{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:QKCPYXTY2SNWRDNKSGSZK3ORPL","short_pith_number":"pith:QKCPYXTY","canonical_record":{"source":{"id":"2207.10825","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-07-22T00:21:18Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"8dfc0465a1b48a7682b536ac096787310e7c4cca46bff1342d413be5be61ed79","abstract_canon_sha256":"d318af7660787b74d757756e92726b5623b19e846ef850b9ca334a06a2c39f08"},"schema_version":"1.0"},"canonical_sha256":"8284fc5e78d49b688daa91a5956dd17aefaaf21ff399253a93838746134cc8c9","source":{"kind":"arxiv","id":"2207.10825","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.10825","created_at":"2026-07-05T04:42:39Z"},{"alias_kind":"arxiv_version","alias_value":"2207.10825v1","created_at":"2026-07-05T04:42:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.10825","created_at":"2026-07-05T04:42:39Z"},{"alias_kind":"pith_short_12","alias_value":"QKCPYXTY2SNW","created_at":"2026-07-05T04:42:39Z"},{"alias_kind":"pith_short_16","alias_value":"QKCPYXTY2SNWRDNK","created_at":"2026-07-05T04:42:39Z"},{"alias_kind":"pith_short_8","alias_value":"QKCPYXTY","created_at":"2026-07-05T04:42:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:QKCPYXTY2SNWRDNKSGSZK3ORPL","target":"record","payload":{"canonical_record":{"source":{"id":"2207.10825","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-07-22T00:21:18Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"8dfc0465a1b48a7682b536ac096787310e7c4cca46bff1342d413be5be61ed79","abstract_canon_sha256":"d318af7660787b74d757756e92726b5623b19e846ef850b9ca334a06a2c39f08"},"schema_version":"1.0"},"canonical_sha256":"8284fc5e78d49b688daa91a5956dd17aefaaf21ff399253a93838746134cc8c9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:42:39.956891Z","signature_b64":"6uUJfJpwgB3X/honTKWJ7AffN8cED9QBiZxzVzqsEmScVU4dLLOqIh+UlsWfCqdB/mXCzsvL0F0FYApPN8pCCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8284fc5e78d49b688daa91a5956dd17aefaaf21ff399253a93838746134cc8c9","last_reissued_at":"2026-07-05T04:42:39.956447Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:42:39.956447Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2207.10825","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:42:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cHNFA+rYIGzebVmDBozvhCwjjpcLrorDenZglU/b23aLHGB+zp1OLxPg9VDKVTrnCPI5y2J4g58Bh6oxunigBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T10:06:15.356904Z"},"content_sha256":"19193989ebf35f3d2fbe7a9a6ebb83ed35e5bd0b276a61ff13c3f4cdd24847f9","schema_version":"1.0","event_id":"sha256:19193989ebf35f3d2fbe7a9a6ebb83ed35e5bd0b276a61ff13c3f4cdd24847f9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:QKCPYXTY2SNWRDNKSGSZK3ORPL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Just Rotate it: Deploying Backdoor Attacks via Rotation Transformation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Prateek Mittal, Saeed Mahloujifar, Tianhao Wang, Tong Wu, Vikash Sehwag","submitted_at":"2022-07-22T00:21:18Z","abstract_excerpt":"Recent works have demonstrated that deep learning models are vulnerable to backdoor poisoning attacks, where these attacks instill spurious correlations to external trigger patterns or objects (e.g., stickers, sunglasses, etc.). We find that such external trigger signals are unnecessary, as highly effective backdoors can be easily inserted using rotation-based image transformation. Our method constructs the poisoned dataset by rotating a limited amount of objects and labeling them incorrectly; once trained with it, the victim's model will make undesirable predictions during run-time inference."},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.10825","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2207.10825/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:42:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lq1lofoAinglLjEJndy9irbhSIWuDx9VvBYTTF8Sljiypd41rKC1aN295ORIvlcVIv9DMguifuq1Qa0x/cr1Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T10:06:15.357829Z"},"content_sha256":"826b2d99cfdb9f3f77f27d9fb3dcd150a0c3ef66c8d0c363832dbdb377dcde12","schema_version":"1.0","event_id":"sha256:826b2d99cfdb9f3f77f27d9fb3dcd150a0c3ef66c8d0c363832dbdb377dcde12"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QKCPYXTY2SNWRDNKSGSZK3ORPL/bundle.json","state_url":"https://pith.science/pith/QKCPYXTY2SNWRDNKSGSZK3ORPL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QKCPYXTY2SNWRDNKSGSZK3ORPL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T10:06:15Z","links":{"resolver":"https://pith.science/pith/QKCPYXTY2SNWRDNKSGSZK3ORPL","bundle":"https://pith.science/pith/QKCPYXTY2SNWRDNKSGSZK3ORPL/bundle.json","state":"https://pith.science/pith/QKCPYXTY2SNWRDNKSGSZK3ORPL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QKCPYXTY2SNWRDNKSGSZK3ORPL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:QKCPYXTY2SNWRDNKSGSZK3ORPL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d318af7660787b74d757756e92726b5623b19e846ef850b9ca334a06a2c39f08","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-07-22T00:21:18Z","title_canon_sha256":"8dfc0465a1b48a7682b536ac096787310e7c4cca46bff1342d413be5be61ed79"},"schema_version":"1.0","source":{"id":"2207.10825","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.10825","created_at":"2026-07-05T04:42:39Z"},{"alias_kind":"arxiv_version","alias_value":"2207.10825v1","created_at":"2026-07-05T04:42:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.10825","created_at":"2026-07-05T04:42:39Z"},{"alias_kind":"pith_short_12","alias_value":"QKCPYXTY2SNW","created_at":"2026-07-05T04:42:39Z"},{"alias_kind":"pith_short_16","alias_value":"QKCPYXTY2SNWRDNK","created_at":"2026-07-05T04:42:39Z"},{"alias_kind":"pith_short_8","alias_value":"QKCPYXTY","created_at":"2026-07-05T04:42:39Z"}],"graph_snapshots":[{"event_id":"sha256:826b2d99cfdb9f3f77f27d9fb3dcd150a0c3ef66c8d0c363832dbdb377dcde12","target":"graph","created_at":"2026-07-05T04:42:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2207.10825/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent works have demonstrated that deep learning models are vulnerable to backdoor poisoning attacks, where these attacks instill spurious correlations to external trigger patterns or objects (e.g., stickers, sunglasses, etc.). We find that such external trigger signals are unnecessary, as highly effective backdoors can be easily inserted using rotation-based image transformation. Our method constructs the poisoned dataset by rotating a limited amount of objects and labeling them incorrectly; once trained with it, the victim's model will make undesirable predictions during run-time inference.","authors_text":"Prateek Mittal, Saeed Mahloujifar, Tianhao Wang, Tong Wu, Vikash Sehwag","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-07-22T00:21:18Z","title":"Just Rotate it: Deploying Backdoor Attacks via Rotation Transformation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.10825","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:19193989ebf35f3d2fbe7a9a6ebb83ed35e5bd0b276a61ff13c3f4cdd24847f9","target":"record","created_at":"2026-07-05T04:42:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d318af7660787b74d757756e92726b5623b19e846ef850b9ca334a06a2c39f08","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-07-22T00:21:18Z","title_canon_sha256":"8dfc0465a1b48a7682b536ac096787310e7c4cca46bff1342d413be5be61ed79"},"schema_version":"1.0","source":{"id":"2207.10825","kind":"arxiv","version":1}},"canonical_sha256":"8284fc5e78d49b688daa91a5956dd17aefaaf21ff399253a93838746134cc8c9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8284fc5e78d49b688daa91a5956dd17aefaaf21ff399253a93838746134cc8c9","first_computed_at":"2026-07-05T04:42:39.956447Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:42:39.956447Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6uUJfJpwgB3X/honTKWJ7AffN8cED9QBiZxzVzqsEmScVU4dLLOqIh+UlsWfCqdB/mXCzsvL0F0FYApPN8pCCA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:42:39.956891Z","signed_message":"canonical_sha256_bytes"},"source_id":"2207.10825","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:19193989ebf35f3d2fbe7a9a6ebb83ed35e5bd0b276a61ff13c3f4cdd24847f9","sha256:826b2d99cfdb9f3f77f27d9fb3dcd150a0c3ef66c8d0c363832dbdb377dcde12"],"state_sha256":"8bbc482d125eb43ae51e9f8e100403d14e7b40be2c7a72fc45f212a9116e418f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AljcNEFR9WAvtpHS+vUtUJ228qezldOZR6DvMp5368/7K85aXN3GQW4gM4R0Oj02IClg2BM4dGdnJSMJBkSjAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T10:06:15.363054Z","bundle_sha256":"1bf7c66938a95ae6f10b70c3257691762d44acd35969b77a2cde117bc74564e0"}}