{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:HFOJIXNTJVHDAFRAPP4LM7VCZV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"901c952dbf14bd9202d76c57a59550866a737083c77a889242f3904552dd8546","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-03T14:20:20Z","title_canon_sha256":"76229a24ab08f1871c48f990718d4a5ec04ddf1d9add3e4cf04d035454a5e9eb"},"schema_version":"1.0","source":{"id":"2402.02160","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.02160","created_at":"2026-07-05T11:13:55Z"},{"alias_kind":"arxiv_version","alias_value":"2402.02160v3","created_at":"2026-07-05T11:13:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.02160","created_at":"2026-07-05T11:13:55Z"},{"alias_kind":"pith_short_12","alias_value":"HFOJIXNTJVHD","created_at":"2026-07-05T11:13:55Z"},{"alias_kind":"pith_short_16","alias_value":"HFOJIXNTJVHDAFRA","created_at":"2026-07-05T11:13:55Z"},{"alias_kind":"pith_short_8","alias_value":"HFOJIXNT","created_at":"2026-07-05T11:13:55Z"}],"graph_snapshots":[{"event_id":"sha256:5e73ca3829661b95864282f12558a44c93e02669e993f58aa64dfd0785f47c06","target":"graph","created_at":"2026-07-05T11:13:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.02160/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In the domain of large language models (LLMs), in-context learning (ICL) has been recognized for its innovative ability to adapt to new tasks, relying on examples rather than retraining or fine-tuning. This paper delves into the critical issue of ICL's susceptibility to data poisoning attacks, an area not yet fully explored. We wonder whether ICL is vulnerable, with adversaries capable of manipulating example data to degrade model performance. To address this, we introduce ICLPoison, a specialized attacking framework conceived to exploit the learning mechanisms of ICL. Our approach uniquely em","authors_text":"Han Xu, Hui Liu, Jiliang Tang, Makoto Yamada, Pengfei He, Yue Xing","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-03T14:20:20Z","title":"Data Poisoning for In-context Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.02160","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4efcca21644fad306761fe4069ec1754171860fc2e1de2a3ac8b1edd453a1656","target":"record","created_at":"2026-07-05T11:13:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"901c952dbf14bd9202d76c57a59550866a737083c77a889242f3904552dd8546","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-03T14:20:20Z","title_canon_sha256":"76229a24ab08f1871c48f990718d4a5ec04ddf1d9add3e4cf04d035454a5e9eb"},"schema_version":"1.0","source":{"id":"2402.02160","kind":"arxiv","version":3}},"canonical_sha256":"395c945db34d4e3016207bf8b67ea2cd6244cd03151fb00078e8e0e7eb290fbb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"395c945db34d4e3016207bf8b67ea2cd6244cd03151fb00078e8e0e7eb290fbb","first_computed_at":"2026-07-05T11:13:55.178829Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:13:55.178829Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"pzXEQ1PWDUROfkz626IuS7KFrBNIkBwEM4ALxoYliwF5jLcd2HA8LT75zt5w1JNuSEPqclZ8eI0lJGNqKCgVDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:13:55.179307Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.02160","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4efcca21644fad306761fe4069ec1754171860fc2e1de2a3ac8b1edd453a1656","sha256:5e73ca3829661b95864282f12558a44c93e02669e993f58aa64dfd0785f47c06"],"state_sha256":"31391c848759ecb2342f4718a4f40b88b9f407285a2ac292c2d854eaec1cf56a"}