{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:NJ23NXGNGZ2CSTAH2DZ2QNH6CZ","short_pith_number":"pith:NJ23NXGN","canonical_record":{"source":{"id":"2106.01810","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2021-06-03T13:00:28Z","cross_cats_sorted":[],"title_canon_sha256":"50ab707c54dc9d67119042671f55809ec03a9d5425de7b3d1e34ddda212ca74b","abstract_canon_sha256":"68916a078be52d2782d4d280191f7eb4bcc10efbb3defdc4bfc61a8aaddec1cc"},"schema_version":"1.0"},"canonical_sha256":"6a75b6dccd3674294c07d0f3a834fe1671b138224ef2bb2912bb73a3d3afb8df","source":{"kind":"arxiv","id":"2106.01810","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.01810","created_at":"2026-07-05T06:58:34Z"},{"alias_kind":"arxiv_version","alias_value":"2106.01810v3","created_at":"2026-07-05T06:58:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.01810","created_at":"2026-07-05T06:58:34Z"},{"alias_kind":"pith_short_12","alias_value":"NJ23NXGNGZ2C","created_at":"2026-07-05T06:58:34Z"},{"alias_kind":"pith_short_16","alias_value":"NJ23NXGNGZ2CSTAH","created_at":"2026-07-05T06:58:34Z"},{"alias_kind":"pith_short_8","alias_value":"NJ23NXGN","created_at":"2026-07-05T06:58:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:NJ23NXGNGZ2CSTAH2DZ2QNH6CZ","target":"record","payload":{"canonical_record":{"source":{"id":"2106.01810","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2021-06-03T13:00:28Z","cross_cats_sorted":[],"title_canon_sha256":"50ab707c54dc9d67119042671f55809ec03a9d5425de7b3d1e34ddda212ca74b","abstract_canon_sha256":"68916a078be52d2782d4d280191f7eb4bcc10efbb3defdc4bfc61a8aaddec1cc"},"schema_version":"1.0"},"canonical_sha256":"6a75b6dccd3674294c07d0f3a834fe1671b138224ef2bb2912bb73a3d3afb8df","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:58:34.911655Z","signature_b64":"Uqr9+mbR8GHRwzQvWhfH6hVp+szOXz2s08ZUG2n0XO+86ScnPljnBU0uChl5PWl2BS7K0VbXcwqxTugtwqQqCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6a75b6dccd3674294c07d0f3a834fe1671b138224ef2bb2912bb73a3d3afb8df","last_reissued_at":"2026-07-05T06:58:34.911210Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:58:34.911210Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2106.01810","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:58:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+7yNg6mJoLqtIhUU1K1NTVki5aX2gmLIAWbC5+fw3vvAdF1DczUPRrati2dS0XNSsmd+qTdGj8r/2NFlGqZODw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T08:46:38.774019Z"},"content_sha256":"87ad72dc599921b61126b0672b69fb7fa186228613e955ee3512c48d9530b68c","schema_version":"1.0","event_id":"sha256:87ad72dc599921b61126b0672b69fb7fa186228613e955ee3512c48d9530b68c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:NJ23NXGNGZ2CSTAH2DZ2QNH6CZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Defending Against Backdoor Attacks in Natural Language Generation","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Jiwei Li, Lingjuan Lyu, Tianwei Zhang, Xiang Ao, Xiaofei Sun, Xiaoya Li, Yuxian Meng","submitted_at":"2021-06-03T13:00:28Z","abstract_excerpt":"The frustratingly fragile nature of neural network models make current natural language generation (NLG) systems prone to backdoor attacks and generate malicious sequences that could be sexist or offensive. Unfortunately, little effort has been invested to how backdoor attacks can affect current NLG models and how to defend against these attacks. In this work, by giving a formal definition of backdoor attack and defense, we investigate this problem on two important NLG tasks, machine translation and dialog generation. Tailored to the inherent nature of NLG models (e.g., producing a sequence of"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.01810","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2106.01810/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:58:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7/59In7lOCNZ9c4HNCy4gJSWxZrPtS3m04Ly+GmQss5/L1dkrY2CzNMHjGPo9W2IVqc9VUsmRWd4+xXW19idCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T08:46:38.774653Z"},"content_sha256":"d69cc44152d42c6c0218cff6bdb180ca9ea38d235053bee0c22c4144710475bf","schema_version":"1.0","event_id":"sha256:d69cc44152d42c6c0218cff6bdb180ca9ea38d235053bee0c22c4144710475bf"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NJ23NXGNGZ2CSTAH2DZ2QNH6CZ/bundle.json","state_url":"https://pith.science/pith/NJ23NXGNGZ2CSTAH2DZ2QNH6CZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NJ23NXGNGZ2CSTAH2DZ2QNH6CZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-08T08:46:38Z","links":{"resolver":"https://pith.science/pith/NJ23NXGNGZ2CSTAH2DZ2QNH6CZ","bundle":"https://pith.science/pith/NJ23NXGNGZ2CSTAH2DZ2QNH6CZ/bundle.json","state":"https://pith.science/pith/NJ23NXGNGZ2CSTAH2DZ2QNH6CZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NJ23NXGNGZ2CSTAH2DZ2QNH6CZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:NJ23NXGNGZ2CSTAH2DZ2QNH6CZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"68916a078be52d2782d4d280191f7eb4bcc10efbb3defdc4bfc61a8aaddec1cc","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2021-06-03T13:00:28Z","title_canon_sha256":"50ab707c54dc9d67119042671f55809ec03a9d5425de7b3d1e34ddda212ca74b"},"schema_version":"1.0","source":{"id":"2106.01810","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.01810","created_at":"2026-07-05T06:58:34Z"},{"alias_kind":"arxiv_version","alias_value":"2106.01810v3","created_at":"2026-07-05T06:58:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.01810","created_at":"2026-07-05T06:58:34Z"},{"alias_kind":"pith_short_12","alias_value":"NJ23NXGNGZ2C","created_at":"2026-07-05T06:58:34Z"},{"alias_kind":"pith_short_16","alias_value":"NJ23NXGNGZ2CSTAH","created_at":"2026-07-05T06:58:34Z"},{"alias_kind":"pith_short_8","alias_value":"NJ23NXGN","created_at":"2026-07-05T06:58:34Z"}],"graph_snapshots":[{"event_id":"sha256:d69cc44152d42c6c0218cff6bdb180ca9ea38d235053bee0c22c4144710475bf","target":"graph","created_at":"2026-07-05T06:58:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.01810/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The frustratingly fragile nature of neural network models make current natural language generation (NLG) systems prone to backdoor attacks and generate malicious sequences that could be sexist or offensive. Unfortunately, little effort has been invested to how backdoor attacks can affect current NLG models and how to defend against these attacks. In this work, by giving a formal definition of backdoor attack and defense, we investigate this problem on two important NLG tasks, machine translation and dialog generation. Tailored to the inherent nature of NLG models (e.g., producing a sequence of","authors_text":"Jiwei Li, Lingjuan Lyu, Tianwei Zhang, Xiang Ao, Xiaofei Sun, Xiaoya Li, Yuxian Meng","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2021-06-03T13:00:28Z","title":"Defending Against Backdoor Attacks in Natural Language Generation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.01810","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:87ad72dc599921b61126b0672b69fb7fa186228613e955ee3512c48d9530b68c","target":"record","created_at":"2026-07-05T06:58:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"68916a078be52d2782d4d280191f7eb4bcc10efbb3defdc4bfc61a8aaddec1cc","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2021-06-03T13:00:28Z","title_canon_sha256":"50ab707c54dc9d67119042671f55809ec03a9d5425de7b3d1e34ddda212ca74b"},"schema_version":"1.0","source":{"id":"2106.01810","kind":"arxiv","version":3}},"canonical_sha256":"6a75b6dccd3674294c07d0f3a834fe1671b138224ef2bb2912bb73a3d3afb8df","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6a75b6dccd3674294c07d0f3a834fe1671b138224ef2bb2912bb73a3d3afb8df","first_computed_at":"2026-07-05T06:58:34.911210Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:58:34.911210Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Uqr9+mbR8GHRwzQvWhfH6hVp+szOXz2s08ZUG2n0XO+86ScnPljnBU0uChl5PWl2BS7K0VbXcwqxTugtwqQqCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:58:34.911655Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.01810","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:87ad72dc599921b61126b0672b69fb7fa186228613e955ee3512c48d9530b68c","sha256:d69cc44152d42c6c0218cff6bdb180ca9ea38d235053bee0c22c4144710475bf"],"state_sha256":"91c92cb54a84deaef43ad8d33aa7554e6a3c89818298f86b2a0fc698ae03bb84"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7i+oYa56k7V8d4KI3t9qDqrCWwWB8Be4YuLoYbE64AjFnCBNatgrnSXShDnBfbi2HDUnpkKIWqDt+YPnxlT1Cg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-08T08:46:38.778661Z","bundle_sha256":"e2552fb357839e85e5e8b34cbfa4a5231a243c888015f5d87c6ea6e66ca28e68"}}