{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:J2ZJSWC445UUAKXLJ2NKMCIEYO","short_pith_number":"pith:J2ZJSWC4","canonical_record":{"source":{"id":"2211.05638","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2022-11-02T17:05:45Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"27b34bc87bb48302c14b29200f1387d006fb9e9b75600200d51405deea407043","abstract_canon_sha256":"04d3006a79bc1848a4af8e3128b8b82a2e9eb11ae9b5058db3cd89b75ebef5ef"},"schema_version":"1.0"},"canonical_sha256":"4eb299585ce769402aeb4e9aa60904c3929c1dc172407d81590aa6631d03a0df","source":{"kind":"arxiv","id":"2211.05638","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.05638","created_at":"2026-07-05T05:48:03Z"},{"alias_kind":"arxiv_version","alias_value":"2211.05638v2","created_at":"2026-07-05T05:48:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.05638","created_at":"2026-07-05T05:48:03Z"},{"alias_kind":"pith_short_12","alias_value":"J2ZJSWC445UU","created_at":"2026-07-05T05:48:03Z"},{"alias_kind":"pith_short_16","alias_value":"J2ZJSWC445UUAKXL","created_at":"2026-07-05T05:48:03Z"},{"alias_kind":"pith_short_8","alias_value":"J2ZJSWC4","created_at":"2026-07-05T05:48:03Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:J2ZJSWC445UUAKXLJ2NKMCIEYO","target":"record","payload":{"canonical_record":{"source":{"id":"2211.05638","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2022-11-02T17:05:45Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"27b34bc87bb48302c14b29200f1387d006fb9e9b75600200d51405deea407043","abstract_canon_sha256":"04d3006a79bc1848a4af8e3128b8b82a2e9eb11ae9b5058db3cd89b75ebef5ef"},"schema_version":"1.0"},"canonical_sha256":"4eb299585ce769402aeb4e9aa60904c3929c1dc172407d81590aa6631d03a0df","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:48:03.267883Z","signature_b64":"CN6PAdAf8BlotzjRdhlkf9Me7/qBG9eJ0UKKmTTAA+29CfUEsqH0cGAfsS/sVspB9FtNcnT1+OmYxHbHe4eNDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4eb299585ce769402aeb4e9aa60904c3929c1dc172407d81590aa6631d03a0df","last_reissued_at":"2026-07-05T05:48:03.267399Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:48:03.267399Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2211.05638","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:48:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3+6D00QnlRqELiviMyshljdh1oipAGZgYFLhz3n/a2pHn23aBQiIBggfZJGPCeeAkhQwaTECqSC2K8hYRTBSCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T20:58:53.533279Z"},"content_sha256":"80d6522241144b22813224e66acc2ef5a8fb80df5e8b9a6041ec72ec322f7fec","schema_version":"1.0","event_id":"sha256:80d6522241144b22813224e66acc2ef5a8fb80df5e8b9a6041ec72ec322f7fec"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:J2ZJSWC445UUAKXLJ2NKMCIEYO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Untargeted Backdoor Attack against Object Detection","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Chengxiao Luo, Shu-Tao Xia, Yiming Li, Yong Jiang","submitted_at":"2022-11-02T17:05:45Z","abstract_excerpt":"Recent studies revealed that deep neural networks (DNNs) are exposed to backdoor threats when training with third-party resources (such as training samples or backbones). The backdoored model has promising performance in predicting benign samples, whereas its predictions can be maliciously manipulated by adversaries based on activating its backdoors with pre-defined trigger patterns. Currently, most of the existing backdoor attacks were conducted on the image classification under the targeted manner. In this paper, we reveal that these threats could also happen in object detection, posing thre"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.05638","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2211.05638/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:48:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"c3PCLzZTuiAFG5KXIPrhkGaqz2SD0YjvDQKCsiMO6niELQ64US/uxkqsAfCeTuvHLLFT0YX2NbPRHGSYkvgZBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T20:58:53.533688Z"},"content_sha256":"580cbe1f8ca644248c191f16b1cbe13e5599c7cbd1ced8c8dc3a3a9b626ac308","schema_version":"1.0","event_id":"sha256:580cbe1f8ca644248c191f16b1cbe13e5599c7cbd1ced8c8dc3a3a9b626ac308"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/J2ZJSWC445UUAKXLJ2NKMCIEYO/bundle.json","state_url":"https://pith.science/pith/J2ZJSWC445UUAKXLJ2NKMCIEYO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/J2ZJSWC445UUAKXLJ2NKMCIEYO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T20:58:53Z","links":{"resolver":"https://pith.science/pith/J2ZJSWC445UUAKXLJ2NKMCIEYO","bundle":"https://pith.science/pith/J2ZJSWC445UUAKXLJ2NKMCIEYO/bundle.json","state":"https://pith.science/pith/J2ZJSWC445UUAKXLJ2NKMCIEYO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/J2ZJSWC445UUAKXLJ2NKMCIEYO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:J2ZJSWC445UUAKXLJ2NKMCIEYO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"04d3006a79bc1848a4af8e3128b8b82a2e9eb11ae9b5058db3cd89b75ebef5ef","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2022-11-02T17:05:45Z","title_canon_sha256":"27b34bc87bb48302c14b29200f1387d006fb9e9b75600200d51405deea407043"},"schema_version":"1.0","source":{"id":"2211.05638","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.05638","created_at":"2026-07-05T05:48:03Z"},{"alias_kind":"arxiv_version","alias_value":"2211.05638v2","created_at":"2026-07-05T05:48:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.05638","created_at":"2026-07-05T05:48:03Z"},{"alias_kind":"pith_short_12","alias_value":"J2ZJSWC445UU","created_at":"2026-07-05T05:48:03Z"},{"alias_kind":"pith_short_16","alias_value":"J2ZJSWC445UUAKXL","created_at":"2026-07-05T05:48:03Z"},{"alias_kind":"pith_short_8","alias_value":"J2ZJSWC4","created_at":"2026-07-05T05:48:03Z"}],"graph_snapshots":[{"event_id":"sha256:580cbe1f8ca644248c191f16b1cbe13e5599c7cbd1ced8c8dc3a3a9b626ac308","target":"graph","created_at":"2026-07-05T05:48:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2211.05638/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent studies revealed that deep neural networks (DNNs) are exposed to backdoor threats when training with third-party resources (such as training samples or backbones). The backdoored model has promising performance in predicting benign samples, whereas its predictions can be maliciously manipulated by adversaries based on activating its backdoors with pre-defined trigger patterns. Currently, most of the existing backdoor attacks were conducted on the image classification under the targeted manner. In this paper, we reveal that these threats could also happen in object detection, posing thre","authors_text":"Chengxiao Luo, Shu-Tao Xia, Yiming Li, Yong Jiang","cross_cats":["cs.AI","cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2022-11-02T17:05:45Z","title":"Untargeted Backdoor Attack against Object Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.05638","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:80d6522241144b22813224e66acc2ef5a8fb80df5e8b9a6041ec72ec322f7fec","target":"record","created_at":"2026-07-05T05:48:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"04d3006a79bc1848a4af8e3128b8b82a2e9eb11ae9b5058db3cd89b75ebef5ef","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2022-11-02T17:05:45Z","title_canon_sha256":"27b34bc87bb48302c14b29200f1387d006fb9e9b75600200d51405deea407043"},"schema_version":"1.0","source":{"id":"2211.05638","kind":"arxiv","version":2}},"canonical_sha256":"4eb299585ce769402aeb4e9aa60904c3929c1dc172407d81590aa6631d03a0df","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4eb299585ce769402aeb4e9aa60904c3929c1dc172407d81590aa6631d03a0df","first_computed_at":"2026-07-05T05:48:03.267399Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:48:03.267399Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"CN6PAdAf8BlotzjRdhlkf9Me7/qBG9eJ0UKKmTTAA+29CfUEsqH0cGAfsS/sVspB9FtNcnT1+OmYxHbHe4eNDg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:48:03.267883Z","signed_message":"canonical_sha256_bytes"},"source_id":"2211.05638","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:80d6522241144b22813224e66acc2ef5a8fb80df5e8b9a6041ec72ec322f7fec","sha256:580cbe1f8ca644248c191f16b1cbe13e5599c7cbd1ced8c8dc3a3a9b626ac308"],"state_sha256":"ff3bd3999e51664b05f23801d321c064933c30cdda5b5fac2990f2ea12c4f3db"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XBn6VDyJ9C1nKD0C17cn886FAmdM2zoi6EiWI23CCDVFeuGDcrtttNqdNHIRnguLWDq/7OTzoUYOR/yNs3luBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T20:58:53.535662Z","bundle_sha256":"f50ff500e2a3e6d73e5886530466babc219983b9d64022fa4989e7a793475eba"}}