{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:QM6SMCNCO3LA5QT3HHDIDDDQR4","short_pith_number":"pith:QM6SMCNC","canonical_record":{"source":{"id":"2312.00050","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-27T23:58:56Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"c818ea3e2d754820a3022919b9bd36db38b852d4429281b02bdd92e74b4b6737","abstract_canon_sha256":"8f1b068b8dde705755fab436a88453c772feaeb22a6a0e3fb3705340fff0a316"},"schema_version":"1.0"},"canonical_sha256":"833d2609a276d60ec27b39c6818c708f28fa695f5ee0bbf90e421d1b7bad40a4","source":{"kind":"arxiv","id":"2312.00050","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.00050","created_at":"2026-07-05T07:41:00Z"},{"alias_kind":"arxiv_version","alias_value":"2312.00050v2","created_at":"2026-07-05T07:41:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.00050","created_at":"2026-07-05T07:41:00Z"},{"alias_kind":"pith_short_12","alias_value":"QM6SMCNCO3LA","created_at":"2026-07-05T07:41:00Z"},{"alias_kind":"pith_short_16","alias_value":"QM6SMCNCO3LA5QT3","created_at":"2026-07-05T07:41:00Z"},{"alias_kind":"pith_short_8","alias_value":"QM6SMCNC","created_at":"2026-07-05T07:41:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:QM6SMCNCO3LA5QT3HHDIDDDQR4","target":"record","payload":{"canonical_record":{"source":{"id":"2312.00050","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-27T23:58:56Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"c818ea3e2d754820a3022919b9bd36db38b852d4429281b02bdd92e74b4b6737","abstract_canon_sha256":"8f1b068b8dde705755fab436a88453c772feaeb22a6a0e3fb3705340fff0a316"},"schema_version":"1.0"},"canonical_sha256":"833d2609a276d60ec27b39c6818c708f28fa695f5ee0bbf90e421d1b7bad40a4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:41:00.635924Z","signature_b64":"2mjOJej0Sh6Ul5jW8I4VSHwMhQT3GRDw5jwlK99+ZwjhrTkCHklKECB6h/EXbI0wU37ily4S56u415w0N9FmDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"833d2609a276d60ec27b39c6818c708f28fa695f5ee0bbf90e421d1b7bad40a4","last_reissued_at":"2026-07-05T07:41:00.635431Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:41:00.635431Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.00050","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:41:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ey/gfvyo1UNzR//nJq8jUPaBiX0TWV7kRzYukHOM01oYc4Ti7R1+AaRzSmQRw+PwqVmZ5YEHhxjPYs+mopMfAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T08:41:24.700358Z"},"content_sha256":"046d0982022092d4612591ba67bb5b25af3f1431fbb5703eb4a95984da15d501","schema_version":"1.0","event_id":"sha256:046d0982022092d4612591ba67bb5b25af3f1431fbb5703eb4a95984da15d501"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:QM6SMCNCO3LA5QT3HHDIDDDQR4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shift","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Guangyu Shen, Guanhong Tao, Kaiyuan Zhang, Pin-Yu Chen, Qiuling Xu, Shengwei An, Sheng-Yen Chou, Shiqing Ma, Siyuan Cheng, Tsung-Yi Ho, Xiangyu Zhang","submitted_at":"2023-11-27T23:58:56Z","abstract_excerpt":"Diffusion models (DM) have become state-of-the-art generative models because of their capability to generate high-quality images from noises without adversarial training. However, they are vulnerable to backdoor attacks as reported by recent studies. When a data input (e.g., some Gaussian noise) is stamped with a trigger (e.g., a white patch), the backdoored model always generates the target image (e.g., an improper photo). However, effective defense strategies to mitigate backdoors from DMs are underexplored. To bridge this gap, we propose the first backdoor detection and removal framework fo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.00050","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.00050/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:41:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gsKI5sPN6dgZh68YQ/niWhhwxfc3XHhUONlF3ZYjN474n0ZOpgwEX/U3YwZJP323q5UBA40FyR85yoUZ+2oGAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T08:41:24.701446Z"},"content_sha256":"4cbf0c24af51123a491721317cf7ad53aba494c9770bb5eee683eb090d757deb","schema_version":"1.0","event_id":"sha256:4cbf0c24af51123a491721317cf7ad53aba494c9770bb5eee683eb090d757deb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QM6SMCNCO3LA5QT3HHDIDDDQR4/bundle.json","state_url":"https://pith.science/pith/QM6SMCNCO3LA5QT3HHDIDDDQR4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QM6SMCNCO3LA5QT3HHDIDDDQR4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T08:41:24Z","links":{"resolver":"https://pith.science/pith/QM6SMCNCO3LA5QT3HHDIDDDQR4","bundle":"https://pith.science/pith/QM6SMCNCO3LA5QT3HHDIDDDQR4/bundle.json","state":"https://pith.science/pith/QM6SMCNCO3LA5QT3HHDIDDDQR4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QM6SMCNCO3LA5QT3HHDIDDDQR4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:QM6SMCNCO3LA5QT3HHDIDDDQR4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8f1b068b8dde705755fab436a88453c772feaeb22a6a0e3fb3705340fff0a316","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-27T23:58:56Z","title_canon_sha256":"c818ea3e2d754820a3022919b9bd36db38b852d4429281b02bdd92e74b4b6737"},"schema_version":"1.0","source":{"id":"2312.00050","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.00050","created_at":"2026-07-05T07:41:00Z"},{"alias_kind":"arxiv_version","alias_value":"2312.00050v2","created_at":"2026-07-05T07:41:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.00050","created_at":"2026-07-05T07:41:00Z"},{"alias_kind":"pith_short_12","alias_value":"QM6SMCNCO3LA","created_at":"2026-07-05T07:41:00Z"},{"alias_kind":"pith_short_16","alias_value":"QM6SMCNCO3LA5QT3","created_at":"2026-07-05T07:41:00Z"},{"alias_kind":"pith_short_8","alias_value":"QM6SMCNC","created_at":"2026-07-05T07:41:00Z"}],"graph_snapshots":[{"event_id":"sha256:4cbf0c24af51123a491721317cf7ad53aba494c9770bb5eee683eb090d757deb","target":"graph","created_at":"2026-07-05T07:41:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.00050/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Diffusion models (DM) have become state-of-the-art generative models because of their capability to generate high-quality images from noises without adversarial training. However, they are vulnerable to backdoor attacks as reported by recent studies. When a data input (e.g., some Gaussian noise) is stamped with a trigger (e.g., a white patch), the backdoored model always generates the target image (e.g., an improper photo). However, effective defense strategies to mitigate backdoors from DMs are underexplored. To bridge this gap, we propose the first backdoor detection and removal framework fo","authors_text":"Guangyu Shen, Guanhong Tao, Kaiyuan Zhang, Pin-Yu Chen, Qiuling Xu, Shengwei An, Sheng-Yen Chou, Shiqing Ma, Siyuan Cheng, Tsung-Yi Ho, Xiangyu Zhang","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-27T23:58:56Z","title":"Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shift"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.00050","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:046d0982022092d4612591ba67bb5b25af3f1431fbb5703eb4a95984da15d501","target":"record","created_at":"2026-07-05T07:41:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8f1b068b8dde705755fab436a88453c772feaeb22a6a0e3fb3705340fff0a316","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-27T23:58:56Z","title_canon_sha256":"c818ea3e2d754820a3022919b9bd36db38b852d4429281b02bdd92e74b4b6737"},"schema_version":"1.0","source":{"id":"2312.00050","kind":"arxiv","version":2}},"canonical_sha256":"833d2609a276d60ec27b39c6818c708f28fa695f5ee0bbf90e421d1b7bad40a4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"833d2609a276d60ec27b39c6818c708f28fa695f5ee0bbf90e421d1b7bad40a4","first_computed_at":"2026-07-05T07:41:00.635431Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:41:00.635431Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2mjOJej0Sh6Ul5jW8I4VSHwMhQT3GRDw5jwlK99+ZwjhrTkCHklKECB6h/EXbI0wU37ily4S56u415w0N9FmDg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:41:00.635924Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.00050","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:046d0982022092d4612591ba67bb5b25af3f1431fbb5703eb4a95984da15d501","sha256:4cbf0c24af51123a491721317cf7ad53aba494c9770bb5eee683eb090d757deb"],"state_sha256":"8afb2d99babd45f30675156dd201236a7a79cc3ad8f0f7dc86f5e6925e619a38"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"18sKQ2HrIjWAXuByi4yJlICUmxWDL0diqrJCXjqiyKcujUsDjt8Kd09uAk1N5bzSMobH3mX5VkgNNQisYBg/Cw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T08:41:24.707064Z","bundle_sha256":"bca60ae52b67e332fffaa913890a000d0b282f546f8c73d90e78aedbc6f00c15"}}