{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:KDRXYGMRNH4BEJFPQERMGGOMEM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"571bc9b3d1218043ecba96060a2cb803bea8a0cbf41f66f4d89e800224103d7b","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-09-30T06:50:08Z","title_canon_sha256":"507f8c55bffb2c7a4fa6a541e8a134f091805ceedcf276a5e16f10d05df3a604"},"schema_version":"1.0","source":{"id":"2209.15266","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2209.15266","created_at":"2026-07-05T06:17:26Z"},{"alias_kind":"arxiv_version","alias_value":"2209.15266v2","created_at":"2026-07-05T06:17:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2209.15266","created_at":"2026-07-05T06:17:26Z"},{"alias_kind":"pith_short_12","alias_value":"KDRXYGMRNH4B","created_at":"2026-07-05T06:17:26Z"},{"alias_kind":"pith_short_16","alias_value":"KDRXYGMRNH4BEJFP","created_at":"2026-07-05T06:17:26Z"},{"alias_kind":"pith_short_8","alias_value":"KDRXYGMR","created_at":"2026-07-05T06:17:26Z"}],"graph_snapshots":[{"event_id":"sha256:29efbeeab5007c35cfb03bd23cec69a0f7a200a73b0cd73e94af6bf59a9cd34f","target":"graph","created_at":"2026-07-05T06:17:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2209.15266/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recently, the newly emerged multimodal models, which leverage both visual and linguistic modalities to train powerful encoders, have gained increasing attention. However, learning from a large-scale unlabeled dataset also exposes the model to the risk of potential poisoning attacks, whereby the adversary aims to perturb the model's training data to trigger malicious behaviors in it. In contrast to previous work, only poisoning visual modality, in this work, we take the first step to studying poisoning attacks against multimodal models in both visual and linguistic modalities. Specially, we foc","authors_text":"Mathias Humbert, Michael Backes, Pascal Berrang, Xinlei He, Yang Zhang, Zheng Li, Ziqing Yang","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-09-30T06:50:08Z","title":"Data Poisoning Attacks Against Multimodal Encoders"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2209.15266","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b7d812d704abfd2ac3fc9c1bbfe897c12e47fed72987f8c339cddeb16a144917","target":"record","created_at":"2026-07-05T06:17:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"571bc9b3d1218043ecba96060a2cb803bea8a0cbf41f66f4d89e800224103d7b","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-09-30T06:50:08Z","title_canon_sha256":"507f8c55bffb2c7a4fa6a541e8a134f091805ceedcf276a5e16f10d05df3a604"},"schema_version":"1.0","source":{"id":"2209.15266","kind":"arxiv","version":2}},"canonical_sha256":"50e37c199169f81224af8122c319cc2321d0b25fcbb4c6084e94934afc3626de","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"50e37c199169f81224af8122c319cc2321d0b25fcbb4c6084e94934afc3626de","first_computed_at":"2026-07-05T06:17:26.394622Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:17:26.394622Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"evlq3NwqxtRt1PkxEiM21KGxLn4F6g6SH5eoO414xklGTWhBbX6oa/owbh3lW4L6QznvM4CP3LzgEm1glMO7Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T06:17:26.395104Z","signed_message":"canonical_sha256_bytes"},"source_id":"2209.15266","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b7d812d704abfd2ac3fc9c1bbfe897c12e47fed72987f8c339cddeb16a144917","sha256:29efbeeab5007c35cfb03bd23cec69a0f7a200a73b0cd73e94af6bf59a9cd34f"],"state_sha256":"7a1983a0cb9b1a729ab8365605e898b7a78b350da7373ee2b383e7dd21fec62b"}