{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:HADW4AWLUIGFX5HPREF24KSY5W","short_pith_number":"pith:HADW4AWL","canonical_record":{"source":{"id":"2607.09473","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-10T14:44:32Z","cross_cats_sorted":[],"title_canon_sha256":"90654498defcdada009be33fbf6ad640d22b24cb589fd586df4c9ed005eac03d","abstract_canon_sha256":"41f69e68a73469a0c7b04421ce5283de94bed36290daf0e55d7aff432e2a3aa7"},"schema_version":"1.0"},"canonical_sha256":"38076e02cba20c5bf4ef890bae2a58ed8417bb3d561432011a5e8614140536df","source":{"kind":"arxiv","id":"2607.09473","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.09473","created_at":"2026-07-13T01:20:12Z"},{"alias_kind":"arxiv_version","alias_value":"2607.09473v1","created_at":"2026-07-13T01:20:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.09473","created_at":"2026-07-13T01:20:12Z"},{"alias_kind":"pith_short_12","alias_value":"HADW4AWLUIGF","created_at":"2026-07-13T01:20:12Z"},{"alias_kind":"pith_short_16","alias_value":"HADW4AWLUIGFX5HP","created_at":"2026-07-13T01:20:12Z"},{"alias_kind":"pith_short_8","alias_value":"HADW4AWL","created_at":"2026-07-13T01:20:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:HADW4AWLUIGFX5HPREF24KSY5W","target":"record","payload":{"canonical_record":{"source":{"id":"2607.09473","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-10T14:44:32Z","cross_cats_sorted":[],"title_canon_sha256":"90654498defcdada009be33fbf6ad640d22b24cb589fd586df4c9ed005eac03d","abstract_canon_sha256":"41f69e68a73469a0c7b04421ce5283de94bed36290daf0e55d7aff432e2a3aa7"},"schema_version":"1.0"},"canonical_sha256":"38076e02cba20c5bf4ef890bae2a58ed8417bb3d561432011a5e8614140536df","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-13T01:20:12.457299Z","signature_b64":"vy7oIK8oXpX6puqQTTp1UPBfCGeyvuu/9u2qZBCHlUOf9Dwyi00QcRiRkvzMfF6Dh+AGMMFzlO9KDQNj5Ui0Aw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"38076e02cba20c5bf4ef890bae2a58ed8417bb3d561432011a5e8614140536df","last_reissued_at":"2026-07-13T01:20:12.456146Z","signature_status":"signed_v1","first_computed_at":"2026-07-13T01:20:12.456146Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.09473","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-13T01:20:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yRNCutnjf/qrhAn6Czu0yHaZhGBuVnHyk54KmH5iDEikCuzM3r0ZLZqgYAPZ5X6UOpdOmkCZgOPRhwjKmNMlDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-22T05:47:19.825545Z"},"content_sha256":"6b1eaf3a997c426b445dd7ba38e7a9736fd29a8dd382913a7bd79e74db84c640","schema_version":"1.0","event_id":"sha256:6b1eaf3a997c426b445dd7ba38e7a9736fd29a8dd382913a7bd79e74db84c640"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:HADW4AWLUIGFX5HPREF24KSY5W","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Durba Chatterjee, Lejla Batina, Lisanne Weidmann, Senna van Hoek, Steyn Hommes, Tanguy Stekke, Vincent Dankbaar, Xiaomeng Wang, Zhuoran Liu","submitted_at":"2026-07-10T14:44:32Z","abstract_excerpt":"Fault injection (FI) attacks on embedded neural network (NN) implementations primarily focus on inducing misclassification by corrupting weights or intermediate computations, overlooking their interaction with algorithmic adversarial threats. In this work, we present a cross-level attack that bridges implementation-level physical faults to algorithm-level adversarial attacks. By characterizing fault-induced data perturbations during NN inference, we connect FI with backdoor learning, enabling system-level attacks that jointly exploit implementation- and algorithm-level vulnerabilities. Specifi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.09473","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.09473/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-13T01:20:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"H/LSXx1uESp3IzVWTgnAWGLhiaFftR9f/S59qFfA7N5I0wZpip76LIjf704oRkMkQFquvqkOJ8GSuT5DGE/bBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-22T05:47:19.825907Z"},"content_sha256":"60695926e06d9db090a9f7743b8cceb83c5f86c47a58b8a21f7a5b0173f70f29","schema_version":"1.0","event_id":"sha256:60695926e06d9db090a9f7743b8cceb83c5f86c47a58b8a21f7a5b0173f70f29"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:HADW4AWLUIGFX5HPREF24KSY5W","target":"integrity","payload":{"note":"URL 'https://www.st.com/en/evaluation-tools/nucleo-l4r5zi-p.html' returned status transport error (unexpected: TimeoutError: The read operation timed out) at last check.","snippet":null,"arxiv_id":"2607.09473","detector":"external_links","evidence":{"url":"https://www.st.com/en/evaluation-tools/nucleo-l4r5zi-p.html","final_url":null,"host_kind":"website","status_code":0,"status_text":"unexpected: TimeoutError: The read operation timed out","verdict_class":"incontrovertible","checked_at_unix":1783942663.5195909},"severity":"advisory","ref_index":null,"audited_at":"2026-07-13T11:37:56.156423Z","event_type":"pith.integrity.v1","detected_doi":null,"detector_url":"https://pith.science/pith-integrity-protocol#external_links","external_url":"https://www.st.com/en/evaluation-tools/nucleo-l4r5zi-p.html","finding_type":"dead_url","evidence_hash":"798df306886d53dd62dfdbcd54a311a52772b9a088a75a8069455f719d78c73d","paper_version":1,"verdict_class":"incontrovertible","resolved_title":null,"detector_version":"1.0.0","detected_arxiv_id":null,"integrity_event_id":13075,"payload_sha256":"3907b5a2a0e01f69b35a190fb08aa41981d2866884bf39fbab61ae9d9d418eb9","signature_b64":"45W9mLMJ8Hhms7jlFyffFPeqXT2xYvnXr1mDWT11o52zX8qboFtWW3Exlo/3J7Zuq7w6CWVIkqxLnpV5mjsNDQ==","signing_key_id":"pith-v1-2026-05"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-13T11:39:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"s1FFgkRwmmdqmdY3zwXweox+5I9YHca++gOqmFjNFMPxfYe/ml+5XBRl/axzINHi+TU4u7NAd5Q51plOHlL2DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-22T05:47:19.827651Z"},"content_sha256":"92ed2f056e672665ac52c248d9fb1c3ba09338a9fb4b8baee053ffba0e3b0005","schema_version":"1.0","event_id":"sha256:92ed2f056e672665ac52c248d9fb1c3ba09338a9fb4b8baee053ffba0e3b0005"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HADW4AWLUIGFX5HPREF24KSY5W/bundle.json","state_url":"https://pith.science/pith/HADW4AWLUIGFX5HPREF24KSY5W/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HADW4AWLUIGFX5HPREF24KSY5W/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-22T05:47:19Z","links":{"resolver":"https://pith.science/pith/HADW4AWLUIGFX5HPREF24KSY5W","bundle":"https://pith.science/pith/HADW4AWLUIGFX5HPREF24KSY5W/bundle.json","state":"https://pith.science/pith/HADW4AWLUIGFX5HPREF24KSY5W/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HADW4AWLUIGFX5HPREF24KSY5W/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:HADW4AWLUIGFX5HPREF24KSY5W","merge_version":"pith-open-graph-merge-v1","event_count":3,"valid_event_count":3,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"41f69e68a73469a0c7b04421ce5283de94bed36290daf0e55d7aff432e2a3aa7","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-10T14:44:32Z","title_canon_sha256":"90654498defcdada009be33fbf6ad640d22b24cb589fd586df4c9ed005eac03d"},"schema_version":"1.0","source":{"id":"2607.09473","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.09473","created_at":"2026-07-13T01:20:12Z"},{"alias_kind":"arxiv_version","alias_value":"2607.09473v1","created_at":"2026-07-13T01:20:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.09473","created_at":"2026-07-13T01:20:12Z"},{"alias_kind":"pith_short_12","alias_value":"HADW4AWLUIGF","created_at":"2026-07-13T01:20:12Z"},{"alias_kind":"pith_short_16","alias_value":"HADW4AWLUIGFX5HP","created_at":"2026-07-13T01:20:12Z"},{"alias_kind":"pith_short_8","alias_value":"HADW4AWL","created_at":"2026-07-13T01:20:12Z"}],"graph_snapshots":[{"event_id":"sha256:60695926e06d9db090a9f7743b8cceb83c5f86c47a58b8a21f7a5b0173f70f29","target":"graph","created_at":"2026-07-13T01:20:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.09473/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Fault injection (FI) attacks on embedded neural network (NN) implementations primarily focus on inducing misclassification by corrupting weights or intermediate computations, overlooking their interaction with algorithmic adversarial threats. In this work, we present a cross-level attack that bridges implementation-level physical faults to algorithm-level adversarial attacks. By characterizing fault-induced data perturbations during NN inference, we connect FI with backdoor learning, enabling system-level attacks that jointly exploit implementation- and algorithm-level vulnerabilities. Specifi","authors_text":"Durba Chatterjee, Lejla Batina, Lisanne Weidmann, Senna van Hoek, Steyn Hommes, Tanguy Stekke, Vincent Dankbaar, Xiaomeng Wang, Zhuoran Liu","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.09473","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6b1eaf3a997c426b445dd7ba38e7a9736fd29a8dd382913a7bd79e74db84c640","target":"record","created_at":"2026-07-13T01:20:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"41f69e68a73469a0c7b04421ce5283de94bed36290daf0e55d7aff432e2a3aa7","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-10T14:44:32Z","title_canon_sha256":"90654498defcdada009be33fbf6ad640d22b24cb589fd586df4c9ed005eac03d"},"schema_version":"1.0","source":{"id":"2607.09473","kind":"arxiv","version":1}},"canonical_sha256":"38076e02cba20c5bf4ef890bae2a58ed8417bb3d561432011a5e8614140536df","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"38076e02cba20c5bf4ef890bae2a58ed8417bb3d561432011a5e8614140536df","first_computed_at":"2026-07-13T01:20:12.456146Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-13T01:20:12.456146Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vy7oIK8oXpX6puqQTTp1UPBfCGeyvuu/9u2qZBCHlUOf9Dwyi00QcRiRkvzMfF6Dh+AGMMFzlO9KDQNj5Ui0Aw==","signature_status":"signed_v1","signed_at":"2026-07-13T01:20:12.457299Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.09473","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6b1eaf3a997c426b445dd7ba38e7a9736fd29a8dd382913a7bd79e74db84c640","sha256:60695926e06d9db090a9f7743b8cceb83c5f86c47a58b8a21f7a5b0173f70f29","sha256:92ed2f056e672665ac52c248d9fb1c3ba09338a9fb4b8baee053ffba0e3b0005"],"state_sha256":"703f397c9cd12960f40f64502708c3c8ad174b6c917ff8ed111c3ba44d1d4149"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kvOr/P53GxVieXye4AyJg0m+dy9y80dxeC8uqnZ2yAmcvgMsthk5tQ/KXbIQ/eLhjxFfRI5e3XI3hx8V3NZUAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-22T05:47:19.828989Z","bundle_sha256":"59af430c4e3e1ab82dfbb99cac226a301b97104e0e7f5aee0ade8e5530fc94a1"}}