{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:TIB7SWMIZQWOYS73SSZ76IYXQ2","short_pith_number":"pith:TIB7SWMI","canonical_record":{"source":{"id":"2310.06372","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-10T07:25:06Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"94208ba336d9273d1d58f5a44b53b238934a95c73497ea64690453eeb7b0f92c","abstract_canon_sha256":"7ea5bb258e817a88b65244c8f74ab30bb3a583b8cd25ea2226bcaaad9dd21861"},"schema_version":"1.0"},"canonical_sha256":"9a03f95988cc2cec4bfb94b3ff23178697237f575ab1918505a68615755c09c6","source":{"kind":"arxiv","id":"2310.06372","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.06372","created_at":"2026-07-05T07:24:01Z"},{"alias_kind":"arxiv_version","alias_value":"2310.06372v2","created_at":"2026-07-05T07:24:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.06372","created_at":"2026-07-05T07:24:01Z"},{"alias_kind":"pith_short_12","alias_value":"TIB7SWMIZQWO","created_at":"2026-07-05T07:24:01Z"},{"alias_kind":"pith_short_16","alias_value":"TIB7SWMIZQWOYS73","created_at":"2026-07-05T07:24:01Z"},{"alias_kind":"pith_short_8","alias_value":"TIB7SWMI","created_at":"2026-07-05T07:24:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:TIB7SWMIZQWOYS73SSZ76IYXQ2","target":"record","payload":{"canonical_record":{"source":{"id":"2310.06372","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-10T07:25:06Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"94208ba336d9273d1d58f5a44b53b238934a95c73497ea64690453eeb7b0f92c","abstract_canon_sha256":"7ea5bb258e817a88b65244c8f74ab30bb3a583b8cd25ea2226bcaaad9dd21861"},"schema_version":"1.0"},"canonical_sha256":"9a03f95988cc2cec4bfb94b3ff23178697237f575ab1918505a68615755c09c6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:24:01.126781Z","signature_b64":"WzoqA6AwdTQQmE3Pm+OZG3qifJN30TQ2ehXtP9qHJG80dEKkasdqA53X62jIm69ePIPM6c3iv0MMlSYZLWQHDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9a03f95988cc2cec4bfb94b3ff23178697237f575ab1918505a68615755c09c6","last_reissued_at":"2026-07-05T07:24:01.126412Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:24:01.126412Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.06372","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:24:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6qzhj44BTXAt0eZcxSDh1tCSQNvkVXUqSFM1KbVOf1kPojl2PI/o2yBokf4pqLlKE4caDB6YdOVe1PpHXBbWBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-13T16:53:52.447413Z"},"content_sha256":"dd9d872592a4943446a75985e37aeeb7413207f55ac83ee53c7659415c746134","schema_version":"1.0","event_id":"sha256:dd9d872592a4943446a75985e37aeeb7413207f55ac83ee53c7659415c746134"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:TIB7SWMIZQWOYS73SSZ76IYXQ2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Leveraging Diffusion-Based Image Variations for Robust Training on Poisoned Data","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Clifton Poth, Dominik Hintersdorf, Kristian Kersting, Lukas Struppek, Martin B. Hentschel","submitted_at":"2023-10-10T07:25:06Z","abstract_excerpt":"Backdoor attacks pose a serious security threat for training neural networks as they surreptitiously introduce hidden functionalities into a model. Such backdoors remain silent during inference on clean inputs, evading detection due to inconspicuous behavior. However, once a specific trigger pattern appears in the input data, the backdoor activates, causing the model to execute its concealed function. Detecting such poisoned samples within vast datasets is virtually impossible through manual inspection. To address this challenge, we propose a novel approach that enables model training on poten"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.06372","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.06372/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:24:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NkCCbHz7FloP+WNJxRXoBt4gRgRg86XX9n6iLowWlejCGJFQukmV7gJd7ctXNCeeEghFwbM5cGlEUuq2aFR2Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-13T16:53:52.447781Z"},"content_sha256":"041c5aab896a2e78578f1a3d630ee9e764f1105ba5b2efece0db73758741586b","schema_version":"1.0","event_id":"sha256:041c5aab896a2e78578f1a3d630ee9e764f1105ba5b2efece0db73758741586b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TIB7SWMIZQWOYS73SSZ76IYXQ2/bundle.json","state_url":"https://pith.science/pith/TIB7SWMIZQWOYS73SSZ76IYXQ2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TIB7SWMIZQWOYS73SSZ76IYXQ2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-13T16:53:52Z","links":{"resolver":"https://pith.science/pith/TIB7SWMIZQWOYS73SSZ76IYXQ2","bundle":"https://pith.science/pith/TIB7SWMIZQWOYS73SSZ76IYXQ2/bundle.json","state":"https://pith.science/pith/TIB7SWMIZQWOYS73SSZ76IYXQ2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TIB7SWMIZQWOYS73SSZ76IYXQ2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:TIB7SWMIZQWOYS73SSZ76IYXQ2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7ea5bb258e817a88b65244c8f74ab30bb3a583b8cd25ea2226bcaaad9dd21861","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-10T07:25:06Z","title_canon_sha256":"94208ba336d9273d1d58f5a44b53b238934a95c73497ea64690453eeb7b0f92c"},"schema_version":"1.0","source":{"id":"2310.06372","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.06372","created_at":"2026-07-05T07:24:01Z"},{"alias_kind":"arxiv_version","alias_value":"2310.06372v2","created_at":"2026-07-05T07:24:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.06372","created_at":"2026-07-05T07:24:01Z"},{"alias_kind":"pith_short_12","alias_value":"TIB7SWMIZQWO","created_at":"2026-07-05T07:24:01Z"},{"alias_kind":"pith_short_16","alias_value":"TIB7SWMIZQWOYS73","created_at":"2026-07-05T07:24:01Z"},{"alias_kind":"pith_short_8","alias_value":"TIB7SWMI","created_at":"2026-07-05T07:24:01Z"}],"graph_snapshots":[{"event_id":"sha256:041c5aab896a2e78578f1a3d630ee9e764f1105ba5b2efece0db73758741586b","target":"graph","created_at":"2026-07-05T07:24:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.06372/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attacks pose a serious security threat for training neural networks as they surreptitiously introduce hidden functionalities into a model. Such backdoors remain silent during inference on clean inputs, evading detection due to inconspicuous behavior. However, once a specific trigger pattern appears in the input data, the backdoor activates, causing the model to execute its concealed function. Detecting such poisoned samples within vast datasets is virtually impossible through manual inspection. To address this challenge, we propose a novel approach that enables model training on poten","authors_text":"Clifton Poth, Dominik Hintersdorf, Kristian Kersting, Lukas Struppek, Martin B. Hentschel","cross_cats":["cs.CV","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-10T07:25:06Z","title":"Leveraging Diffusion-Based Image Variations for Robust Training on Poisoned Data"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.06372","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:dd9d872592a4943446a75985e37aeeb7413207f55ac83ee53c7659415c746134","target":"record","created_at":"2026-07-05T07:24:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7ea5bb258e817a88b65244c8f74ab30bb3a583b8cd25ea2226bcaaad9dd21861","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-10T07:25:06Z","title_canon_sha256":"94208ba336d9273d1d58f5a44b53b238934a95c73497ea64690453eeb7b0f92c"},"schema_version":"1.0","source":{"id":"2310.06372","kind":"arxiv","version":2}},"canonical_sha256":"9a03f95988cc2cec4bfb94b3ff23178697237f575ab1918505a68615755c09c6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9a03f95988cc2cec4bfb94b3ff23178697237f575ab1918505a68615755c09c6","first_computed_at":"2026-07-05T07:24:01.126412Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:24:01.126412Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"WzoqA6AwdTQQmE3Pm+OZG3qifJN30TQ2ehXtP9qHJG80dEKkasdqA53X62jIm69ePIPM6c3iv0MMlSYZLWQHDg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:24:01.126781Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.06372","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:dd9d872592a4943446a75985e37aeeb7413207f55ac83ee53c7659415c746134","sha256:041c5aab896a2e78578f1a3d630ee9e764f1105ba5b2efece0db73758741586b"],"state_sha256":"e1d80387253290e146a1dcdb71c437e2e4c0e9b87e9c4963ebeab0d1a7460979"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pYiPv3cZSpndnXCWiW/7bAdVfPXokjU9LRhu9iLt/D+KhaXOejl6bx1tZ2oLJT1J8fap4lXZWW8YYvYPHRJ+CQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-13T16:53:52.449777Z","bundle_sha256":"f2065aad09bf1720d694816afa66a0eae1a2a61d4c39ee60b2b98c0acc0e6f24"}}