7nKndXqlNQTa5DuoU8uFZfE7Td45UKTYqMyUqyQRwpDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-24T01:41:43.472256Z","bundle_sha256":"bd5c94ab2246a1477d0b6378632b3d1a53f5e57a3aeddb02529b9c4315172db1"}}