{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:J26OONP3TSFVYU4CNLK7IHCXB6","short_pith_number":"pith:J26OONP3","canonical_record":{"source":{"id":"2506.12411","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-14T09:08:34Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"c73a916e1e09e027237c6755838f56de045a7471c323670699740ae3bc63bc00","abstract_canon_sha256":"85c4c0e0cffac58af080b2bd441b77c32552cc3ff49b241b4c5a1ab9784508e6"},"schema_version":"1.0"},"canonical_sha256":"4ebce735fb9c8b5c53826ad5f41c570f8b18ce02d378acb7b3fec722896acf21","source":{"kind":"arxiv","id":"2506.12411","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.12411","created_at":"2026-07-05T11:21:52Z"},{"alias_kind":"arxiv_version","alias_value":"2506.12411v1","created_at":"2026-07-05T11:21:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.12411","created_at":"2026-07-05T11:21:52Z"},{"alias_kind":"pith_short_12","alias_value":"J26OONP3TSFV","created_at":"2026-07-05T11:21:52Z"},{"alias_kind":"pith_short_16","alias_value":"J26OONP3TSFVYU4C","created_at":"2026-07-05T11:21:52Z"},{"alias_kind":"pith_short_8","alias_value":"J26OONP3","created_at":"2026-07-05T11:21:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:J26OONP3TSFVYU4CNLK7IHCXB6","target":"record","payload":{"canonical_record":{"source":{"id":"2506.12411","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-14T09:08:34Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"c73a916e1e09e027237c6755838f56de045a7471c323670699740ae3bc63bc00","abstract_canon_sha256":"85c4c0e0cffac58af080b2bd441b77c32552cc3ff49b241b4c5a1ab9784508e6"},"schema_version":"1.0"},"canonical_sha256":"4ebce735fb9c8b5c53826ad5f41c570f8b18ce02d378acb7b3fec722896acf21","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:21:52.817565Z","signature_b64":"rj+99EnqzFCTviN/0mwEPEYb6hj9Qds5Sb7pww7d77W+aQzfVDU7jXy+JYScuP+3uOeSv7sXkse6CIxO7uwGBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4ebce735fb9c8b5c53826ad5f41c570f8b18ce02d378acb7b3fec722896acf21","last_reissued_at":"2026-07-05T11:21:52.817028Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:21:52.817028Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.12411","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:21:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MMuTYqnNHI/Y5RVDW9LQBWjsyuVPiCnzpD86ifVXPhLMtBVN21El4zBu8Q4I+76M+yTaFkrA8y7DkxxNhH86BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T12:57:50.077568Z"},"content_sha256":"8f4fa008158e63c00dd608ac9f1a451bf052e5f55306c09e25e92e2836bea140","schema_version":"1.0","event_id":"sha256:8f4fa008158e63c00dd608ac9f1a451bf052e5f55306c09e25e92e2836bea140"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:J26OONP3TSFVYU4CNLK7IHCXB6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"InverTune: Removing Backdoors from Multimodal Contrastive Learning Models via Trigger Inversion and Activation Tuning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.CR","authors_text":"Bo Du, Mengyuan Sun, Yuchen Liu, Yu Li, Yunjie Ge","submitted_at":"2025-06-14T09:08:34Z","abstract_excerpt":"Multimodal contrastive learning models like CLIP have demonstrated remarkable vision-language alignment capabilities, yet their vulnerability to backdoor attacks poses critical security risks. Attackers can implant latent triggers that persist through downstream tasks, enabling malicious control of model behavior upon trigger presentation. Despite great success in recent defense mechanisms, they remain impractical due to strong assumptions about attacker knowledge or excessive clean data requirements. In this paper, we introduce InverTune, the first backdoor defense framework for multimodal mo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.12411","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.12411/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:21:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"B4UX+eXv4SQejmUsTIqDe7lPF3pThP753yuf8vNxMm2Rikvwy5nS/TOv370CK4whiSMunj72GN2ssng848s4Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T12:57:50.078525Z"},"content_sha256":"e4c42fed067ca76826f6a0b22d2bc870e31207ad1f9c56e08f4cf311af24d4a0","schema_version":"1.0","event_id":"sha256:e4c42fed067ca76826f6a0b22d2bc870e31207ad1f9c56e08f4cf311af24d4a0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/J26OONP3TSFVYU4CNLK7IHCXB6/bundle.json","state_url":"https://pith.science/pith/J26OONP3TSFVYU4CNLK7IHCXB6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/J26OONP3TSFVYU4CNLK7IHCXB6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T12:57:50Z","links":{"resolver":"https://pith.science/pith/J26OONP3TSFVYU4CNLK7IHCXB6","bundle":"https://pith.science/pith/J26OONP3TSFVYU4CNLK7IHCXB6/bundle.json","state":"https://pith.science/pith/J26OONP3TSFVYU4CNLK7IHCXB6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/J26OONP3TSFVYU4CNLK7IHCXB6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:J26OONP3TSFVYU4CNLK7IHCXB6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"85c4c0e0cffac58af080b2bd441b77c32552cc3ff49b241b4c5a1ab9784508e6","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-14T09:08:34Z","title_canon_sha256":"c73a916e1e09e027237c6755838f56de045a7471c323670699740ae3bc63bc00"},"schema_version":"1.0","source":{"id":"2506.12411","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.12411","created_at":"2026-07-05T11:21:52Z"},{"alias_kind":"arxiv_version","alias_value":"2506.12411v1","created_at":"2026-07-05T11:21:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.12411","created_at":"2026-07-05T11:21:52Z"},{"alias_kind":"pith_short_12","alias_value":"J26OONP3TSFV","created_at":"2026-07-05T11:21:52Z"},{"alias_kind":"pith_short_16","alias_value":"J26OONP3TSFVYU4C","created_at":"2026-07-05T11:21:52Z"},{"alias_kind":"pith_short_8","alias_value":"J26OONP3","created_at":"2026-07-05T11:21:52Z"}],"graph_snapshots":[{"event_id":"sha256:e4c42fed067ca76826f6a0b22d2bc870e31207ad1f9c56e08f4cf311af24d4a0","target":"graph","created_at":"2026-07-05T11:21:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.12411/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multimodal contrastive learning models like CLIP have demonstrated remarkable vision-language alignment capabilities, yet their vulnerability to backdoor attacks poses critical security risks. Attackers can implant latent triggers that persist through downstream tasks, enabling malicious control of model behavior upon trigger presentation. Despite great success in recent defense mechanisms, they remain impractical due to strong assumptions about attacker knowledge or excessive clean data requirements. In this paper, we introduce InverTune, the first backdoor defense framework for multimodal mo","authors_text":"Bo Du, Mengyuan Sun, Yuchen Liu, Yu Li, Yunjie Ge","cross_cats":["cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-14T09:08:34Z","title":"InverTune: Removing Backdoors from Multimodal Contrastive Learning Models via Trigger Inversion and Activation Tuning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.12411","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8f4fa008158e63c00dd608ac9f1a451bf052e5f55306c09e25e92e2836bea140","target":"record","created_at":"2026-07-05T11:21:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"85c4c0e0cffac58af080b2bd441b77c32552cc3ff49b241b4c5a1ab9784508e6","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-14T09:08:34Z","title_canon_sha256":"c73a916e1e09e027237c6755838f56de045a7471c323670699740ae3bc63bc00"},"schema_version":"1.0","source":{"id":"2506.12411","kind":"arxiv","version":1}},"canonical_sha256":"4ebce735fb9c8b5c53826ad5f41c570f8b18ce02d378acb7b3fec722896acf21","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4ebce735fb9c8b5c53826ad5f41c570f8b18ce02d378acb7b3fec722896acf21","first_computed_at":"2026-07-05T11:21:52.817028Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:21:52.817028Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"rj+99EnqzFCTviN/0mwEPEYb6hj9Qds5Sb7pww7d77W+aQzfVDU7jXy+JYScuP+3uOeSv7sXkse6CIxO7uwGBg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:21:52.817565Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.12411","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8f4fa008158e63c00dd608ac9f1a451bf052e5f55306c09e25e92e2836bea140","sha256:e4c42fed067ca76826f6a0b22d2bc870e31207ad1f9c56e08f4cf311af24d4a0"],"state_sha256":"0fc8565ac2df0a7a38875c76ddbe304c2114a0b56ad0592a365e3869e89b5f06"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JyMHscH5ws0JWcaVVgz0jLQNt1Unsuupin5PJKynutp8rTPAXftzaitYZnfHm/s7BEe4k9qg2xn48AtB/nDLCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T12:57:50.085331Z","bundle_sha256":"463011e564f916395975e0ef734ceac995a6c55fe5450639f0402eeb6d14c26e"}}