{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2024:Q2WFVC6NWSVV4CPOBMX4VOASEH","short_pith_number":"pith:Q2WFVC6N","schema_version":"1.0","canonical_sha256":"86ac5a8bcdb4ab5e09ee0b2fcab81221ecc9ed13a36241de1a0c00abb7dd2585","source":{"kind":"arxiv","id":"2412.19037","version":2},"attestation_state":"computed","paper":{"title":"CL-Attack: Textual Backdoor Attacks via Cross-Lingual Triggers","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Jingyi Zheng, Tianshuo Cong, Tianyi Hu, Xinlei He","submitted_at":"2024-12-26T03:13:03Z","abstract_excerpt":"Backdoor attacks significantly compromise the security of large language models by triggering them to output specific and controlled content. Currently, triggers for textual backdoor attacks fall into two categories: fixed-token triggers and sentence-pattern triggers. However, the former are typically easy to identify and filter, while the latter, such as syntax and style, do not apply to all original samples and may lead to semantic shifts. In this paper, inspired by cross-lingual (CL) prompts of LLMs in real-world scenarios, we propose a higher-dimensional trigger method at the paragraph lev"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2412.19037","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-26T03:13:03Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c89d170993ea1811dd3f6b9a6db15f62a40bc90e441eb5ee8f38258c87192d73","abstract_canon_sha256":"15edb5f0738f2050b30bfa4b0e99c4d9fba97c952257d4ad216dd7219a89ca74"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:41:51.468138Z","signature_b64":"Yv63L0cQ282Jao7r50ItrtvVDUl7Zoh+zBvoD6HaqZZ4yQXIZ03relPrFwEx7HGO2y917VYPbZO6P47l2auhDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"86ac5a8bcdb4ab5e09ee0b2fcab81221ecc9ed13a36241de1a0c00abb7dd2585","last_reissued_at":"2026-07-05T10:41:51.467647Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:41:51.467647Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"CL-Attack: Textual Backdoor Attacks via Cross-Lingual Triggers","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Jingyi Zheng, Tianshuo Cong, Tianyi Hu, Xinlei He","submitted_at":"2024-12-26T03:13:03Z","abstract_excerpt":"Backdoor attacks significantly compromise the security of large language models by triggering them to output specific and controlled content. Currently, triggers for textual backdoor attacks fall into two categories: fixed-token triggers and sentence-pattern triggers. However, the former are typically easy to identify and filter, while the latter, such as syntax and style, do not apply to all original samples and may lead to semantic shifts. In this paper, inspired by cross-lingual (CL) prompts of LLMs in real-world scenarios, we propose a higher-dimensional trigger method at the paragraph lev"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.19037","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.19037/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2412.19037","created_at":"2026-07-05T10:41:51.467704+00:00"},{"alias_kind":"arxiv_version","alias_value":"2412.19037v2","created_at":"2026-07-05T10:41:51.467704+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.19037","created_at":"2026-07-05T10:41:51.467704+00:00"},{"alias_kind":"pith_short_12","alias_value":"Q2WFVC6NWSVV","created_at":"2026-07-05T10:41:51.467704+00:00"},{"alias_kind":"pith_short_16","alias_value":"Q2WFVC6NWSVV4CPO","created_at":"2026-07-05T10:41:51.467704+00:00"},{"alias_kind":"pith_short_8","alias_value":"Q2WFVC6N","created_at":"2026-07-05T10:41:51.467704+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/Q2WFVC6NWSVV4CPOBMX4VOASEH","json":"https://pith.science/pith/Q2WFVC6NWSVV4CPOBMX4VOASEH.json","graph_json":"https://pith.science/api/pith-number/Q2WFVC6NWSVV4CPOBMX4VOASEH/graph.json","events_json":"https://pith.science/api/pith-number/Q2WFVC6NWSVV4CPOBMX4VOASEH/events.json","paper":"https://pith.science/paper/Q2WFVC6N"},"agent_actions":{"view_html":"https://pith.science/pith/Q2WFVC6NWSVV4CPOBMX4VOASEH","download_json":"https://pith.science/pith/Q2WFVC6NWSVV4CPOBMX4VOASEH.json","view_paper":"https://pith.science/paper/Q2WFVC6N","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2412.19037&json=true","fetch_graph":"https://pith.science/api/pith-number/Q2WFVC6NWSVV4CPOBMX4VOASEH/graph.json","fetch_events":"https://pith.science/api/pith-number/Q2WFVC6NWSVV4CPOBMX4VOASEH/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/Q2WFVC6NWSVV4CPOBMX4VOASEH/action/timestamp_anchor","attest_storage":"https://pith.science/pith/Q2WFVC6NWSVV4CPOBMX4VOASEH/action/storage_attestation","attest_author":"https://pith.science/pith/Q2WFVC6NWSVV4CPOBMX4VOASEH/action/author_attestation","sign_citation":"https://pith.science/pith/Q2WFVC6NWSVV4CPOBMX4VOASEH/action/citation_signature","submit_replication":"https://pith.science/pith/Q2WFVC6NWSVV4CPOBMX4VOASEH/action/replication_record"}},"created_at":"2026-07-05T10:41:51.467704+00:00","updated_at":"2026-07-05T10:41:51.467704+00:00"}