{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:M24R5VOFQEKQZ3LR47XEXOWC4G","short_pith_number":"pith:M24R5VOF","canonical_record":{"source":{"id":"2406.05874","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-09T18:11:06Z","cross_cats_sorted":[],"title_canon_sha256":"bb45c1d2285652636bbf78f5e813d28bb236c38108addda605160a78cf2d070a","abstract_canon_sha256":"ac9a87dc4d7973bf47070d521878e94b85c4dd631acb36076c3e85daf4144666"},"schema_version":"1.0"},"canonical_sha256":"66b91ed5c581150ced71e7ee4bbac2e188b2c6d48da173481ae5dbe1f4a2769b","source":{"kind":"arxiv","id":"2406.05874","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.05874","created_at":"2026-07-05T08:29:34Z"},{"alias_kind":"arxiv_version","alias_value":"2406.05874v1","created_at":"2026-07-05T08:29:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.05874","created_at":"2026-07-05T08:29:34Z"},{"alias_kind":"pith_short_12","alias_value":"M24R5VOFQEKQ","created_at":"2026-07-05T08:29:34Z"},{"alias_kind":"pith_short_16","alias_value":"M24R5VOFQEKQZ3LR","created_at":"2026-07-05T08:29:34Z"},{"alias_kind":"pith_short_8","alias_value":"M24R5VOF","created_at":"2026-07-05T08:29:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:M24R5VOFQEKQZ3LR47XEXOWC4G","target":"record","payload":{"canonical_record":{"source":{"id":"2406.05874","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-09T18:11:06Z","cross_cats_sorted":[],"title_canon_sha256":"bb45c1d2285652636bbf78f5e813d28bb236c38108addda605160a78cf2d070a","abstract_canon_sha256":"ac9a87dc4d7973bf47070d521878e94b85c4dd631acb36076c3e85daf4144666"},"schema_version":"1.0"},"canonical_sha256":"66b91ed5c581150ced71e7ee4bbac2e188b2c6d48da173481ae5dbe1f4a2769b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:29:34.790108Z","signature_b64":"9OAmPGIXoV6c8jiBB1yZWvJHv3IHWh4YnALwyAQp5prSEtMMPkh/0NM343amguLv+XbzmhYynx+cZvcE4a3dCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"66b91ed5c581150ced71e7ee4bbac2e188b2c6d48da173481ae5dbe1f4a2769b","last_reissued_at":"2026-07-05T08:29:34.789683Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:29:34.789683Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.05874","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:29:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9Tzg/1JRGOKCZ0LynjW5sO5+0lSmO6daed1fzOOMOoHnzLGh04wBsnWWMXLZ5I4NfsAkow9ExWN4sf61GUVPBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T15:49:00.767581Z"},"content_sha256":"063b97b429ee11da037bd8e8e0c20447714b2eddb56d63da8a7929d2082e797c","schema_version":"1.0","event_id":"sha256:063b97b429ee11da037bd8e8e0c20447714b2eddb56d63da8a7929d2082e797c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:M24R5VOFQEKQZ3LR47XEXOWC4G","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Stealthy Targeted Backdoor Attacks against Image Captioning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Hongwei Li, Meng Hao, Shui Yu, Wenbo Jiang, Wenshu Fan, Xiao Zhang","submitted_at":"2024-06-09T18:11:06Z","abstract_excerpt":"In recent years, there has been an explosive growth in multimodal learning. Image captioning, a classical multimodal task, has demonstrated promising applications and attracted extensive research attention. However, recent studies have shown that image caption models are vulnerable to some security threats such as backdoor attacks. Existing backdoor attacks against image captioning typically pair a trigger either with a predefined sentence or a single word as the targeted output, yet they are unrelated to the image content, making them easily noticeable as anomalies by humans. In this paper, w"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.05874","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.05874/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:29:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VmXT9jH2OJSDzcXJR4FmXLCEyvuCYH8sTFBWgZ1VHySdtl/rCoWH55kel9y1zUgg4kTuQvZa1SwVQPEk7JktCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T15:49:00.767947Z"},"content_sha256":"b891e0fdaebf13197f50c1692fa122e2ccba85de514b3ed3648839a9968f4b71","schema_version":"1.0","event_id":"sha256:b891e0fdaebf13197f50c1692fa122e2ccba85de514b3ed3648839a9968f4b71"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/M24R5VOFQEKQZ3LR47XEXOWC4G/bundle.json","state_url":"https://pith.science/pith/M24R5VOFQEKQZ3LR47XEXOWC4G/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/M24R5VOFQEKQZ3LR47XEXOWC4G/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T15:49:00Z","links":{"resolver":"https://pith.science/pith/M24R5VOFQEKQZ3LR47XEXOWC4G","bundle":"https://pith.science/pith/M24R5VOFQEKQZ3LR47XEXOWC4G/bundle.json","state":"https://pith.science/pith/M24R5VOFQEKQZ3LR47XEXOWC4G/state.json","well_known_bundle":"https://pith.science/.well-known/pith/M24R5VOFQEKQZ3LR47XEXOWC4G/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:M24R5VOFQEKQZ3LR47XEXOWC4G","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ac9a87dc4d7973bf47070d521878e94b85c4dd631acb36076c3e85daf4144666","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-09T18:11:06Z","title_canon_sha256":"bb45c1d2285652636bbf78f5e813d28bb236c38108addda605160a78cf2d070a"},"schema_version":"1.0","source":{"id":"2406.05874","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.05874","created_at":"2026-07-05T08:29:34Z"},{"alias_kind":"arxiv_version","alias_value":"2406.05874v1","created_at":"2026-07-05T08:29:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.05874","created_at":"2026-07-05T08:29:34Z"},{"alias_kind":"pith_short_12","alias_value":"M24R5VOFQEKQ","created_at":"2026-07-05T08:29:34Z"},{"alias_kind":"pith_short_16","alias_value":"M24R5VOFQEKQZ3LR","created_at":"2026-07-05T08:29:34Z"},{"alias_kind":"pith_short_8","alias_value":"M24R5VOF","created_at":"2026-07-05T08:29:34Z"}],"graph_snapshots":[{"event_id":"sha256:b891e0fdaebf13197f50c1692fa122e2ccba85de514b3ed3648839a9968f4b71","target":"graph","created_at":"2026-07-05T08:29:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.05874/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In recent years, there has been an explosive growth in multimodal learning. Image captioning, a classical multimodal task, has demonstrated promising applications and attracted extensive research attention. However, recent studies have shown that image caption models are vulnerable to some security threats such as backdoor attacks. Existing backdoor attacks against image captioning typically pair a trigger either with a predefined sentence or a single word as the targeted output, yet they are unrelated to the image content, making them easily noticeable as anomalies by humans. In this paper, w","authors_text":"Hongwei Li, Meng Hao, Shui Yu, Wenbo Jiang, Wenshu Fan, Xiao Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-09T18:11:06Z","title":"Stealthy Targeted Backdoor Attacks against Image Captioning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.05874","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:063b97b429ee11da037bd8e8e0c20447714b2eddb56d63da8a7929d2082e797c","target":"record","created_at":"2026-07-05T08:29:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ac9a87dc4d7973bf47070d521878e94b85c4dd631acb36076c3e85daf4144666","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-09T18:11:06Z","title_canon_sha256":"bb45c1d2285652636bbf78f5e813d28bb236c38108addda605160a78cf2d070a"},"schema_version":"1.0","source":{"id":"2406.05874","kind":"arxiv","version":1}},"canonical_sha256":"66b91ed5c581150ced71e7ee4bbac2e188b2c6d48da173481ae5dbe1f4a2769b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"66b91ed5c581150ced71e7ee4bbac2e188b2c6d48da173481ae5dbe1f4a2769b","first_computed_at":"2026-07-05T08:29:34.789683Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:29:34.789683Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"9OAmPGIXoV6c8jiBB1yZWvJHv3IHWh4YnALwyAQp5prSEtMMPkh/0NM343amguLv+XbzmhYynx+cZvcE4a3dCg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:29:34.790108Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.05874","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:063b97b429ee11da037bd8e8e0c20447714b2eddb56d63da8a7929d2082e797c","sha256:b891e0fdaebf13197f50c1692fa122e2ccba85de514b3ed3648839a9968f4b71"],"state_sha256":"53c5e42db5bff87bea213bc1f0b45e182634e8da24820c2f62337c1b2437dbcf"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mFYFnIOlQXhVhJ62mxRafZcbsHfZjylean4MWXMx0rpLAza/CYniRIs0NLnGjDVLBvk63zEpeflsEQmUJjinDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T15:49:00.770681Z","bundle_sha256":"49b1f07de15e02dbcf659ddea81d5d300334d0d0a836697c7e9c3e8f6aea8903"}}