{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:GZIPAPTEIVJZNW5ZMHFINALGOW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8a8bf3d32f6c9873a2579b78929d61624ad99600bb0a2cc39770d967c3f70182","cross_cats_sorted":["cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-22T07:21:32Z","title_canon_sha256":"350e548ed5ad0899458afefd6535fdd26b76f0a95937c908576faea1e8a9604c"},"schema_version":"1.0","source":{"id":"2405.13401","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.13401","created_at":"2026-07-05T08:41:03Z"},{"alias_kind":"arxiv_version","alias_value":"2405.13401v4","created_at":"2026-07-05T08:41:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.13401","created_at":"2026-07-05T08:41:03Z"},{"alias_kind":"pith_short_12","alias_value":"GZIPAPTEIVJZ","created_at":"2026-07-05T08:41:03Z"},{"alias_kind":"pith_short_16","alias_value":"GZIPAPTEIVJZNW5Z","created_at":"2026-07-05T08:41:03Z"},{"alias_kind":"pith_short_8","alias_value":"GZIPAPTE","created_at":"2026-07-05T08:41:03Z"}],"graph_snapshots":[{"event_id":"sha256:b2abbd6f22579af57a5c7a3598b7a06169f69e945d2d1903483b4f2b4caf3ce8","target":"graph","created_at":"2026-07-05T08:41:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.13401/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have raised concerns about potential security threats despite performing significantly in Natural Language Processing (NLP). Backdoor attacks initially verified that LLM is doing substantial harm at all stages, but the cost and robustness have been criticized. Attacking LLMs is inherently risky in security review, while prohibitively expensive. Besides, the continuous iteration of LLMs will degrade the robustness of backdoors. In this paper, we propose TrojanRAG, which employs a joint backdoor attack in the Retrieval-Augmented Generation, thereby manipulating LLMs ","authors_text":"Gongshen Liu, Pengzhou Cheng, Ping Yi, Tianjie Ju, Wei Du, Yidong Ding, Zhuosheng Zhang, Zongru Wu","cross_cats":["cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-22T07:21:32Z","title":"TrojanRAG: Retrieval-Augmented Generation Can Be Backdoor Driver in Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.13401","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:989969be23b4c69a19e9349212d7d4571f6f19f8c2ded3887f2a0669f69a6721","target":"record","created_at":"2026-07-05T08:41:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8a8bf3d32f6c9873a2579b78929d61624ad99600bb0a2cc39770d967c3f70182","cross_cats_sorted":["cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-22T07:21:32Z","title_canon_sha256":"350e548ed5ad0899458afefd6535fdd26b76f0a95937c908576faea1e8a9604c"},"schema_version":"1.0","source":{"id":"2405.13401","kind":"arxiv","version":4}},"canonical_sha256":"3650f03e64455396dbb961ca86816675b1f8a9a5c037880611c42cfda28812e5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3650f03e64455396dbb961ca86816675b1f8a9a5c037880611c42cfda28812e5","first_computed_at":"2026-07-05T08:41:03.091894Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:41:03.091894Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RTm8yBwu5FjA37W6WvLooxwtUiGmuJFXIWqFtIExbOqcOQVJxbXCNM8YYbJpOz21Y0u7pkblwY6taXo/rWl6CA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:41:03.092502Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.13401","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:989969be23b4c69a19e9349212d7d4571f6f19f8c2ded3887f2a0669f69a6721","sha256:b2abbd6f22579af57a5c7a3598b7a06169f69e945d2d1903483b4f2b4caf3ce8"],"state_sha256":"4ff366ec1423bb18842bd46254ac423108e48d0db898810200691834a0c487cd"}