{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2021:NJKNLQXAK7LOCQCLRFF4AWBQIU","short_pith_number":"pith:NJKNLQXA","schema_version":"1.0","canonical_sha256":"6a54d5c2e057d6e1404b894bc0583045181396a1a44acf3702b137b367a6ecc4","source":{"kind":"arxiv","id":"2109.08868","version":3},"attestation_state":"computed","paper":{"title":"Backdoor Attack on Hash-based Image Retrieval via Clean-label Data Poisoning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Bin Chen, Dongxian Wu, Jiawang Bai, Kuofeng Gao, Shu-Tao Xia","submitted_at":"2021-09-18T07:56:59Z","abstract_excerpt":"A backdoored deep hashing model is expected to behave normally on original query images and return the images with the target label when a specific trigger pattern presents. To this end, we propose the confusing perturbations-induced backdoor attack (CIBA). It injects a small number of poisoned images with the correct label into the training data, which makes the attack hard to be detected. To craft the poisoned images, we first propose the confusing perturbations to disturb the hashing code learning. As such, the hashing model can learn more about the trigger. The confusing perturbations are "},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2109.08868","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-09-18T07:56:59Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"44898f485219ca23abd55024c25c5ed757c89fa7eee367be3076c3a1a0d0d73a","abstract_canon_sha256":"812c79bcc02cfe0d5f0dfdf1a17b493abb7245f2b3315eaaf365a1d422971232"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:46:59.946282Z","signature_b64":"AJfDVPMpOGgwlynOw2KjDKeKHMulb8ibXUWTitxpbNM3Hf4tbbxeDGhgaJapvko1xw3gBtmdaqilq4eKY7ffCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6a54d5c2e057d6e1404b894bc0583045181396a1a44acf3702b137b367a6ecc4","last_reissued_at":"2026-07-05T06:46:59.945895Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:46:59.945895Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Backdoor Attack on Hash-based Image Retrieval via Clean-label Data Poisoning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Bin Chen, Dongxian Wu, Jiawang Bai, Kuofeng Gao, Shu-Tao Xia","submitted_at":"2021-09-18T07:56:59Z","abstract_excerpt":"A backdoored deep hashing model is expected to behave normally on original query images and return the images with the target label when a specific trigger pattern presents. To this end, we propose the confusing perturbations-induced backdoor attack (CIBA). It injects a small number of poisoned images with the correct label into the training data, which makes the attack hard to be detected. To craft the poisoned images, we first propose the confusing perturbations to disturb the hashing code learning. As such, the hashing model can learn more about the trigger. The confusing perturbations are "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.08868","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2109.08868/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2109.08868","created_at":"2026-07-05T06:46:59.945943+00:00"},{"alias_kind":"arxiv_version","alias_value":"2109.08868v3","created_at":"2026-07-05T06:46:59.945943+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.08868","created_at":"2026-07-05T06:46:59.945943+00:00"},{"alias_kind":"pith_short_12","alias_value":"NJKNLQXAK7LO","created_at":"2026-07-05T06:46:59.945943+00:00"},{"alias_kind":"pith_short_16","alias_value":"NJKNLQXAK7LOCQCL","created_at":"2026-07-05T06:46:59.945943+00:00"},{"alias_kind":"pith_short_8","alias_value":"NJKNLQXA","created_at":"2026-07-05T06:46:59.945943+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":1,"sample":[{"citing_arxiv_id":"2412.10681","citing_title":"One Pixel is All I Need","ref_index":11,"is_internal_anchor":true}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/NJKNLQXAK7LOCQCLRFF4AWBQIU","json":"https://pith.science/pith/NJKNLQXAK7LOCQCLRFF4AWBQIU.json","graph_json":"https://pith.science/api/pith-number/NJKNLQXAK7LOCQCLRFF4AWBQIU/graph.json","events_json":"https://pith.science/api/pith-number/NJKNLQXAK7LOCQCLRFF4AWBQIU/events.json","paper":"https://pith.science/paper/NJKNLQXA"},"agent_actions":{"view_html":"https://pith.science/pith/NJKNLQXAK7LOCQCLRFF4AWBQIU","download_json":"https://pith.science/pith/NJKNLQXAK7LOCQCLRFF4AWBQIU.json","view_paper":"https://pith.science/paper/NJKNLQXA","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2109.08868&json=true","fetch_graph":"https://pith.science/api/pith-number/NJKNLQXAK7LOCQCLRFF4AWBQIU/graph.json","fetch_events":"https://pith.science/api/pith-number/NJKNLQXAK7LOCQCLRFF4AWBQIU/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/NJKNLQXAK7LOCQCLRFF4AWBQIU/action/timestamp_anchor","attest_storage":"https://pith.science/pith/NJKNLQXAK7LOCQCLRFF4AWBQIU/action/storage_attestation","attest_author":"https://pith.science/pith/NJKNLQXAK7LOCQCLRFF4AWBQIU/action/author_attestation","sign_citation":"https://pith.science/pith/NJKNLQXAK7LOCQCLRFF4AWBQIU/action/citation_signature","submit_replication":"https://pith.science/pith/NJKNLQXAK7LOCQCLRFF4AWBQIU/action/replication_record"}},"created_at":"2026-07-05T06:46:59.945943+00:00","updated_at":"2026-07-05T06:46:59.945943+00:00"}