{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:QZPFUT2T3A5FAGWYDPEY6EUOUN","short_pith_number":"pith:QZPFUT2T","canonical_record":{"source":{"id":"2403.10717","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-03-15T22:35:07Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"a8d2a04d254ab3c49c0061a31396790e25d69392e205bf114132ad089aa2bb82","abstract_canon_sha256":"7151fb2d9f794b5ff23bc091e71117fbe91c217499b6a3623e4a6d7eb0dd2ea2"},"schema_version":"1.0"},"canonical_sha256":"865e5a4f53d83a501ad81bc98f128ea36fa1594d313db7d7353e671ecaa2e662","source":{"kind":"arxiv","id":"2403.10717","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.10717","created_at":"2026-07-05T07:57:05Z"},{"alias_kind":"arxiv_version","alias_value":"2403.10717v1","created_at":"2026-07-05T07:57:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.10717","created_at":"2026-07-05T07:57:05Z"},{"alias_kind":"pith_short_12","alias_value":"QZPFUT2T3A5F","created_at":"2026-07-05T07:57:05Z"},{"alias_kind":"pith_short_16","alias_value":"QZPFUT2T3A5FAGWY","created_at":"2026-07-05T07:57:05Z"},{"alias_kind":"pith_short_8","alias_value":"QZPFUT2T","created_at":"2026-07-05T07:57:05Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:QZPFUT2T3A5FAGWYDPEY6EUOUN","target":"record","payload":{"canonical_record":{"source":{"id":"2403.10717","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-03-15T22:35:07Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"a8d2a04d254ab3c49c0061a31396790e25d69392e205bf114132ad089aa2bb82","abstract_canon_sha256":"7151fb2d9f794b5ff23bc091e71117fbe91c217499b6a3623e4a6d7eb0dd2ea2"},"schema_version":"1.0"},"canonical_sha256":"865e5a4f53d83a501ad81bc98f128ea36fa1594d313db7d7353e671ecaa2e662","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:57:05.531856Z","signature_b64":"1Zdgttk3ufCJn5pcu58a/WSQPbKp+7GFOSrmM9aa4FePy5QOW3EeLuuU+FcNKrGLjQQ79CNKmz+tXaJ6uUCTAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"865e5a4f53d83a501ad81bc98f128ea36fa1594d313db7d7353e671ecaa2e662","last_reissued_at":"2026-07-05T07:57:05.531392Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:57:05.531392Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.10717","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:57:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fbnOQvYOMlqtglfawYymRpClplQUlcri6Qwn3b1qWfOCGkPEl2GEIYbyvvJldze4y9x+s4WCu03nQnfYM5ZdCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T16:06:09.141168Z"},"content_sha256":"a261eb16005eefdaff6057dd95ea3e3709657cd1ae3fe3c05e509660ede127db","schema_version":"1.0","event_id":"sha256:a261eb16005eefdaff6057dd95ea3e3709657cd1ae3fe3c05e509660ede127db"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:QZPFUT2T3A5FAGWYDPEY6EUOUN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistency","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Bingquan Shen, Ren Wang, Sijia Liu, Soumyadeep Pal, Yuguang Yao","submitted_at":"2024-03-15T22:35:07Z","abstract_excerpt":"Modern machine learning (ML) systems demand substantial training data, often resorting to external sources. Nevertheless, this practice renders them vulnerable to backdoor poisoning attacks. Prior backdoor defense strategies have primarily focused on the identification of backdoored models or poisoned data characteristics, typically operating under the assumption of access to clean data. In this work, we delve into a relatively underexplored challenge: the automatic identification of backdoor data within a poisoned dataset, all under realistic conditions, i.e., without the need for additional "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.10717","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.10717/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:57:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Jr7PmEoflEVim/t579Y1L+rghmH05euLYRyvOkI/OBtWLUsN8N6H+sOkKhodCn+O1rIulJVANGIgkT1/5DDgBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T16:06:09.141687Z"},"content_sha256":"57b352efd3ba969b6d41918e165d6d98c8bbd58d5aa0d76ff7b3b72b5b6467fa","schema_version":"1.0","event_id":"sha256:57b352efd3ba969b6d41918e165d6d98c8bbd58d5aa0d76ff7b3b72b5b6467fa"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QZPFUT2T3A5FAGWYDPEY6EUOUN/bundle.json","state_url":"https://pith.science/pith/QZPFUT2T3A5FAGWYDPEY6EUOUN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QZPFUT2T3A5FAGWYDPEY6EUOUN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T16:06:09Z","links":{"resolver":"https://pith.science/pith/QZPFUT2T3A5FAGWYDPEY6EUOUN","bundle":"https://pith.science/pith/QZPFUT2T3A5FAGWYDPEY6EUOUN/bundle.json","state":"https://pith.science/pith/QZPFUT2T3A5FAGWYDPEY6EUOUN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QZPFUT2T3A5FAGWYDPEY6EUOUN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:QZPFUT2T3A5FAGWYDPEY6EUOUN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7151fb2d9f794b5ff23bc091e71117fbe91c217499b6a3623e4a6d7eb0dd2ea2","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-03-15T22:35:07Z","title_canon_sha256":"a8d2a04d254ab3c49c0061a31396790e25d69392e205bf114132ad089aa2bb82"},"schema_version":"1.0","source":{"id":"2403.10717","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.10717","created_at":"2026-07-05T07:57:05Z"},{"alias_kind":"arxiv_version","alias_value":"2403.10717v1","created_at":"2026-07-05T07:57:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.10717","created_at":"2026-07-05T07:57:05Z"},{"alias_kind":"pith_short_12","alias_value":"QZPFUT2T3A5F","created_at":"2026-07-05T07:57:05Z"},{"alias_kind":"pith_short_16","alias_value":"QZPFUT2T3A5FAGWY","created_at":"2026-07-05T07:57:05Z"},{"alias_kind":"pith_short_8","alias_value":"QZPFUT2T","created_at":"2026-07-05T07:57:05Z"}],"graph_snapshots":[{"event_id":"sha256:57b352efd3ba969b6d41918e165d6d98c8bbd58d5aa0d76ff7b3b72b5b6467fa","target":"graph","created_at":"2026-07-05T07:57:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.10717/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Modern machine learning (ML) systems demand substantial training data, often resorting to external sources. Nevertheless, this practice renders them vulnerable to backdoor poisoning attacks. Prior backdoor defense strategies have primarily focused on the identification of backdoored models or poisoned data characteristics, typically operating under the assumption of access to clean data. In this work, we delve into a relatively underexplored challenge: the automatic identification of backdoor data within a poisoned dataset, all under realistic conditions, i.e., without the need for additional ","authors_text":"Bingquan Shen, Ren Wang, Sijia Liu, Soumyadeep Pal, Yuguang Yao","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-03-15T22:35:07Z","title":"Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistency"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.10717","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a261eb16005eefdaff6057dd95ea3e3709657cd1ae3fe3c05e509660ede127db","target":"record","created_at":"2026-07-05T07:57:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7151fb2d9f794b5ff23bc091e71117fbe91c217499b6a3623e4a6d7eb0dd2ea2","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-03-15T22:35:07Z","title_canon_sha256":"a8d2a04d254ab3c49c0061a31396790e25d69392e205bf114132ad089aa2bb82"},"schema_version":"1.0","source":{"id":"2403.10717","kind":"arxiv","version":1}},"canonical_sha256":"865e5a4f53d83a501ad81bc98f128ea36fa1594d313db7d7353e671ecaa2e662","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"865e5a4f53d83a501ad81bc98f128ea36fa1594d313db7d7353e671ecaa2e662","first_computed_at":"2026-07-05T07:57:05.531392Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:57:05.531392Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1Zdgttk3ufCJn5pcu58a/WSQPbKp+7GFOSrmM9aa4FePy5QOW3EeLuuU+FcNKrGLjQQ79CNKmz+tXaJ6uUCTAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:57:05.531856Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.10717","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a261eb16005eefdaff6057dd95ea3e3709657cd1ae3fe3c05e509660ede127db","sha256:57b352efd3ba969b6d41918e165d6d98c8bbd58d5aa0d76ff7b3b72b5b6467fa"],"state_sha256":"c33452e5641805dfef49bb15259196031e8ddc46b9a23fca032302352e537b56"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MNDHJMrF/8m/6C4fUnmtF06usZddwQ45Wszuqfe8h/uimxvibS9seUNyfxQYd09auVD+QABS16oCEJdZFuBsBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T16:06:09.146847Z","bundle_sha256":"52698f10ef11fe9cf924fea5070dfc0c82d278d0f061a0938fbb57d20f3fafe4"}}