{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:M543X246HAFJTKMCQ4Q373XFAM","short_pith_number":"pith:M543X246","canonical_record":{"source":{"id":"2007.14433","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-07-28T19:00:40Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"e01a80083800a10eca734cecbd26cefb5c4ff914acadd77d1e73513b0647979b","abstract_canon_sha256":"cdb819bcd93060e51f532ba47d792d1a91bf826ad61e92e49adea4042ba2a7dc"},"schema_version":"1.0"},"canonical_sha256":"6779bbeb9e380a99a9828721bfeee5032e08dca4f8f255e53cc20f7081c7b61b","source":{"kind":"arxiv","id":"2007.14433","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2007.14433","created_at":"2026-07-05T01:23:15Z"},{"alias_kind":"arxiv_version","alias_value":"2007.14433v1","created_at":"2026-07-05T01:23:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2007.14433","created_at":"2026-07-05T01:23:15Z"},{"alias_kind":"pith_short_12","alias_value":"M543X246HAFJ","created_at":"2026-07-05T01:23:15Z"},{"alias_kind":"pith_short_16","alias_value":"M543X246HAFJTKMC","created_at":"2026-07-05T01:23:15Z"},{"alias_kind":"pith_short_8","alias_value":"M543X246","created_at":"2026-07-05T01:23:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:M543X246HAFJTKMCQ4Q373XFAM","target":"record","payload":{"canonical_record":{"source":{"id":"2007.14433","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-07-28T19:00:40Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"e01a80083800a10eca734cecbd26cefb5c4ff914acadd77d1e73513b0647979b","abstract_canon_sha256":"cdb819bcd93060e51f532ba47d792d1a91bf826ad61e92e49adea4042ba2a7dc"},"schema_version":"1.0"},"canonical_sha256":"6779bbeb9e380a99a9828721bfeee5032e08dca4f8f255e53cc20f7081c7b61b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:23:15.238884Z","signature_b64":"nRwtg8gLizHrRaeRz5PFIg6inHifRocJXKOi1uIo4DPHPlYXh8RerCKQp44UEcElZiktBKG9kzrAULolzqtlDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6779bbeb9e380a99a9828721bfeee5032e08dca4f8f255e53cc20f7081c7b61b","last_reissued_at":"2026-07-05T01:23:15.238406Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:23:15.238406Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2007.14433","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:23:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"osR3sJO1xPNuMVb1uQaKpdWwFSUyvDdEjI+NMYViDuSJhwIkmscqAKr+e3lvy15We7MkjiFZrhW4x+OizRSUDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T02:37:38.608685Z"},"content_sha256":"b4c63f78de8664b758d405a5ef3abe15a407b5f1660342398fd6951b7446dc30","schema_version":"1.0","event_id":"sha256:b4c63f78de8664b758d405a5ef3abe15a407b5f1660342398fd6951b7446dc30"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:M543X246HAFJTKMCQ4Q373XFAM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Cassandra: Detecting Trojaned Networks from Adversarial Perturbations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Ajmal Mian, Mubarak Shah, Nazanin Rahnavard, Rohit Gupta, Xiaoyu Zhang","submitted_at":"2020-07-28T19:00:40Z","abstract_excerpt":"Deep neural networks are being widely deployed for many critical tasks due to their high classification accuracy. In many cases, pre-trained models are sourced from vendors who may have disrupted the training pipeline to insert Trojan behaviors into the models. These malicious behaviors can be triggered at the adversary's will and hence, cause a serious threat to the widespread deployment of deep models. We propose a method to verify if a pre-trained model is Trojaned or benign. Our method captures fingerprints of neural networks in the form of adversarial perturbations learned from the networ"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2007.14433","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2007.14433/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:23:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wpcyCshB6+hybLJEE+Z5bgqgc6M3RGqHlaKDRS4UQuF86U5CkS4Mqi86TLDDIhEgkr5avTjofNLKplhoMD0pCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T02:37:38.609329Z"},"content_sha256":"c7f6e7d8baba26017e2353ba1e04f0818130f436077135c811e3e18ee59cb0ec","schema_version":"1.0","event_id":"sha256:c7f6e7d8baba26017e2353ba1e04f0818130f436077135c811e3e18ee59cb0ec"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/M543X246HAFJTKMCQ4Q373XFAM/bundle.json","state_url":"https://pith.science/pith/M543X246HAFJTKMCQ4Q373XFAM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/M543X246HAFJTKMCQ4Q373XFAM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T02:37:38Z","links":{"resolver":"https://pith.science/pith/M543X246HAFJTKMCQ4Q373XFAM","bundle":"https://pith.science/pith/M543X246HAFJTKMCQ4Q373XFAM/bundle.json","state":"https://pith.science/pith/M543X246HAFJTKMCQ4Q373XFAM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/M543X246HAFJTKMCQ4Q373XFAM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:M543X246HAFJTKMCQ4Q373XFAM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cdb819bcd93060e51f532ba47d792d1a91bf826ad61e92e49adea4042ba2a7dc","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-07-28T19:00:40Z","title_canon_sha256":"e01a80083800a10eca734cecbd26cefb5c4ff914acadd77d1e73513b0647979b"},"schema_version":"1.0","source":{"id":"2007.14433","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2007.14433","created_at":"2026-07-05T01:23:15Z"},{"alias_kind":"arxiv_version","alias_value":"2007.14433v1","created_at":"2026-07-05T01:23:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2007.14433","created_at":"2026-07-05T01:23:15Z"},{"alias_kind":"pith_short_12","alias_value":"M543X246HAFJ","created_at":"2026-07-05T01:23:15Z"},{"alias_kind":"pith_short_16","alias_value":"M543X246HAFJTKMC","created_at":"2026-07-05T01:23:15Z"},{"alias_kind":"pith_short_8","alias_value":"M543X246","created_at":"2026-07-05T01:23:15Z"}],"graph_snapshots":[{"event_id":"sha256:c7f6e7d8baba26017e2353ba1e04f0818130f436077135c811e3e18ee59cb0ec","target":"graph","created_at":"2026-07-05T01:23:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2007.14433/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks are being widely deployed for many critical tasks due to their high classification accuracy. In many cases, pre-trained models are sourced from vendors who may have disrupted the training pipeline to insert Trojan behaviors into the models. These malicious behaviors can be triggered at the adversary's will and hence, cause a serious threat to the widespread deployment of deep models. We propose a method to verify if a pre-trained model is Trojaned or benign. Our method captures fingerprints of neural networks in the form of adversarial perturbations learned from the networ","authors_text":"Ajmal Mian, Mubarak Shah, Nazanin Rahnavard, Rohit Gupta, Xiaoyu Zhang","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-07-28T19:00:40Z","title":"Cassandra: Detecting Trojaned Networks from Adversarial Perturbations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2007.14433","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b4c63f78de8664b758d405a5ef3abe15a407b5f1660342398fd6951b7446dc30","target":"record","created_at":"2026-07-05T01:23:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cdb819bcd93060e51f532ba47d792d1a91bf826ad61e92e49adea4042ba2a7dc","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-07-28T19:00:40Z","title_canon_sha256":"e01a80083800a10eca734cecbd26cefb5c4ff914acadd77d1e73513b0647979b"},"schema_version":"1.0","source":{"id":"2007.14433","kind":"arxiv","version":1}},"canonical_sha256":"6779bbeb9e380a99a9828721bfeee5032e08dca4f8f255e53cc20f7081c7b61b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6779bbeb9e380a99a9828721bfeee5032e08dca4f8f255e53cc20f7081c7b61b","first_computed_at":"2026-07-05T01:23:15.238406Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:23:15.238406Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"nRwtg8gLizHrRaeRz5PFIg6inHifRocJXKOi1uIo4DPHPlYXh8RerCKQp44UEcElZiktBKG9kzrAULolzqtlDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T01:23:15.238884Z","signed_message":"canonical_sha256_bytes"},"source_id":"2007.14433","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b4c63f78de8664b758d405a5ef3abe15a407b5f1660342398fd6951b7446dc30","sha256:c7f6e7d8baba26017e2353ba1e04f0818130f436077135c811e3e18ee59cb0ec"],"state_sha256":"93bbd47a685ffd8ed08cb520a258c9c8ddf8ffb4020b32c91be426a3b1f96af0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gHAvKh+dnOtBsbTUr+XOZWsiweZDcLOvkNnw81y+Xs6lDbEoidgklaP8MKWLSdx9lKfu+7k+54KyzZOn6a6eDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T02:37:38.613030Z","bundle_sha256":"f66800d6696e5cbc02ca367b1e6a381044c16f40e8143230d670771d6a66a2c8"}}