{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:RKPXNGDUVIIYLQZRQXXPCYC2XV","short_pith_number":"pith:RKPXNGDU","canonical_record":{"source":{"id":"2003.03675","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-07T22:46:51Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"72fb760abb489f98428f03de0c3fce94c62c6d977207cdf8f108c684f100f3ab","abstract_canon_sha256":"93a41899f3188124488350aeca59f151d994e1c5a59521973317c760eed58d57"},"schema_version":"1.0"},"canonical_sha256":"8a9f769874aa1185c33185eef1605abd5f324065c77e257f45208c80ddec963f","source":{"kind":"arxiv","id":"2003.03675","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2003.03675","created_at":"2026-07-05T04:01:54Z"},{"alias_kind":"arxiv_version","alias_value":"2003.03675v2","created_at":"2026-07-05T04:01:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2003.03675","created_at":"2026-07-05T04:01:54Z"},{"alias_kind":"pith_short_12","alias_value":"RKPXNGDUVIIY","created_at":"2026-07-05T04:01:54Z"},{"alias_kind":"pith_short_16","alias_value":"RKPXNGDUVIIYLQZR","created_at":"2026-07-05T04:01:54Z"},{"alias_kind":"pith_short_8","alias_value":"RKPXNGDU","created_at":"2026-07-05T04:01:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:RKPXNGDUVIIYLQZRQXXPCYC2XV","target":"record","payload":{"canonical_record":{"source":{"id":"2003.03675","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-07T22:46:51Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"72fb760abb489f98428f03de0c3fce94c62c6d977207cdf8f108c684f100f3ab","abstract_canon_sha256":"93a41899f3188124488350aeca59f151d994e1c5a59521973317c760eed58d57"},"schema_version":"1.0"},"canonical_sha256":"8a9f769874aa1185c33185eef1605abd5f324065c77e257f45208c80ddec963f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:01:54.392968Z","signature_b64":"BQcJvh91HCpcUBQgLPt4R9UWw7Tt82iADfZpLescg2yVKVfWA9qbRwCutaJl5Puwrzm2Sts+VRcGC5geLZDQDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8a9f769874aa1185c33185eef1605abd5f324065c77e257f45208c80ddec963f","last_reissued_at":"2026-07-05T04:01:54.392541Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:01:54.392541Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2003.03675","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:01:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"it9pRsAlq/PMa1OnOxZsNRha0OY0Mx+hCPEiqWcGratPE1PFhZv6Jx8t3nL/auvy+CUpdl/iMVXUfHwtBVjWAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T09:20:23.137560Z"},"content_sha256":"50379f6ad62235567bbe884ccb22f43e0d432175113e72419c440c0d1435bb0b","schema_version":"1.0","event_id":"sha256:50379f6ad62235567bbe884ccb22f43e0d432175113e72419c440c0d1435bb0b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:RKPXNGDUVIIYLQZRQXXPCYC2XV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Dynamic Backdoor Attacks Against Machine Learning Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","stat.ML"],"primary_cat":"cs.CR","authors_text":"Ahmed Salem, Michael Backes, Rui Wen, Shiqing Ma, Yang Zhang","submitted_at":"2020-03-07T22:46:51Z","abstract_excerpt":"Machine learning (ML) has made tremendous progress during the past decade and is being adopted in various critical real-world applications. However, recent research has shown that ML models are vulnerable to multiple security and privacy attacks. In particular, backdoor attacks against ML models have recently raised a lot of awareness. A successful backdoor attack can cause severe consequences, such as allowing an adversary to bypass critical authentication systems.\n  Current backdooring techniques rely on adding static triggers (with fixed patterns and locations) on ML model inputs which are "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2003.03675","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2003.03675/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:01:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xCXVSX+9+yIVz/bHBWq13X1rPhU5e40zFrEEu8D2sXqzhqoyPOXhR5GUMqMmc7DHcldVW3V0XJhVWs+q3uNvDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T09:20:23.138371Z"},"content_sha256":"91174c1f140c659fd261b33db64af8654d547cd5910546f48cd4a010e19cf8d1","schema_version":"1.0","event_id":"sha256:91174c1f140c659fd261b33db64af8654d547cd5910546f48cd4a010e19cf8d1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RKPXNGDUVIIYLQZRQXXPCYC2XV/bundle.json","state_url":"https://pith.science/pith/RKPXNGDUVIIYLQZRQXXPCYC2XV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RKPXNGDUVIIYLQZRQXXPCYC2XV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T09:20:23Z","links":{"resolver":"https://pith.science/pith/RKPXNGDUVIIYLQZRQXXPCYC2XV","bundle":"https://pith.science/pith/RKPXNGDUVIIYLQZRQXXPCYC2XV/bundle.json","state":"https://pith.science/pith/RKPXNGDUVIIYLQZRQXXPCYC2XV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RKPXNGDUVIIYLQZRQXXPCYC2XV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:RKPXNGDUVIIYLQZRQXXPCYC2XV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"93a41899f3188124488350aeca59f151d994e1c5a59521973317c760eed58d57","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-07T22:46:51Z","title_canon_sha256":"72fb760abb489f98428f03de0c3fce94c62c6d977207cdf8f108c684f100f3ab"},"schema_version":"1.0","source":{"id":"2003.03675","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2003.03675","created_at":"2026-07-05T04:01:54Z"},{"alias_kind":"arxiv_version","alias_value":"2003.03675v2","created_at":"2026-07-05T04:01:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2003.03675","created_at":"2026-07-05T04:01:54Z"},{"alias_kind":"pith_short_12","alias_value":"RKPXNGDUVIIY","created_at":"2026-07-05T04:01:54Z"},{"alias_kind":"pith_short_16","alias_value":"RKPXNGDUVIIYLQZR","created_at":"2026-07-05T04:01:54Z"},{"alias_kind":"pith_short_8","alias_value":"RKPXNGDU","created_at":"2026-07-05T04:01:54Z"}],"graph_snapshots":[{"event_id":"sha256:91174c1f140c659fd261b33db64af8654d547cd5910546f48cd4a010e19cf8d1","target":"graph","created_at":"2026-07-05T04:01:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2003.03675/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning (ML) has made tremendous progress during the past decade and is being adopted in various critical real-world applications. However, recent research has shown that ML models are vulnerable to multiple security and privacy attacks. In particular, backdoor attacks against ML models have recently raised a lot of awareness. A successful backdoor attack can cause severe consequences, such as allowing an adversary to bypass critical authentication systems.\n  Current backdooring techniques rely on adding static triggers (with fixed patterns and locations) on ML model inputs which are ","authors_text":"Ahmed Salem, Michael Backes, Rui Wen, Shiqing Ma, Yang Zhang","cross_cats":["cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-07T22:46:51Z","title":"Dynamic Backdoor Attacks Against Machine Learning Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2003.03675","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:50379f6ad62235567bbe884ccb22f43e0d432175113e72419c440c0d1435bb0b","target":"record","created_at":"2026-07-05T04:01:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"93a41899f3188124488350aeca59f151d994e1c5a59521973317c760eed58d57","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-07T22:46:51Z","title_canon_sha256":"72fb760abb489f98428f03de0c3fce94c62c6d977207cdf8f108c684f100f3ab"},"schema_version":"1.0","source":{"id":"2003.03675","kind":"arxiv","version":2}},"canonical_sha256":"8a9f769874aa1185c33185eef1605abd5f324065c77e257f45208c80ddec963f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8a9f769874aa1185c33185eef1605abd5f324065c77e257f45208c80ddec963f","first_computed_at":"2026-07-05T04:01:54.392541Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:01:54.392541Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"BQcJvh91HCpcUBQgLPt4R9UWw7Tt82iADfZpLescg2yVKVfWA9qbRwCutaJl5Puwrzm2Sts+VRcGC5geLZDQDA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:01:54.392968Z","signed_message":"canonical_sha256_bytes"},"source_id":"2003.03675","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:50379f6ad62235567bbe884ccb22f43e0d432175113e72419c440c0d1435bb0b","sha256:91174c1f140c659fd261b33db64af8654d547cd5910546f48cd4a010e19cf8d1"],"state_sha256":"572405b94705300084d120cf7caeea33ffa920bcd2616d50c6e5cb8682926ad1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QQ7fBo6UBOrhNuPGWk3OAaJ2tUQ3mFnAohrvniKmCH+JStV6KuJOi9SExCkGlFF2fBATZ88OTkkfA563AjSVDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T09:20:23.146317Z","bundle_sha256":"7c62b80f4103ac4e2e16bdeedc388096edf0192cfa676e6b3eaa020a04e6a3e5"}}