{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:SFRY5MDRYMPZFSSRZ4YG6L6Q44","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4dac27fd8caba19357b7c2330bd6f1f1df6873ab3893b9e84462fe226ccea558","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-11-01T13:34:36Z","title_canon_sha256":"c0c79264ced9c9bf27e766bbbdecafad7e643943945ad9f4c3a076917373d345"},"schema_version":"1.0","source":{"id":"2211.00453","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.00453","created_at":"2026-07-05T05:12:22Z"},{"alias_kind":"arxiv_version","alias_value":"2211.00453v1","created_at":"2026-07-05T05:12:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.00453","created_at":"2026-07-05T05:12:22Z"},{"alias_kind":"pith_short_12","alias_value":"SFRY5MDRYMPZ","created_at":"2026-07-05T05:12:22Z"},{"alias_kind":"pith_short_16","alias_value":"SFRY5MDRYMPZFSSR","created_at":"2026-07-05T05:12:22Z"},{"alias_kind":"pith_short_8","alias_value":"SFRY5MDR","created_at":"2026-07-05T05:12:22Z"}],"graph_snapshots":[{"event_id":"sha256:cbceef3a939136695b87e961ef282ac4f354ee7dfea1c4d5c661f450492f3d57","target":"graph","created_at":"2026-07-05T05:12:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2211.00453/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Semi-supervised machine learning (SSL) is gaining popularity as it reduces the cost of training ML models. It does so by using very small amounts of (expensive, well-inspected) labeled data and large amounts of (cheap, non-inspected) unlabeled data. SSL has shown comparable or even superior performances compared to conventional fully-supervised ML techniques.\n  In this paper, we show that the key feature of SSL that it can learn from (non-inspected) unlabeled data exposes SSL to strong poisoning attacks. In fact, we argue that, due to its reliance on non-inspected unlabeled data, poisoning is ","authors_text":"Amir Houmansadr, Lingjuan Lyu, Virat Shejwalkar","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-11-01T13:34:36Z","title":"The Perils of Learning From Unlabeled Data: Backdoor Attacks on Semi-supervised Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.00453","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a575df775faeb5734e99209885960cb0809d6d5eb29d4e000f8d077996a782bb","target":"record","created_at":"2026-07-05T05:12:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4dac27fd8caba19357b7c2330bd6f1f1df6873ab3893b9e84462fe226ccea558","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-11-01T13:34:36Z","title_canon_sha256":"c0c79264ced9c9bf27e766bbbdecafad7e643943945ad9f4c3a076917373d345"},"schema_version":"1.0","source":{"id":"2211.00453","kind":"arxiv","version":1}},"canonical_sha256":"91638eb071c31f92ca51cf306f2fd0e71415033719e3c7089a44816817603930","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"91638eb071c31f92ca51cf306f2fd0e71415033719e3c7089a44816817603930","first_computed_at":"2026-07-05T05:12:22.769132Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:12:22.769132Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ESV0RHJ0/6mSsHENpjgIYphfluk8f9fF7RWILo/RFyf8UHor1UCFpL4VN+XzjtPWSUXV38GqwXR7lyCVzu/ZCg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:12:22.769603Z","signed_message":"canonical_sha256_bytes"},"source_id":"2211.00453","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a575df775faeb5734e99209885960cb0809d6d5eb29d4e000f8d077996a782bb","sha256:cbceef3a939136695b87e961ef282ac4f354ee7dfea1c4d5c661f450492f3d57"],"state_sha256":"7f7c9bb82bfd4e3d51f37beb1d2ce01094a57e4f70cf4e6e599af4bc3c2c892b"}