{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:U2QHVC5WK2YAZSCJFEDOBY35J4","short_pith_number":"pith:U2QHVC5W","canonical_record":{"source":{"id":"2006.14871","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-26T09:09:27Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"644a31e7c656c053e212852ce4d9b4a85061612a4fe3a226f4a2dfb71b11f421","abstract_canon_sha256":"76176d06d479deea4059a3dc640ed3dba1ffdf51f2ffdb81e2dc6866e542ee6a"},"schema_version":"1.0"},"canonical_sha256":"a6a07a8bb656b00cc8492906e0e37d4f206a4f57ccfc34bcb7150a78d04c8a4c","source":{"kind":"arxiv","id":"2006.14871","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2006.14871","created_at":"2026-07-05T04:44:27Z"},{"alias_kind":"arxiv_version","alias_value":"2006.14871v2","created_at":"2026-07-05T04:44:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2006.14871","created_at":"2026-07-05T04:44:27Z"},{"alias_kind":"pith_short_12","alias_value":"U2QHVC5WK2YA","created_at":"2026-07-05T04:44:27Z"},{"alias_kind":"pith_short_16","alias_value":"U2QHVC5WK2YAZSCJ","created_at":"2026-07-05T04:44:27Z"},{"alias_kind":"pith_short_8","alias_value":"U2QHVC5W","created_at":"2026-07-05T04:44:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:U2QHVC5WK2YAZSCJFEDOBY35J4","target":"record","payload":{"canonical_record":{"source":{"id":"2006.14871","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-26T09:09:27Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"644a31e7c656c053e212852ce4d9b4a85061612a4fe3a226f4a2dfb71b11f421","abstract_canon_sha256":"76176d06d479deea4059a3dc640ed3dba1ffdf51f2ffdb81e2dc6866e542ee6a"},"schema_version":"1.0"},"canonical_sha256":"a6a07a8bb656b00cc8492906e0e37d4f206a4f57ccfc34bcb7150a78d04c8a4c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:44:27.173397Z","signature_b64":"Q4o9N5yK0JQV6r+zj5/yWgA1ik7UbCbEdCD0v0CAhu7j2jPDLGPTVzfp0sZAIKCcHMFgdVJAblDRLEmM8dCXAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a6a07a8bb656b00cc8492906e0e37d4f206a4f57ccfc34bcb7150a78d04c8a4c","last_reissued_at":"2026-07-05T04:44:27.172901Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:44:27.172901Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2006.14871","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:44:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Qqi0xe+Ra6sDsv/Z+eFzoy7bD98EhXE9HloP4orcw9vzbK0XPBkJx2W34+opwAPyJezzLZqy43awZt91LyF3BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T15:52:28.483746Z"},"content_sha256":"a826e479b1ba97889617c210aec1481f4f24b72566e9d8816d2458682c0fdd94","schema_version":"1.0","event_id":"sha256:a826e479b1ba97889617c210aec1481f4f24b72566e9d8816d2458682c0fdd94"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:U2QHVC5WK2YAZSCJFEDOBY35J4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Can We Mitigate Backdoor Attack Using Adversarial Detection Methods?","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Chao Shen, Chenhao Lin, Kaidi Jin, Ming Fan, Tianwei Zhang, Ting Liu, Yufei Chen","submitted_at":"2020-06-26T09:09:27Z","abstract_excerpt":"Deep Neural Networks are well known to be vulnerable to adversarial attacks and backdoor attacks, where minor modifications on the input are able to mislead the models to give wrong results. Although defenses against adversarial attacks have been widely studied, investigation on mitigating backdoor attacks is still at an early stage. It is unknown whether there are any connections and common characteristics between the defenses against these two attacks. We conduct comprehensive studies on the connections between adversarial examples and backdoor examples of Deep Neural Networks to seek to ans"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2006.14871","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2006.14871/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:44:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9VO6V4iefuU/AvzXtPG1i3UNZ6HEWfvFF49LWtt11l1gxgG5EVxuF7YHsk5AIFDNA8PihA5PMSsquzy5bbg/DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T15:52:28.484285Z"},"content_sha256":"b5f21df1fdfc6312fd9bc72ef18a4d6a2794750d16ba5651216744ef81685cd4","schema_version":"1.0","event_id":"sha256:b5f21df1fdfc6312fd9bc72ef18a4d6a2794750d16ba5651216744ef81685cd4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/U2QHVC5WK2YAZSCJFEDOBY35J4/bundle.json","state_url":"https://pith.science/pith/U2QHVC5WK2YAZSCJFEDOBY35J4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/U2QHVC5WK2YAZSCJFEDOBY35J4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T15:52:28Z","links":{"resolver":"https://pith.science/pith/U2QHVC5WK2YAZSCJFEDOBY35J4","bundle":"https://pith.science/pith/U2QHVC5WK2YAZSCJFEDOBY35J4/bundle.json","state":"https://pith.science/pith/U2QHVC5WK2YAZSCJFEDOBY35J4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/U2QHVC5WK2YAZSCJFEDOBY35J4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:U2QHVC5WK2YAZSCJFEDOBY35J4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"76176d06d479deea4059a3dc640ed3dba1ffdf51f2ffdb81e2dc6866e542ee6a","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-26T09:09:27Z","title_canon_sha256":"644a31e7c656c053e212852ce4d9b4a85061612a4fe3a226f4a2dfb71b11f421"},"schema_version":"1.0","source":{"id":"2006.14871","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2006.14871","created_at":"2026-07-05T04:44:27Z"},{"alias_kind":"arxiv_version","alias_value":"2006.14871v2","created_at":"2026-07-05T04:44:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2006.14871","created_at":"2026-07-05T04:44:27Z"},{"alias_kind":"pith_short_12","alias_value":"U2QHVC5WK2YA","created_at":"2026-07-05T04:44:27Z"},{"alias_kind":"pith_short_16","alias_value":"U2QHVC5WK2YAZSCJ","created_at":"2026-07-05T04:44:27Z"},{"alias_kind":"pith_short_8","alias_value":"U2QHVC5W","created_at":"2026-07-05T04:44:27Z"}],"graph_snapshots":[{"event_id":"sha256:b5f21df1fdfc6312fd9bc72ef18a4d6a2794750d16ba5651216744ef81685cd4","target":"graph","created_at":"2026-07-05T04:44:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2006.14871/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep Neural Networks are well known to be vulnerable to adversarial attacks and backdoor attacks, where minor modifications on the input are able to mislead the models to give wrong results. Although defenses against adversarial attacks have been widely studied, investigation on mitigating backdoor attacks is still at an early stage. It is unknown whether there are any connections and common characteristics between the defenses against these two attacks. We conduct comprehensive studies on the connections between adversarial examples and backdoor examples of Deep Neural Networks to seek to ans","authors_text":"Chao Shen, Chenhao Lin, Kaidi Jin, Ming Fan, Tianwei Zhang, Ting Liu, Yufei Chen","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-26T09:09:27Z","title":"Can We Mitigate Backdoor Attack Using Adversarial Detection Methods?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2006.14871","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a826e479b1ba97889617c210aec1481f4f24b72566e9d8816d2458682c0fdd94","target":"record","created_at":"2026-07-05T04:44:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"76176d06d479deea4059a3dc640ed3dba1ffdf51f2ffdb81e2dc6866e542ee6a","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-26T09:09:27Z","title_canon_sha256":"644a31e7c656c053e212852ce4d9b4a85061612a4fe3a226f4a2dfb71b11f421"},"schema_version":"1.0","source":{"id":"2006.14871","kind":"arxiv","version":2}},"canonical_sha256":"a6a07a8bb656b00cc8492906e0e37d4f206a4f57ccfc34bcb7150a78d04c8a4c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a6a07a8bb656b00cc8492906e0e37d4f206a4f57ccfc34bcb7150a78d04c8a4c","first_computed_at":"2026-07-05T04:44:27.172901Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:44:27.172901Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Q4o9N5yK0JQV6r+zj5/yWgA1ik7UbCbEdCD0v0CAhu7j2jPDLGPTVzfp0sZAIKCcHMFgdVJAblDRLEmM8dCXAg==","signature_status":"signed_v1","signed_at":"2026-07-05T04:44:27.173397Z","signed_message":"canonical_sha256_bytes"},"source_id":"2006.14871","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a826e479b1ba97889617c210aec1481f4f24b72566e9d8816d2458682c0fdd94","sha256:b5f21df1fdfc6312fd9bc72ef18a4d6a2794750d16ba5651216744ef81685cd4"],"state_sha256":"e6df150e66ef0a0ed36ddbf70b4ebb39b935f8a692ca1b2f7ac837e8348dfff1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"azkMm3GAIMK7XmVsIoMEWTRVGiuyOA0CxkOU+hjOm3wJd1dt6Dr2QX9L3F2NhXwFW25O2wSHKw93dMrOmoL9Bw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T15:52:28.488881Z","bundle_sha256":"97b4677612c5e217b43110b55ccd30483894b6a5524f18db0e97735fd5dca142"}}