{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:JFATMZ5LKVRJ5CC72ZUUSBTXES","short_pith_number":"pith:JFATMZ5L","canonical_record":{"source":{"id":"2310.10659","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-12T02:42:39Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"d6581ea06e61d534fd168d2299c2b57999ec880093da2d26382fbb4e7e1f8c39","abstract_canon_sha256":"8e262ac1ac3df509701a21edbad18f906317775c40ec7bc915749ccec3e060b2"},"schema_version":"1.0"},"canonical_sha256":"49413667ab55629e885fd66949067724b39753b9f32edad0851c439d9f67056d","source":{"kind":"arxiv","id":"2310.10659","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.10659","created_at":"2026-07-05T07:23:30Z"},{"alias_kind":"arxiv_version","alias_value":"2310.10659v2","created_at":"2026-07-05T07:23:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.10659","created_at":"2026-07-05T07:23:30Z"},{"alias_kind":"pith_short_12","alias_value":"JFATMZ5LKVRJ","created_at":"2026-07-05T07:23:30Z"},{"alias_kind":"pith_short_16","alias_value":"JFATMZ5LKVRJ5CC7","created_at":"2026-07-05T07:23:30Z"},{"alias_kind":"pith_short_8","alias_value":"JFATMZ5L","created_at":"2026-07-05T07:23:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:JFATMZ5LKVRJ5CC72ZUUSBTXES","target":"record","payload":{"canonical_record":{"source":{"id":"2310.10659","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-12T02:42:39Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"d6581ea06e61d534fd168d2299c2b57999ec880093da2d26382fbb4e7e1f8c39","abstract_canon_sha256":"8e262ac1ac3df509701a21edbad18f906317775c40ec7bc915749ccec3e060b2"},"schema_version":"1.0"},"canonical_sha256":"49413667ab55629e885fd66949067724b39753b9f32edad0851c439d9f67056d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:23:30.631841Z","signature_b64":"lIX1AsxxDKS6jeFHqdSlH/oTeRS7Aqee564XLf7yYI5alrONzB+8N/8IF/C2tUnGN+oj1ZJtCFV9BKq5YQPkBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"49413667ab55629e885fd66949067724b39753b9f32edad0851c439d9f67056d","last_reissued_at":"2026-07-05T07:23:30.631312Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:23:30.631312Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.10659","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:23:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"i9YHZKN/J9RD53yZDVQ4vfQPnPodXJWz0tMB0CE54D3bgCa3CXv2GmxnK97YU7p2Opd2IyUYEU4IDdWPpRi3AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T08:59:14.180331Z"},"content_sha256":"da60e688c9254c6e8dd9f0382ac9ce6333bfd7b51579bc4511a8ff19bdd14fe0","schema_version":"1.0","event_id":"sha256:da60e688c9254c6e8dd9f0382ac9ce6333bfd7b51579bc4511a8ff19bdd14fe0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:JFATMZ5LKVRJ5CC72ZUUSBTXES","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Exploiting Machine Unlearning for Backdoor Attacks in Deep Learning System","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Jun Sun, Mingtian Tan, Peixin Zhang, Xinyu Wang","submitted_at":"2023-09-12T02:42:39Z","abstract_excerpt":"In recent years, the security issues of artificial intelligence have become increasingly prominent due to the rapid development of deep learning research and applications. Backdoor attack is an attack targeting the vulnerability of deep learning models, where hidden backdoors are activated by triggers embedded by the attacker, thereby outputting malicious predictions that may not align with the intended output for a given input. In this work, we propose a novel black-box backdoor attack based on machine unlearning. The attacker first augments the training set with carefully designed samples, i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.10659","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.10659/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:23:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MFFt00yY09FZWc9FMIe9MDS0B+o8m48IQvDiF0Eh1bxPIE58djpouZFyGxV6PDpIpyzkbVCcAafXmtjJBy0pBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T08:59:14.180895Z"},"content_sha256":"45681fb72e2f95d0bbf55555d17798a4303676c4b20b19a67c0d68453fc65a9f","schema_version":"1.0","event_id":"sha256:45681fb72e2f95d0bbf55555d17798a4303676c4b20b19a67c0d68453fc65a9f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JFATMZ5LKVRJ5CC72ZUUSBTXES/bundle.json","state_url":"https://pith.science/pith/JFATMZ5LKVRJ5CC72ZUUSBTXES/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JFATMZ5LKVRJ5CC72ZUUSBTXES/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T08:59:14Z","links":{"resolver":"https://pith.science/pith/JFATMZ5LKVRJ5CC72ZUUSBTXES","bundle":"https://pith.science/pith/JFATMZ5LKVRJ5CC72ZUUSBTXES/bundle.json","state":"https://pith.science/pith/JFATMZ5LKVRJ5CC72ZUUSBTXES/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JFATMZ5LKVRJ5CC72ZUUSBTXES/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:JFATMZ5LKVRJ5CC72ZUUSBTXES","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8e262ac1ac3df509701a21edbad18f906317775c40ec7bc915749ccec3e060b2","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-12T02:42:39Z","title_canon_sha256":"d6581ea06e61d534fd168d2299c2b57999ec880093da2d26382fbb4e7e1f8c39"},"schema_version":"1.0","source":{"id":"2310.10659","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.10659","created_at":"2026-07-05T07:23:30Z"},{"alias_kind":"arxiv_version","alias_value":"2310.10659v2","created_at":"2026-07-05T07:23:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.10659","created_at":"2026-07-05T07:23:30Z"},{"alias_kind":"pith_short_12","alias_value":"JFATMZ5LKVRJ","created_at":"2026-07-05T07:23:30Z"},{"alias_kind":"pith_short_16","alias_value":"JFATMZ5LKVRJ5CC7","created_at":"2026-07-05T07:23:30Z"},{"alias_kind":"pith_short_8","alias_value":"JFATMZ5L","created_at":"2026-07-05T07:23:30Z"}],"graph_snapshots":[{"event_id":"sha256:45681fb72e2f95d0bbf55555d17798a4303676c4b20b19a67c0d68453fc65a9f","target":"graph","created_at":"2026-07-05T07:23:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.10659/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In recent years, the security issues of artificial intelligence have become increasingly prominent due to the rapid development of deep learning research and applications. Backdoor attack is an attack targeting the vulnerability of deep learning models, where hidden backdoors are activated by triggers embedded by the attacker, thereby outputting malicious predictions that may not align with the intended output for a given input. In this work, we propose a novel black-box backdoor attack based on machine unlearning. The attacker first augments the training set with carefully designed samples, i","authors_text":"Jun Sun, Mingtian Tan, Peixin Zhang, Xinyu Wang","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-12T02:42:39Z","title":"Exploiting Machine Unlearning for Backdoor Attacks in Deep Learning System"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.10659","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:da60e688c9254c6e8dd9f0382ac9ce6333bfd7b51579bc4511a8ff19bdd14fe0","target":"record","created_at":"2026-07-05T07:23:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8e262ac1ac3df509701a21edbad18f906317775c40ec7bc915749ccec3e060b2","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-12T02:42:39Z","title_canon_sha256":"d6581ea06e61d534fd168d2299c2b57999ec880093da2d26382fbb4e7e1f8c39"},"schema_version":"1.0","source":{"id":"2310.10659","kind":"arxiv","version":2}},"canonical_sha256":"49413667ab55629e885fd66949067724b39753b9f32edad0851c439d9f67056d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"49413667ab55629e885fd66949067724b39753b9f32edad0851c439d9f67056d","first_computed_at":"2026-07-05T07:23:30.631312Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:23:30.631312Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lIX1AsxxDKS6jeFHqdSlH/oTeRS7Aqee564XLf7yYI5alrONzB+8N/8IF/C2tUnGN+oj1ZJtCFV9BKq5YQPkBg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:23:30.631841Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.10659","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:da60e688c9254c6e8dd9f0382ac9ce6333bfd7b51579bc4511a8ff19bdd14fe0","sha256:45681fb72e2f95d0bbf55555d17798a4303676c4b20b19a67c0d68453fc65a9f"],"state_sha256":"52bee6ddef7f2859202eefdff83d5c2022ecfaf679c3a63a235bff6d920966a5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Mgf6UOmE4iAF+sLsERzXVfBrbdi3m12w9XZAsVR92o15YhQc8M9XSfIHdcIa4ZLKhvJ56qt4jX1RHU+D8AdiCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T08:59:14.184714Z","bundle_sha256":"547e763afb0534b9704da693f777eb1896467d5fe24d5cf07b1247acc2121405"}}