{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:ROQU5RNEOYFGB56PSI5NVTNS2G","short_pith_number":"pith:ROQU5RNE","canonical_record":{"source":{"id":"2408.15861","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-28T15:21:10Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"27429211afd87f0e3924c18a92b0eba9e6af27c6967b9b6275be914d068a7f16","abstract_canon_sha256":"661b2ee6752f03a8f52acbcbb6825972bdce0cf268656b7ab83b1979df480e79"},"schema_version":"1.0"},"canonical_sha256":"8ba14ec5a4760a60f7cf923adacdb2d18c6ee94449700e18fb9b11b41d8a5203","source":{"kind":"arxiv","id":"2408.15861","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.15861","created_at":"2026-07-05T09:00:18Z"},{"alias_kind":"arxiv_version","alias_value":"2408.15861v1","created_at":"2026-07-05T09:00:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.15861","created_at":"2026-07-05T09:00:18Z"},{"alias_kind":"pith_short_12","alias_value":"ROQU5RNEOYFG","created_at":"2026-07-05T09:00:18Z"},{"alias_kind":"pith_short_16","alias_value":"ROQU5RNEOYFGB56P","created_at":"2026-07-05T09:00:18Z"},{"alias_kind":"pith_short_8","alias_value":"ROQU5RNE","created_at":"2026-07-05T09:00:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:ROQU5RNEOYFGB56PSI5NVTNS2G","target":"record","payload":{"canonical_record":{"source":{"id":"2408.15861","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-28T15:21:10Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"27429211afd87f0e3924c18a92b0eba9e6af27c6967b9b6275be914d068a7f16","abstract_canon_sha256":"661b2ee6752f03a8f52acbcbb6825972bdce0cf268656b7ab83b1979df480e79"},"schema_version":"1.0"},"canonical_sha256":"8ba14ec5a4760a60f7cf923adacdb2d18c6ee94449700e18fb9b11b41d8a5203","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:00:18.640401Z","signature_b64":"vXkB0dol3Cz+9h8/00goxjOJ1KK0dzwxlktO4jSFsG32XFiDngyBs7t9YHgdhD5Bk6zAvfMgq9bbKskg6r0UBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8ba14ec5a4760a60f7cf923adacdb2d18c6ee94449700e18fb9b11b41d8a5203","last_reissued_at":"2026-07-05T09:00:18.639933Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:00:18.639933Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.15861","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:00:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CHxfoHmEO2519uJKfl/Al43HkBZUEg5F6ezNldOEErwD+p+o/J4C3Mf0+UlbswVIVRSt/dlPr4hsMe+k8JKHDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T23:18:53.528315Z"},"content_sha256":"4081b4430a1a56f4536650b132e865db20d9c0748a65b591f12e51f5b34d179d","schema_version":"1.0","event_id":"sha256:4081b4430a1a56f4536650b132e865db20d9c0748a65b591f12e51f5b34d179d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:ROQU5RNEOYFGB56PSI5NVTNS2G","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Fusing Pruned and Backdoored Models: Optimal Transport-based Data-free Backdoor Mitigation","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Hui Xiong, Jianze Li, Li Liu, Weilin Lin","submitted_at":"2024-08-28T15:21:10Z","abstract_excerpt":"Backdoor attacks present a serious security threat to deep neuron networks (DNNs). Although numerous effective defense techniques have been proposed in recent years, they inevitably rely on the availability of either clean or poisoned data. In contrast, data-free defense techniques have evolved slowly and still lag significantly in performance. To address this issue, different from the traditional approach of pruning followed by fine-tuning, we propose a novel data-free defense method named Optimal Transport-based Backdoor Repairing (OTBR) in this work. This method, based on our findings on ne"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.15861","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.15861/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:00:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JpnhL/Be1ZE3wHVsB6OSwQLm5PHXCmaR6ofE0qYUg+J94TTOymVLyrge3WwtN3v+UIMilxITNRu8huc6gmUgAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T23:18:53.528845Z"},"content_sha256":"9633d1fd9d614191acd6f07d23519df76cc53d07eb689c8e86984dbdb4ddf389","schema_version":"1.0","event_id":"sha256:9633d1fd9d614191acd6f07d23519df76cc53d07eb689c8e86984dbdb4ddf389"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ROQU5RNEOYFGB56PSI5NVTNS2G/bundle.json","state_url":"https://pith.science/pith/ROQU5RNEOYFGB56PSI5NVTNS2G/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ROQU5RNEOYFGB56PSI5NVTNS2G/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T23:18:53Z","links":{"resolver":"https://pith.science/pith/ROQU5RNEOYFGB56PSI5NVTNS2G","bundle":"https://pith.science/pith/ROQU5RNEOYFGB56PSI5NVTNS2G/bundle.json","state":"https://pith.science/pith/ROQU5RNEOYFGB56PSI5NVTNS2G/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ROQU5RNEOYFGB56PSI5NVTNS2G/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:ROQU5RNEOYFGB56PSI5NVTNS2G","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"661b2ee6752f03a8f52acbcbb6825972bdce0cf268656b7ab83b1979df480e79","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-28T15:21:10Z","title_canon_sha256":"27429211afd87f0e3924c18a92b0eba9e6af27c6967b9b6275be914d068a7f16"},"schema_version":"1.0","source":{"id":"2408.15861","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.15861","created_at":"2026-07-05T09:00:18Z"},{"alias_kind":"arxiv_version","alias_value":"2408.15861v1","created_at":"2026-07-05T09:00:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.15861","created_at":"2026-07-05T09:00:18Z"},{"alias_kind":"pith_short_12","alias_value":"ROQU5RNEOYFG","created_at":"2026-07-05T09:00:18Z"},{"alias_kind":"pith_short_16","alias_value":"ROQU5RNEOYFGB56P","created_at":"2026-07-05T09:00:18Z"},{"alias_kind":"pith_short_8","alias_value":"ROQU5RNE","created_at":"2026-07-05T09:00:18Z"}],"graph_snapshots":[{"event_id":"sha256:9633d1fd9d614191acd6f07d23519df76cc53d07eb689c8e86984dbdb4ddf389","target":"graph","created_at":"2026-07-05T09:00:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.15861/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attacks present a serious security threat to deep neuron networks (DNNs). Although numerous effective defense techniques have been proposed in recent years, they inevitably rely on the availability of either clean or poisoned data. In contrast, data-free defense techniques have evolved slowly and still lag significantly in performance. To address this issue, different from the traditional approach of pruning followed by fine-tuning, we propose a novel data-free defense method named Optimal Transport-based Backdoor Repairing (OTBR) in this work. This method, based on our findings on ne","authors_text":"Hui Xiong, Jianze Li, Li Liu, Weilin Lin","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-28T15:21:10Z","title":"Fusing Pruned and Backdoored Models: Optimal Transport-based Data-free Backdoor Mitigation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.15861","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4081b4430a1a56f4536650b132e865db20d9c0748a65b591f12e51f5b34d179d","target":"record","created_at":"2026-07-05T09:00:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"661b2ee6752f03a8f52acbcbb6825972bdce0cf268656b7ab83b1979df480e79","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-28T15:21:10Z","title_canon_sha256":"27429211afd87f0e3924c18a92b0eba9e6af27c6967b9b6275be914d068a7f16"},"schema_version":"1.0","source":{"id":"2408.15861","kind":"arxiv","version":1}},"canonical_sha256":"8ba14ec5a4760a60f7cf923adacdb2d18c6ee94449700e18fb9b11b41d8a5203","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8ba14ec5a4760a60f7cf923adacdb2d18c6ee94449700e18fb9b11b41d8a5203","first_computed_at":"2026-07-05T09:00:18.639933Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:00:18.639933Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vXkB0dol3Cz+9h8/00goxjOJ1KK0dzwxlktO4jSFsG32XFiDngyBs7t9YHgdhD5Bk6zAvfMgq9bbKskg6r0UBA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:00:18.640401Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.15861","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4081b4430a1a56f4536650b132e865db20d9c0748a65b591f12e51f5b34d179d","sha256:9633d1fd9d614191acd6f07d23519df76cc53d07eb689c8e86984dbdb4ddf389"],"state_sha256":"70343cef571dd4c2043187c87240a5497025e707bf42ff0f5a4876c3dd056e99"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Za2pN3zgn9z/qk/MRvBp+GQv1oOlGf5kQ27+D5fnM17rz44FHkWlSxqELgij6errOTEDC26OdrLcyr6vb1nCBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T23:18:53.533951Z","bundle_sha256":"902c6b1e207a2e4221e7294332b60ce6982ba2650e67c0a0793b6b8892cd250c"}}