{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:I7QGAV3WUZHPA3SVXRNTPWYBLO","short_pith_number":"pith:I7QGAV3W","canonical_record":{"source":{"id":"2312.09057","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-14T15:54:52Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"250a5f3cf45d90fc934a5b9eb98a701b6897d203f1866afa0d832733a67f6328","abstract_canon_sha256":"b45392b579a83c1cade42530c3060baddd404c7e6710e9447761d73290e36bd7"},"schema_version":"1.0"},"canonical_sha256":"47e0605776a64ef06e55bc5b37db015bb198ea9a76b5a3c67382f7b573184ea6","source":{"kind":"arxiv","id":"2312.09057","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.09057","created_at":"2026-07-05T07:24:13Z"},{"alias_kind":"arxiv_version","alias_value":"2312.09057v1","created_at":"2026-07-05T07:24:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.09057","created_at":"2026-07-05T07:24:13Z"},{"alias_kind":"pith_short_12","alias_value":"I7QGAV3WUZHP","created_at":"2026-07-05T07:24:13Z"},{"alias_kind":"pith_short_16","alias_value":"I7QGAV3WUZHPA3SV","created_at":"2026-07-05T07:24:13Z"},{"alias_kind":"pith_short_8","alias_value":"I7QGAV3W","created_at":"2026-07-05T07:24:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:I7QGAV3WUZHPA3SVXRNTPWYBLO","target":"record","payload":{"canonical_record":{"source":{"id":"2312.09057","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-14T15:54:52Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"250a5f3cf45d90fc934a5b9eb98a701b6897d203f1866afa0d832733a67f6328","abstract_canon_sha256":"b45392b579a83c1cade42530c3060baddd404c7e6710e9447761d73290e36bd7"},"schema_version":"1.0"},"canonical_sha256":"47e0605776a64ef06e55bc5b37db015bb198ea9a76b5a3c67382f7b573184ea6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:24:13.731842Z","signature_b64":"N3+3XbF7fA7QJbQNzkINrz3Q56ACP0bNXpwsbI0ViMZOx9zRWhYbTFF2KQ34qilHl1WjVagfDGUKK5oKk3g+AA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"47e0605776a64ef06e55bc5b37db015bb198ea9a76b5a3c67382f7b573184ea6","last_reissued_at":"2026-07-05T07:24:13.731357Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:24:13.731357Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.09057","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:24:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aQe2Z/BygP2fmvM58VGsTsu2+H2ZjGi8d1FDMQwEcndVbkn1yKjkH1tuDkn43ZLj1fmGEiYW3vp3uvV/mujYDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T18:18:34.982550Z"},"content_sha256":"c2612fea48b356f1b2785582a13bdc915e6bdc0f9ffdb928aa0c9070ff282081","schema_version":"1.0","event_id":"sha256:c2612fea48b356f1b2785582a13bdc915e6bdc0f9ffdb928aa0c9070ff282081"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:I7QGAV3WUZHPA3SVXRNTPWYBLO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Difficulty of Defending Contrastive Learning against Backdoor Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CV"],"primary_cat":"cs.CR","authors_text":"Bochuan Cao, Changjiang Li, Jinghui Chen, Ren Pang, Shouling Ji, Ting Wang, Zhaohan Xi","submitted_at":"2023-12-14T15:54:52Z","abstract_excerpt":"Recent studies have shown that contrastive learning, like supervised learning, is highly vulnerable to backdoor attacks wherein malicious functions are injected into target models, only to be activated by specific triggers. However, thus far it remains under-explored how contrastive backdoor attacks fundamentally differ from their supervised counterparts, which impedes the development of effective defenses against the emerging threat.\n  This work represents a solid step toward answering this critical question. Specifically, we define TRL, a unified framework that encompasses both supervised an"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.09057","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.09057/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:24:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bI2orDqc0/BmteAYmYyNb0Tt8v4hDB9FdGDh+gBAYuyOM1h+rBA0ekqzo+XMF63aQ41UpzweiOZFTuUXcjt1AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T18:18:34.983053Z"},"content_sha256":"0eea7984baeba6a771ef236d77b6f87f51fe7085b53860ff788ea7eae33fedf9","schema_version":"1.0","event_id":"sha256:0eea7984baeba6a771ef236d77b6f87f51fe7085b53860ff788ea7eae33fedf9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/I7QGAV3WUZHPA3SVXRNTPWYBLO/bundle.json","state_url":"https://pith.science/pith/I7QGAV3WUZHPA3SVXRNTPWYBLO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/I7QGAV3WUZHPA3SVXRNTPWYBLO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T18:18:34Z","links":{"resolver":"https://pith.science/pith/I7QGAV3WUZHPA3SVXRNTPWYBLO","bundle":"https://pith.science/pith/I7QGAV3WUZHPA3SVXRNTPWYBLO/bundle.json","state":"https://pith.science/pith/I7QGAV3WUZHPA3SVXRNTPWYBLO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/I7QGAV3WUZHPA3SVXRNTPWYBLO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:I7QGAV3WUZHPA3SVXRNTPWYBLO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b45392b579a83c1cade42530c3060baddd404c7e6710e9447761d73290e36bd7","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-14T15:54:52Z","title_canon_sha256":"250a5f3cf45d90fc934a5b9eb98a701b6897d203f1866afa0d832733a67f6328"},"schema_version":"1.0","source":{"id":"2312.09057","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.09057","created_at":"2026-07-05T07:24:13Z"},{"alias_kind":"arxiv_version","alias_value":"2312.09057v1","created_at":"2026-07-05T07:24:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.09057","created_at":"2026-07-05T07:24:13Z"},{"alias_kind":"pith_short_12","alias_value":"I7QGAV3WUZHP","created_at":"2026-07-05T07:24:13Z"},{"alias_kind":"pith_short_16","alias_value":"I7QGAV3WUZHPA3SV","created_at":"2026-07-05T07:24:13Z"},{"alias_kind":"pith_short_8","alias_value":"I7QGAV3W","created_at":"2026-07-05T07:24:13Z"}],"graph_snapshots":[{"event_id":"sha256:0eea7984baeba6a771ef236d77b6f87f51fe7085b53860ff788ea7eae33fedf9","target":"graph","created_at":"2026-07-05T07:24:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.09057/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent studies have shown that contrastive learning, like supervised learning, is highly vulnerable to backdoor attacks wherein malicious functions are injected into target models, only to be activated by specific triggers. However, thus far it remains under-explored how contrastive backdoor attacks fundamentally differ from their supervised counterparts, which impedes the development of effective defenses against the emerging threat.\n  This work represents a solid step toward answering this critical question. Specifically, we define TRL, a unified framework that encompasses both supervised an","authors_text":"Bochuan Cao, Changjiang Li, Jinghui Chen, Ren Pang, Shouling Ji, Ting Wang, Zhaohan Xi","cross_cats":["cs.AI","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-14T15:54:52Z","title":"On the Difficulty of Defending Contrastive Learning against Backdoor Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.09057","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c2612fea48b356f1b2785582a13bdc915e6bdc0f9ffdb928aa0c9070ff282081","target":"record","created_at":"2026-07-05T07:24:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b45392b579a83c1cade42530c3060baddd404c7e6710e9447761d73290e36bd7","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-14T15:54:52Z","title_canon_sha256":"250a5f3cf45d90fc934a5b9eb98a701b6897d203f1866afa0d832733a67f6328"},"schema_version":"1.0","source":{"id":"2312.09057","kind":"arxiv","version":1}},"canonical_sha256":"47e0605776a64ef06e55bc5b37db015bb198ea9a76b5a3c67382f7b573184ea6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"47e0605776a64ef06e55bc5b37db015bb198ea9a76b5a3c67382f7b573184ea6","first_computed_at":"2026-07-05T07:24:13.731357Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:24:13.731357Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"N3+3XbF7fA7QJbQNzkINrz3Q56ACP0bNXpwsbI0ViMZOx9zRWhYbTFF2KQ34qilHl1WjVagfDGUKK5oKk3g+AA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:24:13.731842Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.09057","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c2612fea48b356f1b2785582a13bdc915e6bdc0f9ffdb928aa0c9070ff282081","sha256:0eea7984baeba6a771ef236d77b6f87f51fe7085b53860ff788ea7eae33fedf9"],"state_sha256":"99531de31f7cc1f85289d1344cf94ce36d142e7d4fe1e161ab211fbb5902ed39"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FItqwYwgJkqafkk6QPrx0nUtWGtJOZStFitboBqsUw7R0W3DqBsZZxLb8mZCicwZUQTmBTVrBHU5Ee/diC9VAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T18:18:34.987772Z","bundle_sha256":"7bb79fdf5017e9dcce0496d94232632163efd135a95706f639431f2797a03dab"}}