{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:T4VFLIHRTENJ3RRCCMIN26K7VC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f230587df086c89da228d19d082a32b69bb816e2cccb2d4530522f8427d0a931","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-07-05T01:53:21Z","title_canon_sha256":"cc83d97aa436045ff8fcfa49f72e127ff9e98e76440acd07083c2a5b590a92e9"},"schema_version":"1.0","source":{"id":"2407.04215","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.04215","created_at":"2026-07-05T08:44:55Z"},{"alias_kind":"arxiv_version","alias_value":"2407.04215v2","created_at":"2026-07-05T08:44:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.04215","created_at":"2026-07-05T08:44:55Z"},{"alias_kind":"pith_short_12","alias_value":"T4VFLIHRTENJ","created_at":"2026-07-05T08:44:55Z"},{"alias_kind":"pith_short_16","alias_value":"T4VFLIHRTENJ3RRC","created_at":"2026-07-05T08:44:55Z"},{"alias_kind":"pith_short_8","alias_value":"T4VFLIHR","created_at":"2026-07-05T08:44:55Z"}],"graph_snapshots":[{"event_id":"sha256:45bbbb25fddb4d0e76a81d6547e35f6935c3cf897865086fa717dfb67e80a939","target":"graph","created_at":"2026-07-05T08:44:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.04215/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While text-to-image diffusion models demonstrate impressive generation capabilities, they also exhibit vulnerability to backdoor attacks, which involve the manipulation of model outputs through malicious triggers. In this paper, for the first time, we propose a comprehensive defense method named T2IShield to detect, localize, and mitigate such attacks. Specifically, we find the \"Assimilation Phenomenon\" on the cross-attention maps caused by the backdoor trigger. Based on this key insight, we propose two effective backdoor detection methods: Frobenius Norm Threshold Truncation and Covariance Di","authors_text":"Jie Zhang, Shiguang Shan, Xilin Chen, Zhongqi Wang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-07-05T01:53:21Z","title":"T2IShield: Defending Against Backdoors on Text-to-Image Diffusion Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.04215","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:52c3c6b70fcd441dcefc0f3139a6ff784ef58fa9082b3353fd768041db4ed69a","target":"record","created_at":"2026-07-05T08:44:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f230587df086c89da228d19d082a32b69bb816e2cccb2d4530522f8427d0a931","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-07-05T01:53:21Z","title_canon_sha256":"cc83d97aa436045ff8fcfa49f72e127ff9e98e76440acd07083c2a5b590a92e9"},"schema_version":"1.0","source":{"id":"2407.04215","kind":"arxiv","version":2}},"canonical_sha256":"9f2a55a0f1991a9dc6221310dd795fa8bdc8fe0807479c9abc44b952cb77ee0c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9f2a55a0f1991a9dc6221310dd795fa8bdc8fe0807479c9abc44b952cb77ee0c","first_computed_at":"2026-07-05T08:44:55.893720Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:44:55.893720Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"reWhnuaOd7bbY0xbKLxsI5+f5rIJ41B2kMoCTM4wIgCC5GL86idFD6u6AN4ds853YTF4DgMHTmgFc/ONoIA9Cw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:44:55.894138Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.04215","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:52c3c6b70fcd441dcefc0f3139a6ff784ef58fa9082b3353fd768041db4ed69a","sha256:45bbbb25fddb4d0e76a81d6547e35f6935c3cf897865086fa717dfb67e80a939"],"state_sha256":"cd83be253b3c136849c78ca7ac7b63a8a8ef3183a55569a34cc659c3743c26b0"}