{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:LY75JTQNBOTB3UW7ZZHKTFF543","short_pith_number":"pith:LY75JTQN","canonical_record":{"source":{"id":"2301.11824","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2023-01-27T16:25:43Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"ce69499637d0e589663aad40059c6f1f2637a82339841d6f58729987d1bca79d","abstract_canon_sha256":"2e5ec9e159fa7e3b9fa9cf90f0d5e5d3504c9998a74790e1846ea8857e0d5993"},"schema_version":"1.0"},"canonical_sha256":"5e3fd4ce0d0ba61dd2dfce4ea994bde6d9465621b74503a18dce9e17597cb1c0","source":{"kind":"arxiv","id":"2301.11824","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2301.11824","created_at":"2026-07-05T08:20:49Z"},{"alias_kind":"arxiv_version","alias_value":"2301.11824v4","created_at":"2026-07-05T08:20:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.11824","created_at":"2026-07-05T08:20:49Z"},{"alias_kind":"pith_short_12","alias_value":"LY75JTQNBOTB","created_at":"2026-07-05T08:20:49Z"},{"alias_kind":"pith_short_16","alias_value":"LY75JTQNBOTB3UW7","created_at":"2026-07-05T08:20:49Z"},{"alias_kind":"pith_short_8","alias_value":"LY75JTQN","created_at":"2026-07-05T08:20:49Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:LY75JTQNBOTB3UW7ZZHKTFF543","target":"record","payload":{"canonical_record":{"source":{"id":"2301.11824","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2023-01-27T16:25:43Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"ce69499637d0e589663aad40059c6f1f2637a82339841d6f58729987d1bca79d","abstract_canon_sha256":"2e5ec9e159fa7e3b9fa9cf90f0d5e5d3504c9998a74790e1846ea8857e0d5993"},"schema_version":"1.0"},"canonical_sha256":"5e3fd4ce0d0ba61dd2dfce4ea994bde6d9465621b74503a18dce9e17597cb1c0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:20:49.528901Z","signature_b64":"7npQ1ahdXsgmqnCMMUBEs4/Px0jtMF5BfdDF0foBBDSIXbOl6V0QhrDCLk8TUlYya3Yz2f5BB0ZyhzwHiVTmCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5e3fd4ce0d0ba61dd2dfce4ea994bde6d9465621b74503a18dce9e17597cb1c0","last_reissued_at":"2026-07-05T08:20:49.528079Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:20:49.528079Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2301.11824","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:20:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LsCajk/uhhiPreKxQFhGCHUZd5lcxPJ+/GBLmSKaF/U53n9KLp8zEUXbpjv+zoi4Obtz8+eVQVliDhmzyRAyBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T02:04:03.085821Z"},"content_sha256":"620a93f8069e2c97b4f82440bad61bae595a077d89a1dd3932cb2a215049bdcf","schema_version":"1.0","event_id":"sha256:620a93f8069e2c97b4f82440bad61bae595a077d89a1dd3932cb2a215049bdcf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:LY75JTQNBOTB3UW7ZZHKTFF543","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PECAN: A Deterministic Certified Defense Against Backdoor Attacks","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Aws Albarghouthi, Loris D'Antoni, Yuhao Zhang","submitted_at":"2023-01-27T16:25:43Z","abstract_excerpt":"Neural networks are vulnerable to backdoor poisoning attacks, where the attackers maliciously poison the training set and insert triggers into the test input to change the prediction of the victim model. Existing defenses for backdoor attacks either provide no formal guarantees or come with expensive-to-compute and ineffective probabilistic guarantees. We present PECAN, an efficient and certified approach for defending against backdoor attacks. The key insight powering PECAN is to apply off-the-shelf test-time evasion certification techniques on a set of neural networks trained on disjoint par"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.11824","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2301.11824/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:20:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SPpB6Spelet3XSSuBSK53SKPGyEgGYvHTQE+j4i9uYg6hBjPubgQ5uJ7uNxBACqx2gZAs3Y4aFwawtmSaaFEAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T02:04:03.086462Z"},"content_sha256":"83684449620c5cb3cb62d7f96f86fae89b3abbe377d36b7d3ead8b757c657b97","schema_version":"1.0","event_id":"sha256:83684449620c5cb3cb62d7f96f86fae89b3abbe377d36b7d3ead8b757c657b97"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LY75JTQNBOTB3UW7ZZHKTFF543/bundle.json","state_url":"https://pith.science/pith/LY75JTQNBOTB3UW7ZZHKTFF543/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LY75JTQNBOTB3UW7ZZHKTFF543/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T02:04:03Z","links":{"resolver":"https://pith.science/pith/LY75JTQNBOTB3UW7ZZHKTFF543","bundle":"https://pith.science/pith/LY75JTQNBOTB3UW7ZZHKTFF543/bundle.json","state":"https://pith.science/pith/LY75JTQNBOTB3UW7ZZHKTFF543/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LY75JTQNBOTB3UW7ZZHKTFF543/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:LY75JTQNBOTB3UW7ZZHKTFF543","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2e5ec9e159fa7e3b9fa9cf90f0d5e5d3504c9998a74790e1846ea8857e0d5993","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2023-01-27T16:25:43Z","title_canon_sha256":"ce69499637d0e589663aad40059c6f1f2637a82339841d6f58729987d1bca79d"},"schema_version":"1.0","source":{"id":"2301.11824","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2301.11824","created_at":"2026-07-05T08:20:49Z"},{"alias_kind":"arxiv_version","alias_value":"2301.11824v4","created_at":"2026-07-05T08:20:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.11824","created_at":"2026-07-05T08:20:49Z"},{"alias_kind":"pith_short_12","alias_value":"LY75JTQNBOTB","created_at":"2026-07-05T08:20:49Z"},{"alias_kind":"pith_short_16","alias_value":"LY75JTQNBOTB3UW7","created_at":"2026-07-05T08:20:49Z"},{"alias_kind":"pith_short_8","alias_value":"LY75JTQN","created_at":"2026-07-05T08:20:49Z"}],"graph_snapshots":[{"event_id":"sha256:83684449620c5cb3cb62d7f96f86fae89b3abbe377d36b7d3ead8b757c657b97","target":"graph","created_at":"2026-07-05T08:20:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2301.11824/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Neural networks are vulnerable to backdoor poisoning attacks, where the attackers maliciously poison the training set and insert triggers into the test input to change the prediction of the victim model. Existing defenses for backdoor attacks either provide no formal guarantees or come with expensive-to-compute and ineffective probabilistic guarantees. We present PECAN, an efficient and certified approach for defending against backdoor attacks. The key insight powering PECAN is to apply off-the-shelf test-time evasion certification techniques on a set of neural networks trained on disjoint par","authors_text":"Aws Albarghouthi, Loris D'Antoni, Yuhao Zhang","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2023-01-27T16:25:43Z","title":"PECAN: A Deterministic Certified Defense Against Backdoor Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.11824","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:620a93f8069e2c97b4f82440bad61bae595a077d89a1dd3932cb2a215049bdcf","target":"record","created_at":"2026-07-05T08:20:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2e5ec9e159fa7e3b9fa9cf90f0d5e5d3504c9998a74790e1846ea8857e0d5993","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2023-01-27T16:25:43Z","title_canon_sha256":"ce69499637d0e589663aad40059c6f1f2637a82339841d6f58729987d1bca79d"},"schema_version":"1.0","source":{"id":"2301.11824","kind":"arxiv","version":4}},"canonical_sha256":"5e3fd4ce0d0ba61dd2dfce4ea994bde6d9465621b74503a18dce9e17597cb1c0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5e3fd4ce0d0ba61dd2dfce4ea994bde6d9465621b74503a18dce9e17597cb1c0","first_computed_at":"2026-07-05T08:20:49.528079Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:20:49.528079Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7npQ1ahdXsgmqnCMMUBEs4/Px0jtMF5BfdDF0foBBDSIXbOl6V0QhrDCLk8TUlYya3Yz2f5BB0ZyhzwHiVTmCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:20:49.528901Z","signed_message":"canonical_sha256_bytes"},"source_id":"2301.11824","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:620a93f8069e2c97b4f82440bad61bae595a077d89a1dd3932cb2a215049bdcf","sha256:83684449620c5cb3cb62d7f96f86fae89b3abbe377d36b7d3ead8b757c657b97"],"state_sha256":"ce8ceb9f909def79f22792291f4c9ef23946c6030a3624c23d1a639b123ade8e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"em8/Tb0MkaVB6woDy58a27nTo2gTLjA8CjFolmHV0PL5ncQAb5pUXKAjfU1whmjqWmhodmEv38XssYNMjOQAAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T02:04:03.091771Z","bundle_sha256":"16d0fdfc469da91451a9554710605b403e5363463d164da900f9f8b1e01e9ae3"}}