{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:K6A7P5FPD3B6DE3X5DLZRATNOI","short_pith_number":"pith:K6A7P5FP","canonical_record":{"source":{"id":"2412.08755","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-12-11T19:54:14Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"1b93d4f9679a29b95977d9d4c9a18e03341f8149c65ca2d1c853aab9b9d733d3","abstract_canon_sha256":"2cb7ab536878429c87fafd98d30876f4889730fdfb5c58ad0decaf82ceb2e432"},"schema_version":"1.0"},"canonical_sha256":"5781f7f4af1ec3e19377e8d798826d722b051d44047d42ea905b596de5d557c7","source":{"kind":"arxiv","id":"2412.08755","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.08755","created_at":"2026-07-05T10:45:38Z"},{"alias_kind":"arxiv_version","alias_value":"2412.08755v4","created_at":"2026-07-05T10:45:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.08755","created_at":"2026-07-05T10:45:38Z"},{"alias_kind":"pith_short_12","alias_value":"K6A7P5FPD3B6","created_at":"2026-07-05T10:45:38Z"},{"alias_kind":"pith_short_16","alias_value":"K6A7P5FPD3B6DE3X","created_at":"2026-07-05T10:45:38Z"},{"alias_kind":"pith_short_8","alias_value":"K6A7P5FP","created_at":"2026-07-05T10:45:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:K6A7P5FPD3B6DE3X5DLZRATNOI","target":"record","payload":{"canonical_record":{"source":{"id":"2412.08755","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-12-11T19:54:14Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"1b93d4f9679a29b95977d9d4c9a18e03341f8149c65ca2d1c853aab9b9d733d3","abstract_canon_sha256":"2cb7ab536878429c87fafd98d30876f4889730fdfb5c58ad0decaf82ceb2e432"},"schema_version":"1.0"},"canonical_sha256":"5781f7f4af1ec3e19377e8d798826d722b051d44047d42ea905b596de5d557c7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:45:38.730955Z","signature_b64":"G+Q85Nt5qJGUwfJjKQlMwdpxxhBMFbI0srHAcJR+j8T1mJztapxth5ROeIYkWsQKdFmtrkpMU2GySC3LoemPCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5781f7f4af1ec3e19377e8d798826d722b051d44047d42ea905b596de5d557c7","last_reissued_at":"2026-07-05T10:45:38.730451Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:45:38.730451Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.08755","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:45:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QQ8qZoXfga12B6tNdWV4BRRWBtDtvlwAxvw1kgGoj++WAA4FEOk7cjHsGMDBoQGwuwAaZojONiS35CJOWj4RBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T12:22:04.439747Z"},"content_sha256":"08400906d8217f3690834152fc28f07e315576b0123630063977f3088b461705","schema_version":"1.0","event_id":"sha256:08400906d8217f3690834152fc28f07e315576b0123630063977f3088b461705"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:K6A7P5FPD3B6DE3X5DLZRATNOI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Proactive Adversarial Defense: Harnessing Prompt Tuning in Vision-Language Models to Detect Unseen Backdoored Images","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Andrew Arash Mahyari, Eman El-Sheikh, Guillermo Francia, Kyle Stein","submitted_at":"2024-12-11T19:54:14Z","abstract_excerpt":"Backdoor attacks pose a critical threat by embedding hidden triggers into inputs, causing models to misclassify them into target labels. While extensive research has focused on mitigating these attacks in object recognition models through weight fine-tuning, much less attention has been given to detecting backdoored samples directly. Given the vast datasets used in training, manual inspection for backdoor triggers is impractical, and even state-of-the-art defense mechanisms fail to fully neutralize their impact. To address this gap, we introduce a groundbreaking method to detect unseen backdoo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.08755","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.08755/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:45:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tqLK4TmiG3LbtdMycHfRM5ZrI2Ulv2qf3QOj4yCYu+EtM776376VIBk3/2EVtKGIjxiufSjtz6CrO3DISJqEDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T12:22:04.440266Z"},"content_sha256":"3da69b14cb986a7b4d474dacf9cbd51e94f8df9e9c67706286539571d59b170d","schema_version":"1.0","event_id":"sha256:3da69b14cb986a7b4d474dacf9cbd51e94f8df9e9c67706286539571d59b170d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/K6A7P5FPD3B6DE3X5DLZRATNOI/bundle.json","state_url":"https://pith.science/pith/K6A7P5FPD3B6DE3X5DLZRATNOI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/K6A7P5FPD3B6DE3X5DLZRATNOI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T12:22:04Z","links":{"resolver":"https://pith.science/pith/K6A7P5FPD3B6DE3X5DLZRATNOI","bundle":"https://pith.science/pith/K6A7P5FPD3B6DE3X5DLZRATNOI/bundle.json","state":"https://pith.science/pith/K6A7P5FPD3B6DE3X5DLZRATNOI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/K6A7P5FPD3B6DE3X5DLZRATNOI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:K6A7P5FPD3B6DE3X5DLZRATNOI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2cb7ab536878429c87fafd98d30876f4889730fdfb5c58ad0decaf82ceb2e432","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-12-11T19:54:14Z","title_canon_sha256":"1b93d4f9679a29b95977d9d4c9a18e03341f8149c65ca2d1c853aab9b9d733d3"},"schema_version":"1.0","source":{"id":"2412.08755","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.08755","created_at":"2026-07-05T10:45:38Z"},{"alias_kind":"arxiv_version","alias_value":"2412.08755v4","created_at":"2026-07-05T10:45:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.08755","created_at":"2026-07-05T10:45:38Z"},{"alias_kind":"pith_short_12","alias_value":"K6A7P5FPD3B6","created_at":"2026-07-05T10:45:38Z"},{"alias_kind":"pith_short_16","alias_value":"K6A7P5FPD3B6DE3X","created_at":"2026-07-05T10:45:38Z"},{"alias_kind":"pith_short_8","alias_value":"K6A7P5FP","created_at":"2026-07-05T10:45:38Z"}],"graph_snapshots":[{"event_id":"sha256:3da69b14cb986a7b4d474dacf9cbd51e94f8df9e9c67706286539571d59b170d","target":"graph","created_at":"2026-07-05T10:45:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.08755/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attacks pose a critical threat by embedding hidden triggers into inputs, causing models to misclassify them into target labels. While extensive research has focused on mitigating these attacks in object recognition models through weight fine-tuning, much less attention has been given to detecting backdoored samples directly. Given the vast datasets used in training, manual inspection for backdoor triggers is impractical, and even state-of-the-art defense mechanisms fail to fully neutralize their impact. To address this gap, we introduce a groundbreaking method to detect unseen backdoo","authors_text":"Andrew Arash Mahyari, Eman El-Sheikh, Guillermo Francia, Kyle Stein","cross_cats":["cs.AI","cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-12-11T19:54:14Z","title":"Proactive Adversarial Defense: Harnessing Prompt Tuning in Vision-Language Models to Detect Unseen Backdoored Images"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.08755","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:08400906d8217f3690834152fc28f07e315576b0123630063977f3088b461705","target":"record","created_at":"2026-07-05T10:45:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2cb7ab536878429c87fafd98d30876f4889730fdfb5c58ad0decaf82ceb2e432","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-12-11T19:54:14Z","title_canon_sha256":"1b93d4f9679a29b95977d9d4c9a18e03341f8149c65ca2d1c853aab9b9d733d3"},"schema_version":"1.0","source":{"id":"2412.08755","kind":"arxiv","version":4}},"canonical_sha256":"5781f7f4af1ec3e19377e8d798826d722b051d44047d42ea905b596de5d557c7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5781f7f4af1ec3e19377e8d798826d722b051d44047d42ea905b596de5d557c7","first_computed_at":"2026-07-05T10:45:38.730451Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:45:38.730451Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"G+Q85Nt5qJGUwfJjKQlMwdpxxhBMFbI0srHAcJR+j8T1mJztapxth5ROeIYkWsQKdFmtrkpMU2GySC3LoemPCg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:45:38.730955Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.08755","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:08400906d8217f3690834152fc28f07e315576b0123630063977f3088b461705","sha256:3da69b14cb986a7b4d474dacf9cbd51e94f8df9e9c67706286539571d59b170d"],"state_sha256":"19e7b98e7bd06e3db09c09d90df2a1717f7feaff0f2ad8ef3c8c503d38a60c54"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5+CqlA5tu6H/UwKVS8bZdRHZUerbTYzjinVgnCzJhnX2iVxDo7cD7k6Zgd1xqFo8RDoS6qrQrrVlcm0GgZUSDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T12:22:04.444583Z","bundle_sha256":"1f8f105ed70f60e0f68beddbda16142c77cf4a3ac36ae82c910c93171d378285"}}