{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:IVHTXHZUF5F5HCUZ2SJ7OV6TNI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"27d32dad2255a65a7940bc444368ad8b9fabaa9c6ce1117edcaf4c3ca130f22d","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-28T23:35:17Z","title_canon_sha256":"1996789e76cfaf93c0b4ca49cf0b8f4cb494706d76f7981379ff6e48581abe14"},"schema_version":"1.0","source":{"id":"2305.17826","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.17826","created_at":"2026-07-05T06:14:49Z"},{"alias_kind":"arxiv_version","alias_value":"2305.17826v1","created_at":"2026-07-05T06:14:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.17826","created_at":"2026-07-05T06:14:49Z"},{"alias_kind":"pith_short_12","alias_value":"IVHTXHZUF5F5","created_at":"2026-07-05T06:14:49Z"},{"alias_kind":"pith_short_16","alias_value":"IVHTXHZUF5F5HCUZ","created_at":"2026-07-05T06:14:49Z"},{"alias_kind":"pith_short_8","alias_value":"IVHTXHZU","created_at":"2026-07-05T06:14:49Z"}],"graph_snapshots":[{"event_id":"sha256:276a5ad38363f0a52bad1e4d945329b23e88e54d666f736291ba722368041795","target":"graph","created_at":"2026-07-05T06:14:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.17826/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Prompt-based learning is vulnerable to backdoor attacks. Existing backdoor attacks against prompt-based models consider injecting backdoors into the entire embedding layers or word embedding vectors. Such attacks can be easily affected by retraining on downstream tasks and with different prompting strategies, limiting the transferability of backdoor attacks. In this work, we propose transferable backdoor attacks against prompt-based models, called NOTABLE, which is independent of downstream tasks and prompting strategies. Specifically, NOTABLE injects backdoors into the encoders of PLMs by uti","authors_text":"Kai Mei, Shiqing Ma, Yang Zhang, Zheng Li, Zhenting Wang","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-28T23:35:17Z","title":"NOTABLE: Transferable Backdoor Attacks Against Prompt-based NLP Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.17826","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2c26ad9f7af67d710993de35058286c100412729a86ec6398ba0dac2f4ed8e90","target":"record","created_at":"2026-07-05T06:14:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"27d32dad2255a65a7940bc444368ad8b9fabaa9c6ce1117edcaf4c3ca130f22d","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-28T23:35:17Z","title_canon_sha256":"1996789e76cfaf93c0b4ca49cf0b8f4cb494706d76f7981379ff6e48581abe14"},"schema_version":"1.0","source":{"id":"2305.17826","kind":"arxiv","version":1}},"canonical_sha256":"454f3b9f342f4bd38a99d493f757d36a1e10f7109ef95ce3a26351647ee050b8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"454f3b9f342f4bd38a99d493f757d36a1e10f7109ef95ce3a26351647ee050b8","first_computed_at":"2026-07-05T06:14:49.353407Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:14:49.353407Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RvUNUIHC0DKRjP4Wzdwk8eGewEZUFHOTxMNud3g2RLJRDQyeA67SB/6f/LqCk79fnAVXvWZQHdEPclZWssVvDg==","signature_status":"signed_v1","signed_at":"2026-07-05T06:14:49.353738Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.17826","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2c26ad9f7af67d710993de35058286c100412729a86ec6398ba0dac2f4ed8e90","sha256:276a5ad38363f0a52bad1e4d945329b23e88e54d666f736291ba722368041795"],"state_sha256":"508d606b2ab5288359053176e0e6699daf0baabdbf268d6fde6a837e18bf389f"}