{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:JSNICCPZ5VFHOPMZX32ROFKUOH","short_pith_number":"pith:JSNICCPZ","canonical_record":{"source":{"id":"2402.13459","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-21T01:30:03Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"f752dc7e22742e6d83aae3e71367d803c11dccdff1c036d3e6e62e8fc04ad802","abstract_canon_sha256":"dc0e278731e1aeefb09275d41eed537cc535dd0ec78dc392e4e3ee5d8a01a25c"},"schema_version":"1.0"},"canonical_sha256":"4c9a8109f9ed4a773d99bef517155471f98e81c2c3f07ae59518e98ae28bc0c1","source":{"kind":"arxiv","id":"2402.13459","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.13459","created_at":"2026-07-05T11:11:30Z"},{"alias_kind":"arxiv_version","alias_value":"2402.13459v3","created_at":"2026-07-05T11:11:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.13459","created_at":"2026-07-05T11:11:30Z"},{"alias_kind":"pith_short_12","alias_value":"JSNICCPZ5VFH","created_at":"2026-07-05T11:11:30Z"},{"alias_kind":"pith_short_16","alias_value":"JSNICCPZ5VFHOPMZ","created_at":"2026-07-05T11:11:30Z"},{"alias_kind":"pith_short_8","alias_value":"JSNICCPZ","created_at":"2026-07-05T11:11:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:JSNICCPZ5VFHOPMZX32ROFKUOH","target":"record","payload":{"canonical_record":{"source":{"id":"2402.13459","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-21T01:30:03Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"f752dc7e22742e6d83aae3e71367d803c11dccdff1c036d3e6e62e8fc04ad802","abstract_canon_sha256":"dc0e278731e1aeefb09275d41eed537cc535dd0ec78dc392e4e3ee5d8a01a25c"},"schema_version":"1.0"},"canonical_sha256":"4c9a8109f9ed4a773d99bef517155471f98e81c2c3f07ae59518e98ae28bc0c1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:11:30.996948Z","signature_b64":"JZSNtPIsmmVXGDpSNWIMaYDyHIZF2KYMgF06Rwg4+i8o/VRqxkgE6YihlmtcJCO4QCB//yJlyg0UEyL0zFbnCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4c9a8109f9ed4a773d99bef517155471f98e81c2c3f07ae59518e98ae28bc0c1","last_reissued_at":"2026-07-05T11:11:30.996385Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:11:30.996385Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.13459","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:11:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rWzE+Ldb2LUu9+8KbS/vRbFACJLY1v1lSSyX2d+TjttZTiv3h63QIDK/JRGKxg51m2RyEvEhJCt2pPoeMll2Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-14T01:39:13.632280Z"},"content_sha256":"f9c993f3a57b5a45a55c21d4e3538d48aa1379d401ef82e9e06d4b761598ba75","schema_version":"1.0","event_id":"sha256:f9c993f3a57b5a45a55c21d4e3538d48aa1379d401ef82e9e06d4b761598ba75"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:JSNICCPZ5VFHOPMZX32ROFKUOH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Learning to Poison Large Language Models for Downstream Manipulation","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL","cs.CR"],"primary_cat":"cs.LG","authors_text":"Dongxiao Zhu, Douglas Zytko, Mohammad Amin Roshani, Prashant Khanduri, Saleh Zare Zade, Xiangyu Zhou, Yao Qiang","submitted_at":"2024-02-21T01:30:03Z","abstract_excerpt":"The advent of Large Language Models (LLMs) has marked significant achievements in language processing and reasoning capabilities. Despite their advancements, LLMs face vulnerabilities to data poisoning attacks, where the adversary inserts backdoor triggers into training data to manipulate outputs. This work further identifies additional security risks in LLMs by designing a new data poisoning attack tailored to exploit the supervised fine-tuning (SFT) process. We propose a novel gradient-guided backdoor trigger learning (GBTL) algorithm to identify adversarial triggers efficiently, ensuring an"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.13459","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.13459/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:11:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0ZZ5JOjiL4gL2oKGjKml2vfWggJIAsGdq6dzeqSJzYXG4qmCdg58FNsWZvAhM759BT8WzB5kzEHBZP/P2x5tCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-14T01:39:13.632673Z"},"content_sha256":"4f1616ebd9e059f0838a3210463820d9611fa8cde6cd531303b6831001defcf0","schema_version":"1.0","event_id":"sha256:4f1616ebd9e059f0838a3210463820d9611fa8cde6cd531303b6831001defcf0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JSNICCPZ5VFHOPMZX32ROFKUOH/bundle.json","state_url":"https://pith.science/pith/JSNICCPZ5VFHOPMZX32ROFKUOH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JSNICCPZ5VFHOPMZX32ROFKUOH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-14T01:39:13Z","links":{"resolver":"https://pith.science/pith/JSNICCPZ5VFHOPMZX32ROFKUOH","bundle":"https://pith.science/pith/JSNICCPZ5VFHOPMZX32ROFKUOH/bundle.json","state":"https://pith.science/pith/JSNICCPZ5VFHOPMZX32ROFKUOH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JSNICCPZ5VFHOPMZX32ROFKUOH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:JSNICCPZ5VFHOPMZX32ROFKUOH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"dc0e278731e1aeefb09275d41eed537cc535dd0ec78dc392e4e3ee5d8a01a25c","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-21T01:30:03Z","title_canon_sha256":"f752dc7e22742e6d83aae3e71367d803c11dccdff1c036d3e6e62e8fc04ad802"},"schema_version":"1.0","source":{"id":"2402.13459","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.13459","created_at":"2026-07-05T11:11:30Z"},{"alias_kind":"arxiv_version","alias_value":"2402.13459v3","created_at":"2026-07-05T11:11:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.13459","created_at":"2026-07-05T11:11:30Z"},{"alias_kind":"pith_short_12","alias_value":"JSNICCPZ5VFH","created_at":"2026-07-05T11:11:30Z"},{"alias_kind":"pith_short_16","alias_value":"JSNICCPZ5VFHOPMZ","created_at":"2026-07-05T11:11:30Z"},{"alias_kind":"pith_short_8","alias_value":"JSNICCPZ","created_at":"2026-07-05T11:11:30Z"}],"graph_snapshots":[{"event_id":"sha256:4f1616ebd9e059f0838a3210463820d9611fa8cde6cd531303b6831001defcf0","target":"graph","created_at":"2026-07-05T11:11:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.13459/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The advent of Large Language Models (LLMs) has marked significant achievements in language processing and reasoning capabilities. Despite their advancements, LLMs face vulnerabilities to data poisoning attacks, where the adversary inserts backdoor triggers into training data to manipulate outputs. This work further identifies additional security risks in LLMs by designing a new data poisoning attack tailored to exploit the supervised fine-tuning (SFT) process. We propose a novel gradient-guided backdoor trigger learning (GBTL) algorithm to identify adversarial triggers efficiently, ensuring an","authors_text":"Dongxiao Zhu, Douglas Zytko, Mohammad Amin Roshani, Prashant Khanduri, Saleh Zare Zade, Xiangyu Zhou, Yao Qiang","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-21T01:30:03Z","title":"Learning to Poison Large Language Models for Downstream Manipulation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.13459","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f9c993f3a57b5a45a55c21d4e3538d48aa1379d401ef82e9e06d4b761598ba75","target":"record","created_at":"2026-07-05T11:11:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"dc0e278731e1aeefb09275d41eed537cc535dd0ec78dc392e4e3ee5d8a01a25c","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-21T01:30:03Z","title_canon_sha256":"f752dc7e22742e6d83aae3e71367d803c11dccdff1c036d3e6e62e8fc04ad802"},"schema_version":"1.0","source":{"id":"2402.13459","kind":"arxiv","version":3}},"canonical_sha256":"4c9a8109f9ed4a773d99bef517155471f98e81c2c3f07ae59518e98ae28bc0c1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4c9a8109f9ed4a773d99bef517155471f98e81c2c3f07ae59518e98ae28bc0c1","first_computed_at":"2026-07-05T11:11:30.996385Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:11:30.996385Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"JZSNtPIsmmVXGDpSNWIMaYDyHIZF2KYMgF06Rwg4+i8o/VRqxkgE6YihlmtcJCO4QCB//yJlyg0UEyL0zFbnCA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:11:30.996948Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.13459","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f9c993f3a57b5a45a55c21d4e3538d48aa1379d401ef82e9e06d4b761598ba75","sha256:4f1616ebd9e059f0838a3210463820d9611fa8cde6cd531303b6831001defcf0"],"state_sha256":"0014f700c6da9a378d9b826d77599280a27c4ec4b7650cbf00a9afc6de2e4833"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mZnAA2jjCcIkWuOmOF8bswc3Dv/JNtKCLYiBNdhaQbjdjPfxtLDKbwrInTcyfTqb3qwGuyEDjX0/Ea/A79YVDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-14T01:39:13.634727Z","bundle_sha256":"4cb089fca047006a853a28aec024ea4debb52f5cc5af296e21a38c201cee6e30"}}