{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:HLHWVR5ZO2FKJKEBB3MHQJTFOF","short_pith_number":"pith:HLHWVR5Z","canonical_record":{"source":{"id":"2405.16134","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-05-25T08:57:30Z","cross_cats_sorted":[],"title_canon_sha256":"b434e9f11269bcf7c6a4fe4e2b1334ac252f21570918660210e8a83624f961d1","abstract_canon_sha256":"0f0bff1e507a249b78c96bddeddd3ccae7c8230a07c62645109522b2bc2b22b9"},"schema_version":"1.0"},"canonical_sha256":"3acf6ac7b9768aa4a8810ed878266571523d8f7c0ae5326263a9f4a751fea22b","source":{"kind":"arxiv","id":"2405.16134","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.16134","created_at":"2026-07-05T08:25:04Z"},{"alias_kind":"arxiv_version","alias_value":"2405.16134v2","created_at":"2026-07-05T08:25:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.16134","created_at":"2026-07-05T08:25:04Z"},{"alias_kind":"pith_short_12","alias_value":"HLHWVR5ZO2FK","created_at":"2026-07-05T08:25:04Z"},{"alias_kind":"pith_short_16","alias_value":"HLHWVR5ZO2FKJKEB","created_at":"2026-07-05T08:25:04Z"},{"alias_kind":"pith_short_8","alias_value":"HLHWVR5Z","created_at":"2026-07-05T08:25:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:HLHWVR5ZO2FKJKEBB3MHQJTFOF","target":"record","payload":{"canonical_record":{"source":{"id":"2405.16134","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-05-25T08:57:30Z","cross_cats_sorted":[],"title_canon_sha256":"b434e9f11269bcf7c6a4fe4e2b1334ac252f21570918660210e8a83624f961d1","abstract_canon_sha256":"0f0bff1e507a249b78c96bddeddd3ccae7c8230a07c62645109522b2bc2b22b9"},"schema_version":"1.0"},"canonical_sha256":"3acf6ac7b9768aa4a8810ed878266571523d8f7c0ae5326263a9f4a751fea22b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:25:04.966465Z","signature_b64":"xK3pQr3k4LewIKt9wN0A/MzYKq1xHHKwhWzlzEr8Tn8qsOhvnpCM2gzU5rvlwDP4P7BNOjGWbfrZvPlRbCVICA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3acf6ac7b9768aa4a8810ed878266571523d8f7c0ae5326263a9f4a751fea22b","last_reissued_at":"2026-07-05T08:25:04.965945Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:25:04.965945Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.16134","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:25:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"e6yYFtrOd2d/eElDzJPNNMtc2+l/J2uTern+CshALOLo1HKWKO29joRCJwRA114lMtdHkZXXQCldpCEqx3LUAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T23:36:01.225627Z"},"content_sha256":"421e7e417db9f0cb0b659228e6ed48e1fe4401ecebef9fa0fe387994cf59def1","schema_version":"1.0","event_id":"sha256:421e7e417db9f0cb0b659228e6ed48e1fe4401ecebef9fa0fe387994cf59def1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:HLHWVR5ZO2FKJKEBB3MHQJTFOF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Baoyuan Wu, Mingli Zhu, Siyuan Liang","submitted_at":"2024-05-25T08:57:30Z","abstract_excerpt":"Deep neural networks face persistent challenges in defending against backdoor attacks, leading to an ongoing battle between attacks and defenses. While existing backdoor defense strategies have shown promising performance on reducing attack success rates, can we confidently claim that the backdoor threat has truly been eliminated from the model? To address it, we re-investigate the characteristics of the backdoored models after defense (denoted as defense models). Surprisingly, we find that the original backdoors still exist in defense models derived from existing post-training defense strateg"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.16134","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.16134/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:25:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/+YNORLuTDVXqEQQ2Eru/8ZTuIDah1RwjkuRm/Rls9D27uz2Ma1qHefCgx6WQOVcXWZM1PIo0KO7t50kJppYAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T23:36:01.226494Z"},"content_sha256":"35202e878082cfd2c45b641afec104349a2095c647a1ccdce26d2e5a1dd139c9","schema_version":"1.0","event_id":"sha256:35202e878082cfd2c45b641afec104349a2095c647a1ccdce26d2e5a1dd139c9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HLHWVR5ZO2FKJKEBB3MHQJTFOF/bundle.json","state_url":"https://pith.science/pith/HLHWVR5ZO2FKJKEBB3MHQJTFOF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HLHWVR5ZO2FKJKEBB3MHQJTFOF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T23:36:01Z","links":{"resolver":"https://pith.science/pith/HLHWVR5ZO2FKJKEBB3MHQJTFOF","bundle":"https://pith.science/pith/HLHWVR5ZO2FKJKEBB3MHQJTFOF/bundle.json","state":"https://pith.science/pith/HLHWVR5ZO2FKJKEBB3MHQJTFOF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HLHWVR5ZO2FKJKEBB3MHQJTFOF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:HLHWVR5ZO2FKJKEBB3MHQJTFOF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0f0bff1e507a249b78c96bddeddd3ccae7c8230a07c62645109522b2bc2b22b9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-05-25T08:57:30Z","title_canon_sha256":"b434e9f11269bcf7c6a4fe4e2b1334ac252f21570918660210e8a83624f961d1"},"schema_version":"1.0","source":{"id":"2405.16134","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.16134","created_at":"2026-07-05T08:25:04Z"},{"alias_kind":"arxiv_version","alias_value":"2405.16134v2","created_at":"2026-07-05T08:25:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.16134","created_at":"2026-07-05T08:25:04Z"},{"alias_kind":"pith_short_12","alias_value":"HLHWVR5ZO2FK","created_at":"2026-07-05T08:25:04Z"},{"alias_kind":"pith_short_16","alias_value":"HLHWVR5ZO2FKJKEB","created_at":"2026-07-05T08:25:04Z"},{"alias_kind":"pith_short_8","alias_value":"HLHWVR5Z","created_at":"2026-07-05T08:25:04Z"}],"graph_snapshots":[{"event_id":"sha256:35202e878082cfd2c45b641afec104349a2095c647a1ccdce26d2e5a1dd139c9","target":"graph","created_at":"2026-07-05T08:25:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.16134/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks face persistent challenges in defending against backdoor attacks, leading to an ongoing battle between attacks and defenses. While existing backdoor defense strategies have shown promising performance on reducing attack success rates, can we confidently claim that the backdoor threat has truly been eliminated from the model? To address it, we re-investigate the characteristics of the backdoored models after defense (denoted as defense models). Surprisingly, we find that the original backdoors still exist in defense models derived from existing post-training defense strateg","authors_text":"Baoyuan Wu, Mingli Zhu, Siyuan Liang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-05-25T08:57:30Z","title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.16134","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:421e7e417db9f0cb0b659228e6ed48e1fe4401ecebef9fa0fe387994cf59def1","target":"record","created_at":"2026-07-05T08:25:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0f0bff1e507a249b78c96bddeddd3ccae7c8230a07c62645109522b2bc2b22b9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-05-25T08:57:30Z","title_canon_sha256":"b434e9f11269bcf7c6a4fe4e2b1334ac252f21570918660210e8a83624f961d1"},"schema_version":"1.0","source":{"id":"2405.16134","kind":"arxiv","version":2}},"canonical_sha256":"3acf6ac7b9768aa4a8810ed878266571523d8f7c0ae5326263a9f4a751fea22b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3acf6ac7b9768aa4a8810ed878266571523d8f7c0ae5326263a9f4a751fea22b","first_computed_at":"2026-07-05T08:25:04.965945Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:25:04.965945Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xK3pQr3k4LewIKt9wN0A/MzYKq1xHHKwhWzlzEr8Tn8qsOhvnpCM2gzU5rvlwDP4P7BNOjGWbfrZvPlRbCVICA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:25:04.966465Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.16134","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:421e7e417db9f0cb0b659228e6ed48e1fe4401ecebef9fa0fe387994cf59def1","sha256:35202e878082cfd2c45b641afec104349a2095c647a1ccdce26d2e5a1dd139c9"],"state_sha256":"d040c1ebb7a88f9b9c55a9e5b66cec6d242a160ab0d2a87d7785cd353e317f65"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sxFQdvCLl6FweWN/5WVeTfg2I9rhJ6PDT0alCo1z47TqNjOrmBPJjoxQRcFe0/FbuYunYdrVcEbPyTbyFESgAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T23:36:01.233074Z","bundle_sha256":"24edea3cd5af616ffe66cd5d36c7fb35f2c57db081a648559f4651a9bdb7a83d"}}