{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:NUP6XNY4UKPUGDVGKUG7VQGOP5","short_pith_number":"pith:NUP6XNY4","canonical_record":{"source":{"id":"2110.08247","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2021-10-15T17:58:46Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"9bd22a1db8edc53f4f3b65b5825f788194457765021cd4e8cf3c6d6156b2a54b","abstract_canon_sha256":"925dce046f5166617d04023ca594a7132254d8fa7228891d0baa482ae419592e"},"schema_version":"1.0"},"canonical_sha256":"6d1febb71ca29f430ea6550dfac0ce7f4c41437105b1564efba0036b42d7c5c1","source":{"kind":"arxiv","id":"2110.08247","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.08247","created_at":"2026-07-05T05:08:14Z"},{"alias_kind":"arxiv_version","alias_value":"2110.08247v2","created_at":"2026-07-05T05:08:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.08247","created_at":"2026-07-05T05:08:14Z"},{"alias_kind":"pith_short_12","alias_value":"NUP6XNY4UKPU","created_at":"2026-07-05T05:08:14Z"},{"alias_kind":"pith_short_16","alias_value":"NUP6XNY4UKPUGDVG","created_at":"2026-07-05T05:08:14Z"},{"alias_kind":"pith_short_8","alias_value":"NUP6XNY4","created_at":"2026-07-05T05:08:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:NUP6XNY4UKPUGDVGKUG7VQGOP5","target":"record","payload":{"canonical_record":{"source":{"id":"2110.08247","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2021-10-15T17:58:46Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"9bd22a1db8edc53f4f3b65b5825f788194457765021cd4e8cf3c6d6156b2a54b","abstract_canon_sha256":"925dce046f5166617d04023ca594a7132254d8fa7228891d0baa482ae419592e"},"schema_version":"1.0"},"canonical_sha256":"6d1febb71ca29f430ea6550dfac0ce7f4c41437105b1564efba0036b42d7c5c1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:08:14.381844Z","signature_b64":"qZlYEOQSqBYIGlS1cDokPGcPwBznCQ4XfeYrms0JwUxhcaiQxYNfj0cc9s7HmTIGF/tkgzXH/UgAV4N0kgpXAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6d1febb71ca29f430ea6550dfac0ce7f4c41437105b1564efba0036b42d7c5c1","last_reissued_at":"2026-07-05T05:08:14.381423Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:08:14.381423Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2110.08247","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:08:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kqOBsMNzM/NIYAkwTzJljK3BIf8pSSivsHqkf0/d0U+mC9/3ATxs95m4/LXgUnCWE9HA5NrtZkw8Ukln2c5JDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T20:52:48.124050Z"},"content_sha256":"5c949d6f390f6b39ccc313d175b1c9850f97e111dd4af5ad7e8d8947ee788538","schema_version":"1.0","event_id":"sha256:5c949d6f390f6b39ccc313d175b1c9850f97e111dd4af5ad7e8d8947ee788538"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:NUP6XNY4UKPUGDVGKUG7VQGOP5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Textual Backdoor Attacks Can Be More Harmful via Two Simple Tricks","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Fanchao Qi, Hongcheng Gao, Maosong Sun, Yangyi Chen, Zhiyuan Liu","submitted_at":"2021-10-15T17:58:46Z","abstract_excerpt":"Backdoor attacks are a kind of emergent security threat in deep learning. After being injected with a backdoor, a deep neural model will behave normally on standard inputs but give adversary-specified predictions once the input contains specific backdoor triggers. In this paper, we find two simple tricks that can make existing textual backdoor attacks much more harmful. The first trick is to add an extra training task to distinguish poisoned and clean data during the training of the victim model, and the second one is to use all the clean training data rather than remove the original clean dat"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.08247","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2110.08247/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:08:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OsY/Esz8QD3E+lG2yXTSZsTQmlBSKDGm+ToeMA5dbGLwYQeZ6tIFJtY1EN362hyolRG8rWGMQPXZRY9oQKWlBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T20:52:48.124441Z"},"content_sha256":"fbe8c3e123c8f4b71488ac6fe96426278fa02c16824c57f4a45546e6279f3e4d","schema_version":"1.0","event_id":"sha256:fbe8c3e123c8f4b71488ac6fe96426278fa02c16824c57f4a45546e6279f3e4d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NUP6XNY4UKPUGDVGKUG7VQGOP5/bundle.json","state_url":"https://pith.science/pith/NUP6XNY4UKPUGDVGKUG7VQGOP5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NUP6XNY4UKPUGDVGKUG7VQGOP5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T20:52:48Z","links":{"resolver":"https://pith.science/pith/NUP6XNY4UKPUGDVGKUG7VQGOP5","bundle":"https://pith.science/pith/NUP6XNY4UKPUGDVGKUG7VQGOP5/bundle.json","state":"https://pith.science/pith/NUP6XNY4UKPUGDVGKUG7VQGOP5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NUP6XNY4UKPUGDVGKUG7VQGOP5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:NUP6XNY4UKPUGDVGKUG7VQGOP5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"925dce046f5166617d04023ca594a7132254d8fa7228891d0baa482ae419592e","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2021-10-15T17:58:46Z","title_canon_sha256":"9bd22a1db8edc53f4f3b65b5825f788194457765021cd4e8cf3c6d6156b2a54b"},"schema_version":"1.0","source":{"id":"2110.08247","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.08247","created_at":"2026-07-05T05:08:14Z"},{"alias_kind":"arxiv_version","alias_value":"2110.08247v2","created_at":"2026-07-05T05:08:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.08247","created_at":"2026-07-05T05:08:14Z"},{"alias_kind":"pith_short_12","alias_value":"NUP6XNY4UKPU","created_at":"2026-07-05T05:08:14Z"},{"alias_kind":"pith_short_16","alias_value":"NUP6XNY4UKPUGDVG","created_at":"2026-07-05T05:08:14Z"},{"alias_kind":"pith_short_8","alias_value":"NUP6XNY4","created_at":"2026-07-05T05:08:14Z"}],"graph_snapshots":[{"event_id":"sha256:fbe8c3e123c8f4b71488ac6fe96426278fa02c16824c57f4a45546e6279f3e4d","target":"graph","created_at":"2026-07-05T05:08:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2110.08247/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attacks are a kind of emergent security threat in deep learning. After being injected with a backdoor, a deep neural model will behave normally on standard inputs but give adversary-specified predictions once the input contains specific backdoor triggers. In this paper, we find two simple tricks that can make existing textual backdoor attacks much more harmful. The first trick is to add an extra training task to distinguish poisoned and clean data during the training of the victim model, and the second one is to use all the clean training data rather than remove the original clean dat","authors_text":"Fanchao Qi, Hongcheng Gao, Maosong Sun, Yangyi Chen, Zhiyuan Liu","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2021-10-15T17:58:46Z","title":"Textual Backdoor Attacks Can Be More Harmful via Two Simple Tricks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.08247","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5c949d6f390f6b39ccc313d175b1c9850f97e111dd4af5ad7e8d8947ee788538","target":"record","created_at":"2026-07-05T05:08:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"925dce046f5166617d04023ca594a7132254d8fa7228891d0baa482ae419592e","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2021-10-15T17:58:46Z","title_canon_sha256":"9bd22a1db8edc53f4f3b65b5825f788194457765021cd4e8cf3c6d6156b2a54b"},"schema_version":"1.0","source":{"id":"2110.08247","kind":"arxiv","version":2}},"canonical_sha256":"6d1febb71ca29f430ea6550dfac0ce7f4c41437105b1564efba0036b42d7c5c1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6d1febb71ca29f430ea6550dfac0ce7f4c41437105b1564efba0036b42d7c5c1","first_computed_at":"2026-07-05T05:08:14.381423Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:08:14.381423Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"qZlYEOQSqBYIGlS1cDokPGcPwBznCQ4XfeYrms0JwUxhcaiQxYNfj0cc9s7HmTIGF/tkgzXH/UgAV4N0kgpXAw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:08:14.381844Z","signed_message":"canonical_sha256_bytes"},"source_id":"2110.08247","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5c949d6f390f6b39ccc313d175b1c9850f97e111dd4af5ad7e8d8947ee788538","sha256:fbe8c3e123c8f4b71488ac6fe96426278fa02c16824c57f4a45546e6279f3e4d"],"state_sha256":"13a9a9f9ef2655285d0076265b0b272d3f1c8d0b9d8714fc3d0db1c96f6a8c55"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8dcoPthF6oaGm154yX3yP/JcJnpXLUGsIq9KHXtNR0iZO6tNw18xsf6Qdhwpx/s6JmK45tqIb3j+BGhdPlXfCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T20:52:48.127103Z","bundle_sha256":"053aa80b769033dee331d5628b83eedcd2fb473359d39a86d006d2f611535eda"}}