{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:GXZMO6ADHDYQX3E2RENDYPGDSQ","short_pith_number":"pith:GXZMO6AD","canonical_record":{"source":{"id":"2010.03282","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-07T09:01:39Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"b697bd6aff12ee166cbf4b76a57806bf7da4daed937b27778b102fb7873980f8","abstract_canon_sha256":"31c3fcd8f80389920c00e59ee25b9ca5bae42d9ceaec8242b68d07b9ec8f2da0"},"schema_version":"1.0"},"canonical_sha256":"35f2c7780338f10bec9a891a3c3cc394399843dd9df425886ec682ce1ad7c46c","source":{"kind":"arxiv","id":"2010.03282","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.03282","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"arxiv_version","alias_value":"2010.03282v1","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.03282","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"pith_short_12","alias_value":"GXZMO6ADHDYQ","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"pith_short_16","alias_value":"GXZMO6ADHDYQX3E2","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"pith_short_8","alias_value":"GXZMO6AD","created_at":"2026-07-05T01:41:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:GXZMO6ADHDYQX3E2RENDYPGDSQ","target":"record","payload":{"canonical_record":{"source":{"id":"2010.03282","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-07T09:01:39Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"b697bd6aff12ee166cbf4b76a57806bf7da4daed937b27778b102fb7873980f8","abstract_canon_sha256":"31c3fcd8f80389920c00e59ee25b9ca5bae42d9ceaec8242b68d07b9ec8f2da0"},"schema_version":"1.0"},"canonical_sha256":"35f2c7780338f10bec9a891a3c3cc394399843dd9df425886ec682ce1ad7c46c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:41:20.918391Z","signature_b64":"kCuXHJ8sFdDrD2E32DyuQ2GyI5AgM5G6GLREo1CuNRKom+Gq7TbRjEQYyAfzPuZUAZtfCPTQqFJ2wFUk3Za/CQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"35f2c7780338f10bec9a891a3c3cc394399843dd9df425886ec682ce1ad7c46c","last_reissued_at":"2026-07-05T01:41:20.917878Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:41:20.917878Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2010.03282","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:41:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vJU1aRJK5n2ZfOGvTwtolm0PfWi+B3d0fI/C/AG5LNDYehTzwJDpti+gG1Iz1GA1Hwf+OSpxNwfvvpb8ODirDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T14:31:08.649146Z"},"content_sha256":"eff667f13678c8be03760ba7ef2a5b0a2137c0d8c6aff2e4416ab78d017a62c5","schema_version":"1.0","event_id":"sha256:eff667f13678c8be03760ba7ef2a5b0a2137c0d8c6aff2e4416ab78d017a62c5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:GXZMO6ADHDYQX3E2RENDYPGDSQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Don't Trigger Me! A Triggerless Backdoor Attack Against Deep Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Ahmed Salem, Michael Backes, Yang Zhang","submitted_at":"2020-10-07T09:01:39Z","abstract_excerpt":"Backdoor attack against deep neural networks is currently being profoundly investigated due to its severe security consequences. Current state-of-the-art backdoor attacks require the adversary to modify the input, usually by adding a trigger to it, for the target model to activate the backdoor. This added trigger not only increases the difficulty of launching the backdoor attack in the physical world, but also can be easily detected by multiple defense mechanisms. In this paper, we present the first triggerless backdoor attack against deep neural networks, where the adversary does not need to "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.03282","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2010.03282/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:41:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SXgni8cXjFqPRMoXhghaf/MZgtG9foDSMpxLJef05FvXEtiVAJNRMBVscsnTXq5Ep8jv3O3jarlQSAkTXWZDAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T14:31:08.650456Z"},"content_sha256":"4b03f015cc0b59cafb50b8f070a2f1d4f034d0073a363bc6045a412e40fa6948","schema_version":"1.0","event_id":"sha256:4b03f015cc0b59cafb50b8f070a2f1d4f034d0073a363bc6045a412e40fa6948"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GXZMO6ADHDYQX3E2RENDYPGDSQ/bundle.json","state_url":"https://pith.science/pith/GXZMO6ADHDYQX3E2RENDYPGDSQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GXZMO6ADHDYQX3E2RENDYPGDSQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T14:31:08Z","links":{"resolver":"https://pith.science/pith/GXZMO6ADHDYQX3E2RENDYPGDSQ","bundle":"https://pith.science/pith/GXZMO6ADHDYQX3E2RENDYPGDSQ/bundle.json","state":"https://pith.science/pith/GXZMO6ADHDYQX3E2RENDYPGDSQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GXZMO6ADHDYQX3E2RENDYPGDSQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:GXZMO6ADHDYQX3E2RENDYPGDSQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"31c3fcd8f80389920c00e59ee25b9ca5bae42d9ceaec8242b68d07b9ec8f2da0","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-07T09:01:39Z","title_canon_sha256":"b697bd6aff12ee166cbf4b76a57806bf7da4daed937b27778b102fb7873980f8"},"schema_version":"1.0","source":{"id":"2010.03282","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.03282","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"arxiv_version","alias_value":"2010.03282v1","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.03282","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"pith_short_12","alias_value":"GXZMO6ADHDYQ","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"pith_short_16","alias_value":"GXZMO6ADHDYQX3E2","created_at":"2026-07-05T01:41:20Z"},{"alias_kind":"pith_short_8","alias_value":"GXZMO6AD","created_at":"2026-07-05T01:41:20Z"}],"graph_snapshots":[{"event_id":"sha256:4b03f015cc0b59cafb50b8f070a2f1d4f034d0073a363bc6045a412e40fa6948","target":"graph","created_at":"2026-07-05T01:41:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2010.03282/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attack against deep neural networks is currently being profoundly investigated due to its severe security consequences. Current state-of-the-art backdoor attacks require the adversary to modify the input, usually by adding a trigger to it, for the target model to activate the backdoor. This added trigger not only increases the difficulty of launching the backdoor attack in the physical world, but also can be easily detected by multiple defense mechanisms. In this paper, we present the first triggerless backdoor attack against deep neural networks, where the adversary does not need to ","authors_text":"Ahmed Salem, Michael Backes, Yang Zhang","cross_cats":["cs.CV","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-07T09:01:39Z","title":"Don't Trigger Me! A Triggerless Backdoor Attack Against Deep Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.03282","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:eff667f13678c8be03760ba7ef2a5b0a2137c0d8c6aff2e4416ab78d017a62c5","target":"record","created_at":"2026-07-05T01:41:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"31c3fcd8f80389920c00e59ee25b9ca5bae42d9ceaec8242b68d07b9ec8f2da0","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-07T09:01:39Z","title_canon_sha256":"b697bd6aff12ee166cbf4b76a57806bf7da4daed937b27778b102fb7873980f8"},"schema_version":"1.0","source":{"id":"2010.03282","kind":"arxiv","version":1}},"canonical_sha256":"35f2c7780338f10bec9a891a3c3cc394399843dd9df425886ec682ce1ad7c46c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"35f2c7780338f10bec9a891a3c3cc394399843dd9df425886ec682ce1ad7c46c","first_computed_at":"2026-07-05T01:41:20.917878Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:41:20.917878Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kCuXHJ8sFdDrD2E32DyuQ2GyI5AgM5G6GLREo1CuNRKom+Gq7TbRjEQYyAfzPuZUAZtfCPTQqFJ2wFUk3Za/CQ==","signature_status":"signed_v1","signed_at":"2026-07-05T01:41:20.918391Z","signed_message":"canonical_sha256_bytes"},"source_id":"2010.03282","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:eff667f13678c8be03760ba7ef2a5b0a2137c0d8c6aff2e4416ab78d017a62c5","sha256:4b03f015cc0b59cafb50b8f070a2f1d4f034d0073a363bc6045a412e40fa6948"],"state_sha256":"53a6b871efd1a0c877f8ed4735027349baf64332c269593d8f5962eeea36591d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zmnYqNnH0saD3tHzQYLJBfXnmYjlS4KWWmZVhRKdFvG2RArSXFfz4tp3xLLAA23DKKkMHvDwHqy6lK/LIOFeBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T14:31:08.657778Z","bundle_sha256":"ac3fe4dc5d09bd5abbf8c1f18a330225a3119663127291a8adff5b1313e13c4b"}}