{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:UF2XU3LERKJ6IRAV4PV6VZRYT2","short_pith_number":"pith:UF2XU3LE","canonical_record":{"source":{"id":"2407.10180","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-07-14T12:42:11Z","cross_cats_sorted":[],"title_canon_sha256":"52fc417d5bae3782664e62f45fa97654d565444512ce4b8c8a2db2d310cc072d","abstract_canon_sha256":"a20cd22778f82089ea43fec82d5ff82567e35768702c4aa7d6a468d326002a0b"},"schema_version":"1.0"},"canonical_sha256":"a1757a6d648a93e44415e3ebeae6389e8c2bebaa118d2398c1b9559897b9b826","source":{"kind":"arxiv","id":"2407.10180","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.10180","created_at":"2026-07-05T09:44:13Z"},{"alias_kind":"arxiv_version","alias_value":"2407.10180v2","created_at":"2026-07-05T09:44:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.10180","created_at":"2026-07-05T09:44:13Z"},{"alias_kind":"pith_short_12","alias_value":"UF2XU3LERKJ6","created_at":"2026-07-05T09:44:13Z"},{"alias_kind":"pith_short_16","alias_value":"UF2XU3LERKJ6IRAV","created_at":"2026-07-05T09:44:13Z"},{"alias_kind":"pith_short_8","alias_value":"UF2XU3LE","created_at":"2026-07-05T09:44:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:UF2XU3LERKJ6IRAV4PV6VZRYT2","target":"record","payload":{"canonical_record":{"source":{"id":"2407.10180","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-07-14T12:42:11Z","cross_cats_sorted":[],"title_canon_sha256":"52fc417d5bae3782664e62f45fa97654d565444512ce4b8c8a2db2d310cc072d","abstract_canon_sha256":"a20cd22778f82089ea43fec82d5ff82567e35768702c4aa7d6a468d326002a0b"},"schema_version":"1.0"},"canonical_sha256":"a1757a6d648a93e44415e3ebeae6389e8c2bebaa118d2398c1b9559897b9b826","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:44:13.109225Z","signature_b64":"5hOjjt7cdSVKD3NehyYVTGHWm5qzxunsQRHZvk5xF9Byudi2BD6XXBLhOzUlp5eOwZU1Y4+FQ+G3HFUWa/zCBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a1757a6d648a93e44415e3ebeae6389e8c2bebaa118d2398c1b9559897b9b826","last_reissued_at":"2026-07-05T09:44:13.108756Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:44:13.108756Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.10180","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:44:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HC/kTohD79vSEunNGU3/kq8fBTJRXwSsvpi7EWaVDIIXyEbX3NYukL/+0UrRIUA4er86dFqmAOhd8z+k5ZEMDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T07:21:03.361323Z"},"content_sha256":"047fcecd0dcca8a5539f14e91133e25907aa38fa80a0946334dace4a19e1b9a2","schema_version":"1.0","event_id":"sha256:047fcecd0dcca8a5539f14e91133e25907aa38fa80a0946334dace4a19e1b9a2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:UF2XU3LERKJ6IRAV4PV6VZRYT2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Defending Against Repetitive Backdoor Attacks on Semi-supervised Learning through Lens of Rate-Distortion-Perception Trade-off","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Cheng-Han Yeh, Cheng-Yi Lee, Chia-Mu Yu, Ching-Chia Kao, Chun-Shien Lu, Chu-Song Chen","submitted_at":"2024-07-14T12:42:11Z","abstract_excerpt":"Semi-supervised learning (SSL) has achieved remarkable performance with a small fraction of labeled data by leveraging vast amounts of unlabeled data from the Internet. However, this large pool of untrusted data is extremely vulnerable to data poisoning, leading to potential backdoor attacks. Current backdoor defenses are not yet effective against such a vulnerability in SSL. In this study, we propose a novel method, Unlabeled Data Purification (UPure), to disrupt the association between trigger patterns and target classes by introducing perturbations in the frequency domain. By leveraging the"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.10180","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.10180/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:44:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0X/rTYjo+O0e7+7nuR6Un4+hgIYYnxy5//SS6djyDgSc3jltw7bzNjETNk8s1eUUfcfo5gd0EyqG/6KlUjpuAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T07:21:03.361830Z"},"content_sha256":"6d4c26e8ef4eca2cbdc6d54941b8cd5b65240571ca20dea9c5f9d4fcdcd2c6aa","schema_version":"1.0","event_id":"sha256:6d4c26e8ef4eca2cbdc6d54941b8cd5b65240571ca20dea9c5f9d4fcdcd2c6aa"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UF2XU3LERKJ6IRAV4PV6VZRYT2/bundle.json","state_url":"https://pith.science/pith/UF2XU3LERKJ6IRAV4PV6VZRYT2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UF2XU3LERKJ6IRAV4PV6VZRYT2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T07:21:03Z","links":{"resolver":"https://pith.science/pith/UF2XU3LERKJ6IRAV4PV6VZRYT2","bundle":"https://pith.science/pith/UF2XU3LERKJ6IRAV4PV6VZRYT2/bundle.json","state":"https://pith.science/pith/UF2XU3LERKJ6IRAV4PV6VZRYT2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UF2XU3LERKJ6IRAV4PV6VZRYT2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:UF2XU3LERKJ6IRAV4PV6VZRYT2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a20cd22778f82089ea43fec82d5ff82567e35768702c4aa7d6a468d326002a0b","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-07-14T12:42:11Z","title_canon_sha256":"52fc417d5bae3782664e62f45fa97654d565444512ce4b8c8a2db2d310cc072d"},"schema_version":"1.0","source":{"id":"2407.10180","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.10180","created_at":"2026-07-05T09:44:13Z"},{"alias_kind":"arxiv_version","alias_value":"2407.10180v2","created_at":"2026-07-05T09:44:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.10180","created_at":"2026-07-05T09:44:13Z"},{"alias_kind":"pith_short_12","alias_value":"UF2XU3LERKJ6","created_at":"2026-07-05T09:44:13Z"},{"alias_kind":"pith_short_16","alias_value":"UF2XU3LERKJ6IRAV","created_at":"2026-07-05T09:44:13Z"},{"alias_kind":"pith_short_8","alias_value":"UF2XU3LE","created_at":"2026-07-05T09:44:13Z"}],"graph_snapshots":[{"event_id":"sha256:6d4c26e8ef4eca2cbdc6d54941b8cd5b65240571ca20dea9c5f9d4fcdcd2c6aa","target":"graph","created_at":"2026-07-05T09:44:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.10180/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Semi-supervised learning (SSL) has achieved remarkable performance with a small fraction of labeled data by leveraging vast amounts of unlabeled data from the Internet. However, this large pool of untrusted data is extremely vulnerable to data poisoning, leading to potential backdoor attacks. Current backdoor defenses are not yet effective against such a vulnerability in SSL. In this study, we propose a novel method, Unlabeled Data Purification (UPure), to disrupt the association between trigger patterns and target classes by introducing perturbations in the frequency domain. By leveraging the","authors_text":"Cheng-Han Yeh, Cheng-Yi Lee, Chia-Mu Yu, Ching-Chia Kao, Chun-Shien Lu, Chu-Song Chen","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-07-14T12:42:11Z","title":"Defending Against Repetitive Backdoor Attacks on Semi-supervised Learning through Lens of Rate-Distortion-Perception Trade-off"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.10180","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:047fcecd0dcca8a5539f14e91133e25907aa38fa80a0946334dace4a19e1b9a2","target":"record","created_at":"2026-07-05T09:44:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a20cd22778f82089ea43fec82d5ff82567e35768702c4aa7d6a468d326002a0b","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-07-14T12:42:11Z","title_canon_sha256":"52fc417d5bae3782664e62f45fa97654d565444512ce4b8c8a2db2d310cc072d"},"schema_version":"1.0","source":{"id":"2407.10180","kind":"arxiv","version":2}},"canonical_sha256":"a1757a6d648a93e44415e3ebeae6389e8c2bebaa118d2398c1b9559897b9b826","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a1757a6d648a93e44415e3ebeae6389e8c2bebaa118d2398c1b9559897b9b826","first_computed_at":"2026-07-05T09:44:13.108756Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:44:13.108756Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5hOjjt7cdSVKD3NehyYVTGHWm5qzxunsQRHZvk5xF9Byudi2BD6XXBLhOzUlp5eOwZU1Y4+FQ+G3HFUWa/zCBA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:44:13.109225Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.10180","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:047fcecd0dcca8a5539f14e91133e25907aa38fa80a0946334dace4a19e1b9a2","sha256:6d4c26e8ef4eca2cbdc6d54941b8cd5b65240571ca20dea9c5f9d4fcdcd2c6aa"],"state_sha256":"d9e854b3796fec70462b3b75fd1f777bf856c6551662fc91d5ac7d3600ef53d4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eykKZ06WEd6sYqdnHgN9hY8x9k4+XS02dR5Z0mPkDl6qLbHOijDoMcsMy+FFu0A446PoGB+EmbzUSqIwqECqDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T07:21:03.365505Z","bundle_sha256":"930add0961fa4c3be4462d9adb36bc91d9c13bb8ae259747ff8c67f1446b5e32"}}