{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:POLNIOKO4ABD3N7O6HEDYAA2US","short_pith_number":"pith:POLNIOKO","canonical_record":{"source":{"id":"2406.00588","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-02T01:46:58Z","cross_cats_sorted":["cs.CR","math.ST","stat.TH"],"title_canon_sha256":"b8c62d82c49799ceea0c3cfa6a7e8904bc92d72a45e5ccddfdd4228ff290536d","abstract_canon_sha256":"77d55930cd6173a735f8fe1a94c71433f3029f94e9f7cf05c8b0fb8fb9e95735"},"schema_version":"1.0"},"canonical_sha256":"7b96d4394ee0023db7eef1c83c001aa4ac07eba2489788aff3143658aeb42fbd","source":{"kind":"arxiv","id":"2406.00588","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.00588","created_at":"2026-07-05T08:27:10Z"},{"alias_kind":"arxiv_version","alias_value":"2406.00588v1","created_at":"2026-07-05T08:27:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.00588","created_at":"2026-07-05T08:27:10Z"},{"alias_kind":"pith_short_12","alias_value":"POLNIOKO4ABD","created_at":"2026-07-05T08:27:10Z"},{"alias_kind":"pith_short_16","alias_value":"POLNIOKO4ABD3N7O","created_at":"2026-07-05T08:27:10Z"},{"alias_kind":"pith_short_8","alias_value":"POLNIOKO","created_at":"2026-07-05T08:27:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:POLNIOKO4ABD3N7O6HEDYAA2US","target":"record","payload":{"canonical_record":{"source":{"id":"2406.00588","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-02T01:46:58Z","cross_cats_sorted":["cs.CR","math.ST","stat.TH"],"title_canon_sha256":"b8c62d82c49799ceea0c3cfa6a7e8904bc92d72a45e5ccddfdd4228ff290536d","abstract_canon_sha256":"77d55930cd6173a735f8fe1a94c71433f3029f94e9f7cf05c8b0fb8fb9e95735"},"schema_version":"1.0"},"canonical_sha256":"7b96d4394ee0023db7eef1c83c001aa4ac07eba2489788aff3143658aeb42fbd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:27:10.072822Z","signature_b64":"u+4DQweMzQp8Lc52pjqdkyK9CbrkuAierBB/HGDyaYN+RAFSTXKb2nwkhSPu7D444Izf5jFPaaqf9QkU2ozpAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7b96d4394ee0023db7eef1c83c001aa4ac07eba2489788aff3143658aeb42fbd","last_reissued_at":"2026-07-05T08:27:10.072390Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:27:10.072390Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.00588","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:27:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IOjQFiSWy1a0bMZPw5dTovS+crNqDyk6RetN3shDRmutZjyCErP2UQTjJtAR0Jf416jk2Cp2P8Y/NDwJj+frCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T10:54:34.161566Z"},"content_sha256":"4a076cab31f8a85870ef53f7e418bf02bacac052b49264f5ba942d8c615b0fe8","schema_version":"1.0","event_id":"sha256:4a076cab31f8a85870ef53f7e418bf02bacac052b49264f5ba942d8c615b0fe8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:POLNIOKO4ABD3N7O6HEDYAA2US","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Generalization Bound and New Algorithm for Clean-Label Backdoor Attack","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","math.ST","stat.TH"],"primary_cat":"cs.LG","authors_text":"Lijia Yu, Lijun Zhang, Shuang Liu, Xiao-Shan Gao, Yibo Miao","submitted_at":"2024-06-02T01:46:58Z","abstract_excerpt":"The generalization bound is a crucial theoretical tool for assessing the generalizability of learning methods and there exist vast literatures on generalizability of normal learning, adversarial learning, and data poisoning. Unlike other data poison attacks, the backdoor attack has the special property that the poisoned triggers are contained in both the training set and the test set and the purpose of the attack is two-fold. To our knowledge, the generalization bound for the backdoor attack has not been established. In this paper, we fill this gap by deriving algorithm-independent generalizat"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.00588","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.00588/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:27:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aTNFxLaAHtVK0XgW10zT6WfoCQ8ToUQ2DsrVUHIVE1UJSW0mbAUx82zMKAAwjep+VU3Bvt/Y0yiLZRrA5oENBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T10:54:34.162055Z"},"content_sha256":"733f966342364e3f7e451085e164b714c5016d78d95f1224de916eb8bdd0b233","schema_version":"1.0","event_id":"sha256:733f966342364e3f7e451085e164b714c5016d78d95f1224de916eb8bdd0b233"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/POLNIOKO4ABD3N7O6HEDYAA2US/bundle.json","state_url":"https://pith.science/pith/POLNIOKO4ABD3N7O6HEDYAA2US/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/POLNIOKO4ABD3N7O6HEDYAA2US/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T10:54:34Z","links":{"resolver":"https://pith.science/pith/POLNIOKO4ABD3N7O6HEDYAA2US","bundle":"https://pith.science/pith/POLNIOKO4ABD3N7O6HEDYAA2US/bundle.json","state":"https://pith.science/pith/POLNIOKO4ABD3N7O6HEDYAA2US/state.json","well_known_bundle":"https://pith.science/.well-known/pith/POLNIOKO4ABD3N7O6HEDYAA2US/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:POLNIOKO4ABD3N7O6HEDYAA2US","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"77d55930cd6173a735f8fe1a94c71433f3029f94e9f7cf05c8b0fb8fb9e95735","cross_cats_sorted":["cs.CR","math.ST","stat.TH"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-02T01:46:58Z","title_canon_sha256":"b8c62d82c49799ceea0c3cfa6a7e8904bc92d72a45e5ccddfdd4228ff290536d"},"schema_version":"1.0","source":{"id":"2406.00588","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.00588","created_at":"2026-07-05T08:27:10Z"},{"alias_kind":"arxiv_version","alias_value":"2406.00588v1","created_at":"2026-07-05T08:27:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.00588","created_at":"2026-07-05T08:27:10Z"},{"alias_kind":"pith_short_12","alias_value":"POLNIOKO4ABD","created_at":"2026-07-05T08:27:10Z"},{"alias_kind":"pith_short_16","alias_value":"POLNIOKO4ABD3N7O","created_at":"2026-07-05T08:27:10Z"},{"alias_kind":"pith_short_8","alias_value":"POLNIOKO","created_at":"2026-07-05T08:27:10Z"}],"graph_snapshots":[{"event_id":"sha256:733f966342364e3f7e451085e164b714c5016d78d95f1224de916eb8bdd0b233","target":"graph","created_at":"2026-07-05T08:27:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.00588/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The generalization bound is a crucial theoretical tool for assessing the generalizability of learning methods and there exist vast literatures on generalizability of normal learning, adversarial learning, and data poisoning. Unlike other data poison attacks, the backdoor attack has the special property that the poisoned triggers are contained in both the training set and the test set and the purpose of the attack is two-fold. To our knowledge, the generalization bound for the backdoor attack has not been established. In this paper, we fill this gap by deriving algorithm-independent generalizat","authors_text":"Lijia Yu, Lijun Zhang, Shuang Liu, Xiao-Shan Gao, Yibo Miao","cross_cats":["cs.CR","math.ST","stat.TH"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-02T01:46:58Z","title":"Generalization Bound and New Algorithm for Clean-Label Backdoor Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.00588","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4a076cab31f8a85870ef53f7e418bf02bacac052b49264f5ba942d8c615b0fe8","target":"record","created_at":"2026-07-05T08:27:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"77d55930cd6173a735f8fe1a94c71433f3029f94e9f7cf05c8b0fb8fb9e95735","cross_cats_sorted":["cs.CR","math.ST","stat.TH"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-02T01:46:58Z","title_canon_sha256":"b8c62d82c49799ceea0c3cfa6a7e8904bc92d72a45e5ccddfdd4228ff290536d"},"schema_version":"1.0","source":{"id":"2406.00588","kind":"arxiv","version":1}},"canonical_sha256":"7b96d4394ee0023db7eef1c83c001aa4ac07eba2489788aff3143658aeb42fbd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7b96d4394ee0023db7eef1c83c001aa4ac07eba2489788aff3143658aeb42fbd","first_computed_at":"2026-07-05T08:27:10.072390Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:27:10.072390Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"u+4DQweMzQp8Lc52pjqdkyK9CbrkuAierBB/HGDyaYN+RAFSTXKb2nwkhSPu7D444Izf5jFPaaqf9QkU2ozpAg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:27:10.072822Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.00588","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4a076cab31f8a85870ef53f7e418bf02bacac052b49264f5ba942d8c615b0fe8","sha256:733f966342364e3f7e451085e164b714c5016d78d95f1224de916eb8bdd0b233"],"state_sha256":"eeb46a2fc223bdde34f996f3419ac1051e471047ebd722341429a67c63971ce8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OmjtZrBd2lu93+ciPh+M/IQNWd5xvn5da8fWARj+QmXAB09DYh0MGNOZaNIk1JHLE6Z6a75bzeVEfnK6aFvfCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T10:54:34.165946Z","bundle_sha256":"dd22143b6aeec272fa0963bbee58f5fa87a63af2b561a92e97635566191f422d"}}