{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:O7J57WLOOJSBPHFUH6YQZLPEZ2","short_pith_number":"pith:O7J57WLO","canonical_record":{"source":{"id":"2311.12075","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2023-11-20T02:21:49Z","cross_cats_sorted":[],"title_canon_sha256":"0b070dce5578173a57d71e72abe772c487edb54914268eeee78a8362237b4dca","abstract_canon_sha256":"f491963d811a543cf1a57729013dcc78c1e5696ccb3a6c336bc2029a88b3b345"},"schema_version":"1.0"},"canonical_sha256":"77d3dfd96e7264179cb43fb10cade4ce81a19a8463215e99935dec07745da7f6","source":{"kind":"arxiv","id":"2311.12075","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.12075","created_at":"2026-07-05T07:51:35Z"},{"alias_kind":"arxiv_version","alias_value":"2311.12075v3","created_at":"2026-07-05T07:51:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.12075","created_at":"2026-07-05T07:51:35Z"},{"alias_kind":"pith_short_12","alias_value":"O7J57WLOOJSB","created_at":"2026-07-05T07:51:35Z"},{"alias_kind":"pith_short_16","alias_value":"O7J57WLOOJSBPHFU","created_at":"2026-07-05T07:51:35Z"},{"alias_kind":"pith_short_8","alias_value":"O7J57WLO","created_at":"2026-07-05T07:51:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:O7J57WLOOJSBPHFUH6YQZLPEZ2","target":"record","payload":{"canonical_record":{"source":{"id":"2311.12075","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2023-11-20T02:21:49Z","cross_cats_sorted":[],"title_canon_sha256":"0b070dce5578173a57d71e72abe772c487edb54914268eeee78a8362237b4dca","abstract_canon_sha256":"f491963d811a543cf1a57729013dcc78c1e5696ccb3a6c336bc2029a88b3b345"},"schema_version":"1.0"},"canonical_sha256":"77d3dfd96e7264179cb43fb10cade4ce81a19a8463215e99935dec07745da7f6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:51:35.434051Z","signature_b64":"pqLll9FWWD++OpKBZ3g8DJ0uTBL/OAXb/Tlbuo1Uq2S8LIb7wqPAn9kJab86SUPYsMrWk01LoCXOOrHFL5AoBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"77d3dfd96e7264179cb43fb10cade4ce81a19a8463215e99935dec07745da7f6","last_reissued_at":"2026-07-05T07:51:35.433483Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:51:35.433483Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2311.12075","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:51:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aoRcGAUaPimi5GeNl41F40ofDRVBuNiG54dL2GEeATlFgxnx/ffa4ZbuMeuO3XX6oi755zhDmNQo4XQMbOm+Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:33:32.676896Z"},"content_sha256":"8fa0665235b34fec64d214b0d4f2a65b7b21e64f1123ca76924878df3be4688d","schema_version":"1.0","event_id":"sha256:8fa0665235b34fec64d214b0d4f2a65b7b21e64f1123ca76924878df3be4688d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:O7J57WLOOJSBPHFUH6YQZLPEZ2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Aishan Liu, Baoyuan Wu, Ee-Chien Chang, Mingli Zhu, Siyuan Liang, Xiaochun Cao","submitted_at":"2023-11-20T02:21:49Z","abstract_excerpt":"Studying backdoor attacks is valuable for model copyright protection and enhancing defenses. While existing backdoor attacks have successfully infected multimodal contrastive learning models such as CLIP, they can be easily countered by specialized backdoor defenses for MCL models. This paper reveals the threats in this practical scenario that backdoor attacks can remain effective even after defenses and introduces the \\emph{\\toolns} attack, which is resistant to backdoor detection and model fine-tuning defenses. To achieve this, we draw motivations from the perspective of the Bayesian rule an"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.12075","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.12075/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:51:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"B1egWGsBPUcdNFK+NmH/qpIHJUYA7IjwfzTtbi+yqDuzdQYdddu/5MZWBS77Jl7aZarNba5ZuMknwuYMTLiGBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:33:32.677783Z"},"content_sha256":"3f4ea64bf57440d7a918c93e68e0859736ee796075a87d9d435d441574007124","schema_version":"1.0","event_id":"sha256:3f4ea64bf57440d7a918c93e68e0859736ee796075a87d9d435d441574007124"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/O7J57WLOOJSBPHFUH6YQZLPEZ2/bundle.json","state_url":"https://pith.science/pith/O7J57WLOOJSBPHFUH6YQZLPEZ2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/O7J57WLOOJSBPHFUH6YQZLPEZ2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T16:33:32Z","links":{"resolver":"https://pith.science/pith/O7J57WLOOJSBPHFUH6YQZLPEZ2","bundle":"https://pith.science/pith/O7J57WLOOJSBPHFUH6YQZLPEZ2/bundle.json","state":"https://pith.science/pith/O7J57WLOOJSBPHFUH6YQZLPEZ2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/O7J57WLOOJSBPHFUH6YQZLPEZ2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:O7J57WLOOJSBPHFUH6YQZLPEZ2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f491963d811a543cf1a57729013dcc78c1e5696ccb3a6c336bc2029a88b3b345","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2023-11-20T02:21:49Z","title_canon_sha256":"0b070dce5578173a57d71e72abe772c487edb54914268eeee78a8362237b4dca"},"schema_version":"1.0","source":{"id":"2311.12075","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.12075","created_at":"2026-07-05T07:51:35Z"},{"alias_kind":"arxiv_version","alias_value":"2311.12075v3","created_at":"2026-07-05T07:51:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.12075","created_at":"2026-07-05T07:51:35Z"},{"alias_kind":"pith_short_12","alias_value":"O7J57WLOOJSB","created_at":"2026-07-05T07:51:35Z"},{"alias_kind":"pith_short_16","alias_value":"O7J57WLOOJSBPHFU","created_at":"2026-07-05T07:51:35Z"},{"alias_kind":"pith_short_8","alias_value":"O7J57WLO","created_at":"2026-07-05T07:51:35Z"}],"graph_snapshots":[{"event_id":"sha256:3f4ea64bf57440d7a918c93e68e0859736ee796075a87d9d435d441574007124","target":"graph","created_at":"2026-07-05T07:51:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.12075/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Studying backdoor attacks is valuable for model copyright protection and enhancing defenses. While existing backdoor attacks have successfully infected multimodal contrastive learning models such as CLIP, they can be easily countered by specialized backdoor defenses for MCL models. This paper reveals the threats in this practical scenario that backdoor attacks can remain effective even after defenses and introduces the \\emph{\\toolns} attack, which is resistant to backdoor detection and model fine-tuning defenses. To achieve this, we draw motivations from the perspective of the Bayesian rule an","authors_text":"Aishan Liu, Baoyuan Wu, Ee-Chien Chang, Mingli Zhu, Siyuan Liang, Xiaochun Cao","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2023-11-20T02:21:49Z","title":"BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.12075","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8fa0665235b34fec64d214b0d4f2a65b7b21e64f1123ca76924878df3be4688d","target":"record","created_at":"2026-07-05T07:51:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f491963d811a543cf1a57729013dcc78c1e5696ccb3a6c336bc2029a88b3b345","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2023-11-20T02:21:49Z","title_canon_sha256":"0b070dce5578173a57d71e72abe772c487edb54914268eeee78a8362237b4dca"},"schema_version":"1.0","source":{"id":"2311.12075","kind":"arxiv","version":3}},"canonical_sha256":"77d3dfd96e7264179cb43fb10cade4ce81a19a8463215e99935dec07745da7f6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"77d3dfd96e7264179cb43fb10cade4ce81a19a8463215e99935dec07745da7f6","first_computed_at":"2026-07-05T07:51:35.433483Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:51:35.433483Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"pqLll9FWWD++OpKBZ3g8DJ0uTBL/OAXb/Tlbuo1Uq2S8LIb7wqPAn9kJab86SUPYsMrWk01LoCXOOrHFL5AoBA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:51:35.434051Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.12075","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8fa0665235b34fec64d214b0d4f2a65b7b21e64f1123ca76924878df3be4688d","sha256:3f4ea64bf57440d7a918c93e68e0859736ee796075a87d9d435d441574007124"],"state_sha256":"73d3e41d35430ea9ca6ca6b270bad964aef2b08997698971ddfad2b98ceaf55c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PTXkXdMn+BQcCbARXLWJRirSJ1O2AqpJP31FRbZ+UsGLoNfqpkYa8DJaxKZiZyxrR3R79YPycinCITMBwJ9iDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T16:33:32.689071Z","bundle_sha256":"7c08f75dd08ff27b05007abedf261c93bd5ab7fb194453546a970489f0a477b1"}}