{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:MWN4HKDUI4RJEGIAOEMXTBKWLT","short_pith_number":"pith:MWN4HKDU","canonical_record":{"source":{"id":"2205.13616","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-05-26T20:44:15Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"cc6f727301b376a78b93db3b75d96d9077b24fbbf3c2eed347d797608d016a4d","abstract_canon_sha256":"1b79ba0a2bfbb9f404e21390a3e145ffe2232d1adc6e0bbce5d8d11e2bc50d98"},"schema_version":"1.0"},"canonical_sha256":"659bc3a874472292190071197985565cf7e4b922664834c6b8856470015da53b","source":{"kind":"arxiv","id":"2205.13616","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.13616","created_at":"2026-07-05T06:21:28Z"},{"alias_kind":"arxiv_version","alias_value":"2205.13616v3","created_at":"2026-07-05T06:21:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.13616","created_at":"2026-07-05T06:21:28Z"},{"alias_kind":"pith_short_12","alias_value":"MWN4HKDUI4RJ","created_at":"2026-07-05T06:21:28Z"},{"alias_kind":"pith_short_16","alias_value":"MWN4HKDUI4RJEGIA","created_at":"2026-07-05T06:21:28Z"},{"alias_kind":"pith_short_8","alias_value":"MWN4HKDU","created_at":"2026-07-05T06:21:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:MWN4HKDUI4RJEGIAOEMXTBKWLT","target":"record","payload":{"canonical_record":{"source":{"id":"2205.13616","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-05-26T20:44:15Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"cc6f727301b376a78b93db3b75d96d9077b24fbbf3c2eed347d797608d016a4d","abstract_canon_sha256":"1b79ba0a2bfbb9f404e21390a3e145ffe2232d1adc6e0bbce5d8d11e2bc50d98"},"schema_version":"1.0"},"canonical_sha256":"659bc3a874472292190071197985565cf7e4b922664834c6b8856470015da53b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:21:28.060671Z","signature_b64":"OuHiqvpi+6CAfBxEYr799i7XwTJGzu79T8n5GP7BUeZf9PpQZBOrgGbFss6AUeCsYtRIXZ0d4xb3ciDSxgvbBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"659bc3a874472292190071197985565cf7e4b922664834c6b8856470015da53b","last_reissued_at":"2026-07-05T06:21:28.060209Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:21:28.060209Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2205.13616","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:21:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qDJnV3pcEEWS3sp0f/kXt+aecPG0e2reVJ5+hJ/D/aJZPbs8M2jo8F2ZnTqyNkv9+AtdlSxudPMnM7n7cREqBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T10:38:03.299585Z"},"content_sha256":"879b0fcc03890739d4203ce58e021763bfb2269315bf47404ce0a88fd0f5f101","schema_version":"1.0","event_id":"sha256:879b0fcc03890739d4203ce58e021763bfb2269315bf47404ce0a88fd0f5f101"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:MWN4HKDUI4RJEGIAOEMXTBKWLT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards A Proactive ML Approach for Detecting Backdoor Poison Samples","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Jiachen T. Wang, Prateek Mittal, Saeed Mahloujifar, Tinghao Xie, Tong Wu, Xiangyu Qi","submitted_at":"2022-05-26T20:44:15Z","abstract_excerpt":"Adversaries can embed backdoors in deep learning models by introducing backdoor poison samples into training datasets. In this work, we investigate how to detect such poison samples to mitigate the threat of backdoor attacks. First, we uncover a post-hoc workflow underlying most prior work, where defenders passively allow the attack to proceed and then leverage the characteristics of the post-attacked model to uncover poison samples. We reveal that this workflow does not fully exploit defenders' capabilities, and defense pipelines built on it are prone to failure or performance degradation in "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.13616","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2205.13616/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:21:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FnF7JQbPl4aSL7aQ4w1xr6N65+p9ea5k5ztSbGhSfqje+vj9Ubj3283mQKfdskoG23jzGCLggnrYdCy8QXUbBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T10:38:03.300085Z"},"content_sha256":"936c5fd9727c884c244350c1fbfd3a994c79f368a084650eb0a1c69c59707ed1","schema_version":"1.0","event_id":"sha256:936c5fd9727c884c244350c1fbfd3a994c79f368a084650eb0a1c69c59707ed1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MWN4HKDUI4RJEGIAOEMXTBKWLT/bundle.json","state_url":"https://pith.science/pith/MWN4HKDUI4RJEGIAOEMXTBKWLT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MWN4HKDUI4RJEGIAOEMXTBKWLT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T10:38:03Z","links":{"resolver":"https://pith.science/pith/MWN4HKDUI4RJEGIAOEMXTBKWLT","bundle":"https://pith.science/pith/MWN4HKDUI4RJEGIAOEMXTBKWLT/bundle.json","state":"https://pith.science/pith/MWN4HKDUI4RJEGIAOEMXTBKWLT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MWN4HKDUI4RJEGIAOEMXTBKWLT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:MWN4HKDUI4RJEGIAOEMXTBKWLT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1b79ba0a2bfbb9f404e21390a3e145ffe2232d1adc6e0bbce5d8d11e2bc50d98","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-05-26T20:44:15Z","title_canon_sha256":"cc6f727301b376a78b93db3b75d96d9077b24fbbf3c2eed347d797608d016a4d"},"schema_version":"1.0","source":{"id":"2205.13616","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.13616","created_at":"2026-07-05T06:21:28Z"},{"alias_kind":"arxiv_version","alias_value":"2205.13616v3","created_at":"2026-07-05T06:21:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.13616","created_at":"2026-07-05T06:21:28Z"},{"alias_kind":"pith_short_12","alias_value":"MWN4HKDUI4RJ","created_at":"2026-07-05T06:21:28Z"},{"alias_kind":"pith_short_16","alias_value":"MWN4HKDUI4RJEGIA","created_at":"2026-07-05T06:21:28Z"},{"alias_kind":"pith_short_8","alias_value":"MWN4HKDU","created_at":"2026-07-05T06:21:28Z"}],"graph_snapshots":[{"event_id":"sha256:936c5fd9727c884c244350c1fbfd3a994c79f368a084650eb0a1c69c59707ed1","target":"graph","created_at":"2026-07-05T06:21:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2205.13616/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversaries can embed backdoors in deep learning models by introducing backdoor poison samples into training datasets. In this work, we investigate how to detect such poison samples to mitigate the threat of backdoor attacks. First, we uncover a post-hoc workflow underlying most prior work, where defenders passively allow the attack to proceed and then leverage the characteristics of the post-attacked model to uncover poison samples. We reveal that this workflow does not fully exploit defenders' capabilities, and defense pipelines built on it are prone to failure or performance degradation in ","authors_text":"Jiachen T. Wang, Prateek Mittal, Saeed Mahloujifar, Tinghao Xie, Tong Wu, Xiangyu Qi","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-05-26T20:44:15Z","title":"Towards A Proactive ML Approach for Detecting Backdoor Poison Samples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.13616","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:879b0fcc03890739d4203ce58e021763bfb2269315bf47404ce0a88fd0f5f101","target":"record","created_at":"2026-07-05T06:21:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1b79ba0a2bfbb9f404e21390a3e145ffe2232d1adc6e0bbce5d8d11e2bc50d98","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-05-26T20:44:15Z","title_canon_sha256":"cc6f727301b376a78b93db3b75d96d9077b24fbbf3c2eed347d797608d016a4d"},"schema_version":"1.0","source":{"id":"2205.13616","kind":"arxiv","version":3}},"canonical_sha256":"659bc3a874472292190071197985565cf7e4b922664834c6b8856470015da53b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"659bc3a874472292190071197985565cf7e4b922664834c6b8856470015da53b","first_computed_at":"2026-07-05T06:21:28.060209Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:21:28.060209Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"OuHiqvpi+6CAfBxEYr799i7XwTJGzu79T8n5GP7BUeZf9PpQZBOrgGbFss6AUeCsYtRIXZ0d4xb3ciDSxgvbBA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:21:28.060671Z","signed_message":"canonical_sha256_bytes"},"source_id":"2205.13616","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:879b0fcc03890739d4203ce58e021763bfb2269315bf47404ce0a88fd0f5f101","sha256:936c5fd9727c884c244350c1fbfd3a994c79f368a084650eb0a1c69c59707ed1"],"state_sha256":"d30177946c34634ff50b22e348328f18b41bf267e3201fe389d679489b0c96ba"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6aLIs7DL0lT5XCxZrebdARVs2QA7T44E8IJH/M/bfnT/Cf2nR5hzwKUohzqlXmkeFzXr8Zy6T7nTn3QmZhPKBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T10:38:03.305476Z","bundle_sha256":"f28d035748e38f72ec206fc6db16e34388346e4fce7232809c01cfad8b6b23b3"}}