{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:QHBBFT4YKPG74UDIOJR4NIIYS5","short_pith_number":"pith:QHBBFT4Y","canonical_record":{"source":{"id":"2505.00976","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-02T03:37:52Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"1858cd49e69907189e45fb99338c567474c40dfd930b60b2e1c4500bc8fe64bd","abstract_canon_sha256":"0ed9d6d3507f34929c09ec4d323040e7b658a0e6b3fe49fb7232b557bc11e0b3"},"schema_version":"1.0"},"canonical_sha256":"81c212cf9853cdfe50687263c6a118976008b0533842ea513d8b1a21088352f1","source":{"kind":"arxiv","id":"2505.00976","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.00976","created_at":"2026-07-05T10:57:42Z"},{"alias_kind":"arxiv_version","alias_value":"2505.00976v1","created_at":"2026-07-05T10:57:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.00976","created_at":"2026-07-05T10:57:42Z"},{"alias_kind":"pith_short_12","alias_value":"QHBBFT4YKPG7","created_at":"2026-07-05T10:57:42Z"},{"alias_kind":"pith_short_16","alias_value":"QHBBFT4YKPG74UDI","created_at":"2026-07-05T10:57:42Z"},{"alias_kind":"pith_short_8","alias_value":"QHBBFT4Y","created_at":"2026-07-05T10:57:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:QHBBFT4YKPG74UDIOJR4NIIYS5","target":"record","payload":{"canonical_record":{"source":{"id":"2505.00976","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-02T03:37:52Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"1858cd49e69907189e45fb99338c567474c40dfd930b60b2e1c4500bc8fe64bd","abstract_canon_sha256":"0ed9d6d3507f34929c09ec4d323040e7b658a0e6b3fe49fb7232b557bc11e0b3"},"schema_version":"1.0"},"canonical_sha256":"81c212cf9853cdfe50687263c6a118976008b0533842ea513d8b1a21088352f1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:57:42.849080Z","signature_b64":"qZCXyrDVWufhOJmLl/yc75EXn5LacYE/RqBlzELHI1yy3iVDtVdsGRbswzyEQRGVLQkWR57K1XFhoFSULipuAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"81c212cf9853cdfe50687263c6a118976008b0533842ea513d8b1a21088352f1","last_reissued_at":"2026-07-05T10:57:42.848532Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:57:42.848532Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.00976","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:57:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hhjQOWPpesa+bn7ucui6SsbO7p8YgDI/nr1pLZD5XeW7TIUqcEUJmU8N2j3I6eQYhnDlr99IXDDDBw6+zhNABw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-19T05:52:21.171182Z"},"content_sha256":"6dd155695495fdfbfcf453fec308422c391b5dfd88942ff274987b65834070d0","schema_version":"1.0","event_id":"sha256:6dd155695495fdfbfcf453fec308422c391b5dfd88942ff274987b65834070d0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:QHBBFT4YKPG74UDIOJR4NIIYS5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Attack and defense techniques in large language models: A survey and new perspectives","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.LG"],"primary_cat":"cs.CR","authors_text":"Hefeng Chen, Kang Chen, Kangkang Li, Xingwang Huang, Yuanguo Lin, Yuanhui Yu, Yunxuan Liu, Zhiyu Liao","submitted_at":"2025-05-02T03:37:52Z","abstract_excerpt":"Large Language Models (LLMs) have become central to numerous natural language processing tasks, but their vulnerabilities present significant security and ethical challenges. This systematic survey explores the evolving landscape of attack and defense techniques in LLMs. We classify attacks into adversarial prompt attack, optimized attacks, model theft, as well as attacks on application of LLMs, detailing their mechanisms and implications. Consequently, we analyze defense strategies, including prevention-based and detection-based defense methods. Although advances have been made, challenges re"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.00976","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.00976/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:57:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wltKkcTJiVKGxLx5a+W1naG2pkAGCwKK0PcAYO4t5aoTIBcIIXRXghDCOGL9h7sHYi1408SlCQ+H8XYS3bgwDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-19T05:52:21.171590Z"},"content_sha256":"05eea63bef961453f76f3f40efa188b9499bcd0671d4f526e3f90fcded5b0a35","schema_version":"1.0","event_id":"sha256:05eea63bef961453f76f3f40efa188b9499bcd0671d4f526e3f90fcded5b0a35"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QHBBFT4YKPG74UDIOJR4NIIYS5/bundle.json","state_url":"https://pith.science/pith/QHBBFT4YKPG74UDIOJR4NIIYS5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QHBBFT4YKPG74UDIOJR4NIIYS5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-19T05:52:21Z","links":{"resolver":"https://pith.science/pith/QHBBFT4YKPG74UDIOJR4NIIYS5","bundle":"https://pith.science/pith/QHBBFT4YKPG74UDIOJR4NIIYS5/bundle.json","state":"https://pith.science/pith/QHBBFT4YKPG74UDIOJR4NIIYS5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QHBBFT4YKPG74UDIOJR4NIIYS5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:QHBBFT4YKPG74UDIOJR4NIIYS5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0ed9d6d3507f34929c09ec4d323040e7b658a0e6b3fe49fb7232b557bc11e0b3","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-02T03:37:52Z","title_canon_sha256":"1858cd49e69907189e45fb99338c567474c40dfd930b60b2e1c4500bc8fe64bd"},"schema_version":"1.0","source":{"id":"2505.00976","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.00976","created_at":"2026-07-05T10:57:42Z"},{"alias_kind":"arxiv_version","alias_value":"2505.00976v1","created_at":"2026-07-05T10:57:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.00976","created_at":"2026-07-05T10:57:42Z"},{"alias_kind":"pith_short_12","alias_value":"QHBBFT4YKPG7","created_at":"2026-07-05T10:57:42Z"},{"alias_kind":"pith_short_16","alias_value":"QHBBFT4YKPG74UDI","created_at":"2026-07-05T10:57:42Z"},{"alias_kind":"pith_short_8","alias_value":"QHBBFT4Y","created_at":"2026-07-05T10:57:42Z"}],"graph_snapshots":[{"event_id":"sha256:05eea63bef961453f76f3f40efa188b9499bcd0671d4f526e3f90fcded5b0a35","target":"graph","created_at":"2026-07-05T10:57:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.00976/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) have become central to numerous natural language processing tasks, but their vulnerabilities present significant security and ethical challenges. This systematic survey explores the evolving landscape of attack and defense techniques in LLMs. We classify attacks into adversarial prompt attack, optimized attacks, model theft, as well as attacks on application of LLMs, detailing their mechanisms and implications. Consequently, we analyze defense strategies, including prevention-based and detection-based defense methods. Although advances have been made, challenges re","authors_text":"Hefeng Chen, Kang Chen, Kangkang Li, Xingwang Huang, Yuanguo Lin, Yuanhui Yu, Yunxuan Liu, Zhiyu Liao","cross_cats":["cs.AI","cs.CL","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-02T03:37:52Z","title":"Attack and defense techniques in large language models: A survey and new perspectives"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.00976","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6dd155695495fdfbfcf453fec308422c391b5dfd88942ff274987b65834070d0","target":"record","created_at":"2026-07-05T10:57:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0ed9d6d3507f34929c09ec4d323040e7b658a0e6b3fe49fb7232b557bc11e0b3","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-02T03:37:52Z","title_canon_sha256":"1858cd49e69907189e45fb99338c567474c40dfd930b60b2e1c4500bc8fe64bd"},"schema_version":"1.0","source":{"id":"2505.00976","kind":"arxiv","version":1}},"canonical_sha256":"81c212cf9853cdfe50687263c6a118976008b0533842ea513d8b1a21088352f1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"81c212cf9853cdfe50687263c6a118976008b0533842ea513d8b1a21088352f1","first_computed_at":"2026-07-05T10:57:42.848532Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:57:42.848532Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"qZCXyrDVWufhOJmLl/yc75EXn5LacYE/RqBlzELHI1yy3iVDtVdsGRbswzyEQRGVLQkWR57K1XFhoFSULipuAw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:57:42.849080Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.00976","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6dd155695495fdfbfcf453fec308422c391b5dfd88942ff274987b65834070d0","sha256:05eea63bef961453f76f3f40efa188b9499bcd0671d4f526e3f90fcded5b0a35"],"state_sha256":"64231c2781bd1c5681d6400e20e7e3ad4b062ce85527c9c6b5d32d5f27ccb21b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vCs/FU0m39eh5a3suc2v00K6MJbPWO3W+tQlwbtkE6sJgTOPpY0m9N3qavGfHYdW4rWmby67/icQF8eHBrbuAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-19T05:52:21.173705Z","bundle_sha256":"84005454a01bce60a2a2589e76758728656a3b562f7b1153ae598a297e2379ac"}}