{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:R3HSGSX3RTGSESI4AWOU2HOSXT","short_pith_number":"pith:R3HSGSX3","canonical_record":{"source":{"id":"2302.04457","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-02-09T06:33:15Z","cross_cats_sorted":[],"title_canon_sha256":"8fb65ff1f513f3979bec37ab594b23b76ea9ce00ea50bf75819cbbb602119052","abstract_canon_sha256":"fc070e250c35b418fcef63ada93c27cf90555e87dc9688d4e82cd801a8a9427a"},"schema_version":"1.0"},"canonical_sha256":"8ecf234afb8ccd22491c059d4d1dd2bccf981cc3a3b6a44b9528793479d7ecca","source":{"kind":"arxiv","id":"2302.04457","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.04457","created_at":"2026-07-05T09:52:36Z"},{"alias_kind":"arxiv_version","alias_value":"2302.04457v2","created_at":"2026-07-05T09:52:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.04457","created_at":"2026-07-05T09:52:36Z"},{"alias_kind":"pith_short_12","alias_value":"R3HSGSX3RTGS","created_at":"2026-07-05T09:52:36Z"},{"alias_kind":"pith_short_16","alias_value":"R3HSGSX3RTGSESI4","created_at":"2026-07-05T09:52:36Z"},{"alias_kind":"pith_short_8","alias_value":"R3HSGSX3","created_at":"2026-07-05T09:52:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:R3HSGSX3RTGSESI4AWOU2HOSXT","target":"record","payload":{"canonical_record":{"source":{"id":"2302.04457","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-02-09T06:33:15Z","cross_cats_sorted":[],"title_canon_sha256":"8fb65ff1f513f3979bec37ab594b23b76ea9ce00ea50bf75819cbbb602119052","abstract_canon_sha256":"fc070e250c35b418fcef63ada93c27cf90555e87dc9688d4e82cd801a8a9427a"},"schema_version":"1.0"},"canonical_sha256":"8ecf234afb8ccd22491c059d4d1dd2bccf981cc3a3b6a44b9528793479d7ecca","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:52:36.481059Z","signature_b64":"vwi793/+iLlE8Pi/BxNFzB03bCFQO3JIjX4xHjK7E8VoFkaSp3H4xQD3s/PYMui4jZmH9p196BZeNryZk2rBBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8ecf234afb8ccd22491c059d4d1dd2bccf981cc3a3b6a44b9528793479d7ecca","last_reissued_at":"2026-07-05T09:52:36.480540Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:52:36.480540Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2302.04457","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:52:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6XfXJ8fwVDyguJ7+jlPlZYoaQ3O0vQbAMcMA6gBqHzXbggClkYV7FdM/apMi19y4jJo9I2vjakwIiNdDeEGLBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T18:09:11.114824Z"},"content_sha256":"0805fc4915c28c0ff985c884280a883ebfc1a5f64bdccafcb2b22b853718df78","schema_version":"1.0","event_id":"sha256:0805fc4915c28c0ff985c884280a883ebfc1a5f64bdccafcb2b22b853718df78"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:R3HSGSX3RTGSESI4AWOU2HOSXT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Imperceptible Sample-Specific Backdoor to DNN with Denoising Autoencoder","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jing Xu, Kewei Chen, Leo Yu Zhang, Mingfu Xue, Wenmao Liu, Xiangqi Wang, Yushu Zhang","submitted_at":"2023-02-09T06:33:15Z","abstract_excerpt":"The backdoor attack poses a new security threat to deep neural networks. Existing backdoor often relies on visible universal trigger to make the backdoored model malfunction, which are not only usually visually suspicious to human but also catchable by mainstream countermeasures. We propose an imperceptible sample-specific backdoor that the trigger varies from sample to sample and invisible. Our trigger generation is automated through a desnoising autoencoder that is fed with delicate but pervasive features (i.e., edge patterns per images). We extensively experiment our backdoor attack on Imag"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.04457","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2302.04457/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:52:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FhjGBw7SHA5GoekT5gRaJmg5WHlGlbC0wMyJxD/L2m10UHFsI0VRsBaHPL2fM+P3GNs3xUmzdpVNWLBkUf56Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T18:09:11.115738Z"},"content_sha256":"5660a3103dad64c6127ffce6b83cd1e514787594d8ac9a5329013b60013e4de2","schema_version":"1.0","event_id":"sha256:5660a3103dad64c6127ffce6b83cd1e514787594d8ac9a5329013b60013e4de2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/R3HSGSX3RTGSESI4AWOU2HOSXT/bundle.json","state_url":"https://pith.science/pith/R3HSGSX3RTGSESI4AWOU2HOSXT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/R3HSGSX3RTGSESI4AWOU2HOSXT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T18:09:11Z","links":{"resolver":"https://pith.science/pith/R3HSGSX3RTGSESI4AWOU2HOSXT","bundle":"https://pith.science/pith/R3HSGSX3RTGSESI4AWOU2HOSXT/bundle.json","state":"https://pith.science/pith/R3HSGSX3RTGSESI4AWOU2HOSXT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/R3HSGSX3RTGSESI4AWOU2HOSXT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:R3HSGSX3RTGSESI4AWOU2HOSXT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fc070e250c35b418fcef63ada93c27cf90555e87dc9688d4e82cd801a8a9427a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-02-09T06:33:15Z","title_canon_sha256":"8fb65ff1f513f3979bec37ab594b23b76ea9ce00ea50bf75819cbbb602119052"},"schema_version":"1.0","source":{"id":"2302.04457","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.04457","created_at":"2026-07-05T09:52:36Z"},{"alias_kind":"arxiv_version","alias_value":"2302.04457v2","created_at":"2026-07-05T09:52:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.04457","created_at":"2026-07-05T09:52:36Z"},{"alias_kind":"pith_short_12","alias_value":"R3HSGSX3RTGS","created_at":"2026-07-05T09:52:36Z"},{"alias_kind":"pith_short_16","alias_value":"R3HSGSX3RTGSESI4","created_at":"2026-07-05T09:52:36Z"},{"alias_kind":"pith_short_8","alias_value":"R3HSGSX3","created_at":"2026-07-05T09:52:36Z"}],"graph_snapshots":[{"event_id":"sha256:5660a3103dad64c6127ffce6b83cd1e514787594d8ac9a5329013b60013e4de2","target":"graph","created_at":"2026-07-05T09:52:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2302.04457/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The backdoor attack poses a new security threat to deep neural networks. Existing backdoor often relies on visible universal trigger to make the backdoored model malfunction, which are not only usually visually suspicious to human but also catchable by mainstream countermeasures. We propose an imperceptible sample-specific backdoor that the trigger varies from sample to sample and invisible. Our trigger generation is automated through a desnoising autoencoder that is fed with delicate but pervasive features (i.e., edge patterns per images). We extensively experiment our backdoor attack on Imag","authors_text":"Jing Xu, Kewei Chen, Leo Yu Zhang, Mingfu Xue, Wenmao Liu, Xiangqi Wang, Yushu Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-02-09T06:33:15Z","title":"Imperceptible Sample-Specific Backdoor to DNN with Denoising Autoencoder"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.04457","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0805fc4915c28c0ff985c884280a883ebfc1a5f64bdccafcb2b22b853718df78","target":"record","created_at":"2026-07-05T09:52:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fc070e250c35b418fcef63ada93c27cf90555e87dc9688d4e82cd801a8a9427a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-02-09T06:33:15Z","title_canon_sha256":"8fb65ff1f513f3979bec37ab594b23b76ea9ce00ea50bf75819cbbb602119052"},"schema_version":"1.0","source":{"id":"2302.04457","kind":"arxiv","version":2}},"canonical_sha256":"8ecf234afb8ccd22491c059d4d1dd2bccf981cc3a3b6a44b9528793479d7ecca","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8ecf234afb8ccd22491c059d4d1dd2bccf981cc3a3b6a44b9528793479d7ecca","first_computed_at":"2026-07-05T09:52:36.480540Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:52:36.480540Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vwi793/+iLlE8Pi/BxNFzB03bCFQO3JIjX4xHjK7E8VoFkaSp3H4xQD3s/PYMui4jZmH9p196BZeNryZk2rBBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:52:36.481059Z","signed_message":"canonical_sha256_bytes"},"source_id":"2302.04457","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0805fc4915c28c0ff985c884280a883ebfc1a5f64bdccafcb2b22b853718df78","sha256:5660a3103dad64c6127ffce6b83cd1e514787594d8ac9a5329013b60013e4de2"],"state_sha256":"ae059bf873a2528aa931275c3b3c4aa0f907d9c82de72a9a1d94b5cf19f5e35e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZYt9QSnukxSZchmTKWhN96PDrPYMu2esbsWFTPY1p2f6o96vcPV1R8TiMANhz13xoLiicEf1lmm6/6JJnlwADw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T18:09:11.134783Z","bundle_sha256":"82e43faa0bc65a189cc2427cb57d47ff8e8c5d9d14ad86582c6b9ed5836513c2"}}