{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2020:M543X246HAFJTKMCQ4Q373XFAM","short_pith_number":"pith:M543X246","schema_version":"1.0","canonical_sha256":"6779bbeb9e380a99a9828721bfeee5032e08dca4f8f255e53cc20f7081c7b61b","source":{"kind":"arxiv","id":"2007.14433","version":1},"attestation_state":"computed","paper":{"title":"Cassandra: Detecting Trojaned Networks from Adversarial Perturbations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Ajmal Mian, Mubarak Shah, Nazanin Rahnavard, Rohit Gupta, Xiaoyu Zhang","submitted_at":"2020-07-28T19:00:40Z","abstract_excerpt":"Deep neural networks are being widely deployed for many critical tasks due to their high classification accuracy. In many cases, pre-trained models are sourced from vendors who may have disrupted the training pipeline to insert Trojan behaviors into the models. These malicious behaviors can be triggered at the adversary's will and hence, cause a serious threat to the widespread deployment of deep models. We propose a method to verify if a pre-trained model is Trojaned or benign. Our method captures fingerprints of neural networks in the form of adversarial perturbations learned from the networ"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2007.14433","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-07-28T19:00:40Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"e01a80083800a10eca734cecbd26cefb5c4ff914acadd77d1e73513b0647979b","abstract_canon_sha256":"cdb819bcd93060e51f532ba47d792d1a91bf826ad61e92e49adea4042ba2a7dc"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:23:15.238884Z","signature_b64":"nRwtg8gLizHrRaeRz5PFIg6inHifRocJXKOi1uIo4DPHPlYXh8RerCKQp44UEcElZiktBKG9kzrAULolzqtlDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6779bbeb9e380a99a9828721bfeee5032e08dca4f8f255e53cc20f7081c7b61b","last_reissued_at":"2026-07-05T01:23:15.238406Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:23:15.238406Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Cassandra: Detecting Trojaned Networks from Adversarial Perturbations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Ajmal Mian, Mubarak Shah, Nazanin Rahnavard, Rohit Gupta, Xiaoyu Zhang","submitted_at":"2020-07-28T19:00:40Z","abstract_excerpt":"Deep neural networks are being widely deployed for many critical tasks due to their high classification accuracy. In many cases, pre-trained models are sourced from vendors who may have disrupted the training pipeline to insert Trojan behaviors into the models. These malicious behaviors can be triggered at the adversary's will and hence, cause a serious threat to the widespread deployment of deep models. We propose a method to verify if a pre-trained model is Trojaned or benign. Our method captures fingerprints of neural networks in the form of adversarial perturbations learned from the networ"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2007.14433","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2007.14433/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2007.14433","created_at":"2026-07-05T01:23:15.238463+00:00"},{"alias_kind":"arxiv_version","alias_value":"2007.14433v1","created_at":"2026-07-05T01:23:15.238463+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2007.14433","created_at":"2026-07-05T01:23:15.238463+00:00"},{"alias_kind":"pith_short_12","alias_value":"M543X246HAFJ","created_at":"2026-07-05T01:23:15.238463+00:00"},{"alias_kind":"pith_short_16","alias_value":"M543X246HAFJTKMC","created_at":"2026-07-05T01:23:15.238463+00:00"},{"alias_kind":"pith_short_8","alias_value":"M543X246","created_at":"2026-07-05T01:23:15.238463+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/M543X246HAFJTKMCQ4Q373XFAM","json":"https://pith.science/pith/M543X246HAFJTKMCQ4Q373XFAM.json","graph_json":"https://pith.science/api/pith-number/M543X246HAFJTKMCQ4Q373XFAM/graph.json","events_json":"https://pith.science/api/pith-number/M543X246HAFJTKMCQ4Q373XFAM/events.json","paper":"https://pith.science/paper/M543X246"},"agent_actions":{"view_html":"https://pith.science/pith/M543X246HAFJTKMCQ4Q373XFAM","download_json":"https://pith.science/pith/M543X246HAFJTKMCQ4Q373XFAM.json","view_paper":"https://pith.science/paper/M543X246","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2007.14433&json=true","fetch_graph":"https://pith.science/api/pith-number/M543X246HAFJTKMCQ4Q373XFAM/graph.json","fetch_events":"https://pith.science/api/pith-number/M543X246HAFJTKMCQ4Q373XFAM/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/M543X246HAFJTKMCQ4Q373XFAM/action/timestamp_anchor","attest_storage":"https://pith.science/pith/M543X246HAFJTKMCQ4Q373XFAM/action/storage_attestation","attest_author":"https://pith.science/pith/M543X246HAFJTKMCQ4Q373XFAM/action/author_attestation","sign_citation":"https://pith.science/pith/M543X246HAFJTKMCQ4Q373XFAM/action/citation_signature","submit_replication":"https://pith.science/pith/M543X246HAFJTKMCQ4Q373XFAM/action/replication_record"}},"created_at":"2026-07-05T01:23:15.238463+00:00","updated_at":"2026-07-05T01:23:15.238463+00:00"}