{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:VDVX7SSAEPUSUZ5BAYDX24AMR2","short_pith_number":"pith:VDVX7SSA","canonical_record":{"source":{"id":"2503.21305","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-03-27T09:31:10Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"3d0a40ec2f2cc1d03d18a7cb9a29b0a3d88b6fd181d6a747377781c1805c5942","abstract_canon_sha256":"22bf6771d89256ac39cfca02f968b2148c249cfd8f30b148865594390b0a13f9"},"schema_version":"1.0"},"canonical_sha256":"a8eb7fca4023e92a67a106077d700c8ead33be04b4fb55197544421cb03eb906","source":{"kind":"arxiv","id":"2503.21305","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.21305","created_at":"2026-07-05T10:40:22Z"},{"alias_kind":"arxiv_version","alias_value":"2503.21305v1","created_at":"2026-07-05T10:40:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.21305","created_at":"2026-07-05T10:40:22Z"},{"alias_kind":"pith_short_12","alias_value":"VDVX7SSAEPUS","created_at":"2026-07-05T10:40:22Z"},{"alias_kind":"pith_short_16","alias_value":"VDVX7SSAEPUSUZ5B","created_at":"2026-07-05T10:40:22Z"},{"alias_kind":"pith_short_8","alias_value":"VDVX7SSA","created_at":"2026-07-05T10:40:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:VDVX7SSAEPUSUZ5BAYDX24AMR2","target":"record","payload":{"canonical_record":{"source":{"id":"2503.21305","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-03-27T09:31:10Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"3d0a40ec2f2cc1d03d18a7cb9a29b0a3d88b6fd181d6a747377781c1805c5942","abstract_canon_sha256":"22bf6771d89256ac39cfca02f968b2148c249cfd8f30b148865594390b0a13f9"},"schema_version":"1.0"},"canonical_sha256":"a8eb7fca4023e92a67a106077d700c8ead33be04b4fb55197544421cb03eb906","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:40:22.880581Z","signature_b64":"fhkNAeW6mQLlEUmFfhroO3xZKYmBB1qGTxd2XGZ5N9CNumaV/L6Z0qSzw/wm8KeQJKylstG6rhdVUsGhMD1dDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a8eb7fca4023e92a67a106077d700c8ead33be04b4fb55197544421cb03eb906","last_reissued_at":"2026-07-05T10:40:22.880080Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:40:22.880080Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2503.21305","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:40:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Hk8GWhki3LK/Ls0KraKVpYyUgOsQzfKVPHyv5oWPwOeaCCYMvyUczuwZVBsIZQN7rspZcGieZw6J6u3V3Ww7Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T09:19:11.095464Z"},"content_sha256":"4d6a3301b38cd36e7560e7d90f8bb87cba66ae9669193dca2217dfabfdf3ed8a","schema_version":"1.0","event_id":"sha256:4d6a3301b38cd36e7560e7d90f8bb87cba66ae9669193dca2217dfabfdf3ed8a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:VDVX7SSAEPUSUZ5BAYDX24AMR2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DeBackdoor: A Deductive Framework for Detecting Backdoor Attacks on Deep Models with Limited Data","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Amin Sadeghi, Dorde Popovic, Issa Khalil, Sanjay Chawla, Ting Yu","submitted_at":"2025-03-27T09:31:10Z","abstract_excerpt":"Backdoor attacks are among the most effective, practical, and stealthy attacks in deep learning. In this paper, we consider a practical scenario where a developer obtains a deep model from a third party and uses it as part of a safety-critical system. The developer wants to inspect the model for potential backdoors prior to system deployment. We find that most existing detection techniques make assumptions that are not applicable to this scenario. In this paper, we present a novel framework for detecting backdoors under realistic restrictions. We generate candidate triggers by deductively sear"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.21305","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2503.21305/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:40:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"thTCucFzQ3ZEFGcwOOlK6FzdtyagfpsrbHxFmbcTmtEWfEnhzFixCumTIcKUcn2Z2hFHG1iMZm6tEt04h4MLBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T09:19:11.096531Z"},"content_sha256":"0637e3c64201f7643d9a5131347541c7af3c2eec6c1c414dd9cb898742f915af","schema_version":"1.0","event_id":"sha256:0637e3c64201f7643d9a5131347541c7af3c2eec6c1c414dd9cb898742f915af"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VDVX7SSAEPUSUZ5BAYDX24AMR2/bundle.json","state_url":"https://pith.science/pith/VDVX7SSAEPUSUZ5BAYDX24AMR2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VDVX7SSAEPUSUZ5BAYDX24AMR2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T09:19:11Z","links":{"resolver":"https://pith.science/pith/VDVX7SSAEPUSUZ5BAYDX24AMR2","bundle":"https://pith.science/pith/VDVX7SSAEPUSUZ5BAYDX24AMR2/bundle.json","state":"https://pith.science/pith/VDVX7SSAEPUSUZ5BAYDX24AMR2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VDVX7SSAEPUSUZ5BAYDX24AMR2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:VDVX7SSAEPUSUZ5BAYDX24AMR2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"22bf6771d89256ac39cfca02f968b2148c249cfd8f30b148865594390b0a13f9","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-03-27T09:31:10Z","title_canon_sha256":"3d0a40ec2f2cc1d03d18a7cb9a29b0a3d88b6fd181d6a747377781c1805c5942"},"schema_version":"1.0","source":{"id":"2503.21305","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.21305","created_at":"2026-07-05T10:40:22Z"},{"alias_kind":"arxiv_version","alias_value":"2503.21305v1","created_at":"2026-07-05T10:40:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.21305","created_at":"2026-07-05T10:40:22Z"},{"alias_kind":"pith_short_12","alias_value":"VDVX7SSAEPUS","created_at":"2026-07-05T10:40:22Z"},{"alias_kind":"pith_short_16","alias_value":"VDVX7SSAEPUSUZ5B","created_at":"2026-07-05T10:40:22Z"},{"alias_kind":"pith_short_8","alias_value":"VDVX7SSA","created_at":"2026-07-05T10:40:22Z"}],"graph_snapshots":[{"event_id":"sha256:0637e3c64201f7643d9a5131347541c7af3c2eec6c1c414dd9cb898742f915af","target":"graph","created_at":"2026-07-05T10:40:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.21305/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attacks are among the most effective, practical, and stealthy attacks in deep learning. In this paper, we consider a practical scenario where a developer obtains a deep model from a third party and uses it as part of a safety-critical system. The developer wants to inspect the model for potential backdoors prior to system deployment. We find that most existing detection techniques make assumptions that are not applicable to this scenario. In this paper, we present a novel framework for detecting backdoors under realistic restrictions. We generate candidate triggers by deductively sear","authors_text":"Amin Sadeghi, Dorde Popovic, Issa Khalil, Sanjay Chawla, Ting Yu","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-03-27T09:31:10Z","title":"DeBackdoor: A Deductive Framework for Detecting Backdoor Attacks on Deep Models with Limited Data"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.21305","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4d6a3301b38cd36e7560e7d90f8bb87cba66ae9669193dca2217dfabfdf3ed8a","target":"record","created_at":"2026-07-05T10:40:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"22bf6771d89256ac39cfca02f968b2148c249cfd8f30b148865594390b0a13f9","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-03-27T09:31:10Z","title_canon_sha256":"3d0a40ec2f2cc1d03d18a7cb9a29b0a3d88b6fd181d6a747377781c1805c5942"},"schema_version":"1.0","source":{"id":"2503.21305","kind":"arxiv","version":1}},"canonical_sha256":"a8eb7fca4023e92a67a106077d700c8ead33be04b4fb55197544421cb03eb906","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a8eb7fca4023e92a67a106077d700c8ead33be04b4fb55197544421cb03eb906","first_computed_at":"2026-07-05T10:40:22.880080Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:40:22.880080Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fhkNAeW6mQLlEUmFfhroO3xZKYmBB1qGTxd2XGZ5N9CNumaV/L6Z0qSzw/wm8KeQJKylstG6rhdVUsGhMD1dDg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:40:22.880581Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.21305","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4d6a3301b38cd36e7560e7d90f8bb87cba66ae9669193dca2217dfabfdf3ed8a","sha256:0637e3c64201f7643d9a5131347541c7af3c2eec6c1c414dd9cb898742f915af"],"state_sha256":"613bf6b2a34ef5e268998f2e4aa116f03921fcf364f094baae45bf7c81f78a5f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xb6unqvixvkVmkCPoFP/L/55ZEkeVNfJScw6jFenEpvGziJwzNv0IML6BjtlJxoVLcoH5Faw90n50hYWIlT8CQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T09:19:11.100990Z","bundle_sha256":"bb76bb2406680dd99ffdcb1d79634b0526546e3fef576b78d2b337ad4ea8c21f"}}