{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:GIAXX2LQORREQ6AT4YJREWT7S6","short_pith_number":"pith:GIAXX2LQ","canonical_record":{"source":{"id":"2201.08619","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-01-21T10:11:27Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"fb537d93c301442f5664f7ae974dd142b64c920f51b4b86ceca446df799cac9d","abstract_canon_sha256":"c1bdd7cc5e932ea60a1030ba493169ff3fb2fbe3d32294043ff655c248889a51"},"schema_version":"1.0"},"canonical_sha256":"32017be9707462487813e613125a7f9793b11997edd69c44f8ef8f4dba3d74d9","source":{"kind":"arxiv","id":"2201.08619","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.08619","created_at":"2026-07-05T04:27:10Z"},{"alias_kind":"arxiv_version","alias_value":"2201.08619v2","created_at":"2026-07-05T04:27:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.08619","created_at":"2026-07-05T04:27:10Z"},{"alias_kind":"pith_short_12","alias_value":"GIAXX2LQORRE","created_at":"2026-07-05T04:27:10Z"},{"alias_kind":"pith_short_16","alias_value":"GIAXX2LQORREQ6AT","created_at":"2026-07-05T04:27:10Z"},{"alias_kind":"pith_short_8","alias_value":"GIAXX2LQ","created_at":"2026-07-05T04:27:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:GIAXX2LQORREQ6AT4YJREWT7S6","target":"record","payload":{"canonical_record":{"source":{"id":"2201.08619","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-01-21T10:11:27Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"fb537d93c301442f5664f7ae974dd142b64c920f51b4b86ceca446df799cac9d","abstract_canon_sha256":"c1bdd7cc5e932ea60a1030ba493169ff3fb2fbe3d32294043ff655c248889a51"},"schema_version":"1.0"},"canonical_sha256":"32017be9707462487813e613125a7f9793b11997edd69c44f8ef8f4dba3d74d9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:27:10.557235Z","signature_b64":"4qq5dkttz6qcr6X4skDrsracFd4UV5zbrsoJ3GLgIhK2DPEKUzJK22wqHyb7uLP8Lm+V1kZYXCFXAGkNrcPgBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"32017be9707462487813e613125a7f9793b11997edd69c44f8ef8f4dba3d74d9","last_reissued_at":"2026-07-05T04:27:10.556745Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:27:10.556745Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2201.08619","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:27:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jfwhNhHGi3ItmZo/NMvty5hvUsN8KIkwxRTUE9HmqnWxUT8m/zfkvla79p0TzDoURhzBOZvaI+feT/pIEatYCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T17:21:07.389850Z"},"content_sha256":"0c674337133b9376172dd47dce74186667f7f14eff87237e2160c6f0284da660","schema_version":"1.0","event_id":"sha256:0c674337133b9376172dd47dce74186667f7f14eff87237e2160c6f0284da660"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:GIAXX2LQORREQ6AT4YJREWT7S6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Dangerous Cloaking: Natural Trigger based Backdoor Attacks on Object Detectors in the Physical World","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.CV","authors_text":"Alsharif Abuadbba, Anmin Fu, Derek Abbott, Hua Ma, Hyoungshick Kim, Nepal Surya, Said F. Al-Sarawi, Yansong Gao, Yinshan Li, Zhi Zhang","submitted_at":"2022-01-21T10:11:27Z","abstract_excerpt":"Deep learning models have been shown to be vulnerable to recent backdoor attacks. A backdoored model behaves normally for inputs containing no attacker-secretly-chosen trigger and maliciously for inputs with the trigger. To date, backdoor attacks and countermeasures mainly focus on image classification tasks. And most of them are implemented in the digital world with digital triggers. Besides the classification tasks, object detection systems are also considered as one of the basic foundations of computer vision tasks. However, there is no investigation and understanding of the backdoor vulner"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.08619","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2201.08619/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:27:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VWEtLLojUsTtz3KuOa3rU1PYhIVhpMWCl0UgIv3pIRcSBz7ittlJJ/6Bb4oqupc2IlR32aZqIGmbB2Y3uWEzAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T17:21:07.390541Z"},"content_sha256":"6528d2cc3d811c38aaccf1a49c56ef8c541047d161303b762ea3f0c47d39b3df","schema_version":"1.0","event_id":"sha256:6528d2cc3d811c38aaccf1a49c56ef8c541047d161303b762ea3f0c47d39b3df"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GIAXX2LQORREQ6AT4YJREWT7S6/bundle.json","state_url":"https://pith.science/pith/GIAXX2LQORREQ6AT4YJREWT7S6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GIAXX2LQORREQ6AT4YJREWT7S6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T17:21:07Z","links":{"resolver":"https://pith.science/pith/GIAXX2LQORREQ6AT4YJREWT7S6","bundle":"https://pith.science/pith/GIAXX2LQORREQ6AT4YJREWT7S6/bundle.json","state":"https://pith.science/pith/GIAXX2LQORREQ6AT4YJREWT7S6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GIAXX2LQORREQ6AT4YJREWT7S6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:GIAXX2LQORREQ6AT4YJREWT7S6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c1bdd7cc5e932ea60a1030ba493169ff3fb2fbe3d32294043ff655c248889a51","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-01-21T10:11:27Z","title_canon_sha256":"fb537d93c301442f5664f7ae974dd142b64c920f51b4b86ceca446df799cac9d"},"schema_version":"1.0","source":{"id":"2201.08619","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.08619","created_at":"2026-07-05T04:27:10Z"},{"alias_kind":"arxiv_version","alias_value":"2201.08619v2","created_at":"2026-07-05T04:27:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.08619","created_at":"2026-07-05T04:27:10Z"},{"alias_kind":"pith_short_12","alias_value":"GIAXX2LQORRE","created_at":"2026-07-05T04:27:10Z"},{"alias_kind":"pith_short_16","alias_value":"GIAXX2LQORREQ6AT","created_at":"2026-07-05T04:27:10Z"},{"alias_kind":"pith_short_8","alias_value":"GIAXX2LQ","created_at":"2026-07-05T04:27:10Z"}],"graph_snapshots":[{"event_id":"sha256:6528d2cc3d811c38aaccf1a49c56ef8c541047d161303b762ea3f0c47d39b3df","target":"graph","created_at":"2026-07-05T04:27:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2201.08619/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep learning models have been shown to be vulnerable to recent backdoor attacks. A backdoored model behaves normally for inputs containing no attacker-secretly-chosen trigger and maliciously for inputs with the trigger. To date, backdoor attacks and countermeasures mainly focus on image classification tasks. And most of them are implemented in the digital world with digital triggers. Besides the classification tasks, object detection systems are also considered as one of the basic foundations of computer vision tasks. However, there is no investigation and understanding of the backdoor vulner","authors_text":"Alsharif Abuadbba, Anmin Fu, Derek Abbott, Hua Ma, Hyoungshick Kim, Nepal Surya, Said F. Al-Sarawi, Yansong Gao, Yinshan Li, Zhi Zhang","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-01-21T10:11:27Z","title":"Dangerous Cloaking: Natural Trigger based Backdoor Attacks on Object Detectors in the Physical World"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.08619","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0c674337133b9376172dd47dce74186667f7f14eff87237e2160c6f0284da660","target":"record","created_at":"2026-07-05T04:27:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c1bdd7cc5e932ea60a1030ba493169ff3fb2fbe3d32294043ff655c248889a51","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-01-21T10:11:27Z","title_canon_sha256":"fb537d93c301442f5664f7ae974dd142b64c920f51b4b86ceca446df799cac9d"},"schema_version":"1.0","source":{"id":"2201.08619","kind":"arxiv","version":2}},"canonical_sha256":"32017be9707462487813e613125a7f9793b11997edd69c44f8ef8f4dba3d74d9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"32017be9707462487813e613125a7f9793b11997edd69c44f8ef8f4dba3d74d9","first_computed_at":"2026-07-05T04:27:10.556745Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:27:10.556745Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4qq5dkttz6qcr6X4skDrsracFd4UV5zbrsoJ3GLgIhK2DPEKUzJK22wqHyb7uLP8Lm+V1kZYXCFXAGkNrcPgBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T04:27:10.557235Z","signed_message":"canonical_sha256_bytes"},"source_id":"2201.08619","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0c674337133b9376172dd47dce74186667f7f14eff87237e2160c6f0284da660","sha256:6528d2cc3d811c38aaccf1a49c56ef8c541047d161303b762ea3f0c47d39b3df"],"state_sha256":"9182f47716503703b20ab3c6e23b65dc88ccca5efe1a0c298200f111a2dd14a3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bDK5Cr647f27m07lL7LvhjbUPEE0YtO1NAH1rSdi87j6rot7cTkR6gdebS8WxS1XGp4JrQ2MRDoSSUJbNf78Cg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T17:21:07.399572Z","bundle_sha256":"c0075e2973c559ff6348d28e7984cfd4ef999f72d47c887be305b603008648f6"}}