{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:MHSBNGCWHJVTOG725HSGRR47C3","short_pith_number":"pith:MHSBNGCW","canonical_record":{"source":{"id":"2208.04943","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-08-08T22:50:03Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"bc2ffa8381b4bc0639c98a89fd7473df2a78f55a2f0cfe836fb63b17424d1c5a","abstract_canon_sha256":"62ca53e6eb4292450ec03f7951521cd0143fa2fe876185ed1a820f5533ccbf36"},"schema_version":"1.0"},"canonical_sha256":"61e41698563a6b371bfae9e468c79f16fffb8ab8baeb433ef5f4cfacb5d0ba84","source":{"kind":"arxiv","id":"2208.04943","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2208.04943","created_at":"2026-07-05T04:47:30Z"},{"alias_kind":"arxiv_version","alias_value":"2208.04943v1","created_at":"2026-07-05T04:47:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2208.04943","created_at":"2026-07-05T04:47:30Z"},{"alias_kind":"pith_short_12","alias_value":"MHSBNGCWHJVT","created_at":"2026-07-05T04:47:30Z"},{"alias_kind":"pith_short_16","alias_value":"MHSBNGCWHJVTOG72","created_at":"2026-07-05T04:47:30Z"},{"alias_kind":"pith_short_8","alias_value":"MHSBNGCW","created_at":"2026-07-05T04:47:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:MHSBNGCWHJVTOG725HSGRR47C3","target":"record","payload":{"canonical_record":{"source":{"id":"2208.04943","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-08-08T22:50:03Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"bc2ffa8381b4bc0639c98a89fd7473df2a78f55a2f0cfe836fb63b17424d1c5a","abstract_canon_sha256":"62ca53e6eb4292450ec03f7951521cd0143fa2fe876185ed1a820f5533ccbf36"},"schema_version":"1.0"},"canonical_sha256":"61e41698563a6b371bfae9e468c79f16fffb8ab8baeb433ef5f4cfacb5d0ba84","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:47:30.203526Z","signature_b64":"MbhfoiiTdRzViXoVbOl4Uo47m64xi2l2YPrEi0wPkBHeQrf0oq/5TzNRiM0sSkxPRD8RIMnICGWJMysftmSWDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"61e41698563a6b371bfae9e468c79f16fffb8ab8baeb433ef5f4cfacb5d0ba84","last_reissued_at":"2026-07-05T04:47:30.203002Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:47:30.203002Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2208.04943","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:47:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lA3Idi38EuLeREyw/DNy2BiXA1cTLIi0s+mkeL/MVSjow/SFdG76+UMjMax0Dw71p+rvn5mCTS9CJ+Q11Q2vBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-27T13:03:24.594888Z"},"content_sha256":"ba954ccb3509b358b2fa5b521a8caaca38303dca7bb235c41817a3055a884ed4","schema_version":"1.0","event_id":"sha256:ba954ccb3509b358b2fa5b521a8caaca38303dca7bb235c41817a3055a884ed4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:MHSBNGCWHJVTOG725HSGRR47C3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PerD: Perturbation Sensitivity-based Neural Trojan Detection Framework on NLP Applications","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL","cs.CR"],"primary_cat":"cs.LG","authors_text":"Diego Garcia-soto, Farinaz Koushanfar, Huili Chen","submitted_at":"2022-08-08T22:50:03Z","abstract_excerpt":"Deep Neural Networks (DNNs) have been shown to be susceptible to Trojan attacks. Neural Trojan is a type of targeted poisoning attack that embeds the backdoor into the victim and is activated by the trigger in the input space. The increasing deployment of DNNs in critical systems and the surge of outsourcing DNN training (which makes Trojan attack easier) makes the detection of Trojan attacks necessary. While Neural Trojan detection has been studied in the image domain, there is a lack of solutions in the NLP domain. In this paper, we propose a model-level Trojan detection framework by analyzi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2208.04943","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2208.04943/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:47:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pmAti63zVvQT2dtZNTR2KJL+i7yeTLyfl0Isbfisk/uM0xshO556eJjAfF+vs+qsNl2G0etS6NIwBzcjMtm5Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-27T13:03:24.595264Z"},"content_sha256":"717351874bd4464fc8184795393be41afa855177dbb13cda8f7dfc23c8ae818d","schema_version":"1.0","event_id":"sha256:717351874bd4464fc8184795393be41afa855177dbb13cda8f7dfc23c8ae818d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MHSBNGCWHJVTOG725HSGRR47C3/bundle.json","state_url":"https://pith.science/pith/MHSBNGCWHJVTOG725HSGRR47C3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MHSBNGCWHJVTOG725HSGRR47C3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-27T13:03:24Z","links":{"resolver":"https://pith.science/pith/MHSBNGCWHJVTOG725HSGRR47C3","bundle":"https://pith.science/pith/MHSBNGCWHJVTOG725HSGRR47C3/bundle.json","state":"https://pith.science/pith/MHSBNGCWHJVTOG725HSGRR47C3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MHSBNGCWHJVTOG725HSGRR47C3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:MHSBNGCWHJVTOG725HSGRR47C3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"62ca53e6eb4292450ec03f7951521cd0143fa2fe876185ed1a820f5533ccbf36","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-08-08T22:50:03Z","title_canon_sha256":"bc2ffa8381b4bc0639c98a89fd7473df2a78f55a2f0cfe836fb63b17424d1c5a"},"schema_version":"1.0","source":{"id":"2208.04943","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2208.04943","created_at":"2026-07-05T04:47:30Z"},{"alias_kind":"arxiv_version","alias_value":"2208.04943v1","created_at":"2026-07-05T04:47:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2208.04943","created_at":"2026-07-05T04:47:30Z"},{"alias_kind":"pith_short_12","alias_value":"MHSBNGCWHJVT","created_at":"2026-07-05T04:47:30Z"},{"alias_kind":"pith_short_16","alias_value":"MHSBNGCWHJVTOG72","created_at":"2026-07-05T04:47:30Z"},{"alias_kind":"pith_short_8","alias_value":"MHSBNGCW","created_at":"2026-07-05T04:47:30Z"}],"graph_snapshots":[{"event_id":"sha256:717351874bd4464fc8184795393be41afa855177dbb13cda8f7dfc23c8ae818d","target":"graph","created_at":"2026-07-05T04:47:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2208.04943/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep Neural Networks (DNNs) have been shown to be susceptible to Trojan attacks. Neural Trojan is a type of targeted poisoning attack that embeds the backdoor into the victim and is activated by the trigger in the input space. The increasing deployment of DNNs in critical systems and the surge of outsourcing DNN training (which makes Trojan attack easier) makes the detection of Trojan attacks necessary. While Neural Trojan detection has been studied in the image domain, there is a lack of solutions in the NLP domain. In this paper, we propose a model-level Trojan detection framework by analyzi","authors_text":"Diego Garcia-soto, Farinaz Koushanfar, Huili Chen","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-08-08T22:50:03Z","title":"PerD: Perturbation Sensitivity-based Neural Trojan Detection Framework on NLP Applications"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2208.04943","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ba954ccb3509b358b2fa5b521a8caaca38303dca7bb235c41817a3055a884ed4","target":"record","created_at":"2026-07-05T04:47:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"62ca53e6eb4292450ec03f7951521cd0143fa2fe876185ed1a820f5533ccbf36","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-08-08T22:50:03Z","title_canon_sha256":"bc2ffa8381b4bc0639c98a89fd7473df2a78f55a2f0cfe836fb63b17424d1c5a"},"schema_version":"1.0","source":{"id":"2208.04943","kind":"arxiv","version":1}},"canonical_sha256":"61e41698563a6b371bfae9e468c79f16fffb8ab8baeb433ef5f4cfacb5d0ba84","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"61e41698563a6b371bfae9e468c79f16fffb8ab8baeb433ef5f4cfacb5d0ba84","first_computed_at":"2026-07-05T04:47:30.203002Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:47:30.203002Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MbhfoiiTdRzViXoVbOl4Uo47m64xi2l2YPrEi0wPkBHeQrf0oq/5TzNRiM0sSkxPRD8RIMnICGWJMysftmSWDw==","signature_status":"signed_v1","signed_at":"2026-07-05T04:47:30.203526Z","signed_message":"canonical_sha256_bytes"},"source_id":"2208.04943","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ba954ccb3509b358b2fa5b521a8caaca38303dca7bb235c41817a3055a884ed4","sha256:717351874bd4464fc8184795393be41afa855177dbb13cda8f7dfc23c8ae818d"],"state_sha256":"cf09fccd21cc901b7da4c924fb064ab0e6e0bab4f777d0e2bd992a8a2ce566b8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2K0YkxHTHkj0wEDSW2DSfLC7buZMEzRQ2kiPddt9G1LJnJF3TwlhQeTEu5Jq80PgZA5tAOBK+UnbgpwxKh+lAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-27T13:03:24.597764Z","bundle_sha256":"ea96467ae178a2ef26def7689821d43f5f0d5e019725b65a2fa38f3df28a5d47"}}