{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:FKAB55KWXK26INBPNN4GO6D7TW","short_pith_number":"pith:FKAB55KW","canonical_record":{"source":{"id":"2503.20925","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-03-26T18:58:53Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"95c73d4d39ddc5f0f2f3755742b289e639796de03ad9f526b275de0f48f28748","abstract_canon_sha256":"3a53f09fd03890066272b3a494844c7744f48cfcf8aecc70e506eac25b09b9f6"},"schema_version":"1.0"},"canonical_sha256":"2a801ef556bab5e4342f6b7867787f9d8ace91b01ee5ac69ebe85dc2ea87aaf7","source":{"kind":"arxiv","id":"2503.20925","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.20925","created_at":"2026-07-05T10:39:50Z"},{"alias_kind":"arxiv_version","alias_value":"2503.20925v1","created_at":"2026-07-05T10:39:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.20925","created_at":"2026-07-05T10:39:50Z"},{"alias_kind":"pith_short_12","alias_value":"FKAB55KWXK26","created_at":"2026-07-05T10:39:50Z"},{"alias_kind":"pith_short_16","alias_value":"FKAB55KWXK26INBP","created_at":"2026-07-05T10:39:50Z"},{"alias_kind":"pith_short_8","alias_value":"FKAB55KW","created_at":"2026-07-05T10:39:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:FKAB55KWXK26INBPNN4GO6D7TW","target":"record","payload":{"canonical_record":{"source":{"id":"2503.20925","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-03-26T18:58:53Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"95c73d4d39ddc5f0f2f3755742b289e639796de03ad9f526b275de0f48f28748","abstract_canon_sha256":"3a53f09fd03890066272b3a494844c7744f48cfcf8aecc70e506eac25b09b9f6"},"schema_version":"1.0"},"canonical_sha256":"2a801ef556bab5e4342f6b7867787f9d8ace91b01ee5ac69ebe85dc2ea87aaf7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:39:50.400564Z","signature_b64":"QwU3jzo3HMGmqdSonnEo/jVWJlhF/bHIdU1TzTWG6w0vmHM4r5st0I+8MACWGtOhbBbKuios3UJtCkZLK+MxCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2a801ef556bab5e4342f6b7867787f9d8ace91b01ee5ac69ebe85dc2ea87aaf7","last_reissued_at":"2026-07-05T10:39:50.400147Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:39:50.400147Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2503.20925","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:39:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"u8H8s8jMvJJIxlH+DK8QkWeB1WCnDQCUhx3hAoSYfEZuKYYQji/g5YrFSzKmcTDlWLMOzcj72bhsfv2dFSiJBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T14:05:51.156683Z"},"content_sha256":"6dc5c68c8d929a065b6812f1ac51729e83af118531b101c7baa387627f62ac78","schema_version":"1.0","event_id":"sha256:6dc5c68c8d929a065b6812f1ac51729e83af118531b101c7baa387627f62ac78"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:FKAB55KWXK26INBPNN4GO6D7TW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Prototype Guided Backdoor Defense","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CV","authors_text":"Avani Gupta, Narayanan P J, Saurabh Saini, Sunayana Samavedam, Venkat Adithya Amula","submitted_at":"2025-03-26T18:58:53Z","abstract_excerpt":"Deep learning models are susceptible to {\\em backdoor attacks} involving malicious attackers perturbing a small subset of training data with a {\\em trigger} to causes misclassifications. Various triggers have been used, including semantic triggers that are easily realizable without requiring the attacker to manipulate the image. The emergence of generative AI has eased the generation of varied poisoned samples. Robustness across types of triggers is crucial to effective defense. We propose Prototype Guided Backdoor Defense (PGBD), a robust post-hoc defense that scales across different trigger "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.20925","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2503.20925/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:39:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7b8GMQ6fJ9FzuthWcqnoyTTvHoGbUNLF4GsMKh4nBe8yLnc5/zmS/AiQmJtMgcGbBEyLKPreCBQUfpsB+aOeCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T14:05:51.157511Z"},"content_sha256":"9b261793bfb5e108ac3efdc89d68763de9cd98310bb25810577995bbe93bd84f","schema_version":"1.0","event_id":"sha256:9b261793bfb5e108ac3efdc89d68763de9cd98310bb25810577995bbe93bd84f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FKAB55KWXK26INBPNN4GO6D7TW/bundle.json","state_url":"https://pith.science/pith/FKAB55KWXK26INBPNN4GO6D7TW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FKAB55KWXK26INBPNN4GO6D7TW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T14:05:51Z","links":{"resolver":"https://pith.science/pith/FKAB55KWXK26INBPNN4GO6D7TW","bundle":"https://pith.science/pith/FKAB55KWXK26INBPNN4GO6D7TW/bundle.json","state":"https://pith.science/pith/FKAB55KWXK26INBPNN4GO6D7TW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FKAB55KWXK26INBPNN4GO6D7TW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:FKAB55KWXK26INBPNN4GO6D7TW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3a53f09fd03890066272b3a494844c7744f48cfcf8aecc70e506eac25b09b9f6","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-03-26T18:58:53Z","title_canon_sha256":"95c73d4d39ddc5f0f2f3755742b289e639796de03ad9f526b275de0f48f28748"},"schema_version":"1.0","source":{"id":"2503.20925","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.20925","created_at":"2026-07-05T10:39:50Z"},{"alias_kind":"arxiv_version","alias_value":"2503.20925v1","created_at":"2026-07-05T10:39:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.20925","created_at":"2026-07-05T10:39:50Z"},{"alias_kind":"pith_short_12","alias_value":"FKAB55KWXK26","created_at":"2026-07-05T10:39:50Z"},{"alias_kind":"pith_short_16","alias_value":"FKAB55KWXK26INBP","created_at":"2026-07-05T10:39:50Z"},{"alias_kind":"pith_short_8","alias_value":"FKAB55KW","created_at":"2026-07-05T10:39:50Z"}],"graph_snapshots":[{"event_id":"sha256:9b261793bfb5e108ac3efdc89d68763de9cd98310bb25810577995bbe93bd84f","target":"graph","created_at":"2026-07-05T10:39:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.20925/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep learning models are susceptible to {\\em backdoor attacks} involving malicious attackers perturbing a small subset of training data with a {\\em trigger} to causes misclassifications. Various triggers have been used, including semantic triggers that are easily realizable without requiring the attacker to manipulate the image. The emergence of generative AI has eased the generation of varied poisoned samples. Robustness across types of triggers is crucial to effective defense. We propose Prototype Guided Backdoor Defense (PGBD), a robust post-hoc defense that scales across different trigger ","authors_text":"Avani Gupta, Narayanan P J, Saurabh Saini, Sunayana Samavedam, Venkat Adithya Amula","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-03-26T18:58:53Z","title":"Prototype Guided Backdoor Defense"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.20925","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6dc5c68c8d929a065b6812f1ac51729e83af118531b101c7baa387627f62ac78","target":"record","created_at":"2026-07-05T10:39:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3a53f09fd03890066272b3a494844c7744f48cfcf8aecc70e506eac25b09b9f6","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-03-26T18:58:53Z","title_canon_sha256":"95c73d4d39ddc5f0f2f3755742b289e639796de03ad9f526b275de0f48f28748"},"schema_version":"1.0","source":{"id":"2503.20925","kind":"arxiv","version":1}},"canonical_sha256":"2a801ef556bab5e4342f6b7867787f9d8ace91b01ee5ac69ebe85dc2ea87aaf7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2a801ef556bab5e4342f6b7867787f9d8ace91b01ee5ac69ebe85dc2ea87aaf7","first_computed_at":"2026-07-05T10:39:50.400147Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:39:50.400147Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"QwU3jzo3HMGmqdSonnEo/jVWJlhF/bHIdU1TzTWG6w0vmHM4r5st0I+8MACWGtOhbBbKuios3UJtCkZLK+MxCw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:39:50.400564Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.20925","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6dc5c68c8d929a065b6812f1ac51729e83af118531b101c7baa387627f62ac78","sha256:9b261793bfb5e108ac3efdc89d68763de9cd98310bb25810577995bbe93bd84f"],"state_sha256":"2e5ac4b051723041e9e6bd631937d2dc11d47c6fc73eec5e21738beca50351c6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3aGsTtFm7cAr2+WPw63E5bVAZiE0me0Xlp7p8/Nvgqs8ByctYMi2PPCzrl0Nf3z046jG26CbieTmTLSK4QE/Bg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T14:05:51.162208Z","bundle_sha256":"33c66793e89448248b5884702b4fc2646357fc8397c196493ae0c62d7d557f57"}}