{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:TOEZEC3UFZFKIICUKPXRPWEOCL","short_pith_number":"pith:TOEZEC3U","canonical_record":{"source":{"id":"2110.14880","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-10-28T04:36:48Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"9ca0f7554588c0d87dfea04ebd4d7fe86948d5a4f4fd0ce1bb389e73e61f6bb8","abstract_canon_sha256":"8f7796d712aee367d1ab5a45e3a6490cd9cef21a36cc5e501af08b315b6cc117"},"schema_version":"1.0"},"canonical_sha256":"9b89920b742e4aa4205453ef17d88e12ed5b2f3ddc2a6a6d54f8d26bb621ce4e","source":{"kind":"arxiv","id":"2110.14880","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.14880","created_at":"2026-07-05T03:59:53Z"},{"alias_kind":"arxiv_version","alias_value":"2110.14880v4","created_at":"2026-07-05T03:59:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.14880","created_at":"2026-07-05T03:59:53Z"},{"alias_kind":"pith_short_12","alias_value":"TOEZEC3UFZFK","created_at":"2026-07-05T03:59:53Z"},{"alias_kind":"pith_short_16","alias_value":"TOEZEC3UFZFKIICU","created_at":"2026-07-05T03:59:53Z"},{"alias_kind":"pith_short_8","alias_value":"TOEZEC3U","created_at":"2026-07-05T03:59:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:TOEZEC3UFZFKIICUKPXRPWEOCL","target":"record","payload":{"canonical_record":{"source":{"id":"2110.14880","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-10-28T04:36:48Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"9ca0f7554588c0d87dfea04ebd4d7fe86948d5a4f4fd0ce1bb389e73e61f6bb8","abstract_canon_sha256":"8f7796d712aee367d1ab5a45e3a6490cd9cef21a36cc5e501af08b315b6cc117"},"schema_version":"1.0"},"canonical_sha256":"9b89920b742e4aa4205453ef17d88e12ed5b2f3ddc2a6a6d54f8d26bb621ce4e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:59:53.317460Z","signature_b64":"Y9bys1j5UKDSqmaE+KLfivNfmK1pcUzqQWBma1qJ2F6zv+PZRVCaW7vr+CsU0D1yuw9GO3ODcYrZ+SUknxP2DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9b89920b742e4aa4205453ef17d88e12ed5b2f3ddc2a6a6d54f8d26bb621ce4e","last_reissued_at":"2026-07-05T03:59:53.317003Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:59:53.317003Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2110.14880","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:59:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XzNbQeDr49Hs5Sz/JyIUup4cUhFXbZlKr+PkoNgUUbcJc+UoJZ+GL8+Yx0+aoKpylcInMBITlW6BYbTkoEv5Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T08:29:43.426191Z"},"content_sha256":"06f9447c1717ca83a84a046281971435c58676989d764d845063b02080b9bf90","schema_version":"1.0","event_id":"sha256:06f9447c1717ca83a84a046281971435c58676989d764d845063b02080b9bf90"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:TOEZEC3UFZFKIICUKPXRPWEOCL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"AEVA: Black-box Backdoor Detection Using Adversarial Extreme Value Analysis","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Ang Li, Cong Liu, Junfeng Guo","submitted_at":"2021-10-28T04:36:48Z","abstract_excerpt":"Deep neural networks (DNNs) are proved to be vulnerable against backdoor attacks. A backdoor is often embedded in the target DNNs through injecting a backdoor trigger into training examples, which can cause the target DNNs misclassify an input attached with the backdoor trigger. Existing backdoor detection methods often require the access to the original poisoned training data, the parameters of the target DNNs, or the predictive confidence for each given input, which are impractical in many real-world applications, e.g., on-device deployed DNNs. We address the black-box hard-label backdoor de"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.14880","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2110.14880/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:59:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"i76kJ6x3D3JVQNXAvqwhS01BIPFAlnVhMlDhIdEve6kA5B2MMUtPlNgVKNuEphndvBwD8UROTOSaXOyELtBmAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T08:29:43.426729Z"},"content_sha256":"f27f183487231554016f8650e2d7eb989f1dd5d9c5bee5e1bb5ae2cdd3b16ff1","schema_version":"1.0","event_id":"sha256:f27f183487231554016f8650e2d7eb989f1dd5d9c5bee5e1bb5ae2cdd3b16ff1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TOEZEC3UFZFKIICUKPXRPWEOCL/bundle.json","state_url":"https://pith.science/pith/TOEZEC3UFZFKIICUKPXRPWEOCL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TOEZEC3UFZFKIICUKPXRPWEOCL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T08:29:43Z","links":{"resolver":"https://pith.science/pith/TOEZEC3UFZFKIICUKPXRPWEOCL","bundle":"https://pith.science/pith/TOEZEC3UFZFKIICUKPXRPWEOCL/bundle.json","state":"https://pith.science/pith/TOEZEC3UFZFKIICUKPXRPWEOCL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TOEZEC3UFZFKIICUKPXRPWEOCL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:TOEZEC3UFZFKIICUKPXRPWEOCL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8f7796d712aee367d1ab5a45e3a6490cd9cef21a36cc5e501af08b315b6cc117","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-10-28T04:36:48Z","title_canon_sha256":"9ca0f7554588c0d87dfea04ebd4d7fe86948d5a4f4fd0ce1bb389e73e61f6bb8"},"schema_version":"1.0","source":{"id":"2110.14880","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.14880","created_at":"2026-07-05T03:59:53Z"},{"alias_kind":"arxiv_version","alias_value":"2110.14880v4","created_at":"2026-07-05T03:59:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.14880","created_at":"2026-07-05T03:59:53Z"},{"alias_kind":"pith_short_12","alias_value":"TOEZEC3UFZFK","created_at":"2026-07-05T03:59:53Z"},{"alias_kind":"pith_short_16","alias_value":"TOEZEC3UFZFKIICU","created_at":"2026-07-05T03:59:53Z"},{"alias_kind":"pith_short_8","alias_value":"TOEZEC3U","created_at":"2026-07-05T03:59:53Z"}],"graph_snapshots":[{"event_id":"sha256:f27f183487231554016f8650e2d7eb989f1dd5d9c5bee5e1bb5ae2cdd3b16ff1","target":"graph","created_at":"2026-07-05T03:59:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2110.14880/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) are proved to be vulnerable against backdoor attacks. A backdoor is often embedded in the target DNNs through injecting a backdoor trigger into training examples, which can cause the target DNNs misclassify an input attached with the backdoor trigger. Existing backdoor detection methods often require the access to the original poisoned training data, the parameters of the target DNNs, or the predictive confidence for each given input, which are impractical in many real-world applications, e.g., on-device deployed DNNs. We address the black-box hard-label backdoor de","authors_text":"Ang Li, Cong Liu, Junfeng Guo","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-10-28T04:36:48Z","title":"AEVA: Black-box Backdoor Detection Using Adversarial Extreme Value Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.14880","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:06f9447c1717ca83a84a046281971435c58676989d764d845063b02080b9bf90","target":"record","created_at":"2026-07-05T03:59:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8f7796d712aee367d1ab5a45e3a6490cd9cef21a36cc5e501af08b315b6cc117","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-10-28T04:36:48Z","title_canon_sha256":"9ca0f7554588c0d87dfea04ebd4d7fe86948d5a4f4fd0ce1bb389e73e61f6bb8"},"schema_version":"1.0","source":{"id":"2110.14880","kind":"arxiv","version":4}},"canonical_sha256":"9b89920b742e4aa4205453ef17d88e12ed5b2f3ddc2a6a6d54f8d26bb621ce4e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9b89920b742e4aa4205453ef17d88e12ed5b2f3ddc2a6a6d54f8d26bb621ce4e","first_computed_at":"2026-07-05T03:59:53.317003Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:59:53.317003Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Y9bys1j5UKDSqmaE+KLfivNfmK1pcUzqQWBma1qJ2F6zv+PZRVCaW7vr+CsU0D1yuw9GO3ODcYrZ+SUknxP2DA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:59:53.317460Z","signed_message":"canonical_sha256_bytes"},"source_id":"2110.14880","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:06f9447c1717ca83a84a046281971435c58676989d764d845063b02080b9bf90","sha256:f27f183487231554016f8650e2d7eb989f1dd5d9c5bee5e1bb5ae2cdd3b16ff1"],"state_sha256":"41d7e824af1d77de6fa20e87d3d484be288fec1c143fb8a315d0cadd089fb0e2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DVlLdPv+xAnmnxNsoc6Ao5BjszxS9F5NmbbTEtdMGhRFsuxp6JVu9OhoWCOItH32DDVQ48wsjZhtWZozvDKjDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T08:29:43.432304Z","bundle_sha256":"1feaa16ceb6e7951403549bdfdd4afe84feb8411efa0c27e86bbdda92132fcaa"}}