{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:QKCPYXTY2SNWRDNKSGSZK3ORPL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d318af7660787b74d757756e92726b5623b19e846ef850b9ca334a06a2c39f08","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-07-22T00:21:18Z","title_canon_sha256":"8dfc0465a1b48a7682b536ac096787310e7c4cca46bff1342d413be5be61ed79"},"schema_version":"1.0","source":{"id":"2207.10825","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.10825","created_at":"2026-07-05T04:42:39Z"},{"alias_kind":"arxiv_version","alias_value":"2207.10825v1","created_at":"2026-07-05T04:42:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.10825","created_at":"2026-07-05T04:42:39Z"},{"alias_kind":"pith_short_12","alias_value":"QKCPYXTY2SNW","created_at":"2026-07-05T04:42:39Z"},{"alias_kind":"pith_short_16","alias_value":"QKCPYXTY2SNWRDNK","created_at":"2026-07-05T04:42:39Z"},{"alias_kind":"pith_short_8","alias_value":"QKCPYXTY","created_at":"2026-07-05T04:42:39Z"}],"graph_snapshots":[{"event_id":"sha256:826b2d99cfdb9f3f77f27d9fb3dcd150a0c3ef66c8d0c363832dbdb377dcde12","target":"graph","created_at":"2026-07-05T04:42:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2207.10825/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent works have demonstrated that deep learning models are vulnerable to backdoor poisoning attacks, where these attacks instill spurious correlations to external trigger patterns or objects (e.g., stickers, sunglasses, etc.). We find that such external trigger signals are unnecessary, as highly effective backdoors can be easily inserted using rotation-based image transformation. Our method constructs the poisoned dataset by rotating a limited amount of objects and labeling them incorrectly; once trained with it, the victim's model will make undesirable predictions during run-time inference.","authors_text":"Prateek Mittal, Saeed Mahloujifar, Tianhao Wang, Tong Wu, Vikash Sehwag","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-07-22T00:21:18Z","title":"Just Rotate it: Deploying Backdoor Attacks via Rotation Transformation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.10825","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:19193989ebf35f3d2fbe7a9a6ebb83ed35e5bd0b276a61ff13c3f4cdd24847f9","target":"record","created_at":"2026-07-05T04:42:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d318af7660787b74d757756e92726b5623b19e846ef850b9ca334a06a2c39f08","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-07-22T00:21:18Z","title_canon_sha256":"8dfc0465a1b48a7682b536ac096787310e7c4cca46bff1342d413be5be61ed79"},"schema_version":"1.0","source":{"id":"2207.10825","kind":"arxiv","version":1}},"canonical_sha256":"8284fc5e78d49b688daa91a5956dd17aefaaf21ff399253a93838746134cc8c9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8284fc5e78d49b688daa91a5956dd17aefaaf21ff399253a93838746134cc8c9","first_computed_at":"2026-07-05T04:42:39.956447Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:42:39.956447Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6uUJfJpwgB3X/honTKWJ7AffN8cED9QBiZxzVzqsEmScVU4dLLOqIh+UlsWfCqdB/mXCzsvL0F0FYApPN8pCCA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:42:39.956891Z","signed_message":"canonical_sha256_bytes"},"source_id":"2207.10825","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:19193989ebf35f3d2fbe7a9a6ebb83ed35e5bd0b276a61ff13c3f4cdd24847f9","sha256:826b2d99cfdb9f3f77f27d9fb3dcd150a0c3ef66c8d0c363832dbdb377dcde12"],"state_sha256":"8bbc482d125eb43ae51e9f8e100403d14e7b40be2c7a72fc45f212a9116e418f"}