{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:OV6XJDH6HZ7RNAXZHBTDAOT36M","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"92d62a3c8fdba73471513923464be748d8dfb067904de365dd38a0d82847983c","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2024-06-18T04:10:38Z","title_canon_sha256":"51d790409bd83969b57843cc0f8383413afe5c522332c8047c9de91b1714de10"},"schema_version":"1.0","source":{"id":"2406.12257","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.12257","created_at":"2026-07-05T10:40:01Z"},{"alias_kind":"arxiv_version","alias_value":"2406.12257v3","created_at":"2026-07-05T10:40:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.12257","created_at":"2026-07-05T10:40:01Z"},{"alias_kind":"pith_short_12","alias_value":"OV6XJDH6HZ7R","created_at":"2026-07-05T10:40:01Z"},{"alias_kind":"pith_short_16","alias_value":"OV6XJDH6HZ7RNAXZ","created_at":"2026-07-05T10:40:01Z"},{"alias_kind":"pith_short_8","alias_value":"OV6XJDH6","created_at":"2026-07-05T10:40:01Z"}],"graph_snapshots":[{"event_id":"sha256:b4368a9a0a0c1864560278a4ee551fac3cde5eb2bdcdf93e2226f50d47189ebd","target":"graph","created_at":"2026-07-05T10:40:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.12257/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The remarkable performance of large language models (LLMs) in generation tasks has enabled practitioners to leverage publicly available models to power custom applications, such as chatbots and virtual assistants. However, the data used to train or fine-tune these LLMs is often undisclosed, allowing an attacker to compromise the data and inject backdoors into the models. In this paper, we develop a novel inference time defense, named CLEANGEN, to mitigate backdoor attacks for generation tasks in LLMs. CLEANGEN is a lightweight and effective decoding strategy that is compatible with the state-o","authors_text":"Bhaskar Ramasubramanian, Dinuka Sahabandu, Fengqing Jiang, Luyao Niu, Radha Poovendran, Yuetai Li, Zhangchen Xu","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2024-06-18T04:10:38Z","title":"CleanGen: Mitigating Backdoor Attacks for Generation Tasks in Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.12257","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cc0cee0e6bb6f566bd306a515934794ae81d49e380a085809d4142144298f9d7","target":"record","created_at":"2026-07-05T10:40:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"92d62a3c8fdba73471513923464be748d8dfb067904de365dd38a0d82847983c","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2024-06-18T04:10:38Z","title_canon_sha256":"51d790409bd83969b57843cc0f8383413afe5c522332c8047c9de91b1714de10"},"schema_version":"1.0","source":{"id":"2406.12257","kind":"arxiv","version":3}},"canonical_sha256":"757d748cfe3e7f1682f93866303a7bf31cd1a173ddf9c406a5a314c50f131b38","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"757d748cfe3e7f1682f93866303a7bf31cd1a173ddf9c406a5a314c50f131b38","first_computed_at":"2026-07-05T10:40:01.426452Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:40:01.426452Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"25XIizlNx7MImihWQ42uF7DVd8JRfL8Wnts2k7sCnJXPSMGA74i99e16CZ3Hl3SWesgPGYTjN+9v3j6KPbJsAA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:40:01.426986Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.12257","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cc0cee0e6bb6f566bd306a515934794ae81d49e380a085809d4142144298f9d7","sha256:b4368a9a0a0c1864560278a4ee551fac3cde5eb2bdcdf93e2226f50d47189ebd"],"state_sha256":"1379d3cea088fc3ed356bc8fdbb784148b2dc4ff4e49db311ee6357b686b80f3"}