{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:IS6W5PEXKXQOH35FVFFWGZ73XF","short_pith_number":"pith:IS6W5PEX","canonical_record":{"source":{"id":"2202.06862","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-02-14T16:46:23Z","cross_cats_sorted":[],"title_canon_sha256":"70f57d965da82fc200c12b41328e4dbff8e9963a244ca71544bf3a66003f5d4c","abstract_canon_sha256":"f75f7ee3664121790eff37d3c85bc34b5f9f1615074c6e09cbf3f2a1e06b0dd3"},"schema_version":"1.0"},"canonical_sha256":"44bd6ebc9755e0e3efa5a94b6367fbb9782e8fb68f43bd410d638329352626e6","source":{"kind":"arxiv","id":"2202.06862","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.06862","created_at":"2026-07-05T03:56:42Z"},{"alias_kind":"arxiv_version","alias_value":"2202.06862v1","created_at":"2026-07-05T03:56:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.06862","created_at":"2026-07-05T03:56:42Z"},{"alias_kind":"pith_short_12","alias_value":"IS6W5PEXKXQO","created_at":"2026-07-05T03:56:42Z"},{"alias_kind":"pith_short_16","alias_value":"IS6W5PEXKXQOH35F","created_at":"2026-07-05T03:56:42Z"},{"alias_kind":"pith_short_8","alias_value":"IS6W5PEX","created_at":"2026-07-05T03:56:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:IS6W5PEXKXQOH35FVFFWGZ73XF","target":"record","payload":{"canonical_record":{"source":{"id":"2202.06862","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-02-14T16:46:23Z","cross_cats_sorted":[],"title_canon_sha256":"70f57d965da82fc200c12b41328e4dbff8e9963a244ca71544bf3a66003f5d4c","abstract_canon_sha256":"f75f7ee3664121790eff37d3c85bc34b5f9f1615074c6e09cbf3f2a1e06b0dd3"},"schema_version":"1.0"},"canonical_sha256":"44bd6ebc9755e0e3efa5a94b6367fbb9782e8fb68f43bd410d638329352626e6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:56:42.254729Z","signature_b64":"SiEHeOlN7qaYkjL0SW+p1Ds3kdTszZf2tjhe6OQBfestFvDBAR9+PMXLPa/XgYX9Cwd/sfsr5JpIbofLt7nYAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"44bd6ebc9755e0e3efa5a94b6367fbb9782e8fb68f43bd410d638329352626e6","last_reissued_at":"2026-07-05T03:56:42.254284Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:56:42.254284Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2202.06862","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:56:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+oLTVbUcInp/IxWhz8KmImfJsEjQwsyqnjqBBmHXRlDM2Wl3KeaptDypmGxvv0YUUu8MpWYHDpQM8LwBpir/Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T14:27:13.484133Z"},"content_sha256":"18967bcaef2c1fde411edec24bb76b28f8b709326d2361958c99b8c571d8b824","schema_version":"1.0","event_id":"sha256:18967bcaef2c1fde411edec24bb76b28f8b709326d2361958c99b8c571d8b824"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:IS6W5PEXKXQOH35FVFFWGZ73XF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Threats to Pre-trained Language Models: Survey and Taxonomy","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chunlong Xie, Jiwei Li, Lingjuan Lyu, Shangwei Guo, Tianwei Zhang","submitted_at":"2022-02-14T16:46:23Z","abstract_excerpt":"Pre-trained language models (PTLMs) have achieved great success and remarkable performance over a wide range of natural language processing (NLP) tasks. However, there are also growing concerns regarding the potential security issues in the adoption of PTLMs. In this survey, we comprehensively systematize recently discovered threats to PTLM systems and applications. We perform our attack characterization from three interesting perspectives. (1) We show threats can occur at different stages of the PTLM pipeline raised by different malicious entities. (2) We identify two types of model transfera"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.06862","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2202.06862/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:56:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jIUotHYDkVZ2Unoe0KjKUGXYo+jRxE2ePJsu0hsevyJYEaDLdOtKyjHdqNztlwDORPHwFn71wv+rqBiuFr57Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T14:27:13.484659Z"},"content_sha256":"586a2b91c54eed5d6953fa812c466af35463b70bb141fa3a18d8c78b9f11e502","schema_version":"1.0","event_id":"sha256:586a2b91c54eed5d6953fa812c466af35463b70bb141fa3a18d8c78b9f11e502"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IS6W5PEXKXQOH35FVFFWGZ73XF/bundle.json","state_url":"https://pith.science/pith/IS6W5PEXKXQOH35FVFFWGZ73XF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IS6W5PEXKXQOH35FVFFWGZ73XF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T14:27:13Z","links":{"resolver":"https://pith.science/pith/IS6W5PEXKXQOH35FVFFWGZ73XF","bundle":"https://pith.science/pith/IS6W5PEXKXQOH35FVFFWGZ73XF/bundle.json","state":"https://pith.science/pith/IS6W5PEXKXQOH35FVFFWGZ73XF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IS6W5PEXKXQOH35FVFFWGZ73XF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:IS6W5PEXKXQOH35FVFFWGZ73XF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f75f7ee3664121790eff37d3c85bc34b5f9f1615074c6e09cbf3f2a1e06b0dd3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-02-14T16:46:23Z","title_canon_sha256":"70f57d965da82fc200c12b41328e4dbff8e9963a244ca71544bf3a66003f5d4c"},"schema_version":"1.0","source":{"id":"2202.06862","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.06862","created_at":"2026-07-05T03:56:42Z"},{"alias_kind":"arxiv_version","alias_value":"2202.06862v1","created_at":"2026-07-05T03:56:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.06862","created_at":"2026-07-05T03:56:42Z"},{"alias_kind":"pith_short_12","alias_value":"IS6W5PEXKXQO","created_at":"2026-07-05T03:56:42Z"},{"alias_kind":"pith_short_16","alias_value":"IS6W5PEXKXQOH35F","created_at":"2026-07-05T03:56:42Z"},{"alias_kind":"pith_short_8","alias_value":"IS6W5PEX","created_at":"2026-07-05T03:56:42Z"}],"graph_snapshots":[{"event_id":"sha256:586a2b91c54eed5d6953fa812c466af35463b70bb141fa3a18d8c78b9f11e502","target":"graph","created_at":"2026-07-05T03:56:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.06862/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Pre-trained language models (PTLMs) have achieved great success and remarkable performance over a wide range of natural language processing (NLP) tasks. However, there are also growing concerns regarding the potential security issues in the adoption of PTLMs. In this survey, we comprehensively systematize recently discovered threats to PTLM systems and applications. We perform our attack characterization from three interesting perspectives. (1) We show threats can occur at different stages of the PTLM pipeline raised by different malicious entities. (2) We identify two types of model transfera","authors_text":"Chunlong Xie, Jiwei Li, Lingjuan Lyu, Shangwei Guo, Tianwei Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-02-14T16:46:23Z","title":"Threats to Pre-trained Language Models: Survey and Taxonomy"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.06862","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:18967bcaef2c1fde411edec24bb76b28f8b709326d2361958c99b8c571d8b824","target":"record","created_at":"2026-07-05T03:56:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f75f7ee3664121790eff37d3c85bc34b5f9f1615074c6e09cbf3f2a1e06b0dd3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-02-14T16:46:23Z","title_canon_sha256":"70f57d965da82fc200c12b41328e4dbff8e9963a244ca71544bf3a66003f5d4c"},"schema_version":"1.0","source":{"id":"2202.06862","kind":"arxiv","version":1}},"canonical_sha256":"44bd6ebc9755e0e3efa5a94b6367fbb9782e8fb68f43bd410d638329352626e6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"44bd6ebc9755e0e3efa5a94b6367fbb9782e8fb68f43bd410d638329352626e6","first_computed_at":"2026-07-05T03:56:42.254284Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:56:42.254284Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SiEHeOlN7qaYkjL0SW+p1Ds3kdTszZf2tjhe6OQBfestFvDBAR9+PMXLPa/XgYX9Cwd/sfsr5JpIbofLt7nYAA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:56:42.254729Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.06862","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:18967bcaef2c1fde411edec24bb76b28f8b709326d2361958c99b8c571d8b824","sha256:586a2b91c54eed5d6953fa812c466af35463b70bb141fa3a18d8c78b9f11e502"],"state_sha256":"bad18234a299e4f7bc497dc70cf092a5c2cc3f53a4dab5915d85ffd1c2e685cc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dhq/frFnwqvKm5Wl7AmCMR6jvN5w8TX0lfNgRuIzvEO16EWQieCejIigBH9Z+4BxV1hqUzTx3pMhUeET5CukAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T14:27:13.491984Z","bundle_sha256":"fad5fb723e03b548e60b06ac74098eceb6212071e2b6a32d7906ca201109a5a4"}}