{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:JIM5UFWSOWBQMPC6FYHUCEBJA3","short_pith_number":"pith:JIM5UFWS","canonical_record":{"source":{"id":"2110.07139","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-10-14T03:54:16Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"0e6227ea465db9db007f381b6380f1557ca4f30db0938730bbb43e69e3fa4b38","abstract_canon_sha256":"e1b1faab4da7b974a304b379dfdc6ad96ea8b2f5eb4f84296fcc77901030b4cc"},"schema_version":"1.0"},"canonical_sha256":"4a19da16d27583063c5e2e0f41102906c0ee868be3829a6b356abed7bf8f39fe","source":{"kind":"arxiv","id":"2110.07139","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.07139","created_at":"2026-07-05T03:22:39Z"},{"alias_kind":"arxiv_version","alias_value":"2110.07139v1","created_at":"2026-07-05T03:22:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.07139","created_at":"2026-07-05T03:22:39Z"},{"alias_kind":"pith_short_12","alias_value":"JIM5UFWSOWBQ","created_at":"2026-07-05T03:22:39Z"},{"alias_kind":"pith_short_16","alias_value":"JIM5UFWSOWBQMPC6","created_at":"2026-07-05T03:22:39Z"},{"alias_kind":"pith_short_8","alias_value":"JIM5UFWS","created_at":"2026-07-05T03:22:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:JIM5UFWSOWBQMPC6FYHUCEBJA3","target":"record","payload":{"canonical_record":{"source":{"id":"2110.07139","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-10-14T03:54:16Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"0e6227ea465db9db007f381b6380f1557ca4f30db0938730bbb43e69e3fa4b38","abstract_canon_sha256":"e1b1faab4da7b974a304b379dfdc6ad96ea8b2f5eb4f84296fcc77901030b4cc"},"schema_version":"1.0"},"canonical_sha256":"4a19da16d27583063c5e2e0f41102906c0ee868be3829a6b356abed7bf8f39fe","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:22:39.231718Z","signature_b64":"fI7V6f8pTIfssFlQRAkC9GgJ+QSadCkLz1Z3Wra7ROiolzTnu+v2DS2mVHjzD3Un8HUMgGdISNE5zIOAhVp5Dg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4a19da16d27583063c5e2e0f41102906c0ee868be3829a6b356abed7bf8f39fe","last_reissued_at":"2026-07-05T03:22:39.231306Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:22:39.231306Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2110.07139","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:22:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GA5p6q2KRkZFAWGb5Av53lyaa+IFgfvEnWIpwETBzjyKpLH9aLKCvKGGSx4SprFtpekX5MMyJetHLwBiSVBDAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T11:52:41.199801Z"},"content_sha256":"e42e390ff06e1c867184669d584330801a4566556d4187712fc94d39b0c6ab66","schema_version":"1.0","event_id":"sha256:e42e390ff06e1c867184669d584330801a4566556d4187712fc94d39b0c6ab66"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:JIM5UFWSOWBQMPC6FYHUCEBJA3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.CL","authors_text":"Fanchao Qi, Maosong Sun, Mukai Li, Xurui Zhang, Yangyi Chen, Zhiyuan Liu","submitted_at":"2021-10-14T03:54:16Z","abstract_excerpt":"Adversarial attacks and backdoor attacks are two common security threats that hang over deep learning. Both of them harness task-irrelevant features of data in their implementation. Text style is a feature that is naturally irrelevant to most NLP tasks, and thus suitable for adversarial and backdoor attacks. In this paper, we make the first attempt to conduct adversarial and backdoor attacks based on text style transfer, which is aimed at altering the style of a sentence while preserving its meaning. We design an adversarial attack method and a backdoor attack method, and conduct extensive exp"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.07139","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2110.07139/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:22:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9ZV/WQk6mEcrV+wjZfIg2AtrAxl1bthLQXkmhUIZsf0KW8zxtm/QicYTWrzjGoIzbl28J4ELkf7jWyOUgj5SCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T11:52:41.200342Z"},"content_sha256":"fed557dd03057af7bab6944f5c7e69ea026532b33c8cd3256005cabd051ac47c","schema_version":"1.0","event_id":"sha256:fed557dd03057af7bab6944f5c7e69ea026532b33c8cd3256005cabd051ac47c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JIM5UFWSOWBQMPC6FYHUCEBJA3/bundle.json","state_url":"https://pith.science/pith/JIM5UFWSOWBQMPC6FYHUCEBJA3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JIM5UFWSOWBQMPC6FYHUCEBJA3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T11:52:41Z","links":{"resolver":"https://pith.science/pith/JIM5UFWSOWBQMPC6FYHUCEBJA3","bundle":"https://pith.science/pith/JIM5UFWSOWBQMPC6FYHUCEBJA3/bundle.json","state":"https://pith.science/pith/JIM5UFWSOWBQMPC6FYHUCEBJA3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JIM5UFWSOWBQMPC6FYHUCEBJA3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:JIM5UFWSOWBQMPC6FYHUCEBJA3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e1b1faab4da7b974a304b379dfdc6ad96ea8b2f5eb4f84296fcc77901030b4cc","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-10-14T03:54:16Z","title_canon_sha256":"0e6227ea465db9db007f381b6380f1557ca4f30db0938730bbb43e69e3fa4b38"},"schema_version":"1.0","source":{"id":"2110.07139","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.07139","created_at":"2026-07-05T03:22:39Z"},{"alias_kind":"arxiv_version","alias_value":"2110.07139v1","created_at":"2026-07-05T03:22:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.07139","created_at":"2026-07-05T03:22:39Z"},{"alias_kind":"pith_short_12","alias_value":"JIM5UFWSOWBQ","created_at":"2026-07-05T03:22:39Z"},{"alias_kind":"pith_short_16","alias_value":"JIM5UFWSOWBQMPC6","created_at":"2026-07-05T03:22:39Z"},{"alias_kind":"pith_short_8","alias_value":"JIM5UFWS","created_at":"2026-07-05T03:22:39Z"}],"graph_snapshots":[{"event_id":"sha256:fed557dd03057af7bab6944f5c7e69ea026532b33c8cd3256005cabd051ac47c","target":"graph","created_at":"2026-07-05T03:22:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2110.07139/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial attacks and backdoor attacks are two common security threats that hang over deep learning. Both of them harness task-irrelevant features of data in their implementation. Text style is a feature that is naturally irrelevant to most NLP tasks, and thus suitable for adversarial and backdoor attacks. In this paper, we make the first attempt to conduct adversarial and backdoor attacks based on text style transfer, which is aimed at altering the style of a sentence while preserving its meaning. We design an adversarial attack method and a backdoor attack method, and conduct extensive exp","authors_text":"Fanchao Qi, Maosong Sun, Mukai Li, Xurui Zhang, Yangyi Chen, Zhiyuan Liu","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-10-14T03:54:16Z","title":"Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.07139","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e42e390ff06e1c867184669d584330801a4566556d4187712fc94d39b0c6ab66","target":"record","created_at":"2026-07-05T03:22:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e1b1faab4da7b974a304b379dfdc6ad96ea8b2f5eb4f84296fcc77901030b4cc","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-10-14T03:54:16Z","title_canon_sha256":"0e6227ea465db9db007f381b6380f1557ca4f30db0938730bbb43e69e3fa4b38"},"schema_version":"1.0","source":{"id":"2110.07139","kind":"arxiv","version":1}},"canonical_sha256":"4a19da16d27583063c5e2e0f41102906c0ee868be3829a6b356abed7bf8f39fe","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4a19da16d27583063c5e2e0f41102906c0ee868be3829a6b356abed7bf8f39fe","first_computed_at":"2026-07-05T03:22:39.231306Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:22:39.231306Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fI7V6f8pTIfssFlQRAkC9GgJ+QSadCkLz1Z3Wra7ROiolzTnu+v2DS2mVHjzD3Un8HUMgGdISNE5zIOAhVp5Dg==","signature_status":"signed_v1","signed_at":"2026-07-05T03:22:39.231718Z","signed_message":"canonical_sha256_bytes"},"source_id":"2110.07139","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e42e390ff06e1c867184669d584330801a4566556d4187712fc94d39b0c6ab66","sha256:fed557dd03057af7bab6944f5c7e69ea026532b33c8cd3256005cabd051ac47c"],"state_sha256":"7b35312f683db99643bbbf2b543b88f66ffcb44032d0bc8f201855152ca3c0a2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DicBDLvrbjUmAuRxxfbZ76R3wlZ0yPR1d3yjrmrYmawpa0WytpiesVZlGJ7FuBMEQG2SL2XCmkl+sY3tc4wYAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T11:52:41.204422Z","bundle_sha256":"6d2e6da3d563a38b885a9160f6efb36465cd9d8ebc3c822c1a2b46e96a57da45"}}