{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:M4B5HPKAPIA3EZ3OVPV3CTA6WQ","short_pith_number":"pith:M4B5HPKA","canonical_record":{"source":{"id":"2409.13864","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-20T19:28:48Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"5dd7bd2406e01fbb72f59db32c01e418844adc668e8f7c6c601c9e36519c39ea","abstract_canon_sha256":"b99f09dc8446adf1c6e804f3960ca7c45c689be581cd751480c6781501e72414"},"schema_version":"1.0"},"canonical_sha256":"6703d3bd407a01b2676eabebb14c1eb4081bddf5bf7029eea1ccc3039e117362","source":{"kind":"arxiv","id":"2409.13864","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.13864","created_at":"2026-07-05T11:44:40Z"},{"alias_kind":"arxiv_version","alias_value":"2409.13864v3","created_at":"2026-07-05T11:44:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.13864","created_at":"2026-07-05T11:44:40Z"},{"alias_kind":"pith_short_12","alias_value":"M4B5HPKAPIA3","created_at":"2026-07-05T11:44:40Z"},{"alias_kind":"pith_short_16","alias_value":"M4B5HPKAPIA3EZ3O","created_at":"2026-07-05T11:44:40Z"},{"alias_kind":"pith_short_8","alias_value":"M4B5HPKA","created_at":"2026-07-05T11:44:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:M4B5HPKAPIA3EZ3OVPV3CTA6WQ","target":"record","payload":{"canonical_record":{"source":{"id":"2409.13864","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-20T19:28:48Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"5dd7bd2406e01fbb72f59db32c01e418844adc668e8f7c6c601c9e36519c39ea","abstract_canon_sha256":"b99f09dc8446adf1c6e804f3960ca7c45c689be581cd751480c6781501e72414"},"schema_version":"1.0"},"canonical_sha256":"6703d3bd407a01b2676eabebb14c1eb4081bddf5bf7029eea1ccc3039e117362","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:44:40.887009Z","signature_b64":"EBRvFog7MH7WGckAWA4MH0AjKPRnuzX6Elv5KK/lvVWzKdNvvhrjLlbiOrMhXAWbRYIxmtA5bl8+qX5vfMPqBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6703d3bd407a01b2676eabebb14c1eb4081bddf5bf7029eea1ccc3039e117362","last_reissued_at":"2026-07-05T11:44:40.886534Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:44:40.886534Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.13864","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:44:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"snQU+n98SkrOPU1Mijwwu/i7CIHuaEJc5nl8j4f4wsOcTa8h1BmBGiH9XaZ53EifMkxHXHyMqXAv7he9i17iCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T17:14:19.994278Z"},"content_sha256":"e6cf612161897231822fb6fe49a507af5fe2a68c97f4021b1d117311d3420dfb","schema_version":"1.0","event_id":"sha256:e6cf612161897231822fb6fe49a507af5fe2a68c97f4021b1d117311d3420dfb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:M4B5HPKAPIA3EZ3OVPV3CTA6WQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Persistent Backdoor Attacks in Continual Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Abhinav Kumar, Reza Tourani, Zhen Guo","submitted_at":"2024-09-20T19:28:48Z","abstract_excerpt":"Backdoor attacks pose a significant threat to neural networks, enabling adversaries to manipulate model outputs on specific inputs, often with devastating consequences, especially in critical applications. While backdoor attacks have been studied in various contexts, little attention has been given to their practicality and persistence in continual learning, particularly in understanding how the continual updates to model parameters, as new data distributions are learned and integrated, impact the effectiveness of these attacks over time. To address this gap, we introduce two persistent backdo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.13864","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.13864/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:44:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cQVph0a2q8v6kcHIkUWY7+BcgOwLoCirJvW39ZadBl1Z3Iuaf0S+/YKcZ3Rayxj34QylRgXuFaH6GJabNHuVBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T17:14:19.994783Z"},"content_sha256":"4ba3ec57b3b619c9cbfc051aa0c6240679d7615a503f4450cb0307ec80a259da","schema_version":"1.0","event_id":"sha256:4ba3ec57b3b619c9cbfc051aa0c6240679d7615a503f4450cb0307ec80a259da"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/M4B5HPKAPIA3EZ3OVPV3CTA6WQ/bundle.json","state_url":"https://pith.science/pith/M4B5HPKAPIA3EZ3OVPV3CTA6WQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/M4B5HPKAPIA3EZ3OVPV3CTA6WQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T17:14:19Z","links":{"resolver":"https://pith.science/pith/M4B5HPKAPIA3EZ3OVPV3CTA6WQ","bundle":"https://pith.science/pith/M4B5HPKAPIA3EZ3OVPV3CTA6WQ/bundle.json","state":"https://pith.science/pith/M4B5HPKAPIA3EZ3OVPV3CTA6WQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/M4B5HPKAPIA3EZ3OVPV3CTA6WQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:M4B5HPKAPIA3EZ3OVPV3CTA6WQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b99f09dc8446adf1c6e804f3960ca7c45c689be581cd751480c6781501e72414","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-20T19:28:48Z","title_canon_sha256":"5dd7bd2406e01fbb72f59db32c01e418844adc668e8f7c6c601c9e36519c39ea"},"schema_version":"1.0","source":{"id":"2409.13864","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.13864","created_at":"2026-07-05T11:44:40Z"},{"alias_kind":"arxiv_version","alias_value":"2409.13864v3","created_at":"2026-07-05T11:44:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.13864","created_at":"2026-07-05T11:44:40Z"},{"alias_kind":"pith_short_12","alias_value":"M4B5HPKAPIA3","created_at":"2026-07-05T11:44:40Z"},{"alias_kind":"pith_short_16","alias_value":"M4B5HPKAPIA3EZ3O","created_at":"2026-07-05T11:44:40Z"},{"alias_kind":"pith_short_8","alias_value":"M4B5HPKA","created_at":"2026-07-05T11:44:40Z"}],"graph_snapshots":[{"event_id":"sha256:4ba3ec57b3b619c9cbfc051aa0c6240679d7615a503f4450cb0307ec80a259da","target":"graph","created_at":"2026-07-05T11:44:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.13864/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attacks pose a significant threat to neural networks, enabling adversaries to manipulate model outputs on specific inputs, often with devastating consequences, especially in critical applications. While backdoor attacks have been studied in various contexts, little attention has been given to their practicality and persistence in continual learning, particularly in understanding how the continual updates to model parameters, as new data distributions are learned and integrated, impact the effectiveness of these attacks over time. To address this gap, we introduce two persistent backdo","authors_text":"Abhinav Kumar, Reza Tourani, Zhen Guo","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-20T19:28:48Z","title":"Persistent Backdoor Attacks in Continual Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.13864","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e6cf612161897231822fb6fe49a507af5fe2a68c97f4021b1d117311d3420dfb","target":"record","created_at":"2026-07-05T11:44:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b99f09dc8446adf1c6e804f3960ca7c45c689be581cd751480c6781501e72414","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-20T19:28:48Z","title_canon_sha256":"5dd7bd2406e01fbb72f59db32c01e418844adc668e8f7c6c601c9e36519c39ea"},"schema_version":"1.0","source":{"id":"2409.13864","kind":"arxiv","version":3}},"canonical_sha256":"6703d3bd407a01b2676eabebb14c1eb4081bddf5bf7029eea1ccc3039e117362","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6703d3bd407a01b2676eabebb14c1eb4081bddf5bf7029eea1ccc3039e117362","first_computed_at":"2026-07-05T11:44:40.886534Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:44:40.886534Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"EBRvFog7MH7WGckAWA4MH0AjKPRnuzX6Elv5KK/lvVWzKdNvvhrjLlbiOrMhXAWbRYIxmtA5bl8+qX5vfMPqBw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:44:40.887009Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.13864","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e6cf612161897231822fb6fe49a507af5fe2a68c97f4021b1d117311d3420dfb","sha256:4ba3ec57b3b619c9cbfc051aa0c6240679d7615a503f4450cb0307ec80a259da"],"state_sha256":"30bd43ddd2611b178cd9016d371e213d6c33d453be87952215b6df9b6d280522"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EUpLEObmeARPpXq1Fd51qRXJyD4EIirGprr1fK0IYhRy2Wtl69uU4vmNeRJtSM66pnEXP1LDrNb0uwh/NfQ+Dw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T17:14:19.998880Z","bundle_sha256":"7692e3c60ac849686a6f6b80fe2314ccce8579d6c8027c1c42eb3fd315ecb8a7"}}