{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:IUM2F23RLSLISHXX64ELQIHF5B","short_pith_number":"pith:IUM2F23R","canonical_record":{"source":{"id":"2307.10487","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-07-19T22:46:35Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"5c33f191120032a12955b4cfae4597bcb88e76728d280c0e3460e9d444c5fdb3","abstract_canon_sha256":"63ceeb08803748720442aa217be241ce081dbdbb938642a0b74168250c4b0564"},"schema_version":"1.0"},"canonical_sha256":"4519a2eb715c96891ef7f708b820e5e86a0bd68fc26e05f1b0a81364988d8511","source":{"kind":"arxiv","id":"2307.10487","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.10487","created_at":"2026-07-05T06:51:27Z"},{"alias_kind":"arxiv_version","alias_value":"2307.10487v2","created_at":"2026-07-05T06:51:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.10487","created_at":"2026-07-05T06:51:27Z"},{"alias_kind":"pith_short_12","alias_value":"IUM2F23RLSLI","created_at":"2026-07-05T06:51:27Z"},{"alias_kind":"pith_short_16","alias_value":"IUM2F23RLSLISHXX","created_at":"2026-07-05T06:51:27Z"},{"alias_kind":"pith_short_8","alias_value":"IUM2F23R","created_at":"2026-07-05T06:51:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:IUM2F23RLSLISHXX64ELQIHF5B","target":"record","payload":{"canonical_record":{"source":{"id":"2307.10487","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-07-19T22:46:35Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"5c33f191120032a12955b4cfae4597bcb88e76728d280c0e3460e9d444c5fdb3","abstract_canon_sha256":"63ceeb08803748720442aa217be241ce081dbdbb938642a0b74168250c4b0564"},"schema_version":"1.0"},"canonical_sha256":"4519a2eb715c96891ef7f708b820e5e86a0bd68fc26e05f1b0a81364988d8511","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:51:27.496545Z","signature_b64":"a25P2lSXLwSRkwOD0T9UZsvzl5Or1Hlrx5McJa5viwPKCTjevzZMjHiFe7adYGwWDdbSGrSD1gAmNSifFeTPCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4519a2eb715c96891ef7f708b820e5e86a0bd68fc26e05f1b0a81364988d8511","last_reissued_at":"2026-07-05T06:51:27.496110Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:51:27.496110Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2307.10487","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:51:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wYG+IjF9quJHt9dScCXl144bS6IVX7tMaANzhTK1fBCft6kiV8JAut3ysLKevTVmr6Y9fjm/jxvual02VPuCAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T03:30:38.524806Z"},"content_sha256":"8435b7ed719d1bae1d943089fffa48335e318f9c63c9a8ea33075ffc98e2f7a2","schema_version":"1.0","event_id":"sha256:8435b7ed719d1bae1d943089fffa48335e318f9c63c9a8ea33075ffc98e2f7a2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:IUM2F23RLSLISHXX64ELQIHF5B","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Attacking by Aligning: Clean-Label Backdoor Attacks on Object Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Minhao Cheng, Wenbin Hu, Yize Cheng","submitted_at":"2023-07-19T22:46:35Z","abstract_excerpt":"Deep neural networks (DNNs) have shown unprecedented success in object detection tasks. However, it was also discovered that DNNs are vulnerable to multiple kinds of attacks, including Backdoor Attacks. Through the attack, the attacker manages to embed a hidden backdoor into the DNN such that the model behaves normally on benign data samples, but makes attacker-specified judgments given the occurrence of a predefined trigger. Although numerous backdoor attacks have been experimented on image classification, backdoor attacks on object detection tasks have not been properly investigated and expl"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.10487","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2307.10487/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:51:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"b/pojXcl+sj+ZGLwsarb2vXTsa4VzOpeDbvZzE+qW96JyJT/JVOpApXAr6ZhakCv1PtawPS2m4DAe8vK8N/FDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T03:30:38.525578Z"},"content_sha256":"c494f02ab6003f38e6fadbed1322ce36752a88cf0a3f6a44aa84f1e7db40b1e1","schema_version":"1.0","event_id":"sha256:c494f02ab6003f38e6fadbed1322ce36752a88cf0a3f6a44aa84f1e7db40b1e1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IUM2F23RLSLISHXX64ELQIHF5B/bundle.json","state_url":"https://pith.science/pith/IUM2F23RLSLISHXX64ELQIHF5B/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IUM2F23RLSLISHXX64ELQIHF5B/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T03:30:38Z","links":{"resolver":"https://pith.science/pith/IUM2F23RLSLISHXX64ELQIHF5B","bundle":"https://pith.science/pith/IUM2F23RLSLISHXX64ELQIHF5B/bundle.json","state":"https://pith.science/pith/IUM2F23RLSLISHXX64ELQIHF5B/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IUM2F23RLSLISHXX64ELQIHF5B/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:IUM2F23RLSLISHXX64ELQIHF5B","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"63ceeb08803748720442aa217be241ce081dbdbb938642a0b74168250c4b0564","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-07-19T22:46:35Z","title_canon_sha256":"5c33f191120032a12955b4cfae4597bcb88e76728d280c0e3460e9d444c5fdb3"},"schema_version":"1.0","source":{"id":"2307.10487","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.10487","created_at":"2026-07-05T06:51:27Z"},{"alias_kind":"arxiv_version","alias_value":"2307.10487v2","created_at":"2026-07-05T06:51:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.10487","created_at":"2026-07-05T06:51:27Z"},{"alias_kind":"pith_short_12","alias_value":"IUM2F23RLSLI","created_at":"2026-07-05T06:51:27Z"},{"alias_kind":"pith_short_16","alias_value":"IUM2F23RLSLISHXX","created_at":"2026-07-05T06:51:27Z"},{"alias_kind":"pith_short_8","alias_value":"IUM2F23R","created_at":"2026-07-05T06:51:27Z"}],"graph_snapshots":[{"event_id":"sha256:c494f02ab6003f38e6fadbed1322ce36752a88cf0a3f6a44aa84f1e7db40b1e1","target":"graph","created_at":"2026-07-05T06:51:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2307.10487/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) have shown unprecedented success in object detection tasks. However, it was also discovered that DNNs are vulnerable to multiple kinds of attacks, including Backdoor Attacks. Through the attack, the attacker manages to embed a hidden backdoor into the DNN such that the model behaves normally on benign data samples, but makes attacker-specified judgments given the occurrence of a predefined trigger. Although numerous backdoor attacks have been experimented on image classification, backdoor attacks on object detection tasks have not been properly investigated and expl","authors_text":"Minhao Cheng, Wenbin Hu, Yize Cheng","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-07-19T22:46:35Z","title":"Attacking by Aligning: Clean-Label Backdoor Attacks on Object Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.10487","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8435b7ed719d1bae1d943089fffa48335e318f9c63c9a8ea33075ffc98e2f7a2","target":"record","created_at":"2026-07-05T06:51:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"63ceeb08803748720442aa217be241ce081dbdbb938642a0b74168250c4b0564","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-07-19T22:46:35Z","title_canon_sha256":"5c33f191120032a12955b4cfae4597bcb88e76728d280c0e3460e9d444c5fdb3"},"schema_version":"1.0","source":{"id":"2307.10487","kind":"arxiv","version":2}},"canonical_sha256":"4519a2eb715c96891ef7f708b820e5e86a0bd68fc26e05f1b0a81364988d8511","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4519a2eb715c96891ef7f708b820e5e86a0bd68fc26e05f1b0a81364988d8511","first_computed_at":"2026-07-05T06:51:27.496110Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:51:27.496110Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"a25P2lSXLwSRkwOD0T9UZsvzl5Or1Hlrx5McJa5viwPKCTjevzZMjHiFe7adYGwWDdbSGrSD1gAmNSifFeTPCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:51:27.496545Z","signed_message":"canonical_sha256_bytes"},"source_id":"2307.10487","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8435b7ed719d1bae1d943089fffa48335e318f9c63c9a8ea33075ffc98e2f7a2","sha256:c494f02ab6003f38e6fadbed1322ce36752a88cf0a3f6a44aa84f1e7db40b1e1"],"state_sha256":"e73448db953a18de600fd8da4b295b8cfe90b6bb7a5f2f6bc3fbc47f20c6e3b6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"h+kOwGNTPwT1qRflwD5MQC6GXyRCbnbtTqlxse7FuesfsRbdKxfNcvexnE/tyi9+pqQ27e05hlGOFD3ttE63Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T03:30:38.530811Z","bundle_sha256":"f5d0ce1ca69679271aceaf61c59f20ccccc6bc8ba06e381005531848d6faad18"}}