{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:L356H6CITG6NNKPRGJKYGADQQ6","short_pith_number":"pith:L356H6CI","canonical_record":{"source":{"id":"2009.06996","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-15T11:50:29Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"6c584ecfbf1d6de975540ae0792cefe2f9c6ded4ab1d8ad1fdba190cbd6b1f4a","abstract_canon_sha256":"91a140a52e29af9cf3f540b001455f092a220239bf32a1b306b12f13a5501909"},"schema_version":"1.0"},"canonical_sha256":"5efbe3f84899bcd6a9f13255830070879767c2b85c9ffe2a9ca7734b43932071","source":{"kind":"arxiv","id":"2009.06996","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.06996","created_at":"2026-07-05T01:35:39Z"},{"alias_kind":"arxiv_version","alias_value":"2009.06996v1","created_at":"2026-07-05T01:35:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.06996","created_at":"2026-07-05T01:35:39Z"},{"alias_kind":"pith_short_12","alias_value":"L356H6CITG6N","created_at":"2026-07-05T01:35:39Z"},{"alias_kind":"pith_short_16","alias_value":"L356H6CITG6NNKPR","created_at":"2026-07-05T01:35:39Z"},{"alias_kind":"pith_short_8","alias_value":"L356H6CI","created_at":"2026-07-05T01:35:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:L356H6CITG6NNKPRGJKYGADQQ6","target":"record","payload":{"canonical_record":{"source":{"id":"2009.06996","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-15T11:50:29Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"6c584ecfbf1d6de975540ae0792cefe2f9c6ded4ab1d8ad1fdba190cbd6b1f4a","abstract_canon_sha256":"91a140a52e29af9cf3f540b001455f092a220239bf32a1b306b12f13a5501909"},"schema_version":"1.0"},"canonical_sha256":"5efbe3f84899bcd6a9f13255830070879767c2b85c9ffe2a9ca7734b43932071","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:35:39.809411Z","signature_b64":"f2aKZyCB4RHnEUGgH/7Mqt/l4vBODp7j0u9GmW07O2JRVUChZtljcOHS6NALeQRKZxabLRPyYRj/+wFoytkWBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5efbe3f84899bcd6a9f13255830070879767c2b85c9ffe2a9ca7734b43932071","last_reissued_at":"2026-07-05T01:35:39.808865Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:35:39.808865Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2009.06996","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:35:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oUTAiu+Noqs6/0dRhFn3zlQZvUthWSkUIfVpZR7r/SzPipzUqZCuUTXTyvN1tT20uvutFEGgxrwxyHP/3g8FDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T22:16:34.860001Z"},"content_sha256":"2891b2922b7603c74270b7ce45e8073a8077ccea9bc05051d1ca3e480e5ca263","schema_version":"1.0","event_id":"sha256:2891b2922b7603c74270b7ce45e8073a8077ccea9bc05051d1ca3e480e5ca263"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:L356H6CITG6NNKPRGJKYGADQQ6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Light Can Hack Your Face! Black-box Backdoor Attack on Face Recognition Systems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CV"],"primary_cat":"cs.CR","authors_text":"(2) City University of Hong Kong), Alex C. Kot (1) ((1) Nanyang Technological University, Haoliang Li (1), Lap-Pui Chau (1), Renjie Wan (1), Shiqi Wang (2), Singapore, Xiaofei Xie (1), Yang Liu (1), Yufei Wang (1)","submitted_at":"2020-09-15T11:50:29Z","abstract_excerpt":"Deep neural networks (DNN) have shown great success in many computer vision applications. However, they are also known to be susceptible to backdoor attacks. When conducting backdoor attacks, most of the existing approaches assume that the targeted DNN is always available, and an attacker can always inject a specific pattern to the training data to further fine-tune the DNN model. However, in practice, such attack may not be feasible as the DNN model is encrypted and only available to the secure enclave.\n  In this paper, we propose a novel black-box backdoor attack technique on face recognitio"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.06996","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2009.06996/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:35:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qmGf9LqlB3hlJ+DruiaLcu40JNufkkhVpbbrsunHhiIGGFgRkbkxDfafjMt2okG2OXsryazT2xvyuQkoyq2BCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T22:16:34.860969Z"},"content_sha256":"4aa54bb2544866719d7d0af46ea6f7449ac2beeb8f958aae2a5a0fee0f663d1c","schema_version":"1.0","event_id":"sha256:4aa54bb2544866719d7d0af46ea6f7449ac2beeb8f958aae2a5a0fee0f663d1c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/L356H6CITG6NNKPRGJKYGADQQ6/bundle.json","state_url":"https://pith.science/pith/L356H6CITG6NNKPRGJKYGADQQ6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/L356H6CITG6NNKPRGJKYGADQQ6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T22:16:34Z","links":{"resolver":"https://pith.science/pith/L356H6CITG6NNKPRGJKYGADQQ6","bundle":"https://pith.science/pith/L356H6CITG6NNKPRGJKYGADQQ6/bundle.json","state":"https://pith.science/pith/L356H6CITG6NNKPRGJKYGADQQ6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/L356H6CITG6NNKPRGJKYGADQQ6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:L356H6CITG6NNKPRGJKYGADQQ6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"91a140a52e29af9cf3f540b001455f092a220239bf32a1b306b12f13a5501909","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-15T11:50:29Z","title_canon_sha256":"6c584ecfbf1d6de975540ae0792cefe2f9c6ded4ab1d8ad1fdba190cbd6b1f4a"},"schema_version":"1.0","source":{"id":"2009.06996","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.06996","created_at":"2026-07-05T01:35:39Z"},{"alias_kind":"arxiv_version","alias_value":"2009.06996v1","created_at":"2026-07-05T01:35:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.06996","created_at":"2026-07-05T01:35:39Z"},{"alias_kind":"pith_short_12","alias_value":"L356H6CITG6N","created_at":"2026-07-05T01:35:39Z"},{"alias_kind":"pith_short_16","alias_value":"L356H6CITG6NNKPR","created_at":"2026-07-05T01:35:39Z"},{"alias_kind":"pith_short_8","alias_value":"L356H6CI","created_at":"2026-07-05T01:35:39Z"}],"graph_snapshots":[{"event_id":"sha256:4aa54bb2544866719d7d0af46ea6f7449ac2beeb8f958aae2a5a0fee0f663d1c","target":"graph","created_at":"2026-07-05T01:35:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2009.06996/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNN) have shown great success in many computer vision applications. However, they are also known to be susceptible to backdoor attacks. When conducting backdoor attacks, most of the existing approaches assume that the targeted DNN is always available, and an attacker can always inject a specific pattern to the training data to further fine-tune the DNN model. However, in practice, such attack may not be feasible as the DNN model is encrypted and only available to the secure enclave.\n  In this paper, we propose a novel black-box backdoor attack technique on face recognitio","authors_text":"(2) City University of Hong Kong), Alex C. Kot (1) ((1) Nanyang Technological University, Haoliang Li (1), Lap-Pui Chau (1), Renjie Wan (1), Shiqi Wang (2), Singapore, Xiaofei Xie (1), Yang Liu (1), Yufei Wang (1)","cross_cats":["cs.AI","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-15T11:50:29Z","title":"Light Can Hack Your Face! Black-box Backdoor Attack on Face Recognition Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.06996","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2891b2922b7603c74270b7ce45e8073a8077ccea9bc05051d1ca3e480e5ca263","target":"record","created_at":"2026-07-05T01:35:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"91a140a52e29af9cf3f540b001455f092a220239bf32a1b306b12f13a5501909","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-15T11:50:29Z","title_canon_sha256":"6c584ecfbf1d6de975540ae0792cefe2f9c6ded4ab1d8ad1fdba190cbd6b1f4a"},"schema_version":"1.0","source":{"id":"2009.06996","kind":"arxiv","version":1}},"canonical_sha256":"5efbe3f84899bcd6a9f13255830070879767c2b85c9ffe2a9ca7734b43932071","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5efbe3f84899bcd6a9f13255830070879767c2b85c9ffe2a9ca7734b43932071","first_computed_at":"2026-07-05T01:35:39.808865Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:35:39.808865Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"f2aKZyCB4RHnEUGgH/7Mqt/l4vBODp7j0u9GmW07O2JRVUChZtljcOHS6NALeQRKZxabLRPyYRj/+wFoytkWBw==","signature_status":"signed_v1","signed_at":"2026-07-05T01:35:39.809411Z","signed_message":"canonical_sha256_bytes"},"source_id":"2009.06996","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2891b2922b7603c74270b7ce45e8073a8077ccea9bc05051d1ca3e480e5ca263","sha256:4aa54bb2544866719d7d0af46ea6f7449ac2beeb8f958aae2a5a0fee0f663d1c"],"state_sha256":"4d1fe94055d840ff09586ebfa55f85b4f0b9d051c4d7303ae042e363054072cd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XXLQ7/gm/p1W8J4db+FvEDLfzAuUmLwZryWD2IIhXmcBMmTvAFCiv3AzbN3tHZ18Q3cZ7DfCGstcSms6mpoSCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T22:16:34.874823Z","bundle_sha256":"bd46a8770df3f230fc77d2cb70702749546060c1e0761e41fb671885e634edd5"}}