{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2023:MN52SP6BQLJA4WLA2SBWVYSLVT","short_pith_number":"pith:MN52SP6B","schema_version":"1.0","canonical_sha256":"637ba93fc182d20e5960d4836ae24baced6da86ab5788b9672b8806229147b7f","source":{"kind":"arxiv","id":"2312.15172","version":1},"attestation_state":"computed","paper":{"title":"Pre-trained Trojan Attacks for Visual Recognition","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Aishan Liu, Dacheng Tao, Jiakai Wang, Siyuan Liang, Xianglong Liu, Xiaochun Cao, Xinwei Zhang, Yisong Xiao, Yuguang Zhou","submitted_at":"2023-12-23T05:51:40Z","abstract_excerpt":"Pre-trained vision models (PVMs) have become a dominant component due to their exceptional performance when fine-tuned for downstream tasks. However, the presence of backdoors within PVMs poses significant threats. Unfortunately, existing studies primarily focus on backdooring PVMs for the classification task, neglecting potential inherited backdoors in downstream tasks such as detection and segmentation. In this paper, we propose the Pre-trained Trojan attack, which embeds backdoors into a PVM, enabling attacks across various downstream vision tasks. We highlight the challenges posed by cross"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2312.15172","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-12-23T05:51:40Z","cross_cats_sorted":[],"title_canon_sha256":"ff5f67317176cebca66c276be25933c8f6ebc0d1dfa263d5c596a22eaf695bba","abstract_canon_sha256":"445bbb8295797bd1fb0fd8b9f9d90a1b05be85497565ebd339af2f5bd10a4fad"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:27:31.744510Z","signature_b64":"e4GhDY8VkoDRVfZXXZXPghN8bUMYo/ndx7yC3E6Rsp31XHGRoyDPL3MorIA5FhYLghHXYOCYhGR6kp4UZO/QDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"637ba93fc182d20e5960d4836ae24baced6da86ab5788b9672b8806229147b7f","last_reissued_at":"2026-07-05T07:27:31.744026Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:27:31.744026Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Pre-trained Trojan Attacks for Visual Recognition","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Aishan Liu, Dacheng Tao, Jiakai Wang, Siyuan Liang, Xianglong Liu, Xiaochun Cao, Xinwei Zhang, Yisong Xiao, Yuguang Zhou","submitted_at":"2023-12-23T05:51:40Z","abstract_excerpt":"Pre-trained vision models (PVMs) have become a dominant component due to their exceptional performance when fine-tuned for downstream tasks. However, the presence of backdoors within PVMs poses significant threats. Unfortunately, existing studies primarily focus on backdooring PVMs for the classification task, neglecting potential inherited backdoors in downstream tasks such as detection and segmentation. In this paper, we propose the Pre-trained Trojan attack, which embeds backdoors into a PVM, enabling attacks across various downstream vision tasks. We highlight the challenges posed by cross"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.15172","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.15172/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2312.15172","created_at":"2026-07-05T07:27:31.744085+00:00"},{"alias_kind":"arxiv_version","alias_value":"2312.15172v1","created_at":"2026-07-05T07:27:31.744085+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.15172","created_at":"2026-07-05T07:27:31.744085+00:00"},{"alias_kind":"pith_short_12","alias_value":"MN52SP6BQLJA","created_at":"2026-07-05T07:27:31.744085+00:00"},{"alias_kind":"pith_short_16","alias_value":"MN52SP6BQLJA4WLA","created_at":"2026-07-05T07:27:31.744085+00:00"},{"alias_kind":"pith_short_8","alias_value":"MN52SP6B","created_at":"2026-07-05T07:27:31.744085+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":2,"internal_anchor_count":1,"sample":[{"citing_arxiv_id":"2607.05783","citing_title":"Benchmarking the Robustness of Autonomous Driving to Environmental Illusions: A Lane Perception Perspective","ref_index":23,"is_internal_anchor":true},{"citing_arxiv_id":"2411.18275","citing_title":"Visual Adversarial Attack on Vision-Language Models for Autonomous Driving","ref_index":29,"is_internal_anchor":false}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/MN52SP6BQLJA4WLA2SBWVYSLVT","json":"https://pith.science/pith/MN52SP6BQLJA4WLA2SBWVYSLVT.json","graph_json":"https://pith.science/api/pith-number/MN52SP6BQLJA4WLA2SBWVYSLVT/graph.json","events_json":"https://pith.science/api/pith-number/MN52SP6BQLJA4WLA2SBWVYSLVT/events.json","paper":"https://pith.science/paper/MN52SP6B"},"agent_actions":{"view_html":"https://pith.science/pith/MN52SP6BQLJA4WLA2SBWVYSLVT","download_json":"https://pith.science/pith/MN52SP6BQLJA4WLA2SBWVYSLVT.json","view_paper":"https://pith.science/paper/MN52SP6B","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2312.15172&json=true","fetch_graph":"https://pith.science/api/pith-number/MN52SP6BQLJA4WLA2SBWVYSLVT/graph.json","fetch_events":"https://pith.science/api/pith-number/MN52SP6BQLJA4WLA2SBWVYSLVT/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/MN52SP6BQLJA4WLA2SBWVYSLVT/action/timestamp_anchor","attest_storage":"https://pith.science/pith/MN52SP6BQLJA4WLA2SBWVYSLVT/action/storage_attestation","attest_author":"https://pith.science/pith/MN52SP6BQLJA4WLA2SBWVYSLVT/action/author_attestation","sign_citation":"https://pith.science/pith/MN52SP6BQLJA4WLA2SBWVYSLVT/action/citation_signature","submit_replication":"https://pith.science/pith/MN52SP6BQLJA4WLA2SBWVYSLVT/action/replication_record"}},"created_at":"2026-07-05T07:27:31.744085+00:00","updated_at":"2026-07-05T07:27:31.744085+00:00"}