{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:JNGX6KUJ7O33VDEAQLEN5ELOKF","short_pith_number":"pith:JNGX6KUJ","canonical_record":{"source":{"id":"2410.20136","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-26T10:17:50Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"c2e0d5b32f55da49e7a27d76112f9b51490f98f5e7fb30ba6feae4c3a860e931","abstract_canon_sha256":"1e819fbb7055f3f3f20ec32933a91b1ff26f8e4905771132a42ac0ca8ffe16d6"},"schema_version":"1.0"},"canonical_sha256":"4b4d7f2a89fbb7ba8c8082c8de916e514de45b845e1afdc3316f6e8bf85303d0","source":{"kind":"arxiv","id":"2410.20136","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.20136","created_at":"2026-07-05T09:26:39Z"},{"alias_kind":"arxiv_version","alias_value":"2410.20136v1","created_at":"2026-07-05T09:26:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.20136","created_at":"2026-07-05T09:26:39Z"},{"alias_kind":"pith_short_12","alias_value":"JNGX6KUJ7O33","created_at":"2026-07-05T09:26:39Z"},{"alias_kind":"pith_short_16","alias_value":"JNGX6KUJ7O33VDEA","created_at":"2026-07-05T09:26:39Z"},{"alias_kind":"pith_short_8","alias_value":"JNGX6KUJ","created_at":"2026-07-05T09:26:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:JNGX6KUJ7O33VDEAQLEN5ELOKF","target":"record","payload":{"canonical_record":{"source":{"id":"2410.20136","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-26T10:17:50Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"c2e0d5b32f55da49e7a27d76112f9b51490f98f5e7fb30ba6feae4c3a860e931","abstract_canon_sha256":"1e819fbb7055f3f3f20ec32933a91b1ff26f8e4905771132a42ac0ca8ffe16d6"},"schema_version":"1.0"},"canonical_sha256":"4b4d7f2a89fbb7ba8c8082c8de916e514de45b845e1afdc3316f6e8bf85303d0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:26:39.649174Z","signature_b64":"DUWHMH0AvtHanVImnOKPznBL5mKV3CPpb9thPORXCk7LlTq9MKwhIKg7hYlGCc54TgI4SH4ZJ2ujg9+MonddAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4b4d7f2a89fbb7ba8c8082c8de916e514de45b845e1afdc3316f6e8bf85303d0","last_reissued_at":"2026-07-05T09:26:39.648740Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:26:39.648740Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.20136","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:26:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vBoNv/ODbmD0FNfvUm4ckrDz2dw56qFMkGkFy+r2HcdNYkb4XQt2hAZoqXQnB7r832aqY6WX098nxURiQo5kBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:02:16.991009Z"},"content_sha256":"d967ab70db5580f62bd0477afd2bc06a16aaca37a948310e3f12b3c93333ae60","schema_version":"1.0","event_id":"sha256:d967ab70db5580f62bd0477afd2bc06a16aaca37a948310e3f12b3c93333ae60"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:JNGX6KUJ7O33VDEAQLEN5ELOKF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"CodePurify: Defend Backdoor Attacks on Neural Code Models via Entropy-based Purification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Fangwen Mu, Junjie Wang, Lin Shi, Mingyang Li, Qing Wang, Song Wang, Zhuohao Yu","submitted_at":"2024-10-26T10:17:50Z","abstract_excerpt":"Neural code models have found widespread success in tasks pertaining to code intelligence, yet they are vulnerable to backdoor attacks, where an adversary can manipulate the victim model's behavior by inserting triggers into the source code. Recent studies indicate that advanced backdoor attacks can achieve nearly 100% attack success rates on many software engineering tasks. However, effective defense techniques against such attacks remain insufficiently explored. In this study, we propose CodePurify, a novel defense against backdoor attacks on code models through entropy-based purification. E"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.20136","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.20136/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:26:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pvwdX26syCqXuDPF0ih2yntgDXjseVUwQaGXuCOl68dVBukEY0pxtnn6y2JTameW2T0cWcoFdc2BLISrSyeuBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:02:16.992037Z"},"content_sha256":"ed9774997c60f96af30e7779d594a75062c569d1fc1a55a48d2f028ca6e56cf1","schema_version":"1.0","event_id":"sha256:ed9774997c60f96af30e7779d594a75062c569d1fc1a55a48d2f028ca6e56cf1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JNGX6KUJ7O33VDEAQLEN5ELOKF/bundle.json","state_url":"https://pith.science/pith/JNGX6KUJ7O33VDEAQLEN5ELOKF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JNGX6KUJ7O33VDEAQLEN5ELOKF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T18:02:17Z","links":{"resolver":"https://pith.science/pith/JNGX6KUJ7O33VDEAQLEN5ELOKF","bundle":"https://pith.science/pith/JNGX6KUJ7O33VDEAQLEN5ELOKF/bundle.json","state":"https://pith.science/pith/JNGX6KUJ7O33VDEAQLEN5ELOKF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JNGX6KUJ7O33VDEAQLEN5ELOKF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:JNGX6KUJ7O33VDEAQLEN5ELOKF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1e819fbb7055f3f3f20ec32933a91b1ff26f8e4905771132a42ac0ca8ffe16d6","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-26T10:17:50Z","title_canon_sha256":"c2e0d5b32f55da49e7a27d76112f9b51490f98f5e7fb30ba6feae4c3a860e931"},"schema_version":"1.0","source":{"id":"2410.20136","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.20136","created_at":"2026-07-05T09:26:39Z"},{"alias_kind":"arxiv_version","alias_value":"2410.20136v1","created_at":"2026-07-05T09:26:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.20136","created_at":"2026-07-05T09:26:39Z"},{"alias_kind":"pith_short_12","alias_value":"JNGX6KUJ7O33","created_at":"2026-07-05T09:26:39Z"},{"alias_kind":"pith_short_16","alias_value":"JNGX6KUJ7O33VDEA","created_at":"2026-07-05T09:26:39Z"},{"alias_kind":"pith_short_8","alias_value":"JNGX6KUJ","created_at":"2026-07-05T09:26:39Z"}],"graph_snapshots":[{"event_id":"sha256:ed9774997c60f96af30e7779d594a75062c569d1fc1a55a48d2f028ca6e56cf1","target":"graph","created_at":"2026-07-05T09:26:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.20136/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Neural code models have found widespread success in tasks pertaining to code intelligence, yet they are vulnerable to backdoor attacks, where an adversary can manipulate the victim model's behavior by inserting triggers into the source code. Recent studies indicate that advanced backdoor attacks can achieve nearly 100% attack success rates on many software engineering tasks. However, effective defense techniques against such attacks remain insufficiently explored. In this study, we propose CodePurify, a novel defense against backdoor attacks on code models through entropy-based purification. E","authors_text":"Fangwen Mu, Junjie Wang, Lin Shi, Mingyang Li, Qing Wang, Song Wang, Zhuohao Yu","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-26T10:17:50Z","title":"CodePurify: Defend Backdoor Attacks on Neural Code Models via Entropy-based Purification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.20136","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d967ab70db5580f62bd0477afd2bc06a16aaca37a948310e3f12b3c93333ae60","target":"record","created_at":"2026-07-05T09:26:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1e819fbb7055f3f3f20ec32933a91b1ff26f8e4905771132a42ac0ca8ffe16d6","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-26T10:17:50Z","title_canon_sha256":"c2e0d5b32f55da49e7a27d76112f9b51490f98f5e7fb30ba6feae4c3a860e931"},"schema_version":"1.0","source":{"id":"2410.20136","kind":"arxiv","version":1}},"canonical_sha256":"4b4d7f2a89fbb7ba8c8082c8de916e514de45b845e1afdc3316f6e8bf85303d0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4b4d7f2a89fbb7ba8c8082c8de916e514de45b845e1afdc3316f6e8bf85303d0","first_computed_at":"2026-07-05T09:26:39.648740Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:26:39.648740Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"DUWHMH0AvtHanVImnOKPznBL5mKV3CPpb9thPORXCk7LlTq9MKwhIKg7hYlGCc54TgI4SH4ZJ2ujg9+MonddAw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:26:39.649174Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.20136","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d967ab70db5580f62bd0477afd2bc06a16aaca37a948310e3f12b3c93333ae60","sha256:ed9774997c60f96af30e7779d594a75062c569d1fc1a55a48d2f028ca6e56cf1"],"state_sha256":"6d994fecd7bf3e827ea53e508040408435e0e653d1e401847d6f322d7b0056e1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OZaz8dY0Wn/jD8J0apC8KToV1ieiG9+mQVp/rIWS3jDVPh+aOlZnpJ9ppNnqboXKQa7GTArAY1VHTqaA7yEiBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T18:02:17.008470Z","bundle_sha256":"91a9233d754bd30d29af914158dbe84601496ce5c6f34901c479a1de867c6e4c"}}