{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:TZRZE7VZ3WSDDRIP5YGMLSNX74","short_pith_number":"pith:TZRZE7VZ","canonical_record":{"source":{"id":"2409.17946","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-26T15:20:37Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"15daceadc3733d0bebe0927fa9782da75f0a5d58041ca28f7c4135c4cdd0dbbc","abstract_canon_sha256":"8a16111189d0d520e5c14000dd6db9937b1220e10a8c7d5838b3267ef1352741"},"schema_version":"1.0"},"canonical_sha256":"9e63927eb9dda431c50fee0cc5c9b7ff178cd7c281e7eab2a3da45f61573617a","source":{"kind":"arxiv","id":"2409.17946","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.17946","created_at":"2026-07-05T11:34:00Z"},{"alias_kind":"arxiv_version","alias_value":"2409.17946v4","created_at":"2026-07-05T11:34:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.17946","created_at":"2026-07-05T11:34:00Z"},{"alias_kind":"pith_short_12","alias_value":"TZRZE7VZ3WSD","created_at":"2026-07-05T11:34:00Z"},{"alias_kind":"pith_short_16","alias_value":"TZRZE7VZ3WSDDRIP","created_at":"2026-07-05T11:34:00Z"},{"alias_kind":"pith_short_8","alias_value":"TZRZE7VZ","created_at":"2026-07-05T11:34:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:TZRZE7VZ3WSDDRIP5YGMLSNX74","target":"record","payload":{"canonical_record":{"source":{"id":"2409.17946","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-26T15:20:37Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"15daceadc3733d0bebe0927fa9782da75f0a5d58041ca28f7c4135c4cdd0dbbc","abstract_canon_sha256":"8a16111189d0d520e5c14000dd6db9937b1220e10a8c7d5838b3267ef1352741"},"schema_version":"1.0"},"canonical_sha256":"9e63927eb9dda431c50fee0cc5c9b7ff178cd7c281e7eab2a3da45f61573617a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:34:00.275576Z","signature_b64":"TWGkdjeNlIs98rWBhdNQRnQfzrsKfo/KZm4473+KxuvlsUFAle1qKlaFjP5KLLIWN8EliJ4dETHQ2fWNIjkjDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9e63927eb9dda431c50fee0cc5c9b7ff178cd7c281e7eab2a3da45f61573617a","last_reissued_at":"2026-07-05T11:34:00.275060Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:34:00.275060Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.17946","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:34:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WfVfYnYSFDINY7HHePt8PlibQuaAjI0a66nZZigSM43HaSEpsRJEIrQxXjYj0/c/9tEhuTKbItZcej6zedGuBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T01:04:59.537461Z"},"content_sha256":"a4fce489d21c29142608b8f9c1d9a791c474c323f05ab7ce5b50cdd34797949f","schema_version":"1.0","event_id":"sha256:a4fce489d21c29142608b8f9c1d9a791c474c323f05ab7ce5b50cdd34797949f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:TZRZE7VZ3WSDDRIP5YGMLSNX74","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Breaking PEFT Limitations: Leveraging Weak-to-Strong Knowledge Transfer for Backdoor Attacks in LLMs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Cong-Duy Nguyen, Leilei Gan, Luu Anh Tuan, Luwei Xiao, Shuai Zhao, Xiaobao Wu, Yanhao Jia, Zhongliang Guo","submitted_at":"2024-09-26T15:20:37Z","abstract_excerpt":"Despite being widely applied due to their exceptional capabilities, Large Language Models (LLMs) have been proven to be vulnerable to backdoor attacks. These attacks introduce targeted vulnerabilities into LLMs by poisoning training samples and full-parameter fine-tuning (FPFT). However, this kind of backdoor attack is limited since they require significant computational resources, especially as the size of LLMs increases. Besides, parameter-efficient fine-tuning (PEFT) offers an alternative but the restricted parameter updating may impede the alignment of triggers with target labels. In this "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.17946","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.17946/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:34:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IsujhtyA2b1tFXa6W47/Hjw/nynxdZprter1amfr5Baze7lHUpoTgMeMl+C3UKCb7lTCfiD8qkTNeWCmlD2hCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T01:04:59.537955Z"},"content_sha256":"65e55c5fba41320f770f08abf1292aa7ef723edfba9bd968e791aca97cb67359","schema_version":"1.0","event_id":"sha256:65e55c5fba41320f770f08abf1292aa7ef723edfba9bd968e791aca97cb67359"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TZRZE7VZ3WSDDRIP5YGMLSNX74/bundle.json","state_url":"https://pith.science/pith/TZRZE7VZ3WSDDRIP5YGMLSNX74/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TZRZE7VZ3WSDDRIP5YGMLSNX74/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T01:04:59Z","links":{"resolver":"https://pith.science/pith/TZRZE7VZ3WSDDRIP5YGMLSNX74","bundle":"https://pith.science/pith/TZRZE7VZ3WSDDRIP5YGMLSNX74/bundle.json","state":"https://pith.science/pith/TZRZE7VZ3WSDDRIP5YGMLSNX74/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TZRZE7VZ3WSDDRIP5YGMLSNX74/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:TZRZE7VZ3WSDDRIP5YGMLSNX74","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8a16111189d0d520e5c14000dd6db9937b1220e10a8c7d5838b3267ef1352741","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-26T15:20:37Z","title_canon_sha256":"15daceadc3733d0bebe0927fa9782da75f0a5d58041ca28f7c4135c4cdd0dbbc"},"schema_version":"1.0","source":{"id":"2409.17946","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.17946","created_at":"2026-07-05T11:34:00Z"},{"alias_kind":"arxiv_version","alias_value":"2409.17946v4","created_at":"2026-07-05T11:34:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.17946","created_at":"2026-07-05T11:34:00Z"},{"alias_kind":"pith_short_12","alias_value":"TZRZE7VZ3WSD","created_at":"2026-07-05T11:34:00Z"},{"alias_kind":"pith_short_16","alias_value":"TZRZE7VZ3WSDDRIP","created_at":"2026-07-05T11:34:00Z"},{"alias_kind":"pith_short_8","alias_value":"TZRZE7VZ","created_at":"2026-07-05T11:34:00Z"}],"graph_snapshots":[{"event_id":"sha256:65e55c5fba41320f770f08abf1292aa7ef723edfba9bd968e791aca97cb67359","target":"graph","created_at":"2026-07-05T11:34:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.17946/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Despite being widely applied due to their exceptional capabilities, Large Language Models (LLMs) have been proven to be vulnerable to backdoor attacks. These attacks introduce targeted vulnerabilities into LLMs by poisoning training samples and full-parameter fine-tuning (FPFT). However, this kind of backdoor attack is limited since they require significant computational resources, especially as the size of LLMs increases. Besides, parameter-efficient fine-tuning (PEFT) offers an alternative but the restricted parameter updating may impede the alignment of triggers with target labels. In this ","authors_text":"Cong-Duy Nguyen, Leilei Gan, Luu Anh Tuan, Luwei Xiao, Shuai Zhao, Xiaobao Wu, Yanhao Jia, Zhongliang Guo","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-26T15:20:37Z","title":"Breaking PEFT Limitations: Leveraging Weak-to-Strong Knowledge Transfer for Backdoor Attacks in LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.17946","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a4fce489d21c29142608b8f9c1d9a791c474c323f05ab7ce5b50cdd34797949f","target":"record","created_at":"2026-07-05T11:34:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8a16111189d0d520e5c14000dd6db9937b1220e10a8c7d5838b3267ef1352741","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-26T15:20:37Z","title_canon_sha256":"15daceadc3733d0bebe0927fa9782da75f0a5d58041ca28f7c4135c4cdd0dbbc"},"schema_version":"1.0","source":{"id":"2409.17946","kind":"arxiv","version":4}},"canonical_sha256":"9e63927eb9dda431c50fee0cc5c9b7ff178cd7c281e7eab2a3da45f61573617a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9e63927eb9dda431c50fee0cc5c9b7ff178cd7c281e7eab2a3da45f61573617a","first_computed_at":"2026-07-05T11:34:00.275060Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:34:00.275060Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TWGkdjeNlIs98rWBhdNQRnQfzrsKfo/KZm4473+KxuvlsUFAle1qKlaFjP5KLLIWN8EliJ4dETHQ2fWNIjkjDw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:34:00.275576Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.17946","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a4fce489d21c29142608b8f9c1d9a791c474c323f05ab7ce5b50cdd34797949f","sha256:65e55c5fba41320f770f08abf1292aa7ef723edfba9bd968e791aca97cb67359"],"state_sha256":"7a0d556ae89d1e2fc8b476320309c61dbbf92ef54662a2e3297e16937b2222fe"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+2iQncV6GEUh8V1LgM0Al+w6qOWai6hmdRfOKlNOCszifC8RdJ8WhOZcgVWnxEbBRoonYQXvXMdilaAJomwYDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T01:04:59.541547Z","bundle_sha256":"5ad69a89c6711a7a691f76e092b073f9d0497b332157dfa164f7dc2c26b18b9d"}}