{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:P64GBYYKPPR5DRGJQKZK2RJXBX","short_pith_number":"pith:P64GBYYK","canonical_record":{"source":{"id":"2310.13828","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-20T21:54:10Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"e42ab9f598938987a3742deecdf562a0ea4f7c8af7406dfe36ced27a4e8edd7c","abstract_canon_sha256":"4643bf037c5bbf9b64cd3ebb7dcd5df1085e611c76ae0ff7a93c9eaa39828af4"},"schema_version":"1.0"},"canonical_sha256":"7fb860e30a7be3d1c4c982b2ad45370ddceadd7584b06821f8f1f1be6458cd48","source":{"kind":"arxiv","id":"2310.13828","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.13828","created_at":"2026-07-05T08:13:09Z"},{"alias_kind":"arxiv_version","alias_value":"2310.13828v3","created_at":"2026-07-05T08:13:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.13828","created_at":"2026-07-05T08:13:09Z"},{"alias_kind":"pith_short_12","alias_value":"P64GBYYKPPR5","created_at":"2026-07-05T08:13:09Z"},{"alias_kind":"pith_short_16","alias_value":"P64GBYYKPPR5DRGJ","created_at":"2026-07-05T08:13:09Z"},{"alias_kind":"pith_short_8","alias_value":"P64GBYYK","created_at":"2026-07-05T08:13:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:P64GBYYKPPR5DRGJQKZK2RJXBX","target":"record","payload":{"canonical_record":{"source":{"id":"2310.13828","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-20T21:54:10Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"e42ab9f598938987a3742deecdf562a0ea4f7c8af7406dfe36ced27a4e8edd7c","abstract_canon_sha256":"4643bf037c5bbf9b64cd3ebb7dcd5df1085e611c76ae0ff7a93c9eaa39828af4"},"schema_version":"1.0"},"canonical_sha256":"7fb860e30a7be3d1c4c982b2ad45370ddceadd7584b06821f8f1f1be6458cd48","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:13:09.500664Z","signature_b64":"N4z/n3riQdpsVIhFoQiLbuNujlHnJazeR6BYYdIWjCF9pqp4K1SZYhVfCa7P64zuTuKA8g1LtsoCNejiqrC7AA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7fb860e30a7be3d1c4c982b2ad45370ddceadd7584b06821f8f1f1be6458cd48","last_reissued_at":"2026-07-05T08:13:09.500229Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:13:09.500229Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.13828","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:13:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dGzA5CfW7eITjGvkGInQbRgTGwn7kHGaiwZvdCRoVLe5g0voEvAXQjIc5Q5aMyq8fGKtQx5DdIN1V4YK0aAmAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T19:52:37.716110Z"},"content_sha256":"a633b260617c2477f932f735ea3e0cac979aa7347fd592dfdfadec59572ed41d","schema_version":"1.0","event_id":"sha256:a633b260617c2477f932f735ea3e0cac979aa7347fd592dfdfadec59572ed41d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:P64GBYYKPPR5DRGJQKZK2RJXBX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Ben Y. Zhao, Haitao Zheng, Josephine Passananti, Shawn Shan, Stanley Wu, Wenxin Ding","submitted_at":"2023-10-20T21:54:10Z","abstract_excerpt":"Data poisoning attacks manipulate training data to introduce unexpected behaviors into machine learning models at training time. For text-to-image generative models with massive training datasets, current understanding of poisoning attacks suggests that a successful attack would require injecting millions of poison samples into their training pipeline. In this paper, we show that poisoning attacks can be successful on generative models. We observe that training data per concept can be quite limited in these models, making them vulnerable to prompt-specific poisoning attacks, which target a mod"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.13828","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.13828/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:13:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SnA+SUlzNbacuQkCr1xsBHX9AGIImH0g9dTQhpRng3hHNiWgWORqrAuhK87+IAnVrXVjcOd+/lWMe2hD710aCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T19:52:37.717001Z"},"content_sha256":"f7bcbf4b1d11a973409fbf9abbd6d337ca96f33e0dbc9b882ef08bb843b4e01a","schema_version":"1.0","event_id":"sha256:f7bcbf4b1d11a973409fbf9abbd6d337ca96f33e0dbc9b882ef08bb843b4e01a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/P64GBYYKPPR5DRGJQKZK2RJXBX/bundle.json","state_url":"https://pith.science/pith/P64GBYYKPPR5DRGJQKZK2RJXBX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/P64GBYYKPPR5DRGJQKZK2RJXBX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T19:52:37Z","links":{"resolver":"https://pith.science/pith/P64GBYYKPPR5DRGJQKZK2RJXBX","bundle":"https://pith.science/pith/P64GBYYKPPR5DRGJQKZK2RJXBX/bundle.json","state":"https://pith.science/pith/P64GBYYKPPR5DRGJQKZK2RJXBX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/P64GBYYKPPR5DRGJQKZK2RJXBX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:P64GBYYKPPR5DRGJQKZK2RJXBX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4643bf037c5bbf9b64cd3ebb7dcd5df1085e611c76ae0ff7a93c9eaa39828af4","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-20T21:54:10Z","title_canon_sha256":"e42ab9f598938987a3742deecdf562a0ea4f7c8af7406dfe36ced27a4e8edd7c"},"schema_version":"1.0","source":{"id":"2310.13828","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.13828","created_at":"2026-07-05T08:13:09Z"},{"alias_kind":"arxiv_version","alias_value":"2310.13828v3","created_at":"2026-07-05T08:13:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.13828","created_at":"2026-07-05T08:13:09Z"},{"alias_kind":"pith_short_12","alias_value":"P64GBYYKPPR5","created_at":"2026-07-05T08:13:09Z"},{"alias_kind":"pith_short_16","alias_value":"P64GBYYKPPR5DRGJ","created_at":"2026-07-05T08:13:09Z"},{"alias_kind":"pith_short_8","alias_value":"P64GBYYK","created_at":"2026-07-05T08:13:09Z"}],"graph_snapshots":[{"event_id":"sha256:f7bcbf4b1d11a973409fbf9abbd6d337ca96f33e0dbc9b882ef08bb843b4e01a","target":"graph","created_at":"2026-07-05T08:13:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.13828/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Data poisoning attacks manipulate training data to introduce unexpected behaviors into machine learning models at training time. For text-to-image generative models with massive training datasets, current understanding of poisoning attacks suggests that a successful attack would require injecting millions of poison samples into their training pipeline. In this paper, we show that poisoning attacks can be successful on generative models. We observe that training data per concept can be quite limited in these models, making them vulnerable to prompt-specific poisoning attacks, which target a mod","authors_text":"Ben Y. Zhao, Haitao Zheng, Josephine Passananti, Shawn Shan, Stanley Wu, Wenxin Ding","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-20T21:54:10Z","title":"Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.13828","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a633b260617c2477f932f735ea3e0cac979aa7347fd592dfdfadec59572ed41d","target":"record","created_at":"2026-07-05T08:13:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4643bf037c5bbf9b64cd3ebb7dcd5df1085e611c76ae0ff7a93c9eaa39828af4","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-20T21:54:10Z","title_canon_sha256":"e42ab9f598938987a3742deecdf562a0ea4f7c8af7406dfe36ced27a4e8edd7c"},"schema_version":"1.0","source":{"id":"2310.13828","kind":"arxiv","version":3}},"canonical_sha256":"7fb860e30a7be3d1c4c982b2ad45370ddceadd7584b06821f8f1f1be6458cd48","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7fb860e30a7be3d1c4c982b2ad45370ddceadd7584b06821f8f1f1be6458cd48","first_computed_at":"2026-07-05T08:13:09.500229Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:13:09.500229Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"N4z/n3riQdpsVIhFoQiLbuNujlHnJazeR6BYYdIWjCF9pqp4K1SZYhVfCa7P64zuTuKA8g1LtsoCNejiqrC7AA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:13:09.500664Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.13828","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a633b260617c2477f932f735ea3e0cac979aa7347fd592dfdfadec59572ed41d","sha256:f7bcbf4b1d11a973409fbf9abbd6d337ca96f33e0dbc9b882ef08bb843b4e01a"],"state_sha256":"912c12dc098bc47d6a55fd118bcf14f852aa06389e12e60b0580df52f33fa03e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"H1d/6sTxbV6WaO0YeQ8R2s1ig1jrVoJ4QIcP9f9/BkpEDZIYvH3qQSNWTbmuIq4TTX0ixHxsUI/pOIgMBkghBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T19:52:37.724562Z","bundle_sha256":"27c9f76b913d147c6b7ab6ce03ab4ac228ff90c7c845367ac57b66425796975c"}}