{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:JLRPF6GJXC4RWV7MTK4K3X4KNH","short_pith_number":"pith:JLRPF6GJ","canonical_record":{"source":{"id":"2401.04136","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-07T08:37:29Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"48150fdd80597176fc97eeea473dc993ab9fb71ac0f408fec960a88683db7587","abstract_canon_sha256":"5dbf111145d0422adf8cbec26889ecf44f832ca2cd2c07ce345eb59721663ca9"},"schema_version":"1.0"},"canonical_sha256":"4ae2f2f8c9b8b91b57ec9ab8addf8a69e13db342ef86a547a0b2fe7ea6f7d40e","source":{"kind":"arxiv","id":"2401.04136","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.04136","created_at":"2026-07-05T08:23:15Z"},{"alias_kind":"arxiv_version","alias_value":"2401.04136v2","created_at":"2026-07-05T08:23:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.04136","created_at":"2026-07-05T08:23:15Z"},{"alias_kind":"pith_short_12","alias_value":"JLRPF6GJXC4R","created_at":"2026-07-05T08:23:15Z"},{"alias_kind":"pith_short_16","alias_value":"JLRPF6GJXC4RWV7M","created_at":"2026-07-05T08:23:15Z"},{"alias_kind":"pith_short_8","alias_value":"JLRPF6GJ","created_at":"2026-07-05T08:23:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:JLRPF6GJXC4RWV7MTK4K3X4KNH","target":"record","payload":{"canonical_record":{"source":{"id":"2401.04136","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-07T08:37:29Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"48150fdd80597176fc97eeea473dc993ab9fb71ac0f408fec960a88683db7587","abstract_canon_sha256":"5dbf111145d0422adf8cbec26889ecf44f832ca2cd2c07ce345eb59721663ca9"},"schema_version":"1.0"},"canonical_sha256":"4ae2f2f8c9b8b91b57ec9ab8addf8a69e13db342ef86a547a0b2fe7ea6f7d40e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:23:15.578926Z","signature_b64":"HI7O4Nl6Ta1BT3W/qVbM1q1xhuYspG+hB1x0yrbPY5RLx1P/uXJsZWjwTKSPlzBsrWlqG/MKvr/d8AIo3ZHtAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4ae2f2f8c9b8b91b57ec9ab8addf8a69e13db342ef86a547a0b2fe7ea6f7d40e","last_reissued_at":"2026-07-05T08:23:15.578465Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:23:15.578465Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2401.04136","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:23:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yOMXjkGOyN8qWEH0YDXrLWc+NiPYZsi3+Rsy25WNTIuFymX82bKxk22BckNIXmCHHtwWlejE19VnM04mFibeAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T11:48:27.032519Z"},"content_sha256":"3bfff29791896ce694f3f8cec7965710520f3110ba13dc36de8ebbdb8a7acdf2","schema_version":"1.0","event_id":"sha256:3bfff29791896ce694f3f8cec7965710520f3110ba13dc36de8ebbdb8a7acdf2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:JLRPF6GJXC4RWV7MTK4K3X4KNH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright Breaches Without Adjusting Finetuning Pipeline","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Haonan Wang, Kenji Kawaguchi, Qianli Shen, Yang Zhang, Yao Tong","submitted_at":"2024-01-07T08:37:29Z","abstract_excerpt":"The commercialization of text-to-image diffusion models (DMs) brings forth potential copyright concerns. Despite numerous attempts to protect DMs from copyright issues, the vulnerabilities of these solutions are underexplored. In this study, we formalized the Copyright Infringement Attack on generative AI models and proposed a backdoor attack method, SilentBadDiffusion, to induce copyright infringement without requiring access to or control over training processes. Our method strategically embeds connections between pieces of copyrighted information and text references in poisoning data while "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.04136","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2401.04136/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:23:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"//uzaJC7nizj4IqnbjUMIgm95d9tnwJ70n6zSCr2Dyk62H8Woh1wLp+V2mq0BZr1IZbfMFuZbc4wE5oIcckZBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T11:48:27.033070Z"},"content_sha256":"520280d610594d56ff13ac608e224ccc98c78e9a81d77364fa0b6d601bdc4326","schema_version":"1.0","event_id":"sha256:520280d610594d56ff13ac608e224ccc98c78e9a81d77364fa0b6d601bdc4326"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JLRPF6GJXC4RWV7MTK4K3X4KNH/bundle.json","state_url":"https://pith.science/pith/JLRPF6GJXC4RWV7MTK4K3X4KNH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JLRPF6GJXC4RWV7MTK4K3X4KNH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T11:48:27Z","links":{"resolver":"https://pith.science/pith/JLRPF6GJXC4RWV7MTK4K3X4KNH","bundle":"https://pith.science/pith/JLRPF6GJXC4RWV7MTK4K3X4KNH/bundle.json","state":"https://pith.science/pith/JLRPF6GJXC4RWV7MTK4K3X4KNH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JLRPF6GJXC4RWV7MTK4K3X4KNH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:JLRPF6GJXC4RWV7MTK4K3X4KNH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5dbf111145d0422adf8cbec26889ecf44f832ca2cd2c07ce345eb59721663ca9","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-07T08:37:29Z","title_canon_sha256":"48150fdd80597176fc97eeea473dc993ab9fb71ac0f408fec960a88683db7587"},"schema_version":"1.0","source":{"id":"2401.04136","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.04136","created_at":"2026-07-05T08:23:15Z"},{"alias_kind":"arxiv_version","alias_value":"2401.04136v2","created_at":"2026-07-05T08:23:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.04136","created_at":"2026-07-05T08:23:15Z"},{"alias_kind":"pith_short_12","alias_value":"JLRPF6GJXC4R","created_at":"2026-07-05T08:23:15Z"},{"alias_kind":"pith_short_16","alias_value":"JLRPF6GJXC4RWV7M","created_at":"2026-07-05T08:23:15Z"},{"alias_kind":"pith_short_8","alias_value":"JLRPF6GJ","created_at":"2026-07-05T08:23:15Z"}],"graph_snapshots":[{"event_id":"sha256:520280d610594d56ff13ac608e224ccc98c78e9a81d77364fa0b6d601bdc4326","target":"graph","created_at":"2026-07-05T08:23:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2401.04136/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The commercialization of text-to-image diffusion models (DMs) brings forth potential copyright concerns. Despite numerous attempts to protect DMs from copyright issues, the vulnerabilities of these solutions are underexplored. In this study, we formalized the Copyright Infringement Attack on generative AI models and proposed a backdoor attack method, SilentBadDiffusion, to induce copyright infringement without requiring access to or control over training processes. Our method strategically embeds connections between pieces of copyrighted information and text references in poisoning data while ","authors_text":"Haonan Wang, Kenji Kawaguchi, Qianli Shen, Yang Zhang, Yao Tong","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-07T08:37:29Z","title":"The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright Breaches Without Adjusting Finetuning Pipeline"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.04136","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3bfff29791896ce694f3f8cec7965710520f3110ba13dc36de8ebbdb8a7acdf2","target":"record","created_at":"2026-07-05T08:23:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5dbf111145d0422adf8cbec26889ecf44f832ca2cd2c07ce345eb59721663ca9","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-07T08:37:29Z","title_canon_sha256":"48150fdd80597176fc97eeea473dc993ab9fb71ac0f408fec960a88683db7587"},"schema_version":"1.0","source":{"id":"2401.04136","kind":"arxiv","version":2}},"canonical_sha256":"4ae2f2f8c9b8b91b57ec9ab8addf8a69e13db342ef86a547a0b2fe7ea6f7d40e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4ae2f2f8c9b8b91b57ec9ab8addf8a69e13db342ef86a547a0b2fe7ea6f7d40e","first_computed_at":"2026-07-05T08:23:15.578465Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:23:15.578465Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HI7O4Nl6Ta1BT3W/qVbM1q1xhuYspG+hB1x0yrbPY5RLx1P/uXJsZWjwTKSPlzBsrWlqG/MKvr/d8AIo3ZHtAg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:23:15.578926Z","signed_message":"canonical_sha256_bytes"},"source_id":"2401.04136","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3bfff29791896ce694f3f8cec7965710520f3110ba13dc36de8ebbdb8a7acdf2","sha256:520280d610594d56ff13ac608e224ccc98c78e9a81d77364fa0b6d601bdc4326"],"state_sha256":"d57997661729aa866d76dc9ebdc3adf7baa6332b68880baa36e438172d691698"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lXKLgBZPHvNUEJlsvCLBsZQAxgIucS7AmZFRRy8hVrpcjRXsCcYCnaKLFauN2WhT2ifW5YyJqm/2/+6w+PANDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T11:48:27.038794Z","bundle_sha256":"dfa071283a86373e7eef846d7ed9a5f1af1e9f2082ace5c5ad4b1740e36945c6"}}