{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:QABAUZA3LKHM5BRN2MEUOPGS5E","short_pith_number":"pith:QABAUZA3","canonical_record":{"source":{"id":"1911.07399","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-11-18T02:27:10Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"96f85cb8c7f4751d96785315c7bb5d7deea6d6f4d7d150b24a5333c8c529b32f","abstract_canon_sha256":"93a32c2b8206c6b1af6bd571994d124dcc37a87e6ef4702cf5a7a16b84752e5d"},"schema_version":"1.0"},"canonical_sha256":"80020a641b5a8ece862dd309473cd2e9025ef0569c2f5199b1cbb7ef22a33a1f","source":{"kind":"arxiv","id":"1911.07399","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.07399","created_at":"2026-07-05T00:19:46Z"},{"alias_kind":"arxiv_version","alias_value":"1911.07399v1","created_at":"2026-07-05T00:19:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.07399","created_at":"2026-07-05T00:19:46Z"},{"alias_kind":"pith_short_12","alias_value":"QABAUZA3LKHM","created_at":"2026-07-05T00:19:46Z"},{"alias_kind":"pith_short_16","alias_value":"QABAUZA3LKHM5BRN","created_at":"2026-07-05T00:19:46Z"},{"alias_kind":"pith_short_8","alias_value":"QABAUZA3","created_at":"2026-07-05T00:19:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:QABAUZA3LKHM5BRN2MEUOPGS5E","target":"record","payload":{"canonical_record":{"source":{"id":"1911.07399","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-11-18T02:27:10Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"96f85cb8c7f4751d96785315c7bb5d7deea6d6f4d7d150b24a5333c8c529b32f","abstract_canon_sha256":"93a32c2b8206c6b1af6bd571994d124dcc37a87e6ef4702cf5a7a16b84752e5d"},"schema_version":"1.0"},"canonical_sha256":"80020a641b5a8ece862dd309473cd2e9025ef0569c2f5199b1cbb7ef22a33a1f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:19:46.538159Z","signature_b64":"fMHO2PoRwc7kQEBDk0UWVQZPl8KiLugveOLeJlN4T39Nto4SCuYcSAQeILN0lFLCVSEW76RpzS1a3A+hxxJxDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"80020a641b5a8ece862dd309473cd2e9025ef0569c2f5199b1cbb7ef22a33a1f","last_reissued_at":"2026-07-05T00:19:46.537746Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:19:46.537746Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1911.07399","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:19:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pa1cdqDUqQo3egItGVJI9KFjTH4vmeBgcgv+GM83W/GI8UfOlR8j/+erE67NcnS75Be6NPD3tAQFgDGUnMfCBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T23:37:20.469815Z"},"content_sha256":"ef83b9102702766711738e02b87c4ddf138ccf0bc147e7cc7068293141e2f0e1","schema_version":"1.0","event_id":"sha256:ef83b9102702766711738e02b87c4ddf138ccf0bc147e7cc7068293141e2f0e1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:QABAUZA3LKHM5BRN2MEUOPGS5E","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"NeuronInspect: Detecting Backdoors in Neural Networks via Output Explanations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Mani Srivastava, Moustafa Alzantot, Xijie Huang","submitted_at":"2019-11-18T02:27:10Z","abstract_excerpt":"Deep neural networks have achieved state-of-the-art performance on various tasks. However, lack of interpretability and transparency makes it easier for malicious attackers to inject trojan backdoor into the neural networks, which will make the model behave abnormally when a backdoor sample with a specific trigger is input. In this paper, we propose NeuronInspect, a framework to detect trojan backdoors in deep neural networks via output explanation techniques. NeuronInspect first identifies the existence of backdoor attack targets by generating the explanation heatmap of the output layer. We o"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.07399","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1911.07399/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:19:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fNbdDwl+hQXe18Pg+XUBh8Y3lrD5GlaHxabR62bBzAhjBZwFhIJRii/2wUY7L23PaFsYU9AqyApsktjG2ej9Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T23:37:20.470330Z"},"content_sha256":"a332a98b0cfc403ead88ef82a7bc930ea06c6e160e2069310dfd2da136802c62","schema_version":"1.0","event_id":"sha256:a332a98b0cfc403ead88ef82a7bc930ea06c6e160e2069310dfd2da136802c62"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QABAUZA3LKHM5BRN2MEUOPGS5E/bundle.json","state_url":"https://pith.science/pith/QABAUZA3LKHM5BRN2MEUOPGS5E/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QABAUZA3LKHM5BRN2MEUOPGS5E/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T23:37:20Z","links":{"resolver":"https://pith.science/pith/QABAUZA3LKHM5BRN2MEUOPGS5E","bundle":"https://pith.science/pith/QABAUZA3LKHM5BRN2MEUOPGS5E/bundle.json","state":"https://pith.science/pith/QABAUZA3LKHM5BRN2MEUOPGS5E/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QABAUZA3LKHM5BRN2MEUOPGS5E/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:QABAUZA3LKHM5BRN2MEUOPGS5E","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"93a32c2b8206c6b1af6bd571994d124dcc37a87e6ef4702cf5a7a16b84752e5d","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-11-18T02:27:10Z","title_canon_sha256":"96f85cb8c7f4751d96785315c7bb5d7deea6d6f4d7d150b24a5333c8c529b32f"},"schema_version":"1.0","source":{"id":"1911.07399","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.07399","created_at":"2026-07-05T00:19:46Z"},{"alias_kind":"arxiv_version","alias_value":"1911.07399v1","created_at":"2026-07-05T00:19:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.07399","created_at":"2026-07-05T00:19:46Z"},{"alias_kind":"pith_short_12","alias_value":"QABAUZA3LKHM","created_at":"2026-07-05T00:19:46Z"},{"alias_kind":"pith_short_16","alias_value":"QABAUZA3LKHM5BRN","created_at":"2026-07-05T00:19:46Z"},{"alias_kind":"pith_short_8","alias_value":"QABAUZA3","created_at":"2026-07-05T00:19:46Z"}],"graph_snapshots":[{"event_id":"sha256:a332a98b0cfc403ead88ef82a7bc930ea06c6e160e2069310dfd2da136802c62","target":"graph","created_at":"2026-07-05T00:19:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1911.07399/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks have achieved state-of-the-art performance on various tasks. However, lack of interpretability and transparency makes it easier for malicious attackers to inject trojan backdoor into the neural networks, which will make the model behave abnormally when a backdoor sample with a specific trigger is input. In this paper, we propose NeuronInspect, a framework to detect trojan backdoors in deep neural networks via output explanation techniques. NeuronInspect first identifies the existence of backdoor attack targets by generating the explanation heatmap of the output layer. We o","authors_text":"Mani Srivastava, Moustafa Alzantot, Xijie Huang","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-11-18T02:27:10Z","title":"NeuronInspect: Detecting Backdoors in Neural Networks via Output Explanations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.07399","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ef83b9102702766711738e02b87c4ddf138ccf0bc147e7cc7068293141e2f0e1","target":"record","created_at":"2026-07-05T00:19:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"93a32c2b8206c6b1af6bd571994d124dcc37a87e6ef4702cf5a7a16b84752e5d","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-11-18T02:27:10Z","title_canon_sha256":"96f85cb8c7f4751d96785315c7bb5d7deea6d6f4d7d150b24a5333c8c529b32f"},"schema_version":"1.0","source":{"id":"1911.07399","kind":"arxiv","version":1}},"canonical_sha256":"80020a641b5a8ece862dd309473cd2e9025ef0569c2f5199b1cbb7ef22a33a1f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"80020a641b5a8ece862dd309473cd2e9025ef0569c2f5199b1cbb7ef22a33a1f","first_computed_at":"2026-07-05T00:19:46.537746Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:19:46.537746Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fMHO2PoRwc7kQEBDk0UWVQZPl8KiLugveOLeJlN4T39Nto4SCuYcSAQeILN0lFLCVSEW76RpzS1a3A+hxxJxDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T00:19:46.538159Z","signed_message":"canonical_sha256_bytes"},"source_id":"1911.07399","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ef83b9102702766711738e02b87c4ddf138ccf0bc147e7cc7068293141e2f0e1","sha256:a332a98b0cfc403ead88ef82a7bc930ea06c6e160e2069310dfd2da136802c62"],"state_sha256":"5ea16214ca7e9cbafd6bde65b3ec7ae88bd1ebe633fe5862fd0b54f9f7f5501b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xJ9q+fAWulP+XcOhF9QP/IR2kGUZwYLdg30TGj6LSdK6J8kRLZTkUdEICZOtpnpVQhH/aSocdnCZlPgLN2w2Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T23:37:20.478911Z","bundle_sha256":"efd26e1a4501bf745363ef5ce211c77b4d2c8c81cb058d630d7f7ad60945a318"}}