{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:F5HFAR2PHB3ZT223L7IVYUDMGE","short_pith_number":"pith:F5HFAR2P","canonical_record":{"source":{"id":"2105.12400","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-05-26T08:54:19Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"079fd535e7c4d8af05a59420fa5c2d650d23d80c482e03b6c5dd1bbf1597d1a3","abstract_canon_sha256":"1fa6dd19341d59192c11fa5a8d09ca89c4cb9805d66e5ed9e89a09aeea1e5276"},"schema_version":"1.0"},"canonical_sha256":"2f4e50474f387799eb5b5fd15c506c313c3f48ce1454fd491604791b0b7cd74b","source":{"kind":"arxiv","id":"2105.12400","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.12400","created_at":"2026-07-05T02:45:50Z"},{"alias_kind":"arxiv_version","alias_value":"2105.12400v2","created_at":"2026-07-05T02:45:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.12400","created_at":"2026-07-05T02:45:50Z"},{"alias_kind":"pith_short_12","alias_value":"F5HFAR2PHB3Z","created_at":"2026-07-05T02:45:50Z"},{"alias_kind":"pith_short_16","alias_value":"F5HFAR2PHB3ZT223","created_at":"2026-07-05T02:45:50Z"},{"alias_kind":"pith_short_8","alias_value":"F5HFAR2P","created_at":"2026-07-05T02:45:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:F5HFAR2PHB3ZT223L7IVYUDMGE","target":"record","payload":{"canonical_record":{"source":{"id":"2105.12400","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-05-26T08:54:19Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"079fd535e7c4d8af05a59420fa5c2d650d23d80c482e03b6c5dd1bbf1597d1a3","abstract_canon_sha256":"1fa6dd19341d59192c11fa5a8d09ca89c4cb9805d66e5ed9e89a09aeea1e5276"},"schema_version":"1.0"},"canonical_sha256":"2f4e50474f387799eb5b5fd15c506c313c3f48ce1454fd491604791b0b7cd74b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:45:50.290005Z","signature_b64":"2DIwA80mZEUmFx06iltRbiQkiYsEkZX2psoQzqbZ4dfFGd8Z/Wj1/Fkgv1diW6EGMlhQg5FVGJcOjzLgDH9NCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2f4e50474f387799eb5b5fd15c506c313c3f48ce1454fd491604791b0b7cd74b","last_reissued_at":"2026-07-05T02:45:50.289534Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:45:50.289534Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2105.12400","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:45:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"T5Od5IWsjNR6uGpuqnIhz59YVSqxzsw3HJpKSHOXUP1MSSfJiqzkmi1eSAQY71/7jHotk+8unONrKeS1aFVeDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T11:14:22.011183Z"},"content_sha256":"85f0a449bb7e24eec45bb78f2571f1ef5aab22ec917e679614538b9fa16f683a","schema_version":"1.0","event_id":"sha256:85f0a449bb7e24eec45bb78f2571f1ef5aab22ec917e679614538b9fa16f683a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:F5HFAR2PHB3ZT223L7IVYUDMGE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CL","authors_text":"Fanchao Qi, Maosong Sun, Mukai Li, Yangyi Chen, Yasheng Wang, Zhengyan Zhang, Zhiyuan Liu","submitted_at":"2021-05-26T08:54:19Z","abstract_excerpt":"Backdoor attacks are a kind of insidious security threat against machine learning models. After being injected with a backdoor in training, the victim model will produce adversary-specified outputs on the inputs embedded with predesigned triggers but behave properly on normal inputs during inference. As a sort of emergent attack, backdoor attacks in natural language processing (NLP) are investigated insufficiently. As far as we know, almost all existing textual backdoor attack methods insert additional contents into normal samples as triggers, which causes the trigger-embedded samples to be de"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.12400","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2105.12400/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:45:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cgBDNXvHw4YP8+b2BAmrTnIHcoBCJjDa0scLOlqRNym0y58b54FrvFMExNrovVfYjL1qK/lBpoox051YIx8CDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T11:14:22.011805Z"},"content_sha256":"8f300b59d7635b9454cd0ddbde83ca9ac9c19061b91aae8280a725a5b6b92208","schema_version":"1.0","event_id":"sha256:8f300b59d7635b9454cd0ddbde83ca9ac9c19061b91aae8280a725a5b6b92208"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/F5HFAR2PHB3ZT223L7IVYUDMGE/bundle.json","state_url":"https://pith.science/pith/F5HFAR2PHB3ZT223L7IVYUDMGE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/F5HFAR2PHB3ZT223L7IVYUDMGE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T11:14:22Z","links":{"resolver":"https://pith.science/pith/F5HFAR2PHB3ZT223L7IVYUDMGE","bundle":"https://pith.science/pith/F5HFAR2PHB3ZT223L7IVYUDMGE/bundle.json","state":"https://pith.science/pith/F5HFAR2PHB3ZT223L7IVYUDMGE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/F5HFAR2PHB3ZT223L7IVYUDMGE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:F5HFAR2PHB3ZT223L7IVYUDMGE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1fa6dd19341d59192c11fa5a8d09ca89c4cb9805d66e5ed9e89a09aeea1e5276","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-05-26T08:54:19Z","title_canon_sha256":"079fd535e7c4d8af05a59420fa5c2d650d23d80c482e03b6c5dd1bbf1597d1a3"},"schema_version":"1.0","source":{"id":"2105.12400","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.12400","created_at":"2026-07-05T02:45:50Z"},{"alias_kind":"arxiv_version","alias_value":"2105.12400v2","created_at":"2026-07-05T02:45:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.12400","created_at":"2026-07-05T02:45:50Z"},{"alias_kind":"pith_short_12","alias_value":"F5HFAR2PHB3Z","created_at":"2026-07-05T02:45:50Z"},{"alias_kind":"pith_short_16","alias_value":"F5HFAR2PHB3ZT223","created_at":"2026-07-05T02:45:50Z"},{"alias_kind":"pith_short_8","alias_value":"F5HFAR2P","created_at":"2026-07-05T02:45:50Z"}],"graph_snapshots":[{"event_id":"sha256:8f300b59d7635b9454cd0ddbde83ca9ac9c19061b91aae8280a725a5b6b92208","target":"graph","created_at":"2026-07-05T02:45:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2105.12400/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attacks are a kind of insidious security threat against machine learning models. After being injected with a backdoor in training, the victim model will produce adversary-specified outputs on the inputs embedded with predesigned triggers but behave properly on normal inputs during inference. As a sort of emergent attack, backdoor attacks in natural language processing (NLP) are investigated insufficiently. As far as we know, almost all existing textual backdoor attack methods insert additional contents into normal samples as triggers, which causes the trigger-embedded samples to be de","authors_text":"Fanchao Qi, Maosong Sun, Mukai Li, Yangyi Chen, Yasheng Wang, Zhengyan Zhang, Zhiyuan Liu","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-05-26T08:54:19Z","title":"Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.12400","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:85f0a449bb7e24eec45bb78f2571f1ef5aab22ec917e679614538b9fa16f683a","target":"record","created_at":"2026-07-05T02:45:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1fa6dd19341d59192c11fa5a8d09ca89c4cb9805d66e5ed9e89a09aeea1e5276","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-05-26T08:54:19Z","title_canon_sha256":"079fd535e7c4d8af05a59420fa5c2d650d23d80c482e03b6c5dd1bbf1597d1a3"},"schema_version":"1.0","source":{"id":"2105.12400","kind":"arxiv","version":2}},"canonical_sha256":"2f4e50474f387799eb5b5fd15c506c313c3f48ce1454fd491604791b0b7cd74b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2f4e50474f387799eb5b5fd15c506c313c3f48ce1454fd491604791b0b7cd74b","first_computed_at":"2026-07-05T02:45:50.289534Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:45:50.289534Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2DIwA80mZEUmFx06iltRbiQkiYsEkZX2psoQzqbZ4dfFGd8Z/Wj1/Fkgv1diW6EGMlhQg5FVGJcOjzLgDH9NCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T02:45:50.290005Z","signed_message":"canonical_sha256_bytes"},"source_id":"2105.12400","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:85f0a449bb7e24eec45bb78f2571f1ef5aab22ec917e679614538b9fa16f683a","sha256:8f300b59d7635b9454cd0ddbde83ca9ac9c19061b91aae8280a725a5b6b92208"],"state_sha256":"93c49df0bb75a3ea95139fe5f341c0b0ec218ef49fae2cdc68ca547b0ab240b0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XY8fASapWR4BcvLhWoz4Rfzq2hIM4AFPIAolCAVgOw0Si0Z8q5ldZvqNmg6m2/qvHVir1+O8tnknFw6XltB4AQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T11:14:22.016933Z","bundle_sha256":"1dcea2d51a1b12fae649563a22f8e3f183d22a02d2e8909981f2cdaf763474c1"}}