{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:OMPWTM4G33VWAFTTVRPLJQ2OUP","short_pith_number":"pith:OMPWTM4G","canonical_record":{"source":{"id":"2101.05930","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-01-15T01:35:22Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"9809545500338246e17753177affe09cad322f084c70cc61405dc7f1f5986ccb","abstract_canon_sha256":"0984d74b6eb771308ddad5c391f6cac70f2edbdaaeb1c99b879f985289b73b1e"},"schema_version":"1.0"},"canonical_sha256":"731f69b386deeb601673ac5eb4c34ea3ccc575d18940cff686a1b353dded347c","source":{"kind":"arxiv","id":"2101.05930","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2101.05930","created_at":"2026-07-05T02:10:07Z"},{"alias_kind":"arxiv_version","alias_value":"2101.05930v2","created_at":"2026-07-05T02:10:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2101.05930","created_at":"2026-07-05T02:10:07Z"},{"alias_kind":"pith_short_12","alias_value":"OMPWTM4G33VW","created_at":"2026-07-05T02:10:07Z"},{"alias_kind":"pith_short_16","alias_value":"OMPWTM4G33VWAFTT","created_at":"2026-07-05T02:10:07Z"},{"alias_kind":"pith_short_8","alias_value":"OMPWTM4G","created_at":"2026-07-05T02:10:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:OMPWTM4G33VWAFTTVRPLJQ2OUP","target":"record","payload":{"canonical_record":{"source":{"id":"2101.05930","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-01-15T01:35:22Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"9809545500338246e17753177affe09cad322f084c70cc61405dc7f1f5986ccb","abstract_canon_sha256":"0984d74b6eb771308ddad5c391f6cac70f2edbdaaeb1c99b879f985289b73b1e"},"schema_version":"1.0"},"canonical_sha256":"731f69b386deeb601673ac5eb4c34ea3ccc575d18940cff686a1b353dded347c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:10:07.686518Z","signature_b64":"BDXUdEkBMMZzHf83awn0JtEatuwOa+SPF5aworhUeW6kYT/PoVnYKnsI98SydG1l8SFmNOjrVoLv9FxjxUvjAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"731f69b386deeb601673ac5eb4c34ea3ccc575d18940cff686a1b353dded347c","last_reissued_at":"2026-07-05T02:10:07.686049Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:10:07.686049Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2101.05930","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:10:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yXtRjtcm3Z0KtZHpBTyOhchz9qjl91DnMVb/xksklcwzSKVwIEfyKZ8H0YQxi9KRk4V9RTgezkg29N7/uYovAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T16:15:21.854310Z"},"content_sha256":"27aad24ab534959d1140a4cacce32f6966d584481ee474be7a4b3c556409afd4","schema_version":"1.0","event_id":"sha256:27aad24ab534959d1140a4cacce32f6966d584481ee474be7a4b3c556409afd4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:OMPWTM4G33VWAFTTVRPLJQ2OUP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Bo Li, Lingjuan Lyu, Nodens Koren, Xingjun Ma, Xixiang Lyu, Yige Li","submitted_at":"2021-01-15T01:35:22Z","abstract_excerpt":"Deep neural networks (DNNs) are known vulnerable to backdoor attacks, a training time attack that injects a trigger pattern into a small proportion of training data so as to control the model's prediction at the test time. Backdoor attacks are notably dangerous since they do not affect the model's performance on clean examples, yet can fool the model to make incorrect prediction whenever the trigger pattern appears during testing. In this paper, we propose a novel defense framework Neural Attention Distillation (NAD) to erase backdoor triggers from backdoored DNNs. NAD utilizes a teacher netwo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2101.05930","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2101.05930/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:10:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NNn2uDozEVra05MGbxEx5dLIDE0W6e/DegmZvclpiXOosorgKbI/vG8DrSVAgWD3ARV/j7iDbSQe5a/6NPPRCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T16:15:21.854832Z"},"content_sha256":"8346fdfcfddc2230e9bf5cbbea43e27317fca3e4b8020ca66cf7e2f3ae1edd84","schema_version":"1.0","event_id":"sha256:8346fdfcfddc2230e9bf5cbbea43e27317fca3e4b8020ca66cf7e2f3ae1edd84"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OMPWTM4G33VWAFTTVRPLJQ2OUP/bundle.json","state_url":"https://pith.science/pith/OMPWTM4G33VWAFTTVRPLJQ2OUP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OMPWTM4G33VWAFTTVRPLJQ2OUP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T16:15:21Z","links":{"resolver":"https://pith.science/pith/OMPWTM4G33VWAFTTVRPLJQ2OUP","bundle":"https://pith.science/pith/OMPWTM4G33VWAFTTVRPLJQ2OUP/bundle.json","state":"https://pith.science/pith/OMPWTM4G33VWAFTTVRPLJQ2OUP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OMPWTM4G33VWAFTTVRPLJQ2OUP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:OMPWTM4G33VWAFTTVRPLJQ2OUP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0984d74b6eb771308ddad5c391f6cac70f2edbdaaeb1c99b879f985289b73b1e","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-01-15T01:35:22Z","title_canon_sha256":"9809545500338246e17753177affe09cad322f084c70cc61405dc7f1f5986ccb"},"schema_version":"1.0","source":{"id":"2101.05930","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2101.05930","created_at":"2026-07-05T02:10:07Z"},{"alias_kind":"arxiv_version","alias_value":"2101.05930v2","created_at":"2026-07-05T02:10:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2101.05930","created_at":"2026-07-05T02:10:07Z"},{"alias_kind":"pith_short_12","alias_value":"OMPWTM4G33VW","created_at":"2026-07-05T02:10:07Z"},{"alias_kind":"pith_short_16","alias_value":"OMPWTM4G33VWAFTT","created_at":"2026-07-05T02:10:07Z"},{"alias_kind":"pith_short_8","alias_value":"OMPWTM4G","created_at":"2026-07-05T02:10:07Z"}],"graph_snapshots":[{"event_id":"sha256:8346fdfcfddc2230e9bf5cbbea43e27317fca3e4b8020ca66cf7e2f3ae1edd84","target":"graph","created_at":"2026-07-05T02:10:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2101.05930/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) are known vulnerable to backdoor attacks, a training time attack that injects a trigger pattern into a small proportion of training data so as to control the model's prediction at the test time. Backdoor attacks are notably dangerous since they do not affect the model's performance on clean examples, yet can fool the model to make incorrect prediction whenever the trigger pattern appears during testing. In this paper, we propose a novel defense framework Neural Attention Distillation (NAD) to erase backdoor triggers from backdoored DNNs. NAD utilizes a teacher netwo","authors_text":"Bo Li, Lingjuan Lyu, Nodens Koren, Xingjun Ma, Xixiang Lyu, Yige Li","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-01-15T01:35:22Z","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2101.05930","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:27aad24ab534959d1140a4cacce32f6966d584481ee474be7a4b3c556409afd4","target":"record","created_at":"2026-07-05T02:10:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0984d74b6eb771308ddad5c391f6cac70f2edbdaaeb1c99b879f985289b73b1e","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-01-15T01:35:22Z","title_canon_sha256":"9809545500338246e17753177affe09cad322f084c70cc61405dc7f1f5986ccb"},"schema_version":"1.0","source":{"id":"2101.05930","kind":"arxiv","version":2}},"canonical_sha256":"731f69b386deeb601673ac5eb4c34ea3ccc575d18940cff686a1b353dded347c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"731f69b386deeb601673ac5eb4c34ea3ccc575d18940cff686a1b353dded347c","first_computed_at":"2026-07-05T02:10:07.686049Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:10:07.686049Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"BDXUdEkBMMZzHf83awn0JtEatuwOa+SPF5aworhUeW6kYT/PoVnYKnsI98SydG1l8SFmNOjrVoLv9FxjxUvjAg==","signature_status":"signed_v1","signed_at":"2026-07-05T02:10:07.686518Z","signed_message":"canonical_sha256_bytes"},"source_id":"2101.05930","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:27aad24ab534959d1140a4cacce32f6966d584481ee474be7a4b3c556409afd4","sha256:8346fdfcfddc2230e9bf5cbbea43e27317fca3e4b8020ca66cf7e2f3ae1edd84"],"state_sha256":"7e24519fc211737bfacaf68dd5dba9b490c9c9caf6b681d1ffeb5a8f5f5a9353"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hkw2/DUtBi10787LWAbUtPglHmp6sI2WZPg3al8tMYTE67ks7nUhCy2vRIoSNhqLpPhl9UFR1jmnd5ZHCDMJBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T16:15:21.861049Z","bundle_sha256":"5cf2183c39523ba8756cfbb17f5e113ac4099d147162204b27fa67e60f0a817d"}}