{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:RMAS5SFGY477ZFVFEZ62UNCPYK","short_pith_number":"pith:RMAS5SFG","canonical_record":{"source":{"id":"2407.16273","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-23T08:25:34Z","cross_cats_sorted":[],"title_canon_sha256":"b858619071fe4ad2a723a1ba7ed3251da1808be8fed9abbf5ea532c37b04fbe9","abstract_canon_sha256":"60b6eb0c99830bd983432b8de0dc72189751aa23a94f8c46475829b2a2fab86c"},"schema_version":"1.0"},"canonical_sha256":"8b012ec8a6c73ffc96a5267daa344fc28cc5e8acf80fcdc21f4312f56afed4ed","source":{"kind":"arxiv","id":"2407.16273","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.16273","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"arxiv_version","alias_value":"2407.16273v1","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.16273","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"pith_short_12","alias_value":"RMAS5SFGY477","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"pith_short_16","alias_value":"RMAS5SFGY477ZFVF","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"pith_short_8","alias_value":"RMAS5SFG","created_at":"2026-07-05T08:47:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:RMAS5SFGY477ZFVFEZ62UNCPYK","target":"record","payload":{"canonical_record":{"source":{"id":"2407.16273","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-23T08:25:34Z","cross_cats_sorted":[],"title_canon_sha256":"b858619071fe4ad2a723a1ba7ed3251da1808be8fed9abbf5ea532c37b04fbe9","abstract_canon_sha256":"60b6eb0c99830bd983432b8de0dc72189751aa23a94f8c46475829b2a2fab86c"},"schema_version":"1.0"},"canonical_sha256":"8b012ec8a6c73ffc96a5267daa344fc28cc5e8acf80fcdc21f4312f56afed4ed","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:47:30.685705Z","signature_b64":"xZXHUB9SmxxAlHyVzaGtrqoRixS2sae5Gsf9ZZzlq1Jxbs8JiGM4hox4Ak9cD0Kkf1xAapN6VxlqB/uyZQyZAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8b012ec8a6c73ffc96a5267daa344fc28cc5e8acf80fcdc21f4312f56afed4ed","last_reissued_at":"2026-07-05T08:47:30.685297Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:47:30.685297Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.16273","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:47:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6kEkJjelGttTGeBNR1QJ8CpXyD/M2N56FtZYE0miQKu6asdznndFfGYCBytrLQadQVbjaPL//9ZVfzkP3aggDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T16:26:07.861594Z"},"content_sha256":"f8a78372b2ee8d2b70b350cf2973d2b95c1b4dee3745091e81f3e7e86b3e2253","schema_version":"1.0","event_id":"sha256:f8a78372b2ee8d2b70b350cf2973d2b95c1b4dee3745091e81f3e7e86b3e2253"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:RMAS5SFGY477ZFVFEZ62UNCPYK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Backdoor Attacks against Hybrid Classical-Quantum Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Guoming Lu, Jiachen Li, Ji Guo, Rui Zhang, Wenbo Jiang, Wenshu Fan","submitted_at":"2024-07-23T08:25:34Z","abstract_excerpt":"Hybrid Quantum Neural Networks (HQNNs) represent a promising advancement in Quantum Machine Learning (QML), yet their security has been rarely explored. In this paper, we present the first systematic study of backdoor attacks on HQNNs. We begin by proposing an attack framework and providing a theoretical analysis of the generalization bounds and minimum perturbation requirements for backdoor attacks on HQNNs. Next, we employ two classic backdoor attack methods on HQNNs and Convolutional Neural Networks (CNNs) to further investigate the robustness of HQNNs. Our experimental results demonstrate "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.16273","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.16273/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:47:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9kdrOw0hRW7btuTetUKDOAXlQLWZeb6zu8v+zSRplXRKIn0asz6/BXC9r15TOz0b1yPk7s51BySRVE6hutNVDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T16:26:07.861973Z"},"content_sha256":"0b02b2f27b420a6e0b493a1b4f357a135e946a0957f93652039148f17caf82cb","schema_version":"1.0","event_id":"sha256:0b02b2f27b420a6e0b493a1b4f357a135e946a0957f93652039148f17caf82cb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RMAS5SFGY477ZFVFEZ62UNCPYK/bundle.json","state_url":"https://pith.science/pith/RMAS5SFGY477ZFVFEZ62UNCPYK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RMAS5SFGY477ZFVFEZ62UNCPYK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T16:26:07Z","links":{"resolver":"https://pith.science/pith/RMAS5SFGY477ZFVFEZ62UNCPYK","bundle":"https://pith.science/pith/RMAS5SFGY477ZFVFEZ62UNCPYK/bundle.json","state":"https://pith.science/pith/RMAS5SFGY477ZFVFEZ62UNCPYK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RMAS5SFGY477ZFVFEZ62UNCPYK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:RMAS5SFGY477ZFVFEZ62UNCPYK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"60b6eb0c99830bd983432b8de0dc72189751aa23a94f8c46475829b2a2fab86c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-23T08:25:34Z","title_canon_sha256":"b858619071fe4ad2a723a1ba7ed3251da1808be8fed9abbf5ea532c37b04fbe9"},"schema_version":"1.0","source":{"id":"2407.16273","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.16273","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"arxiv_version","alias_value":"2407.16273v1","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.16273","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"pith_short_12","alias_value":"RMAS5SFGY477","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"pith_short_16","alias_value":"RMAS5SFGY477ZFVF","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"pith_short_8","alias_value":"RMAS5SFG","created_at":"2026-07-05T08:47:30Z"}],"graph_snapshots":[{"event_id":"sha256:0b02b2f27b420a6e0b493a1b4f357a135e946a0957f93652039148f17caf82cb","target":"graph","created_at":"2026-07-05T08:47:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.16273/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Hybrid Quantum Neural Networks (HQNNs) represent a promising advancement in Quantum Machine Learning (QML), yet their security has been rarely explored. In this paper, we present the first systematic study of backdoor attacks on HQNNs. We begin by proposing an attack framework and providing a theoretical analysis of the generalization bounds and minimum perturbation requirements for backdoor attacks on HQNNs. Next, we employ two classic backdoor attack methods on HQNNs and Convolutional Neural Networks (CNNs) to further investigate the robustness of HQNNs. Our experimental results demonstrate ","authors_text":"Guoming Lu, Jiachen Li, Ji Guo, Rui Zhang, Wenbo Jiang, Wenshu Fan","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-23T08:25:34Z","title":"Backdoor Attacks against Hybrid Classical-Quantum Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.16273","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f8a78372b2ee8d2b70b350cf2973d2b95c1b4dee3745091e81f3e7e86b3e2253","target":"record","created_at":"2026-07-05T08:47:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"60b6eb0c99830bd983432b8de0dc72189751aa23a94f8c46475829b2a2fab86c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-23T08:25:34Z","title_canon_sha256":"b858619071fe4ad2a723a1ba7ed3251da1808be8fed9abbf5ea532c37b04fbe9"},"schema_version":"1.0","source":{"id":"2407.16273","kind":"arxiv","version":1}},"canonical_sha256":"8b012ec8a6c73ffc96a5267daa344fc28cc5e8acf80fcdc21f4312f56afed4ed","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8b012ec8a6c73ffc96a5267daa344fc28cc5e8acf80fcdc21f4312f56afed4ed","first_computed_at":"2026-07-05T08:47:30.685297Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:47:30.685297Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xZXHUB9SmxxAlHyVzaGtrqoRixS2sae5Gsf9ZZzlq1Jxbs8JiGM4hox4Ak9cD0Kkf1xAapN6VxlqB/uyZQyZAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:47:30.685705Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.16273","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f8a78372b2ee8d2b70b350cf2973d2b95c1b4dee3745091e81f3e7e86b3e2253","sha256:0b02b2f27b420a6e0b493a1b4f357a135e946a0957f93652039148f17caf82cb"],"state_sha256":"9a47971fe726ada8de7dcfe82fb2149c5252dcb26b93c1cbdd953c5df37faca2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AgAq1WllLi/dCkslhVYEE+sAJ4PpIB8IiC1UZ52SOUCaeupf0a0WIIHiNNelZxBVVtQXlZrogfnuU1g94IOsAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T16:26:07.863922Z","bundle_sha256":"177610c0a8a39fa08f1abc099118137d002f6817303989f0e1b631894abbf0a4"}}