{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:JCWSHAVR6N3MYJMIMOVPFEIQIT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a59c6eeafb0cc9350ec0ce545423e548e4ff62cb275695087b3bb0cca3392f24","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-30T10:44:45Z","title_canon_sha256":"f4e4e92b6cd861b0b55b4fb43147023c24d25067a7e505cdf28358f377cb345c"},"schema_version":"1.0","source":{"id":"2405.19928","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.19928","created_at":"2026-07-05T09:32:44Z"},{"alias_kind":"arxiv_version","alias_value":"2405.19928v2","created_at":"2026-07-05T09:32:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.19928","created_at":"2026-07-05T09:32:44Z"},{"alias_kind":"pith_short_12","alias_value":"JCWSHAVR6N3M","created_at":"2026-07-05T09:32:44Z"},{"alias_kind":"pith_short_16","alias_value":"JCWSHAVR6N3MYJMI","created_at":"2026-07-05T09:32:44Z"},{"alias_kind":"pith_short_8","alias_value":"JCWSHAVR","created_at":"2026-07-05T09:32:44Z"}],"graph_snapshots":[{"event_id":"sha256:3dd694c67e14148a500fafec6985770868617ed953a65f2ab7519fc5e62f737c","target":"graph","created_at":"2026-07-05T09:32:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.19928/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attacks on deep learning represent a recent threat that has gained significant attention in the research community. Backdoor defenses are mainly based on backdoor inversion, which has been shown to be generic, model-agnostic, and applicable to practical threat scenarios. State-of-the-art backdoor inversion recovers a mask in the feature space to locate prominent backdoor features, where benign and backdoor features can be disentangled. However, it suffers from high computational overhead, and we also find that it overly relies on prominent backdoor features that are highly distinguish","authors_text":"Shujian Yu, Stefanos Koffas, Stjepan Picek, Xiaoyun Xu, Zhuoran Liu","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-30T10:44:45Z","title":"BAN: Detecting Backdoors Activated by Adversarial Neuron Noise"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.19928","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:36587159e80b0ec2269912d9945b867beb219f2b95c3ef26e39d84c22cc67033","target":"record","created_at":"2026-07-05T09:32:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a59c6eeafb0cc9350ec0ce545423e548e4ff62cb275695087b3bb0cca3392f24","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-30T10:44:45Z","title_canon_sha256":"f4e4e92b6cd861b0b55b4fb43147023c24d25067a7e505cdf28358f377cb345c"},"schema_version":"1.0","source":{"id":"2405.19928","kind":"arxiv","version":2}},"canonical_sha256":"48ad2382b1f376cc258863aaf2911044d63f8c8286703eb24ad152356c030186","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"48ad2382b1f376cc258863aaf2911044d63f8c8286703eb24ad152356c030186","first_computed_at":"2026-07-05T09:32:44.566780Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:32:44.566780Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"nmBBvQmqn+kIAWGll/PA+FjvmKEp9e8xsUEF+0iOWUbuVDqpKLZWOUdgy3QSRarvk3EPDZ5syj5G1hyM8dgqDA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:32:44.567324Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.19928","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:36587159e80b0ec2269912d9945b867beb219f2b95c3ef26e39d84c22cc67033","sha256:3dd694c67e14148a500fafec6985770868617ed953a65f2ab7519fc5e62f737c"],"state_sha256":"b03a47252bae817858d36e12b63ba9801a77bae3da698fb5c9030c9d947a3155"}