{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:PMKKVE2RQMK4HADTJBSCPMDEUN","short_pith_number":"pith:PMKKVE2R","canonical_record":{"source":{"id":"2506.07214","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-06-08T16:40:40Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"ea7ea8c87749fc5b9339054d860f4bd8d8ba20df9e4e4fc3ee2d0030f4b794f0","abstract_canon_sha256":"d933f93d2031c9d999c4b06d0551ca15986ab544c12daee198bc403337457ec6"},"schema_version":"1.0"},"canonical_sha256":"7b14aa93518315c38073486427b064a36e615beba6e2f5e4f7662bebd8fad2f8","source":{"kind":"arxiv","id":"2506.07214","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.07214","created_at":"2026-07-05T11:18:03Z"},{"alias_kind":"arxiv_version","alias_value":"2506.07214v1","created_at":"2026-07-05T11:18:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.07214","created_at":"2026-07-05T11:18:03Z"},{"alias_kind":"pith_short_12","alias_value":"PMKKVE2RQMK4","created_at":"2026-07-05T11:18:03Z"},{"alias_kind":"pith_short_16","alias_value":"PMKKVE2RQMK4HADT","created_at":"2026-07-05T11:18:03Z"},{"alias_kind":"pith_short_8","alias_value":"PMKKVE2R","created_at":"2026-07-05T11:18:03Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:PMKKVE2RQMK4HADTJBSCPMDEUN","target":"record","payload":{"canonical_record":{"source":{"id":"2506.07214","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-06-08T16:40:40Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"ea7ea8c87749fc5b9339054d860f4bd8d8ba20df9e4e4fc3ee2d0030f4b794f0","abstract_canon_sha256":"d933f93d2031c9d999c4b06d0551ca15986ab544c12daee198bc403337457ec6"},"schema_version":"1.0"},"canonical_sha256":"7b14aa93518315c38073486427b064a36e615beba6e2f5e4f7662bebd8fad2f8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:18:03.638111Z","signature_b64":"1bgRnUuTw65WG7ovyA9TAd7uai/RLMOKskhMPoCLhD5tdHcrPFYgNKf5TAN0AneKZP5AtK4B7L6catAom2HnBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7b14aa93518315c38073486427b064a36e615beba6e2f5e4f7662bebd8fad2f8","last_reissued_at":"2026-07-05T11:18:03.637649Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:18:03.637649Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.07214","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:18:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3xZ/yNF12NCoG1845C7bdYqL93zUJunKaTL9xBK8PuYVgzF+/qvn0vNYoKqLnlkkN9G7CFt7V7Jq4cbbiSaiAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T02:19:26.458556Z"},"content_sha256":"9529ba1f306fc21f20a425840883e034d8a57129a71b407fd67451e1528e2a9c","schema_version":"1.0","event_id":"sha256:9529ba1f306fc21f20a425840883e034d8a57129a71b407fd67451e1528e2a9c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:PMKKVE2RQMK4HADTJBSCPMDEUN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Backdoor Attack on Vision Language Models with Stealthy Semantic Manipulation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CV","authors_text":"Guanhong Tao, Xinlei He, Yepang Liu, Zhen Sun, Zhiyuan Zhong","submitted_at":"2025-06-08T16:40:40Z","abstract_excerpt":"Vision Language Models (VLMs) have shown remarkable performance, but are also vulnerable to backdoor attacks whereby the adversary can manipulate the model's outputs through hidden triggers. Prior attacks primarily rely on single-modality triggers, leaving the crucial cross-modal fusion nature of VLMs largely unexplored. Unlike prior work, we identify a novel attack surface that leverages cross-modal semantic mismatches as implicit triggers. Based on this insight, we propose BadSem (Backdoor Attack with Semantic Manipulation), a data poisoning attack that injects stealthy backdoors by delibera"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.07214","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.07214/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:18:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"86/xame+nu4iF8cxi7k0P7jdYhckIy0Nd7m2mSwQT0kz3PspNzpG9uohnodC9C20Ml/9Bdnrqvjttrx+exhCAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T02:19:26.459054Z"},"content_sha256":"6bad112833182c121309a23704a2f916f99e1cd2c04d63905a4de64332fa6a25","schema_version":"1.0","event_id":"sha256:6bad112833182c121309a23704a2f916f99e1cd2c04d63905a4de64332fa6a25"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PMKKVE2RQMK4HADTJBSCPMDEUN/bundle.json","state_url":"https://pith.science/pith/PMKKVE2RQMK4HADTJBSCPMDEUN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PMKKVE2RQMK4HADTJBSCPMDEUN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T02:19:26Z","links":{"resolver":"https://pith.science/pith/PMKKVE2RQMK4HADTJBSCPMDEUN","bundle":"https://pith.science/pith/PMKKVE2RQMK4HADTJBSCPMDEUN/bundle.json","state":"https://pith.science/pith/PMKKVE2RQMK4HADTJBSCPMDEUN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PMKKVE2RQMK4HADTJBSCPMDEUN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:PMKKVE2RQMK4HADTJBSCPMDEUN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d933f93d2031c9d999c4b06d0551ca15986ab544c12daee198bc403337457ec6","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-06-08T16:40:40Z","title_canon_sha256":"ea7ea8c87749fc5b9339054d860f4bd8d8ba20df9e4e4fc3ee2d0030f4b794f0"},"schema_version":"1.0","source":{"id":"2506.07214","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.07214","created_at":"2026-07-05T11:18:03Z"},{"alias_kind":"arxiv_version","alias_value":"2506.07214v1","created_at":"2026-07-05T11:18:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.07214","created_at":"2026-07-05T11:18:03Z"},{"alias_kind":"pith_short_12","alias_value":"PMKKVE2RQMK4","created_at":"2026-07-05T11:18:03Z"},{"alias_kind":"pith_short_16","alias_value":"PMKKVE2RQMK4HADT","created_at":"2026-07-05T11:18:03Z"},{"alias_kind":"pith_short_8","alias_value":"PMKKVE2R","created_at":"2026-07-05T11:18:03Z"}],"graph_snapshots":[{"event_id":"sha256:6bad112833182c121309a23704a2f916f99e1cd2c04d63905a4de64332fa6a25","target":"graph","created_at":"2026-07-05T11:18:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.07214/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision Language Models (VLMs) have shown remarkable performance, but are also vulnerable to backdoor attacks whereby the adversary can manipulate the model's outputs through hidden triggers. Prior attacks primarily rely on single-modality triggers, leaving the crucial cross-modal fusion nature of VLMs largely unexplored. Unlike prior work, we identify a novel attack surface that leverages cross-modal semantic mismatches as implicit triggers. Based on this insight, we propose BadSem (Backdoor Attack with Semantic Manipulation), a data poisoning attack that injects stealthy backdoors by delibera","authors_text":"Guanhong Tao, Xinlei He, Yepang Liu, Zhen Sun, Zhiyuan Zhong","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-06-08T16:40:40Z","title":"Backdoor Attack on Vision Language Models with Stealthy Semantic Manipulation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.07214","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9529ba1f306fc21f20a425840883e034d8a57129a71b407fd67451e1528e2a9c","target":"record","created_at":"2026-07-05T11:18:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d933f93d2031c9d999c4b06d0551ca15986ab544c12daee198bc403337457ec6","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-06-08T16:40:40Z","title_canon_sha256":"ea7ea8c87749fc5b9339054d860f4bd8d8ba20df9e4e4fc3ee2d0030f4b794f0"},"schema_version":"1.0","source":{"id":"2506.07214","kind":"arxiv","version":1}},"canonical_sha256":"7b14aa93518315c38073486427b064a36e615beba6e2f5e4f7662bebd8fad2f8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7b14aa93518315c38073486427b064a36e615beba6e2f5e4f7662bebd8fad2f8","first_computed_at":"2026-07-05T11:18:03.637649Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:18:03.637649Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1bgRnUuTw65WG7ovyA9TAd7uai/RLMOKskhMPoCLhD5tdHcrPFYgNKf5TAN0AneKZP5AtK4B7L6catAom2HnBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:18:03.638111Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.07214","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9529ba1f306fc21f20a425840883e034d8a57129a71b407fd67451e1528e2a9c","sha256:6bad112833182c121309a23704a2f916f99e1cd2c04d63905a4de64332fa6a25"],"state_sha256":"675acd391981b60c54b9368f510acc5270a5f948b405a24cc2b0a55afe20a1f7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"u7du7+2AZnQWGL66pmO6oQdqDWvcYHsqbE6QtWgLT4BAGQvzGLYJn9OUfoiLOsh5Wln5IG4SpL0yIHJv0FBHBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T02:19:26.462761Z","bundle_sha256":"deb77f7ed09c8d74954c65205e3c3dde3d1e4a7abe1dfb97ffe194148bb7307d"}}