{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:UIX4SPWV5DVNJ2SDCODERXV7ZK","short_pith_number":"pith:UIX4SPWV","canonical_record":{"source":{"id":"2411.11525","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-11-18T12:35:08Z","cross_cats_sorted":[],"title_canon_sha256":"352a31ff1f8fb787f928b9cf25583a3d99e1837b1cfed326edf9097aef1ebe81","abstract_canon_sha256":"d0e4f8651c79aff76c6f3c0231189594ccec58393383d10c0e43c1d2b6ff8b92"},"schema_version":"1.0"},"canonical_sha256":"a22fc93ed5e8ead4ea43138648debfcabf86d5d8d36fa9afe1abe718aa7cd340","source":{"kind":"arxiv","id":"2411.11525","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.11525","created_at":"2026-07-05T09:36:57Z"},{"alias_kind":"arxiv_version","alias_value":"2411.11525v1","created_at":"2026-07-05T09:36:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.11525","created_at":"2026-07-05T09:36:57Z"},{"alias_kind":"pith_short_12","alias_value":"UIX4SPWV5DVN","created_at":"2026-07-05T09:36:57Z"},{"alias_kind":"pith_short_16","alias_value":"UIX4SPWV5DVNJ2SD","created_at":"2026-07-05T09:36:57Z"},{"alias_kind":"pith_short_8","alias_value":"UIX4SPWV","created_at":"2026-07-05T09:36:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:UIX4SPWV5DVNJ2SDCODERXV7ZK","target":"record","payload":{"canonical_record":{"source":{"id":"2411.11525","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-11-18T12:35:08Z","cross_cats_sorted":[],"title_canon_sha256":"352a31ff1f8fb787f928b9cf25583a3d99e1837b1cfed326edf9097aef1ebe81","abstract_canon_sha256":"d0e4f8651c79aff76c6f3c0231189594ccec58393383d10c0e43c1d2b6ff8b92"},"schema_version":"1.0"},"canonical_sha256":"a22fc93ed5e8ead4ea43138648debfcabf86d5d8d36fa9afe1abe718aa7cd340","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:36:57.520330Z","signature_b64":"FiyEHCTrG0l+XUhhegph7T0Gaz9Wu8k7jp4pxaTke9LuuvuK47vcEhnsNeljGYchCUSggA3yMscoD7qgbGA+DQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a22fc93ed5e8ead4ea43138648debfcabf86d5d8d36fa9afe1abe718aa7cd340","last_reissued_at":"2026-07-05T09:36:57.519858Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:36:57.519858Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.11525","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:36:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hyKXx5O1vwSLrdUfquOBvbYb64XRHS165PevrHjJUD847WYXp4Xj+BVsXZy6Re0kX8ph4MinzHGrwHL9/i4qAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T07:06:30.948092Z"},"content_sha256":"a7f71657918a6440077c1291483a1dff0d356ae2306ac254093225fec301f8a2","schema_version":"1.0","event_id":"sha256:a7f71657918a6440077c1291483a1dff0d356ae2306ac254093225fec301f8a2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:UIX4SPWV5DVNJ2SDCODERXV7ZK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Reliable Poisoned Sample Detection against Backdoor Attacks Enhanced by Sharpness Aware Minimization","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Baoyuan Wu, Mingda Zhang, Mingli Zhu, Zihao Zhu","submitted_at":"2024-11-18T12:35:08Z","abstract_excerpt":"Backdoor attack has been considered as a serious security threat to deep neural networks (DNNs). Poisoned sample detection (PSD) that aims at filtering out poisoned samples from an untrustworthy training dataset has shown very promising performance for defending against data poisoning based backdoor attacks. However, we observe that the detection performance of many advanced methods is likely to be unstable when facing weak backdoor attacks, such as low poisoning ratio or weak trigger strength. To further verify this observation, we make a statistical investigation among various backdoor attac"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.11525","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.11525/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:36:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M5YPVZrhv/CqgJjhdcYMsrs4lSyhTRNDii0gQDDBfXHsJBZHxqk+ihpkpNuZcVe82VD/Yz+DYDijEljOCx8tAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T07:06:30.948617Z"},"content_sha256":"8d07224838ee29379f2049625bb53a90b78d09a5978f91761932c280f4984b74","schema_version":"1.0","event_id":"sha256:8d07224838ee29379f2049625bb53a90b78d09a5978f91761932c280f4984b74"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UIX4SPWV5DVNJ2SDCODERXV7ZK/bundle.json","state_url":"https://pith.science/pith/UIX4SPWV5DVNJ2SDCODERXV7ZK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UIX4SPWV5DVNJ2SDCODERXV7ZK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T07:06:30Z","links":{"resolver":"https://pith.science/pith/UIX4SPWV5DVNJ2SDCODERXV7ZK","bundle":"https://pith.science/pith/UIX4SPWV5DVNJ2SDCODERXV7ZK/bundle.json","state":"https://pith.science/pith/UIX4SPWV5DVNJ2SDCODERXV7ZK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UIX4SPWV5DVNJ2SDCODERXV7ZK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:UIX4SPWV5DVNJ2SDCODERXV7ZK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d0e4f8651c79aff76c6f3c0231189594ccec58393383d10c0e43c1d2b6ff8b92","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-11-18T12:35:08Z","title_canon_sha256":"352a31ff1f8fb787f928b9cf25583a3d99e1837b1cfed326edf9097aef1ebe81"},"schema_version":"1.0","source":{"id":"2411.11525","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.11525","created_at":"2026-07-05T09:36:57Z"},{"alias_kind":"arxiv_version","alias_value":"2411.11525v1","created_at":"2026-07-05T09:36:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.11525","created_at":"2026-07-05T09:36:57Z"},{"alias_kind":"pith_short_12","alias_value":"UIX4SPWV5DVN","created_at":"2026-07-05T09:36:57Z"},{"alias_kind":"pith_short_16","alias_value":"UIX4SPWV5DVNJ2SD","created_at":"2026-07-05T09:36:57Z"},{"alias_kind":"pith_short_8","alias_value":"UIX4SPWV","created_at":"2026-07-05T09:36:57Z"}],"graph_snapshots":[{"event_id":"sha256:8d07224838ee29379f2049625bb53a90b78d09a5978f91761932c280f4984b74","target":"graph","created_at":"2026-07-05T09:36:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.11525/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attack has been considered as a serious security threat to deep neural networks (DNNs). Poisoned sample detection (PSD) that aims at filtering out poisoned samples from an untrustworthy training dataset has shown very promising performance for defending against data poisoning based backdoor attacks. However, we observe that the detection performance of many advanced methods is likely to be unstable when facing weak backdoor attacks, such as low poisoning ratio or weak trigger strength. To further verify this observation, we make a statistical investigation among various backdoor attac","authors_text":"Baoyuan Wu, Mingda Zhang, Mingli Zhu, Zihao Zhu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-11-18T12:35:08Z","title":"Reliable Poisoned Sample Detection against Backdoor Attacks Enhanced by Sharpness Aware Minimization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.11525","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a7f71657918a6440077c1291483a1dff0d356ae2306ac254093225fec301f8a2","target":"record","created_at":"2026-07-05T09:36:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d0e4f8651c79aff76c6f3c0231189594ccec58393383d10c0e43c1d2b6ff8b92","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-11-18T12:35:08Z","title_canon_sha256":"352a31ff1f8fb787f928b9cf25583a3d99e1837b1cfed326edf9097aef1ebe81"},"schema_version":"1.0","source":{"id":"2411.11525","kind":"arxiv","version":1}},"canonical_sha256":"a22fc93ed5e8ead4ea43138648debfcabf86d5d8d36fa9afe1abe718aa7cd340","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a22fc93ed5e8ead4ea43138648debfcabf86d5d8d36fa9afe1abe718aa7cd340","first_computed_at":"2026-07-05T09:36:57.519858Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:36:57.519858Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FiyEHCTrG0l+XUhhegph7T0Gaz9Wu8k7jp4pxaTke9LuuvuK47vcEhnsNeljGYchCUSggA3yMscoD7qgbGA+DQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:36:57.520330Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.11525","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a7f71657918a6440077c1291483a1dff0d356ae2306ac254093225fec301f8a2","sha256:8d07224838ee29379f2049625bb53a90b78d09a5978f91761932c280f4984b74"],"state_sha256":"51998dbdf4f342b9d0fe78d60f8b720a807d6ebc464eec5a6d5ed75db23eabc3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QfuvrVO++KAaVqISFQRhbTmrG/Tqn8L18FyIFaYAg+Vd3rgBbsPOuPbJ+tj8BaLQxm1uYGA3luAgtOdS2WgwAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T07:06:30.955377Z","bundle_sha256":"02f4a3d0d4ab51838378e153e9c077e964d1200e7ea02e6f982b4d91cb86709a"}}