{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:H7Y7YVK7GQTVK2QNWWHVQQ4UC5","short_pith_number":"pith:H7Y7YVK7","canonical_record":{"source":{"id":"2404.07863","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-11T15:55:53Z","cross_cats_sorted":[],"title_canon_sha256":"d001d93f7428db701d7203a19533a383e76ba75a1278121fe3fb3c3a9ebd99a8","abstract_canon_sha256":"a79d03b9e0e878ca0a384338beb7bd4df7b2b30de99186656dfb80b29a2cdd7f"},"schema_version":"1.0"},"canonical_sha256":"3ff1fc555f3427556a0db58f58439417696d992e518724253fca31f21e5ed947","source":{"kind":"arxiv","id":"2404.07863","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.07863","created_at":"2026-07-05T08:06:58Z"},{"alias_kind":"arxiv_version","alias_value":"2404.07863v1","created_at":"2026-07-05T08:06:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.07863","created_at":"2026-07-05T08:06:58Z"},{"alias_kind":"pith_short_12","alias_value":"H7Y7YVK7GQTV","created_at":"2026-07-05T08:06:58Z"},{"alias_kind":"pith_short_16","alias_value":"H7Y7YVK7GQTVK2QN","created_at":"2026-07-05T08:06:58Z"},{"alias_kind":"pith_short_8","alias_value":"H7Y7YVK7","created_at":"2026-07-05T08:06:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:H7Y7YVK7GQTVK2QNWWHVQQ4UC5","target":"record","payload":{"canonical_record":{"source":{"id":"2404.07863","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-11T15:55:53Z","cross_cats_sorted":[],"title_canon_sha256":"d001d93f7428db701d7203a19533a383e76ba75a1278121fe3fb3c3a9ebd99a8","abstract_canon_sha256":"a79d03b9e0e878ca0a384338beb7bd4df7b2b30de99186656dfb80b29a2cdd7f"},"schema_version":"1.0"},"canonical_sha256":"3ff1fc555f3427556a0db58f58439417696d992e518724253fca31f21e5ed947","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:06:58.744378Z","signature_b64":"2FahsCKDQPouUUkv37v9d11EvCmjaYOEdKAwEjy/jt6QymziQgD4fT2EbhGIYD9OuUofkavWWLBC/HLpFmoDAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3ff1fc555f3427556a0db58f58439417696d992e518724253fca31f21e5ed947","last_reissued_at":"2026-07-05T08:06:58.744009Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:06:58.744009Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.07863","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:06:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qHlJA+ms2bCP8Ce/zZNZtn9+SFrKNAKItipbSvgG33UetCB6PsFXkmvpctz7cDmgKMgmuNwBZKnMSbQHy7MODQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T21:29:58.078570Z"},"content_sha256":"64fe61e0326ffba9df82a86303421916b57bfb5e71b894ab70a77b0dae6c9904","schema_version":"1.0","event_id":"sha256:64fe61e0326ffba9df82a86303421916b57bfb5e71b894ab70a77b0dae6c9904"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:H7Y7YVK7GQTVK2QNWWHVQQ4UC5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Backdoor Contrastive Learning via Bi-level Trigger Optimization","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Hao Lu, Jinghui Chen, Lu Lin, Ting Wang, Weiyu Sun, Xinyu Zhang, Yingcong Chen","submitted_at":"2024-04-11T15:55:53Z","abstract_excerpt":"Contrastive Learning (CL) has attracted enormous attention due to its remarkable capability in unsupervised representation learning. However, recent works have revealed the vulnerability of CL to backdoor attacks: the feature extractor could be misled to embed backdoored data close to an attack target class, thus fooling the downstream predictor to misclassify it as the target. Existing attacks usually adopt a fixed trigger pattern and poison the training set with trigger-injected data, hoping for the feature extractor to learn the association between trigger and target class. However, we find"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.07863","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.07863/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:06:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KvhpTSRtzW7DG46R0krFCp8XrIpzxiIJZr7nh4oPAuXKbJPzzsLTxYt8HoZJ0Z9UZkvJ8rCyFYVx6s9m+fgxDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T21:29:58.079099Z"},"content_sha256":"b901c3007665bd3cb77ac423c03292d87c842cf48d331945fef35f3fd95724a9","schema_version":"1.0","event_id":"sha256:b901c3007665bd3cb77ac423c03292d87c842cf48d331945fef35f3fd95724a9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/H7Y7YVK7GQTVK2QNWWHVQQ4UC5/bundle.json","state_url":"https://pith.science/pith/H7Y7YVK7GQTVK2QNWWHVQQ4UC5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/H7Y7YVK7GQTVK2QNWWHVQQ4UC5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T21:29:58Z","links":{"resolver":"https://pith.science/pith/H7Y7YVK7GQTVK2QNWWHVQQ4UC5","bundle":"https://pith.science/pith/H7Y7YVK7GQTVK2QNWWHVQQ4UC5/bundle.json","state":"https://pith.science/pith/H7Y7YVK7GQTVK2QNWWHVQQ4UC5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/H7Y7YVK7GQTVK2QNWWHVQQ4UC5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:H7Y7YVK7GQTVK2QNWWHVQQ4UC5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a79d03b9e0e878ca0a384338beb7bd4df7b2b30de99186656dfb80b29a2cdd7f","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-11T15:55:53Z","title_canon_sha256":"d001d93f7428db701d7203a19533a383e76ba75a1278121fe3fb3c3a9ebd99a8"},"schema_version":"1.0","source":{"id":"2404.07863","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.07863","created_at":"2026-07-05T08:06:58Z"},{"alias_kind":"arxiv_version","alias_value":"2404.07863v1","created_at":"2026-07-05T08:06:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.07863","created_at":"2026-07-05T08:06:58Z"},{"alias_kind":"pith_short_12","alias_value":"H7Y7YVK7GQTV","created_at":"2026-07-05T08:06:58Z"},{"alias_kind":"pith_short_16","alias_value":"H7Y7YVK7GQTVK2QN","created_at":"2026-07-05T08:06:58Z"},{"alias_kind":"pith_short_8","alias_value":"H7Y7YVK7","created_at":"2026-07-05T08:06:58Z"}],"graph_snapshots":[{"event_id":"sha256:b901c3007665bd3cb77ac423c03292d87c842cf48d331945fef35f3fd95724a9","target":"graph","created_at":"2026-07-05T08:06:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.07863/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Contrastive Learning (CL) has attracted enormous attention due to its remarkable capability in unsupervised representation learning. However, recent works have revealed the vulnerability of CL to backdoor attacks: the feature extractor could be misled to embed backdoored data close to an attack target class, thus fooling the downstream predictor to misclassify it as the target. Existing attacks usually adopt a fixed trigger pattern and poison the training set with trigger-injected data, hoping for the feature extractor to learn the association between trigger and target class. However, we find","authors_text":"Hao Lu, Jinghui Chen, Lu Lin, Ting Wang, Weiyu Sun, Xinyu Zhang, Yingcong Chen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-11T15:55:53Z","title":"Backdoor Contrastive Learning via Bi-level Trigger Optimization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.07863","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:64fe61e0326ffba9df82a86303421916b57bfb5e71b894ab70a77b0dae6c9904","target":"record","created_at":"2026-07-05T08:06:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a79d03b9e0e878ca0a384338beb7bd4df7b2b30de99186656dfb80b29a2cdd7f","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-11T15:55:53Z","title_canon_sha256":"d001d93f7428db701d7203a19533a383e76ba75a1278121fe3fb3c3a9ebd99a8"},"schema_version":"1.0","source":{"id":"2404.07863","kind":"arxiv","version":1}},"canonical_sha256":"3ff1fc555f3427556a0db58f58439417696d992e518724253fca31f21e5ed947","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3ff1fc555f3427556a0db58f58439417696d992e518724253fca31f21e5ed947","first_computed_at":"2026-07-05T08:06:58.744009Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:06:58.744009Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2FahsCKDQPouUUkv37v9d11EvCmjaYOEdKAwEjy/jt6QymziQgD4fT2EbhGIYD9OuUofkavWWLBC/HLpFmoDAA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:06:58.744378Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.07863","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:64fe61e0326ffba9df82a86303421916b57bfb5e71b894ab70a77b0dae6c9904","sha256:b901c3007665bd3cb77ac423c03292d87c842cf48d331945fef35f3fd95724a9"],"state_sha256":"a0ebab9a26aea2e23efb60b5286b15bd47025891bf2622d57a53461b55aad038"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JB9u95DcRQSCO1FBb7H6xnn0U4tqdFNkiBxTVrfxhqt4t4oIaGwp2LFqiiu97JumpDSCsg6zXLPTTxNXC9MVCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T21:29:58.084912Z","bundle_sha256":"6c774b8b9650c5fa1e1365c9cc19442d93a503549f84e03774bdafa543af0af7"}}