{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:UDCL4R7PAU2P6YOESG7DO2IBHF","short_pith_number":"pith:UDCL4R7P","canonical_record":{"source":{"id":"2205.14497","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-05-28T18:02:11Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7342e45405cc8844fe62415241db5b89da0229c1f6fc8687f01772cf306b0d44","abstract_canon_sha256":"d09166d42779750303406ed46a38c85b90d6099be95ec19cf049014ad061e4dd"},"schema_version":"1.0"},"canonical_sha256":"a0c4be47ef0534ff61c491be376901397cc851f440f27c7e438dc4bfde749b6e","source":{"kind":"arxiv","id":"2205.14497","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.14497","created_at":"2026-07-05T04:27:17Z"},{"alias_kind":"arxiv_version","alias_value":"2205.14497v1","created_at":"2026-07-05T04:27:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.14497","created_at":"2026-07-05T04:27:17Z"},{"alias_kind":"pith_short_12","alias_value":"UDCL4R7PAU2P","created_at":"2026-07-05T04:27:17Z"},{"alias_kind":"pith_short_16","alias_value":"UDCL4R7PAU2P6YOE","created_at":"2026-07-05T04:27:17Z"},{"alias_kind":"pith_short_8","alias_value":"UDCL4R7P","created_at":"2026-07-05T04:27:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:UDCL4R7PAU2P6YOESG7DO2IBHF","target":"record","payload":{"canonical_record":{"source":{"id":"2205.14497","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-05-28T18:02:11Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7342e45405cc8844fe62415241db5b89da0229c1f6fc8687f01772cf306b0d44","abstract_canon_sha256":"d09166d42779750303406ed46a38c85b90d6099be95ec19cf049014ad061e4dd"},"schema_version":"1.0"},"canonical_sha256":"a0c4be47ef0534ff61c491be376901397cc851f440f27c7e438dc4bfde749b6e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:27:17.997666Z","signature_b64":"G8ttyMkHdvJ1Oh765qWjI/u1w6YaGTF4IU8bW6+JKEvU5jKFJVvbq60s7gzPyN/QzqLz+OmX59BAgRFf0MhVCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a0c4be47ef0534ff61c491be376901397cc851f440f27c7e438dc4bfde749b6e","last_reissued_at":"2026-07-05T04:27:17.997167Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:27:17.997167Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2205.14497","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:27:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AzQQM9Fwa5Ji5BTv2LsyYfLASxmq9s46MRgOuCrwcdaoLbRu7YdbsCeHoZ2vF3HhM8n1ZchGW8MU7ZjZQFfZBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T03:59:06.907134Z"},"content_sha256":"f5e08ce9b14a062cc2572b32c0e02e2e4c678f42d84e59e793e312e85e34346d","schema_version":"1.0","event_id":"sha256:f5e08ce9b14a062cc2572b32c0e02e2e4c678f42d84e59e793e312e85e34346d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:UDCL4R7PAU2P6YOESG7DO2IBHF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"BadDet: Backdoor Attacks on Object Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Jun Zhou, Jun Zhu, Shih-Han Chan, Xiaolu Zhang, Yinpeng Dong","submitted_at":"2022-05-28T18:02:11Z","abstract_excerpt":"Deep learning models have been deployed in numerous real-world applications such as autonomous driving and surveillance. However, these models are vulnerable in adversarial environments. Backdoor attack is emerging as a severe security threat which injects a backdoor trigger into a small portion of training data such that the trained model behaves normally on benign inputs but gives incorrect predictions when the specific trigger appears. While most research in backdoor attacks focuses on image classification, backdoor attacks on object detection have not been explored but are of equal importa"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.14497","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2205.14497/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:27:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YTbYOUIOl7+AuIJKjKXEbNTZOMaFIQO0W2io1BXtbVILl0V9bjCz+RtIR+BWPKeMrE4tejXL8aJRikkpSBesBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T03:59:06.907611Z"},"content_sha256":"7ce10f2d9eef39b5a8f92b56412aacd9442110f7b4774dac20dc0641b8f58841","schema_version":"1.0","event_id":"sha256:7ce10f2d9eef39b5a8f92b56412aacd9442110f7b4774dac20dc0641b8f58841"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UDCL4R7PAU2P6YOESG7DO2IBHF/bundle.json","state_url":"https://pith.science/pith/UDCL4R7PAU2P6YOESG7DO2IBHF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UDCL4R7PAU2P6YOESG7DO2IBHF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T03:59:06Z","links":{"resolver":"https://pith.science/pith/UDCL4R7PAU2P6YOESG7DO2IBHF","bundle":"https://pith.science/pith/UDCL4R7PAU2P6YOESG7DO2IBHF/bundle.json","state":"https://pith.science/pith/UDCL4R7PAU2P6YOESG7DO2IBHF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UDCL4R7PAU2P6YOESG7DO2IBHF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:UDCL4R7PAU2P6YOESG7DO2IBHF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d09166d42779750303406ed46a38c85b90d6099be95ec19cf049014ad061e4dd","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-05-28T18:02:11Z","title_canon_sha256":"7342e45405cc8844fe62415241db5b89da0229c1f6fc8687f01772cf306b0d44"},"schema_version":"1.0","source":{"id":"2205.14497","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.14497","created_at":"2026-07-05T04:27:17Z"},{"alias_kind":"arxiv_version","alias_value":"2205.14497v1","created_at":"2026-07-05T04:27:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.14497","created_at":"2026-07-05T04:27:17Z"},{"alias_kind":"pith_short_12","alias_value":"UDCL4R7PAU2P","created_at":"2026-07-05T04:27:17Z"},{"alias_kind":"pith_short_16","alias_value":"UDCL4R7PAU2P6YOE","created_at":"2026-07-05T04:27:17Z"},{"alias_kind":"pith_short_8","alias_value":"UDCL4R7P","created_at":"2026-07-05T04:27:17Z"}],"graph_snapshots":[{"event_id":"sha256:7ce10f2d9eef39b5a8f92b56412aacd9442110f7b4774dac20dc0641b8f58841","target":"graph","created_at":"2026-07-05T04:27:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2205.14497/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep learning models have been deployed in numerous real-world applications such as autonomous driving and surveillance. However, these models are vulnerable in adversarial environments. Backdoor attack is emerging as a severe security threat which injects a backdoor trigger into a small portion of training data such that the trained model behaves normally on benign inputs but gives incorrect predictions when the specific trigger appears. While most research in backdoor attacks focuses on image classification, backdoor attacks on object detection have not been explored but are of equal importa","authors_text":"Jun Zhou, Jun Zhu, Shih-Han Chan, Xiaolu Zhang, Yinpeng Dong","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-05-28T18:02:11Z","title":"BadDet: Backdoor Attacks on Object Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.14497","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f5e08ce9b14a062cc2572b32c0e02e2e4c678f42d84e59e793e312e85e34346d","target":"record","created_at":"2026-07-05T04:27:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d09166d42779750303406ed46a38c85b90d6099be95ec19cf049014ad061e4dd","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-05-28T18:02:11Z","title_canon_sha256":"7342e45405cc8844fe62415241db5b89da0229c1f6fc8687f01772cf306b0d44"},"schema_version":"1.0","source":{"id":"2205.14497","kind":"arxiv","version":1}},"canonical_sha256":"a0c4be47ef0534ff61c491be376901397cc851f440f27c7e438dc4bfde749b6e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a0c4be47ef0534ff61c491be376901397cc851f440f27c7e438dc4bfde749b6e","first_computed_at":"2026-07-05T04:27:17.997167Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:27:17.997167Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"G8ttyMkHdvJ1Oh765qWjI/u1w6YaGTF4IU8bW6+JKEvU5jKFJVvbq60s7gzPyN/QzqLz+OmX59BAgRFf0MhVCg==","signature_status":"signed_v1","signed_at":"2026-07-05T04:27:17.997666Z","signed_message":"canonical_sha256_bytes"},"source_id":"2205.14497","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f5e08ce9b14a062cc2572b32c0e02e2e4c678f42d84e59e793e312e85e34346d","sha256:7ce10f2d9eef39b5a8f92b56412aacd9442110f7b4774dac20dc0641b8f58841"],"state_sha256":"ef807b44b62456c61910d43a9405bdc956658beac39019ed8aa88f540ee6983e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fydEHZufduYML+mMmChOnZVe7ivTYrB8spHJKTjE6TgQiJgr9QAxwHqD+wuVBulBCOK6CC+i8Qowt9xd+jVLAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T03:59:06.910965Z","bundle_sha256":"530087da29cc3f3d4bb8056729451b3c4ed24ef78566f74d09d6cca7d0f82ff3"}}