{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:SHDFL7Z3LQQTETGDDNWM54IUCI","short_pith_number":"pith:SHDFL7Z3","canonical_record":{"source":{"id":"2305.14950","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-24T09:40:56Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"9746d8d9f7353e8d416bba1938b60c83f2c6994fe6926c2dcbc3df8b7101f654","abstract_canon_sha256":"1b2f6c012af125557059a9586fd995928a327a91526fb4a06cc2768df89e01ef"},"schema_version":"1.0"},"canonical_sha256":"91c655ff3b5c21324cc31b6ccef11412224257683572f962f1f5b4e8a42e4313","source":{"kind":"arxiv","id":"2305.14950","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.14950","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"arxiv_version","alias_value":"2305.14950v2","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.14950","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"pith_short_12","alias_value":"SHDFL7Z3LQQT","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"pith_short_16","alias_value":"SHDFL7Z3LQQTETGD","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"pith_short_8","alias_value":"SHDFL7Z3","created_at":"2026-07-05T07:00:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:SHDFL7Z3LQQTETGDDNWM54IUCI","target":"record","payload":{"canonical_record":{"source":{"id":"2305.14950","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-24T09:40:56Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"9746d8d9f7353e8d416bba1938b60c83f2c6994fe6926c2dcbc3df8b7101f654","abstract_canon_sha256":"1b2f6c012af125557059a9586fd995928a327a91526fb4a06cc2768df89e01ef"},"schema_version":"1.0"},"canonical_sha256":"91c655ff3b5c21324cc31b6ccef11412224257683572f962f1f5b4e8a42e4313","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:00:44.694604Z","signature_b64":"xdmZr/LEPlYeytoBNHh3nCHtIK6HjixePJgy3gFyjg9qVZQ2ztqOOCRuv7GdGVX4h/ZjMXYMvQbFElwCX4vQDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"91c655ff3b5c21324cc31b6ccef11412224257683572f962f1f5b4e8a42e4313","last_reissued_at":"2026-07-05T07:00:44.694113Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:00:44.694113Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.14950","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:00:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"06IkY66bVg3WAdNBSuYzb85e4X/HloNxo39fUD/FyTmkEPj64lxlZ1i9DlD0xQZ7QsT1u3q/CtPux8rkLHnqAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T15:08:28.262388Z"},"content_sha256":"dfd060f48c74625390c5a73dff48c680e58dd0ef5617dab1fe0649e0cb12ef7c","schema_version":"1.0","event_id":"sha256:dfd060f48c74625390c5a73dff48c680e58dd0ef5617dab1fe0649e0cb12ef7c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:SHDFL7Z3LQQTETGDDNWM54IUCI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Demonstration Attacks on Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG"],"primary_cat":"cs.CL","authors_text":"Chaowei Xiao, Jiongxiao Wang, Keun Hee Park, Muhao Chen, Zhaoheng Zheng, Zhuofeng Wu, Zhuojun Jiang, Zichen Liu","submitted_at":"2023-05-24T09:40:56Z","abstract_excerpt":"With the emergence of more powerful large language models (LLMs), such as ChatGPT and GPT-4, in-context learning (ICL) has gained significant prominence in leveraging these models for specific tasks by utilizing data-label pairs as precondition prompts. While incorporating demonstrations can greatly enhance the performance of LLMs across various tasks, it may introduce a new security concern: attackers can manipulate only the demonstrations without changing the input to perform an attack. In this paper, we investigate the security concern of ICL from an adversarial perspective, focusing on the"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.14950","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.14950/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:00:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UTnar9gEUdUWFe/ec/CuSal/J3uxeJ/QHtN4h2AjNuST6cIIPjmkMD/6nTRO/w8UY7MgNgfxz10e7QQTp0A3Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T15:08:28.262962Z"},"content_sha256":"640b087274bb46dff6f65d5143a7446b78b0c634cf77ddf4aa3753b752d3d9f2","schema_version":"1.0","event_id":"sha256:640b087274bb46dff6f65d5143a7446b78b0c634cf77ddf4aa3753b752d3d9f2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SHDFL7Z3LQQTETGDDNWM54IUCI/bundle.json","state_url":"https://pith.science/pith/SHDFL7Z3LQQTETGDDNWM54IUCI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SHDFL7Z3LQQTETGDDNWM54IUCI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T15:08:28Z","links":{"resolver":"https://pith.science/pith/SHDFL7Z3LQQTETGDDNWM54IUCI","bundle":"https://pith.science/pith/SHDFL7Z3LQQTETGDDNWM54IUCI/bundle.json","state":"https://pith.science/pith/SHDFL7Z3LQQTETGDDNWM54IUCI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SHDFL7Z3LQQTETGDDNWM54IUCI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:SHDFL7Z3LQQTETGDDNWM54IUCI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1b2f6c012af125557059a9586fd995928a327a91526fb4a06cc2768df89e01ef","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-24T09:40:56Z","title_canon_sha256":"9746d8d9f7353e8d416bba1938b60c83f2c6994fe6926c2dcbc3df8b7101f654"},"schema_version":"1.0","source":{"id":"2305.14950","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.14950","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"arxiv_version","alias_value":"2305.14950v2","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.14950","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"pith_short_12","alias_value":"SHDFL7Z3LQQT","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"pith_short_16","alias_value":"SHDFL7Z3LQQTETGD","created_at":"2026-07-05T07:00:44Z"},{"alias_kind":"pith_short_8","alias_value":"SHDFL7Z3","created_at":"2026-07-05T07:00:44Z"}],"graph_snapshots":[{"event_id":"sha256:640b087274bb46dff6f65d5143a7446b78b0c634cf77ddf4aa3753b752d3d9f2","target":"graph","created_at":"2026-07-05T07:00:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.14950/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the emergence of more powerful large language models (LLMs), such as ChatGPT and GPT-4, in-context learning (ICL) has gained significant prominence in leveraging these models for specific tasks by utilizing data-label pairs as precondition prompts. While incorporating demonstrations can greatly enhance the performance of LLMs across various tasks, it may introduce a new security concern: attackers can manipulate only the demonstrations without changing the input to perform an attack. In this paper, we investigate the security concern of ICL from an adversarial perspective, focusing on the","authors_text":"Chaowei Xiao, Jiongxiao Wang, Keun Hee Park, Muhao Chen, Zhaoheng Zheng, Zhuofeng Wu, Zhuojun Jiang, Zichen Liu","cross_cats":["cs.AI","cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-24T09:40:56Z","title":"Adversarial Demonstration Attacks on Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.14950","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:dfd060f48c74625390c5a73dff48c680e58dd0ef5617dab1fe0649e0cb12ef7c","target":"record","created_at":"2026-07-05T07:00:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1b2f6c012af125557059a9586fd995928a327a91526fb4a06cc2768df89e01ef","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-24T09:40:56Z","title_canon_sha256":"9746d8d9f7353e8d416bba1938b60c83f2c6994fe6926c2dcbc3df8b7101f654"},"schema_version":"1.0","source":{"id":"2305.14950","kind":"arxiv","version":2}},"canonical_sha256":"91c655ff3b5c21324cc31b6ccef11412224257683572f962f1f5b4e8a42e4313","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"91c655ff3b5c21324cc31b6ccef11412224257683572f962f1f5b4e8a42e4313","first_computed_at":"2026-07-05T07:00:44.694113Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:00:44.694113Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xdmZr/LEPlYeytoBNHh3nCHtIK6HjixePJgy3gFyjg9qVZQ2ztqOOCRuv7GdGVX4h/ZjMXYMvQbFElwCX4vQDA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:00:44.694604Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.14950","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:dfd060f48c74625390c5a73dff48c680e58dd0ef5617dab1fe0649e0cb12ef7c","sha256:640b087274bb46dff6f65d5143a7446b78b0c634cf77ddf4aa3753b752d3d9f2"],"state_sha256":"b17ade3380278cf704a76324056d8e4ce489914d91d5e13fb3fc2f75017f9f12"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tVbMHlMVO0il3oU1JRo6w9DyqOSB8y84T3z8q68gXrGdeON9FrYaGd3i1nv4wXYaEuXmPJxT4eTcIb8aeDEkBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T15:08:28.267494Z","bundle_sha256":"3dd1477146562c7b2e3cb2e581695a04b6bc20cbffea684d144fc6645481e8fd"}}