{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:J45KSHBRFPM5YPJ2RZ5NOMRCHI","short_pith_number":"pith:J45KSHBR","canonical_record":{"source":{"id":"2408.09878","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-19T10:39:45Z","cross_cats_sorted":[],"title_canon_sha256":"7502e8591d9f627bbbcba6059e609cc6585c476cd7732b372478ff3aa4d0f7fe","abstract_canon_sha256":"d9a2d2f77045a34d3edccd9fbd59583cb6e85c6117cf62519556ed3b53b42402"},"schema_version":"1.0"},"canonical_sha256":"4f3aa91c312bd9dc3d3a8e7ad732223a0bd54586d90f2697b086bed0f2db1a5e","source":{"kind":"arxiv","id":"2408.09878","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.09878","created_at":"2026-07-05T08:56:38Z"},{"alias_kind":"arxiv_version","alias_value":"2408.09878v1","created_at":"2026-07-05T08:56:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.09878","created_at":"2026-07-05T08:56:38Z"},{"alias_kind":"pith_short_12","alias_value":"J45KSHBRFPM5","created_at":"2026-07-05T08:56:38Z"},{"alias_kind":"pith_short_16","alias_value":"J45KSHBRFPM5YPJ2","created_at":"2026-07-05T08:56:38Z"},{"alias_kind":"pith_short_8","alias_value":"J45KSHBR","created_at":"2026-07-05T08:56:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:J45KSHBRFPM5YPJ2RZ5NOMRCHI","target":"record","payload":{"canonical_record":{"source":{"id":"2408.09878","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-19T10:39:45Z","cross_cats_sorted":[],"title_canon_sha256":"7502e8591d9f627bbbcba6059e609cc6585c476cd7732b372478ff3aa4d0f7fe","abstract_canon_sha256":"d9a2d2f77045a34d3edccd9fbd59583cb6e85c6117cf62519556ed3b53b42402"},"schema_version":"1.0"},"canonical_sha256":"4f3aa91c312bd9dc3d3a8e7ad732223a0bd54586d90f2697b086bed0f2db1a5e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:56:38.463467Z","signature_b64":"jdWU4B+NWjcM7qy6/p3Zumn4oOWnKJqxXJnfqAIzyS5iieoBN9v8ce1+t8jzXmHPZHcEYyB7rHeYnVOxnBjnAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4f3aa91c312bd9dc3d3a8e7ad732223a0bd54586d90f2697b086bed0f2db1a5e","last_reissued_at":"2026-07-05T08:56:38.462979Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:56:38.462979Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.09878","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:56:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"683SARTpZNc4AfwPvAXOMxWMcbH7Pi2NRhdSe3H49zLd3809k/AR8SK46f7mwhHUNR2dDHGLhbzf/5tylimGCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T02:36:59.591553Z"},"content_sha256":"4e1df0c884454b16fd8506bae38fd41525793ae634277658278a664148e5ab7b","schema_version":"1.0","event_id":"sha256:4e1df0c884454b16fd8506bae38fd41525793ae634277658278a664148e5ab7b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:J45KSHBRFPM5YPJ2RZ5NOMRCHI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Transferring Backdoors between Large Language Models by Knowledge Distillation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Pengzhou Cheng, Tianjie Ju, Wei Du, Zhuosheng Zhang Gongshen Liu, Zongru Wu","submitted_at":"2024-08-19T10:39:45Z","abstract_excerpt":"Backdoor Attacks have been a serious vulnerability against Large Language Models (LLMs). However, previous methods only reveal such risk in specific models, or present tasks transferability after attacking the pre-trained phase. So, how risky is the model transferability of a backdoor attack? In this paper, we focus on whether existing mini-LLMs may be unconsciously instructed in backdoor knowledge by poisoned teacher LLMs through knowledge distillation (KD). Specifically, we propose ATBA, an adaptive transferable backdoor attack, which can effectively distill the backdoor of teacher LLMs into"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.09878","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.09878/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:56:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"y4Drarw7zQCNE0chh6AMI6fke12yEa5C8+eOFmYFXAMVhQ1UO8SimHt11sSjZMvSuB4slyggdJKW6Fq7axHBAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T02:36:59.592101Z"},"content_sha256":"5fb0d6623bee76c814c1c520e2d960584e7626810545fd2e1a390fc6ba9f4db8","schema_version":"1.0","event_id":"sha256:5fb0d6623bee76c814c1c520e2d960584e7626810545fd2e1a390fc6ba9f4db8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/J45KSHBRFPM5YPJ2RZ5NOMRCHI/bundle.json","state_url":"https://pith.science/pith/J45KSHBRFPM5YPJ2RZ5NOMRCHI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/J45KSHBRFPM5YPJ2RZ5NOMRCHI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T02:36:59Z","links":{"resolver":"https://pith.science/pith/J45KSHBRFPM5YPJ2RZ5NOMRCHI","bundle":"https://pith.science/pith/J45KSHBRFPM5YPJ2RZ5NOMRCHI/bundle.json","state":"https://pith.science/pith/J45KSHBRFPM5YPJ2RZ5NOMRCHI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/J45KSHBRFPM5YPJ2RZ5NOMRCHI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:J45KSHBRFPM5YPJ2RZ5NOMRCHI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d9a2d2f77045a34d3edccd9fbd59583cb6e85c6117cf62519556ed3b53b42402","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-19T10:39:45Z","title_canon_sha256":"7502e8591d9f627bbbcba6059e609cc6585c476cd7732b372478ff3aa4d0f7fe"},"schema_version":"1.0","source":{"id":"2408.09878","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.09878","created_at":"2026-07-05T08:56:38Z"},{"alias_kind":"arxiv_version","alias_value":"2408.09878v1","created_at":"2026-07-05T08:56:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.09878","created_at":"2026-07-05T08:56:38Z"},{"alias_kind":"pith_short_12","alias_value":"J45KSHBRFPM5","created_at":"2026-07-05T08:56:38Z"},{"alias_kind":"pith_short_16","alias_value":"J45KSHBRFPM5YPJ2","created_at":"2026-07-05T08:56:38Z"},{"alias_kind":"pith_short_8","alias_value":"J45KSHBR","created_at":"2026-07-05T08:56:38Z"}],"graph_snapshots":[{"event_id":"sha256:5fb0d6623bee76c814c1c520e2d960584e7626810545fd2e1a390fc6ba9f4db8","target":"graph","created_at":"2026-07-05T08:56:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.09878/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor Attacks have been a serious vulnerability against Large Language Models (LLMs). However, previous methods only reveal such risk in specific models, or present tasks transferability after attacking the pre-trained phase. So, how risky is the model transferability of a backdoor attack? In this paper, we focus on whether existing mini-LLMs may be unconsciously instructed in backdoor knowledge by poisoned teacher LLMs through knowledge distillation (KD). Specifically, we propose ATBA, an adaptive transferable backdoor attack, which can effectively distill the backdoor of teacher LLMs into","authors_text":"Pengzhou Cheng, Tianjie Ju, Wei Du, Zhuosheng Zhang Gongshen Liu, Zongru Wu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-19T10:39:45Z","title":"Transferring Backdoors between Large Language Models by Knowledge Distillation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.09878","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4e1df0c884454b16fd8506bae38fd41525793ae634277658278a664148e5ab7b","target":"record","created_at":"2026-07-05T08:56:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d9a2d2f77045a34d3edccd9fbd59583cb6e85c6117cf62519556ed3b53b42402","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-19T10:39:45Z","title_canon_sha256":"7502e8591d9f627bbbcba6059e609cc6585c476cd7732b372478ff3aa4d0f7fe"},"schema_version":"1.0","source":{"id":"2408.09878","kind":"arxiv","version":1}},"canonical_sha256":"4f3aa91c312bd9dc3d3a8e7ad732223a0bd54586d90f2697b086bed0f2db1a5e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4f3aa91c312bd9dc3d3a8e7ad732223a0bd54586d90f2697b086bed0f2db1a5e","first_computed_at":"2026-07-05T08:56:38.462979Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:56:38.462979Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jdWU4B+NWjcM7qy6/p3Zumn4oOWnKJqxXJnfqAIzyS5iieoBN9v8ce1+t8jzXmHPZHcEYyB7rHeYnVOxnBjnAA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:56:38.463467Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.09878","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4e1df0c884454b16fd8506bae38fd41525793ae634277658278a664148e5ab7b","sha256:5fb0d6623bee76c814c1c520e2d960584e7626810545fd2e1a390fc6ba9f4db8"],"state_sha256":"e1ec1049acfe3153e7c1fedcbec476ba9e344972173f5f5de93ee78e7544f6ca"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EgqvfTMEwW6kz9pcSeza1HT9xwNJmCaFDdeBl2RL9RDx6z03EjJu0Xx2GqsnIAqYWOzggFEp9Aqa1BAwFgLsDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T02:36:59.595458Z","bundle_sha256":"c645cd422fd3b7736fc712532e25bdbf801146c39180c883a303d37f60d72c22"}}