{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:Q52VDM22KTAVT6T3CGMKWG4QKE","short_pith_number":"pith:Q52VDM22","canonical_record":{"source":{"id":"2204.05255","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-04-11T16:58:04Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"246f09b8ed663d12b78b2460405b8b8c7c65e5d320ba30690540ddd0033aa902","abstract_canon_sha256":"f2ec829389c4d2db10c9ebf621a7ba762a99da8bb5f93c9c2b372194bd6ffc51"},"schema_version":"1.0"},"canonical_sha256":"877551b35a54c159fa7b1198ab1b9051251303272cbb6eac4780e0689c968e43","source":{"kind":"arxiv","id":"2204.05255","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2204.05255","created_at":"2026-07-05T04:15:01Z"},{"alias_kind":"arxiv_version","alias_value":"2204.05255v2","created_at":"2026-07-05T04:15:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.05255","created_at":"2026-07-05T04:15:01Z"},{"alias_kind":"pith_short_12","alias_value":"Q52VDM22KTAV","created_at":"2026-07-05T04:15:01Z"},{"alias_kind":"pith_short_16","alias_value":"Q52VDM22KTAVT6T3","created_at":"2026-07-05T04:15:01Z"},{"alias_kind":"pith_short_8","alias_value":"Q52VDM22","created_at":"2026-07-05T04:15:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:Q52VDM22KTAVT6T3CGMKWG4QKE","target":"record","payload":{"canonical_record":{"source":{"id":"2204.05255","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-04-11T16:58:04Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"246f09b8ed663d12b78b2460405b8b8c7c65e5d320ba30690540ddd0033aa902","abstract_canon_sha256":"f2ec829389c4d2db10c9ebf621a7ba762a99da8bb5f93c9c2b372194bd6ffc51"},"schema_version":"1.0"},"canonical_sha256":"877551b35a54c159fa7b1198ab1b9051251303272cbb6eac4780e0689c968e43","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:15:01.906297Z","signature_b64":"4qNZBtI+uoeEC8dpRv5jODeEcX88aM2GUrAIPxS54bAGY/WuZmd41kCcqyXTwHkrFOXZb2n3pB+1uBMut7SOBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"877551b35a54c159fa7b1198ab1b9051251303272cbb6eac4780e0689c968e43","last_reissued_at":"2026-07-05T04:15:01.905906Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:15:01.905906Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2204.05255","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:15:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hn4OZBu4UKcJEkOuUjbpX07vc3dnWRf9OqICaN/f7GvK+o4zQIVhYinIqmZTU/Kl19t2pXKVQwpZuG8aRN5JCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T04:11:05.909586Z"},"content_sha256":"bc52919a5d2c5393ecfe77797ad99f94d9727436b2fe2d1958272acc1ecdc6e8","schema_version":"1.0","event_id":"sha256:bc52919a5d2c5393ecfe77797ad99f94d9727436b2fe2d1958272acc1ecdc6e8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:Q52VDM22KTAVT6T3CGMKWG4QKE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Narcissus: A Practical Clean-Label Backdoor Attack with Limited Information","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Hoang Anh Just, Lingjuan Lyu, Meikang Qiu, Minzhou Pan, Ruoxi Jia, Yi Zeng","submitted_at":"2022-04-11T16:58:04Z","abstract_excerpt":"Backdoor attacks insert malicious data into a training set so that, during inference time, it misclassifies inputs that have been patched with a backdoor trigger as the malware specified label. For backdoor attacks to bypass human inspection, it is essential that the injected data appear to be correctly labeled. The attacks with such property are often referred to as \"clean-label attacks.\" Existing clean-label backdoor attacks require knowledge of the entire training set to be effective. Obtaining such knowledge is difficult or impossible because training data are often gathered from multiple "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.05255","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2204.05255/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:15:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MSfLAZzLaok5OCzp/1BSlg6zV3zHoE+vUb+SoMGli3sUweY8qDYw6c6bV8D9FbMo4wrX4eXEozQc1gzhQWy0DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T04:11:05.910431Z"},"content_sha256":"b3da42cc0d7c8b6b73d8f63b25acdc713e11563658f20a2acae6255b994983c0","schema_version":"1.0","event_id":"sha256:b3da42cc0d7c8b6b73d8f63b25acdc713e11563658f20a2acae6255b994983c0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Q52VDM22KTAVT6T3CGMKWG4QKE/bundle.json","state_url":"https://pith.science/pith/Q52VDM22KTAVT6T3CGMKWG4QKE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Q52VDM22KTAVT6T3CGMKWG4QKE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T04:11:05Z","links":{"resolver":"https://pith.science/pith/Q52VDM22KTAVT6T3CGMKWG4QKE","bundle":"https://pith.science/pith/Q52VDM22KTAVT6T3CGMKWG4QKE/bundle.json","state":"https://pith.science/pith/Q52VDM22KTAVT6T3CGMKWG4QKE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Q52VDM22KTAVT6T3CGMKWG4QKE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:Q52VDM22KTAVT6T3CGMKWG4QKE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f2ec829389c4d2db10c9ebf621a7ba762a99da8bb5f93c9c2b372194bd6ffc51","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-04-11T16:58:04Z","title_canon_sha256":"246f09b8ed663d12b78b2460405b8b8c7c65e5d320ba30690540ddd0033aa902"},"schema_version":"1.0","source":{"id":"2204.05255","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2204.05255","created_at":"2026-07-05T04:15:01Z"},{"alias_kind":"arxiv_version","alias_value":"2204.05255v2","created_at":"2026-07-05T04:15:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.05255","created_at":"2026-07-05T04:15:01Z"},{"alias_kind":"pith_short_12","alias_value":"Q52VDM22KTAV","created_at":"2026-07-05T04:15:01Z"},{"alias_kind":"pith_short_16","alias_value":"Q52VDM22KTAVT6T3","created_at":"2026-07-05T04:15:01Z"},{"alias_kind":"pith_short_8","alias_value":"Q52VDM22","created_at":"2026-07-05T04:15:01Z"}],"graph_snapshots":[{"event_id":"sha256:b3da42cc0d7c8b6b73d8f63b25acdc713e11563658f20a2acae6255b994983c0","target":"graph","created_at":"2026-07-05T04:15:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2204.05255/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attacks insert malicious data into a training set so that, during inference time, it misclassifies inputs that have been patched with a backdoor trigger as the malware specified label. For backdoor attacks to bypass human inspection, it is essential that the injected data appear to be correctly labeled. The attacks with such property are often referred to as \"clean-label attacks.\" Existing clean-label backdoor attacks require knowledge of the entire training set to be effective. Obtaining such knowledge is difficult or impossible because training data are often gathered from multiple ","authors_text":"Hoang Anh Just, Lingjuan Lyu, Meikang Qiu, Minzhou Pan, Ruoxi Jia, Yi Zeng","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-04-11T16:58:04Z","title":"Narcissus: A Practical Clean-Label Backdoor Attack with Limited Information"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.05255","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bc52919a5d2c5393ecfe77797ad99f94d9727436b2fe2d1958272acc1ecdc6e8","target":"record","created_at":"2026-07-05T04:15:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f2ec829389c4d2db10c9ebf621a7ba762a99da8bb5f93c9c2b372194bd6ffc51","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-04-11T16:58:04Z","title_canon_sha256":"246f09b8ed663d12b78b2460405b8b8c7c65e5d320ba30690540ddd0033aa902"},"schema_version":"1.0","source":{"id":"2204.05255","kind":"arxiv","version":2}},"canonical_sha256":"877551b35a54c159fa7b1198ab1b9051251303272cbb6eac4780e0689c968e43","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"877551b35a54c159fa7b1198ab1b9051251303272cbb6eac4780e0689c968e43","first_computed_at":"2026-07-05T04:15:01.905906Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:15:01.905906Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4qNZBtI+uoeEC8dpRv5jODeEcX88aM2GUrAIPxS54bAGY/WuZmd41kCcqyXTwHkrFOXZb2n3pB+1uBMut7SOBA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:15:01.906297Z","signed_message":"canonical_sha256_bytes"},"source_id":"2204.05255","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bc52919a5d2c5393ecfe77797ad99f94d9727436b2fe2d1958272acc1ecdc6e8","sha256:b3da42cc0d7c8b6b73d8f63b25acdc713e11563658f20a2acae6255b994983c0"],"state_sha256":"6c47a2150ea9f14d14868281f7b9fba3654b1a4bc8a9d2e2694690e0b3a2a99d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ule3lIqpzencn3wqPhrizG17Kg/DmZcQB8rBbxgCOrZUeqD1lkls+RMopxPtx258LTzXMXITz9+NXyP1pkf8Cw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T04:11:05.916468Z","bundle_sha256":"5b862cfd835e5daf3e06beba1e9269071ffedf180f0391e9dcea5b98662cc69f"}}