{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:QFANUCRACBSJ65D6OIUM2UW3JY","short_pith_number":"pith:QFANUCRA","canonical_record":{"source":{"id":"2308.15673","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-30T00:03:03Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"b3b55962d41a6865510880ae47c1171faa6626eb57ea25b777fde72e270d0521","abstract_canon_sha256":"a3628d8629037e35fc55fde2a43c722abfeea0a4497029bfe5de1952b5240796"},"schema_version":"1.0"},"canonical_sha256":"8140da0a2010649f747e7228cd52db4e1a31278bf211aecc1cb31379c6104922","source":{"kind":"arxiv","id":"2308.15673","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.15673","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"arxiv_version","alias_value":"2308.15673v2","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.15673","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"pith_short_12","alias_value":"QFANUCRACBSJ","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"pith_short_16","alias_value":"QFANUCRACBSJ65D6","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"pith_short_8","alias_value":"QFANUCRA","created_at":"2026-07-05T06:47:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:QFANUCRACBSJ65D6OIUM2UW3JY","target":"record","payload":{"canonical_record":{"source":{"id":"2308.15673","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-30T00:03:03Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"b3b55962d41a6865510880ae47c1171faa6626eb57ea25b777fde72e270d0521","abstract_canon_sha256":"a3628d8629037e35fc55fde2a43c722abfeea0a4497029bfe5de1952b5240796"},"schema_version":"1.0"},"canonical_sha256":"8140da0a2010649f747e7228cd52db4e1a31278bf211aecc1cb31379c6104922","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:47:28.077230Z","signature_b64":"fIftEW1i4fIOVg81OhTO4Q4MehuyVPwc2aa8C3IwBWOgoR7t68vZIxQO3skwcG83nYThD1uF31ezI94ie9L5Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8140da0a2010649f747e7228cd52db4e1a31278bf211aecc1cb31379c6104922","last_reissued_at":"2026-07-05T06:47:28.076566Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:47:28.076566Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2308.15673","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:47:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"h6uH0Z+Xsb2eHyHy7ywlAR34Q2kDcgz62gQn6FCGvFI5g/LDlEKzSfH9l1q75vGa/Ove2B4CJ7DXL0Z/Y+zzDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T14:10:11.118679Z"},"content_sha256":"ea7585785e50dba9c935a489ae96d3a9edbe40c2d6743628b48b2299373935f4","schema_version":"1.0","event_id":"sha256:ea7585785e50dba9c935a489ae96d3a9edbe40c2d6743628b48b2299373935f4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:QFANUCRACBSJ65D6OIUM2UW3JY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MDTD: A Multi Domain Trojan Detector for Deep Neural Networks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Arezoo Rajabi, Bhaskar Ramasubramanian, Fengqing Jiang, Jim Ritcey, Luyao Niu, Radha Poovendran, Surudhi Asokraj","submitted_at":"2023-08-30T00:03:03Z","abstract_excerpt":"Machine learning models that use deep neural networks (DNNs) are vulnerable to backdoor attacks. An adversary carrying out a backdoor attack embeds a predefined perturbation called a trigger into a small subset of input samples and trains the DNN such that the presence of the trigger in the input results in an adversary-desired output class. Such adversarial retraining however needs to ensure that outputs for inputs without the trigger remain unaffected and provide high classification accuracy on clean samples. In this paper, we propose MDTD, a Multi-Domain Trojan Detector for DNNs, which dete"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.15673","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2308.15673/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:47:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zd8Qf5Gifh2f0DkNHFjwDjS2ZGB+j0rDx8i/bhbO+4iqdeeQdFD+ivSyUGeirBSGGTovrOZ64pN5pEnM5UVCCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T14:10:11.119779Z"},"content_sha256":"30667681896ebdd9996151911ca468177a176b3243b70bc3abb4b00ffc01219c","schema_version":"1.0","event_id":"sha256:30667681896ebdd9996151911ca468177a176b3243b70bc3abb4b00ffc01219c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QFANUCRACBSJ65D6OIUM2UW3JY/bundle.json","state_url":"https://pith.science/pith/QFANUCRACBSJ65D6OIUM2UW3JY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QFANUCRACBSJ65D6OIUM2UW3JY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T14:10:11Z","links":{"resolver":"https://pith.science/pith/QFANUCRACBSJ65D6OIUM2UW3JY","bundle":"https://pith.science/pith/QFANUCRACBSJ65D6OIUM2UW3JY/bundle.json","state":"https://pith.science/pith/QFANUCRACBSJ65D6OIUM2UW3JY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QFANUCRACBSJ65D6OIUM2UW3JY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:QFANUCRACBSJ65D6OIUM2UW3JY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a3628d8629037e35fc55fde2a43c722abfeea0a4497029bfe5de1952b5240796","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-30T00:03:03Z","title_canon_sha256":"b3b55962d41a6865510880ae47c1171faa6626eb57ea25b777fde72e270d0521"},"schema_version":"1.0","source":{"id":"2308.15673","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.15673","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"arxiv_version","alias_value":"2308.15673v2","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.15673","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"pith_short_12","alias_value":"QFANUCRACBSJ","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"pith_short_16","alias_value":"QFANUCRACBSJ65D6","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"pith_short_8","alias_value":"QFANUCRA","created_at":"2026-07-05T06:47:28Z"}],"graph_snapshots":[{"event_id":"sha256:30667681896ebdd9996151911ca468177a176b3243b70bc3abb4b00ffc01219c","target":"graph","created_at":"2026-07-05T06:47:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2308.15673/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning models that use deep neural networks (DNNs) are vulnerable to backdoor attacks. An adversary carrying out a backdoor attack embeds a predefined perturbation called a trigger into a small subset of input samples and trains the DNN such that the presence of the trigger in the input results in an adversary-desired output class. Such adversarial retraining however needs to ensure that outputs for inputs without the trigger remain unaffected and provide high classification accuracy on clean samples. In this paper, we propose MDTD, a Multi-Domain Trojan Detector for DNNs, which dete","authors_text":"Arezoo Rajabi, Bhaskar Ramasubramanian, Fengqing Jiang, Jim Ritcey, Luyao Niu, Radha Poovendran, Surudhi Asokraj","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-30T00:03:03Z","title":"MDTD: A Multi Domain Trojan Detector for Deep Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.15673","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ea7585785e50dba9c935a489ae96d3a9edbe40c2d6743628b48b2299373935f4","target":"record","created_at":"2026-07-05T06:47:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a3628d8629037e35fc55fde2a43c722abfeea0a4497029bfe5de1952b5240796","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-30T00:03:03Z","title_canon_sha256":"b3b55962d41a6865510880ae47c1171faa6626eb57ea25b777fde72e270d0521"},"schema_version":"1.0","source":{"id":"2308.15673","kind":"arxiv","version":2}},"canonical_sha256":"8140da0a2010649f747e7228cd52db4e1a31278bf211aecc1cb31379c6104922","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8140da0a2010649f747e7228cd52db4e1a31278bf211aecc1cb31379c6104922","first_computed_at":"2026-07-05T06:47:28.076566Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:47:28.076566Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fIftEW1i4fIOVg81OhTO4Q4MehuyVPwc2aa8C3IwBWOgoR7t68vZIxQO3skwcG83nYThD1uF31ezI94ie9L5Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T06:47:28.077230Z","signed_message":"canonical_sha256_bytes"},"source_id":"2308.15673","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ea7585785e50dba9c935a489ae96d3a9edbe40c2d6743628b48b2299373935f4","sha256:30667681896ebdd9996151911ca468177a176b3243b70bc3abb4b00ffc01219c"],"state_sha256":"241c99f48a723e2df38f6eeabbd05ff38e5baa2dc8dd875a9082839da396e3d6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DO9Kcee4HuLBBfmLohpohyA0sfJsKmIqQbAMkqv6fzKt6DhDSfs4jaKqOxLK7H/oSDFOG3rJFpaQ5ZxMIre8Bw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T14:10:11.127112Z","bundle_sha256":"655224407e557e028d8ea174857c243185b51dfa20c608b08aaafef4566f643e"}}