{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:M7CFCSUE45ZUE6ZZU4GPI7JF3D","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"09c6a684af628c33eec20517c97cc8e228a53d4b4deff1bcf7f6f9a89d219068","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-25T13:10:44Z","title_canon_sha256":"4f6e9a6f4b272d1dcfb287b1fab3722e4ba9ad5de9ba15a36778e3bfd693ceb5"},"schema_version":"1.0","source":{"id":"2310.16613","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.16613","created_at":"2026-07-05T10:09:40Z"},{"alias_kind":"arxiv_version","alias_value":"2310.16613v2","created_at":"2026-07-05T10:09:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.16613","created_at":"2026-07-05T10:09:40Z"},{"alias_kind":"pith_short_12","alias_value":"M7CFCSUE45ZU","created_at":"2026-07-05T10:09:40Z"},{"alias_kind":"pith_short_16","alias_value":"M7CFCSUE45ZUE6ZZ","created_at":"2026-07-05T10:09:40Z"},{"alias_kind":"pith_short_8","alias_value":"M7CFCSUE","created_at":"2026-07-05T10:09:40Z"}],"graph_snapshots":[{"event_id":"sha256:2212f4730a8e5a9694c71736bf1b4466bb069f3ce49d2f662e7a8d8d79edfc9d","target":"graph","created_at":"2026-07-05T10:09:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.16613/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Malicious or manipulated prompts are known to exploit text-to-image models to generate unsafe images. Existing studies, however, focus on the passive exploitation of such harmful capabilities. In this paper, we investigate the proactive generation of unsafe images from benign prompts (e.g., a photo of a cat) through maliciously modified text-to-image models. Our preliminary investigation demonstrates that poisoning attacks are a viable method to achieve this goal but uncovers significant side effects, where unintended spread to non-targeted prompts compromises attack stealthiness. Root cause a","authors_text":"Michael Backes, Ning Yu, Yang Zhang, Yixin Wu, Yun Shen","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-25T13:10:44Z","title":"On the Proactive Generation of Unsafe Images From Text-To-Image Models Using Benign Prompts"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.16613","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cb5fc98995fc06ea2cb17fa7173e3b86d20751dfddaf8db244438a7484441481","target":"record","created_at":"2026-07-05T10:09:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"09c6a684af628c33eec20517c97cc8e228a53d4b4deff1bcf7f6f9a89d219068","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-25T13:10:44Z","title_canon_sha256":"4f6e9a6f4b272d1dcfb287b1fab3722e4ba9ad5de9ba15a36778e3bfd693ceb5"},"schema_version":"1.0","source":{"id":"2310.16613","kind":"arxiv","version":2}},"canonical_sha256":"67c4514a84e773427b39a70cf47d25d8e3d66f02fa72f02242518880fef1eec0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"67c4514a84e773427b39a70cf47d25d8e3d66f02fa72f02242518880fef1eec0","first_computed_at":"2026-07-05T10:09:40.968097Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:09:40.968097Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Cr9ZG5TAWdIiuqCpBAe0j3NrZjabGRpWva6sZ3nUNRmEo+U2u7T+QmYr5ksXHqJeZTXClO7lpWSNZpAHLUoPAg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:09:40.968454Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.16613","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cb5fc98995fc06ea2cb17fa7173e3b86d20751dfddaf8db244438a7484441481","sha256:2212f4730a8e5a9694c71736bf1b4466bb069f3ce49d2f662e7a8d8d79edfc9d"],"state_sha256":"be021ef974bf57c2720fa11d64a58d822aeaaf6f910ee466d00ade79d9954323"}