{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:QYDJE45WXAXQ4L4ETH5LJCZKK4","short_pith_number":"pith:QYDJE45W","canonical_record":{"source":{"id":"2010.05821","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-12T16:16:27Z","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"title_canon_sha256":"6eaf729aeb5d4957b6841d609c971cde288875c04d9c7ce1ed75db9b89851bc5","abstract_canon_sha256":"d0cd43a5e1ba620c6fc91c80759961c6b752e2cc44c80471c6917ae125561374"},"schema_version":"1.0"},"canonical_sha256":"86069273b6b82f0e2f8499fab48b2a571a86ff6ad671f671396f0751763fdd6b","source":{"kind":"arxiv","id":"2010.05821","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.05821","created_at":"2026-07-05T01:52:48Z"},{"alias_kind":"arxiv_version","alias_value":"2010.05821v3","created_at":"2026-07-05T01:52:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.05821","created_at":"2026-07-05T01:52:48Z"},{"alias_kind":"pith_short_12","alias_value":"QYDJE45WXAXQ","created_at":"2026-07-05T01:52:48Z"},{"alias_kind":"pith_short_16","alias_value":"QYDJE45WXAXQ4L4E","created_at":"2026-07-05T01:52:48Z"},{"alias_kind":"pith_short_8","alias_value":"QYDJE45W","created_at":"2026-07-05T01:52:48Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:QYDJE45WXAXQ4L4ETH5LJCZKK4","target":"record","payload":{"canonical_record":{"source":{"id":"2010.05821","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-12T16:16:27Z","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"title_canon_sha256":"6eaf729aeb5d4957b6841d609c971cde288875c04d9c7ce1ed75db9b89851bc5","abstract_canon_sha256":"d0cd43a5e1ba620c6fc91c80759961c6b752e2cc44c80471c6917ae125561374"},"schema_version":"1.0"},"canonical_sha256":"86069273b6b82f0e2f8499fab48b2a571a86ff6ad671f671396f0751763fdd6b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:52:48.174274Z","signature_b64":"AciOfa4d0tEpItPp7qseCRhewv2zyMhFnc64lSRw6kQmvF31wulGoX/Ed/KqdO5nwpOXv/KJE+HkthWa8C4wCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"86069273b6b82f0e2f8499fab48b2a571a86ff6ad671f671396f0751763fdd6b","last_reissued_at":"2026-07-05T01:52:48.173860Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:52:48.173860Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2010.05821","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:52:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7JQA3NfRez26WH35BbAC/HYIA1X/fXxBpAIgD9s9vCBqKUL7pkstlr8nuHUE/iKwx99lj6w6VfYeo31aaeDDAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T03:23:20.213750Z"},"content_sha256":"e950eb2694e557e36ee66392a526ae0492dcebca20f89db7e2edc5fa143ab139","schema_version":"1.0","event_id":"sha256:e950eb2694e557e36ee66392a526ae0492dcebca20f89db7e2edc5fa143ab139"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:QYDJE45WXAXQ4L4ETH5LJCZKK4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Open-sourced Dataset Protection via Backdoor Watermarking","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Baoyuan Wu, Jiawang Bai, Shu-Tao Xia, Yiming Li, Yong Jiang, Ziqi Zhang","submitted_at":"2020-10-12T16:16:27Z","abstract_excerpt":"The rapid development of deep learning has benefited from the release of some high-quality open-sourced datasets ($e.g.$, ImageNet), which allows researchers to easily verify the effectiveness of their algorithms. Almost all existing open-sourced datasets require that they can only be adopted for academic or educational purposes rather than commercial purposes, whereas there is still no good way to protect them. In this paper, we propose a \\emph{backdoor embedding based dataset watermarking} method to protect an open-sourced image-classification dataset by verifying whether it is used for trai"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.05821","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2010.05821/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:52:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pOYVeQpUBXOt4QRctbd9omXo2KqTaE4S3ooe3ffmWHyD3EQ8VfL0tw2v6HZe5mnBg4nRkh1vFnoM0i6wuYZoAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T03:23:20.214287Z"},"content_sha256":"daa729eff3e10704d7ba3c87e8bd7ea6cdefb8f503fdd6b13a1ecc2aa7616bec","schema_version":"1.0","event_id":"sha256:daa729eff3e10704d7ba3c87e8bd7ea6cdefb8f503fdd6b13a1ecc2aa7616bec"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QYDJE45WXAXQ4L4ETH5LJCZKK4/bundle.json","state_url":"https://pith.science/pith/QYDJE45WXAXQ4L4ETH5LJCZKK4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QYDJE45WXAXQ4L4ETH5LJCZKK4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T03:23:20Z","links":{"resolver":"https://pith.science/pith/QYDJE45WXAXQ4L4ETH5LJCZKK4","bundle":"https://pith.science/pith/QYDJE45WXAXQ4L4ETH5LJCZKK4/bundle.json","state":"https://pith.science/pith/QYDJE45WXAXQ4L4ETH5LJCZKK4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QYDJE45WXAXQ4L4ETH5LJCZKK4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:QYDJE45WXAXQ4L4ETH5LJCZKK4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d0cd43a5e1ba620c6fc91c80759961c6b752e2cc44c80471c6917ae125561374","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-12T16:16:27Z","title_canon_sha256":"6eaf729aeb5d4957b6841d609c971cde288875c04d9c7ce1ed75db9b89851bc5"},"schema_version":"1.0","source":{"id":"2010.05821","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.05821","created_at":"2026-07-05T01:52:48Z"},{"alias_kind":"arxiv_version","alias_value":"2010.05821v3","created_at":"2026-07-05T01:52:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.05821","created_at":"2026-07-05T01:52:48Z"},{"alias_kind":"pith_short_12","alias_value":"QYDJE45WXAXQ","created_at":"2026-07-05T01:52:48Z"},{"alias_kind":"pith_short_16","alias_value":"QYDJE45WXAXQ4L4E","created_at":"2026-07-05T01:52:48Z"},{"alias_kind":"pith_short_8","alias_value":"QYDJE45W","created_at":"2026-07-05T01:52:48Z"}],"graph_snapshots":[{"event_id":"sha256:daa729eff3e10704d7ba3c87e8bd7ea6cdefb8f503fdd6b13a1ecc2aa7616bec","target":"graph","created_at":"2026-07-05T01:52:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2010.05821/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The rapid development of deep learning has benefited from the release of some high-quality open-sourced datasets ($e.g.$, ImageNet), which allows researchers to easily verify the effectiveness of their algorithms. Almost all existing open-sourced datasets require that they can only be adopted for academic or educational purposes rather than commercial purposes, whereas there is still no good way to protect them. In this paper, we propose a \\emph{backdoor embedding based dataset watermarking} method to protect an open-sourced image-classification dataset by verifying whether it is used for trai","authors_text":"Baoyuan Wu, Jiawang Bai, Shu-Tao Xia, Yiming Li, Yong Jiang, Ziqi Zhang","cross_cats":["cs.AI","cs.CV","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-12T16:16:27Z","title":"Open-sourced Dataset Protection via Backdoor Watermarking"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.05821","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e950eb2694e557e36ee66392a526ae0492dcebca20f89db7e2edc5fa143ab139","target":"record","created_at":"2026-07-05T01:52:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d0cd43a5e1ba620c6fc91c80759961c6b752e2cc44c80471c6917ae125561374","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-12T16:16:27Z","title_canon_sha256":"6eaf729aeb5d4957b6841d609c971cde288875c04d9c7ce1ed75db9b89851bc5"},"schema_version":"1.0","source":{"id":"2010.05821","kind":"arxiv","version":3}},"canonical_sha256":"86069273b6b82f0e2f8499fab48b2a571a86ff6ad671f671396f0751763fdd6b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"86069273b6b82f0e2f8499fab48b2a571a86ff6ad671f671396f0751763fdd6b","first_computed_at":"2026-07-05T01:52:48.173860Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:52:48.173860Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"AciOfa4d0tEpItPp7qseCRhewv2zyMhFnc64lSRw6kQmvF31wulGoX/Ed/KqdO5nwpOXv/KJE+HkthWa8C4wCw==","signature_status":"signed_v1","signed_at":"2026-07-05T01:52:48.174274Z","signed_message":"canonical_sha256_bytes"},"source_id":"2010.05821","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e950eb2694e557e36ee66392a526ae0492dcebca20f89db7e2edc5fa143ab139","sha256:daa729eff3e10704d7ba3c87e8bd7ea6cdefb8f503fdd6b13a1ecc2aa7616bec"],"state_sha256":"95a781f931f56fb13f64c66a7ba99044f4a1ee39f6f2fe1c4331fe7df7a1fe14"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"F6yBlLu4tEhJLbOSLx0mogi+DOowthskRvmmPBVvPz8IRpP5oYYXB8uVOzhi5RjLZ+Ky4NZuIeQMVcryvnPQAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T03:23:20.218957Z","bundle_sha256":"53f3f06be6a753d0d289f2d8589b01766dde41f8fe3ff6e7f6f5ab4ff6d9f106"}}