{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:V6CXDQLCOAWJ6MWFCIUOZKVKHA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6496302a59c2fcb561b417dedb46395f20e9f593c3eb0b2fffd4036dfc2527d7","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-06-08T20:58:23Z","title_canon_sha256":"498b400716cc314e602e56fed0a05a2d80a1b97a31f64de5300bd1cef928f332"},"schema_version":"1.0","source":{"id":"2106.04690","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.04690","created_at":"2026-07-05T05:15:56Z"},{"alias_kind":"arxiv_version","alias_value":"2106.04690v2","created_at":"2026-07-05T05:15:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.04690","created_at":"2026-07-05T05:15:56Z"},{"alias_kind":"pith_short_12","alias_value":"V6CXDQLCOAWJ","created_at":"2026-07-05T05:15:56Z"},{"alias_kind":"pith_short_16","alias_value":"V6CXDQLCOAWJ6MWF","created_at":"2026-07-05T05:15:56Z"},{"alias_kind":"pith_short_8","alias_value":"V6CXDQLC","created_at":"2026-07-05T05:15:56Z"}],"graph_snapshots":[{"event_id":"sha256:6105571c3110e3afefd746442d068e8d0bf64692b66e168722eb3354a77b2a78","target":"graph","created_at":"2026-07-05T05:15:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.04690/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"When machine learning training is outsourced to third parties, $backdoor$ $attacks$ become practical as the third party who trains the model may act maliciously to inject hidden behaviors into the otherwise accurate model. Until now, the mechanism to inject backdoors has been limited to $poisoning$. We argue that a supply-chain attacker has more attack techniques available by introducing a $handcrafted$ attack that directly manipulates a model's weights. This direct modification gives our attacker more degrees of freedom compared to poisoning, and we show it can be used to evade many backdoor ","authors_text":"Alexey Kurakin, Nicholas Carlini, Sanghyun Hong","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-06-08T20:58:23Z","title":"Handcrafted Backdoors in Deep Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.04690","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:64795087d1207b4e6c973004859be0b0891ad7189439ddc4d2bd8b4e79607955","target":"record","created_at":"2026-07-05T05:15:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6496302a59c2fcb561b417dedb46395f20e9f593c3eb0b2fffd4036dfc2527d7","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-06-08T20:58:23Z","title_canon_sha256":"498b400716cc314e602e56fed0a05a2d80a1b97a31f64de5300bd1cef928f332"},"schema_version":"1.0","source":{"id":"2106.04690","kind":"arxiv","version":2}},"canonical_sha256":"af8571c162702c9f32c51228ecaaaa3821d658d48fe1f09490b7e915ef472a46","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"af8571c162702c9f32c51228ecaaaa3821d658d48fe1f09490b7e915ef472a46","first_computed_at":"2026-07-05T05:15:56.996147Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:15:56.996147Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"UM1Ro3JF7n0LDsYhsm2fsdfS1RZlnZSNDw7N1ONn31xpgR/0Vg2R5MxY75NEOnSL9K0/vaga0VmJSEvSFAzcBg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:15:56.996535Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.04690","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:64795087d1207b4e6c973004859be0b0891ad7189439ddc4d2bd8b4e79607955","sha256:6105571c3110e3afefd746442d068e8d0bf64692b66e168722eb3354a77b2a78"],"state_sha256":"3d1638b7b757981b4152aec178d11662ec922b2f909f0c9584d41318140fef67"}