{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:N763KU6REDYPHMCEYZW24BFSND","short_pith_number":"pith:N763KU6R","canonical_record":{"source":{"id":"2402.06659","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-05T18:55:53Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"7da24a364cec6c6a9216fa240befff07d9c3d923aee617576c9df30de0279f9c","abstract_canon_sha256":"60af68d76800530002c8ba9919d63ef0d980cfbd20b281c2f32313b31416accf"},"schema_version":"1.0"},"canonical_sha256":"6ffdb553d120f0f3b044c66dae04b268e3b750496623c62d5e398548819526ef","source":{"kind":"arxiv","id":"2402.06659","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.06659","created_at":"2026-07-05T09:19:54Z"},{"alias_kind":"arxiv_version","alias_value":"2402.06659v2","created_at":"2026-07-05T09:19:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.06659","created_at":"2026-07-05T09:19:54Z"},{"alias_kind":"pith_short_12","alias_value":"N763KU6REDYP","created_at":"2026-07-05T09:19:54Z"},{"alias_kind":"pith_short_16","alias_value":"N763KU6REDYPHMCE","created_at":"2026-07-05T09:19:54Z"},{"alias_kind":"pith_short_8","alias_value":"N763KU6R","created_at":"2026-07-05T09:19:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:N763KU6REDYPHMCEYZW24BFSND","target":"record","payload":{"canonical_record":{"source":{"id":"2402.06659","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-05T18:55:53Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"7da24a364cec6c6a9216fa240befff07d9c3d923aee617576c9df30de0279f9c","abstract_canon_sha256":"60af68d76800530002c8ba9919d63ef0d980cfbd20b281c2f32313b31416accf"},"schema_version":"1.0"},"canonical_sha256":"6ffdb553d120f0f3b044c66dae04b268e3b750496623c62d5e398548819526ef","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:19:54.085336Z","signature_b64":"Bbyiq3p856lcSTQhcPBFZqKOyaf+DWen++gDvoEDp1QB6ZRgTk1/ufx7ZHMHpu02Ilpy11RPmApve7shiLffCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6ffdb553d120f0f3b044c66dae04b268e3b750496623c62d5e398548819526ef","last_reissued_at":"2026-07-05T09:19:54.084855Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:19:54.084855Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.06659","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:19:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vpJE5+hU4I6WlddnigurllZ9fsQHaNeGEW6fE1RjVMe3c7PP59ocK8O7mpD8oPt/gxo2I8qm4uqs7eAjdtJvAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T11:23:01.043476Z"},"content_sha256":"2eb89a3d8b61cda1eb97d71efd89a857b58fff8ec8418a27218bfb4f096ed313","schema_version":"1.0","event_id":"sha256:2eb89a3d8b61cda1eb97d71efd89a857b58fff8ec8418a27218bfb4f096ed313"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:N763KU6REDYPHMCEYZW24BFSND","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Furong Huang, Jiarui Yao, Manli Shu, Ning Yu, Tom Goldstein, Yanchao Sun, Yuancheng Xu, Zichu Wu","submitted_at":"2024-02-05T18:55:53Z","abstract_excerpt":"Vision-Language Models (VLMs) excel in generating textual responses from visual inputs, but their versatility raises security concerns. This study takes the first step in exposing VLMs' susceptibility to data poisoning attacks that can manipulate responses to innocuous, everyday prompts. We introduce Shadowcast, a stealthy data poisoning attack where poison samples are visually indistinguishable from benign images with matching texts. Shadowcast demonstrates effectiveness in two attack types. The first is a traditional Label Attack, tricking VLMs into misidentifying class labels, such as confu"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.06659","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.06659/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:19:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3x/0QtI4UGi4xMj96ebMHhvDPUIICy3mEpWGWw/eNmUNqXa6JHUAytTfz+o8BYo1A1stgkE3roseo7tEedyvBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T11:23:01.043959Z"},"content_sha256":"093db079839d7ee96f35fbffa851074fdc6f35db7fc4323663561c60f38dfb10","schema_version":"1.0","event_id":"sha256:093db079839d7ee96f35fbffa851074fdc6f35db7fc4323663561c60f38dfb10"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/N763KU6REDYPHMCEYZW24BFSND/bundle.json","state_url":"https://pith.science/pith/N763KU6REDYPHMCEYZW24BFSND/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/N763KU6REDYPHMCEYZW24BFSND/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T11:23:01Z","links":{"resolver":"https://pith.science/pith/N763KU6REDYPHMCEYZW24BFSND","bundle":"https://pith.science/pith/N763KU6REDYPHMCEYZW24BFSND/bundle.json","state":"https://pith.science/pith/N763KU6REDYPHMCEYZW24BFSND/state.json","well_known_bundle":"https://pith.science/.well-known/pith/N763KU6REDYPHMCEYZW24BFSND/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:N763KU6REDYPHMCEYZW24BFSND","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"60af68d76800530002c8ba9919d63ef0d980cfbd20b281c2f32313b31416accf","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-05T18:55:53Z","title_canon_sha256":"7da24a364cec6c6a9216fa240befff07d9c3d923aee617576c9df30de0279f9c"},"schema_version":"1.0","source":{"id":"2402.06659","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.06659","created_at":"2026-07-05T09:19:54Z"},{"alias_kind":"arxiv_version","alias_value":"2402.06659v2","created_at":"2026-07-05T09:19:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.06659","created_at":"2026-07-05T09:19:54Z"},{"alias_kind":"pith_short_12","alias_value":"N763KU6REDYP","created_at":"2026-07-05T09:19:54Z"},{"alias_kind":"pith_short_16","alias_value":"N763KU6REDYPHMCE","created_at":"2026-07-05T09:19:54Z"},{"alias_kind":"pith_short_8","alias_value":"N763KU6R","created_at":"2026-07-05T09:19:54Z"}],"graph_snapshots":[{"event_id":"sha256:093db079839d7ee96f35fbffa851074fdc6f35db7fc4323663561c60f38dfb10","target":"graph","created_at":"2026-07-05T09:19:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.06659/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision-Language Models (VLMs) excel in generating textual responses from visual inputs, but their versatility raises security concerns. This study takes the first step in exposing VLMs' susceptibility to data poisoning attacks that can manipulate responses to innocuous, everyday prompts. We introduce Shadowcast, a stealthy data poisoning attack where poison samples are visually indistinguishable from benign images with matching texts. Shadowcast demonstrates effectiveness in two attack types. The first is a traditional Label Attack, tricking VLMs into misidentifying class labels, such as confu","authors_text":"Furong Huang, Jiarui Yao, Manli Shu, Ning Yu, Tom Goldstein, Yanchao Sun, Yuancheng Xu, Zichu Wu","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-05T18:55:53Z","title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.06659","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2eb89a3d8b61cda1eb97d71efd89a857b58fff8ec8418a27218bfb4f096ed313","target":"record","created_at":"2026-07-05T09:19:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"60af68d76800530002c8ba9919d63ef0d980cfbd20b281c2f32313b31416accf","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-05T18:55:53Z","title_canon_sha256":"7da24a364cec6c6a9216fa240befff07d9c3d923aee617576c9df30de0279f9c"},"schema_version":"1.0","source":{"id":"2402.06659","kind":"arxiv","version":2}},"canonical_sha256":"6ffdb553d120f0f3b044c66dae04b268e3b750496623c62d5e398548819526ef","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6ffdb553d120f0f3b044c66dae04b268e3b750496623c62d5e398548819526ef","first_computed_at":"2026-07-05T09:19:54.084855Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:19:54.084855Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Bbyiq3p856lcSTQhcPBFZqKOyaf+DWen++gDvoEDp1QB6ZRgTk1/ufx7ZHMHpu02Ilpy11RPmApve7shiLffCw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:19:54.085336Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.06659","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2eb89a3d8b61cda1eb97d71efd89a857b58fff8ec8418a27218bfb4f096ed313","sha256:093db079839d7ee96f35fbffa851074fdc6f35db7fc4323663561c60f38dfb10"],"state_sha256":"65a4caea336abdd4b5b7ce819bb2afb8db3d77540f21d05ffa7a10a55ba36099"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xUd075R66WNarqKTlbz8T8eDAUFEmHQEj1l5UCe10fuhDMprIV6CuU9LCRyHpiAlxbHO+HtfO5K+HbAufMCIBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T11:23:01.064392Z","bundle_sha256":"859fdb5005a9d6f3ed6176d2fa16cbc6e8d5bb68903fa883260e41b100604ac7"}}