{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:QRR57IYZ7OFTSG36NNSF4ZKKAP","short_pith_number":"pith:QRR57IYZ","canonical_record":{"source":{"id":"2011.10369","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2020-11-20T12:17:21Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"87027a0a725f956957866a6210e0c9a15327968f514fffbf2f2bd7eb22b9ddc9","abstract_canon_sha256":"2d0f2538a55b9f9b7ee6ce538eb919c8a12d4726d887ce597980f1fd302a00bb"},"schema_version":"1.0"},"canonical_sha256":"8463dfa319fb8b391b7e6b645e654a03cbaad89a73521b6b9e76152f9c0f2433","source":{"kind":"arxiv","id":"2011.10369","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2011.10369","created_at":"2026-07-05T03:28:50Z"},{"alias_kind":"arxiv_version","alias_value":"2011.10369v3","created_at":"2026-07-05T03:28:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2011.10369","created_at":"2026-07-05T03:28:50Z"},{"alias_kind":"pith_short_12","alias_value":"QRR57IYZ7OFT","created_at":"2026-07-05T03:28:50Z"},{"alias_kind":"pith_short_16","alias_value":"QRR57IYZ7OFTSG36","created_at":"2026-07-05T03:28:50Z"},{"alias_kind":"pith_short_8","alias_value":"QRR57IYZ","created_at":"2026-07-05T03:28:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:QRR57IYZ7OFTSG36NNSF4ZKKAP","target":"record","payload":{"canonical_record":{"source":{"id":"2011.10369","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2020-11-20T12:17:21Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"87027a0a725f956957866a6210e0c9a15327968f514fffbf2f2bd7eb22b9ddc9","abstract_canon_sha256":"2d0f2538a55b9f9b7ee6ce538eb919c8a12d4726d887ce597980f1fd302a00bb"},"schema_version":"1.0"},"canonical_sha256":"8463dfa319fb8b391b7e6b645e654a03cbaad89a73521b6b9e76152f9c0f2433","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:28:50.701023Z","signature_b64":"q7KLzfMHZvdef7eMuVdHRsilBjRq9TANH4TWaiOuHjAV1mtZYlEyPQuXAlGXGrIC0NJjkg98WBiQhoMOvgXvCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8463dfa319fb8b391b7e6b645e654a03cbaad89a73521b6b9e76152f9c0f2433","last_reissued_at":"2026-07-05T03:28:50.700542Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:28:50.700542Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2011.10369","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:28:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MN1rK4E9/gy6Tf5gN627sKM9E5kCaQCzeloJkq8scZxoLQs49MJ7CHqavkHIw6jnTTdvvNBJH0ZH6bMH+yt9AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T09:38:30.141144Z"},"content_sha256":"3948f1b5e83378202b28a1f8ab6f71fb96b15eab40a60fba7103f628db2f97c8","schema_version":"1.0","event_id":"sha256:3948f1b5e83378202b28a1f8ab6f71fb96b15eab40a60fba7103f628db2f97c8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:QRR57IYZ7OFTSG36NNSF4ZKKAP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.CY"],"primary_cat":"cs.CL","authors_text":"Fanchao Qi, Maosong Sun, Mukai Li, Yangyi Chen, Yuan Yao, Zhiyuan Liu","submitted_at":"2020-11-20T12:17:21Z","abstract_excerpt":"Backdoor attacks are a kind of emergent training-time threat to deep neural networks (DNNs). They can manipulate the output of DNNs and possess high insidiousness. In the field of natural language processing, some attack methods have been proposed and achieve very high attack success rates on multiple popular models. Nevertheless, there are few studies on defending against textual backdoor attacks. In this paper, we propose a simple and effective textual backdoor defense named ONION, which is based on outlier word detection and, to the best of our knowledge, is the first method that can handle"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2011.10369","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2011.10369/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:28:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OWWTk1g05CzNqgk/rOVWHSj8MEqe0Da0jmk+2og1SkOvvVkFBsISqgQpGq8sO74Tufl11AcxiNCMi9aHiBqTBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T09:38:30.141533Z"},"content_sha256":"450268ef9c92e12168e4b081fb65939002867f713449faee33b75c956927a175","schema_version":"1.0","event_id":"sha256:450268ef9c92e12168e4b081fb65939002867f713449faee33b75c956927a175"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QRR57IYZ7OFTSG36NNSF4ZKKAP/bundle.json","state_url":"https://pith.science/pith/QRR57IYZ7OFTSG36NNSF4ZKKAP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QRR57IYZ7OFTSG36NNSF4ZKKAP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T09:38:30Z","links":{"resolver":"https://pith.science/pith/QRR57IYZ7OFTSG36NNSF4ZKKAP","bundle":"https://pith.science/pith/QRR57IYZ7OFTSG36NNSF4ZKKAP/bundle.json","state":"https://pith.science/pith/QRR57IYZ7OFTSG36NNSF4ZKKAP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QRR57IYZ7OFTSG36NNSF4ZKKAP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:QRR57IYZ7OFTSG36NNSF4ZKKAP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2d0f2538a55b9f9b7ee6ce538eb919c8a12d4726d887ce597980f1fd302a00bb","cross_cats_sorted":["cs.CY"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2020-11-20T12:17:21Z","title_canon_sha256":"87027a0a725f956957866a6210e0c9a15327968f514fffbf2f2bd7eb22b9ddc9"},"schema_version":"1.0","source":{"id":"2011.10369","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2011.10369","created_at":"2026-07-05T03:28:50Z"},{"alias_kind":"arxiv_version","alias_value":"2011.10369v3","created_at":"2026-07-05T03:28:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2011.10369","created_at":"2026-07-05T03:28:50Z"},{"alias_kind":"pith_short_12","alias_value":"QRR57IYZ7OFT","created_at":"2026-07-05T03:28:50Z"},{"alias_kind":"pith_short_16","alias_value":"QRR57IYZ7OFTSG36","created_at":"2026-07-05T03:28:50Z"},{"alias_kind":"pith_short_8","alias_value":"QRR57IYZ","created_at":"2026-07-05T03:28:50Z"}],"graph_snapshots":[{"event_id":"sha256:450268ef9c92e12168e4b081fb65939002867f713449faee33b75c956927a175","target":"graph","created_at":"2026-07-05T03:28:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2011.10369/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attacks are a kind of emergent training-time threat to deep neural networks (DNNs). They can manipulate the output of DNNs and possess high insidiousness. In the field of natural language processing, some attack methods have been proposed and achieve very high attack success rates on multiple popular models. Nevertheless, there are few studies on defending against textual backdoor attacks. In this paper, we propose a simple and effective textual backdoor defense named ONION, which is based on outlier word detection and, to the best of our knowledge, is the first method that can handle","authors_text":"Fanchao Qi, Maosong Sun, Mukai Li, Yangyi Chen, Yuan Yao, Zhiyuan Liu","cross_cats":["cs.CY"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2011.10369","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3948f1b5e83378202b28a1f8ab6f71fb96b15eab40a60fba7103f628db2f97c8","target":"record","created_at":"2026-07-05T03:28:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2d0f2538a55b9f9b7ee6ce538eb919c8a12d4726d887ce597980f1fd302a00bb","cross_cats_sorted":["cs.CY"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2020-11-20T12:17:21Z","title_canon_sha256":"87027a0a725f956957866a6210e0c9a15327968f514fffbf2f2bd7eb22b9ddc9"},"schema_version":"1.0","source":{"id":"2011.10369","kind":"arxiv","version":3}},"canonical_sha256":"8463dfa319fb8b391b7e6b645e654a03cbaad89a73521b6b9e76152f9c0f2433","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8463dfa319fb8b391b7e6b645e654a03cbaad89a73521b6b9e76152f9c0f2433","first_computed_at":"2026-07-05T03:28:50.700542Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:28:50.700542Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"q7KLzfMHZvdef7eMuVdHRsilBjRq9TANH4TWaiOuHjAV1mtZYlEyPQuXAlGXGrIC0NJjkg98WBiQhoMOvgXvCg==","signature_status":"signed_v1","signed_at":"2026-07-05T03:28:50.701023Z","signed_message":"canonical_sha256_bytes"},"source_id":"2011.10369","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3948f1b5e83378202b28a1f8ab6f71fb96b15eab40a60fba7103f628db2f97c8","sha256:450268ef9c92e12168e4b081fb65939002867f713449faee33b75c956927a175"],"state_sha256":"8fd8428d4773fcac6bce700da2f4cb9078b33078b50c79059151cf5c85ca0297"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RV0ws7pBfRJEYQBbsb4PG2oFACSR/SIax6mulwIu2tBLomvgRlA/RqbAZMjTUadTigf5cXUBAprmOG8MVXO0Dw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T09:38:30.143499Z","bundle_sha256":"f6402be4850c5d7dd81cc54a7eade63c765b7a19bfea6a3f7d1886d94cd8bd9c"}}