{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:VIAF3UXVIIIBU65IMDGR7SEVYD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"db546ecb3cf73ba264d2e52dd1d90559e942fad77da65fee3a9c84c684866074","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-13T13:37:36Z","title_canon_sha256":"1496574ba1bf5d75304c3bd7ea93eed4d9d1428d04aeff9e52cf72a645c95c9d"},"schema_version":"1.0","source":{"id":"2410.09838","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.09838","created_at":"2026-07-05T09:21:28Z"},{"alias_kind":"arxiv_version","alias_value":"2410.09838v2","created_at":"2026-07-05T09:21:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.09838","created_at":"2026-07-05T09:21:28Z"},{"alias_kind":"pith_short_12","alias_value":"VIAF3UXVIIIB","created_at":"2026-07-05T09:21:28Z"},{"alias_kind":"pith_short_16","alias_value":"VIAF3UXVIIIBU65I","created_at":"2026-07-05T09:21:28Z"},{"alias_kind":"pith_short_8","alias_value":"VIAF3UXV","created_at":"2026-07-05T09:21:28Z"}],"graph_snapshots":[{"event_id":"sha256:dc22dcfab6ea09c880b953456e7998dfba12fb3bcd8cf434a938dd2d6076eadf","target":"graph","created_at":"2026-07-05T09:21:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.09838/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attacks pose a significant threat to Deep Neural Networks (DNNs) as they allow attackers to manipulate model predictions with backdoor triggers. To address these security vulnerabilities, various backdoor purification methods have been proposed to purify compromised models. Typically, these purified models exhibit low Attack Success Rates (ASR), rendering them resistant to backdoored inputs. However, Does achieving a low ASR through current safety purification methods truly eliminate learned backdoor features from the pretraining phase? In this paper, we provide an affirmative answer ","authors_text":"Li Shen, Minhao Cheng, Nevin L. Zhang, Rui Min, Zeyu Qin","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-13T13:37:36Z","title":"Uncovering, Explaining, and Mitigating the Superficial Safety of Backdoor Defense"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.09838","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:09dad8dc4b3b67f6e1285376dca7f4f6e00795f0faaef0c656629b0225195465","target":"record","created_at":"2026-07-05T09:21:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"db546ecb3cf73ba264d2e52dd1d90559e942fad77da65fee3a9c84c684866074","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-13T13:37:36Z","title_canon_sha256":"1496574ba1bf5d75304c3bd7ea93eed4d9d1428d04aeff9e52cf72a645c95c9d"},"schema_version":"1.0","source":{"id":"2410.09838","kind":"arxiv","version":2}},"canonical_sha256":"aa005dd2f542101a7ba860cd1fc895c0ce019ac66d7e59441fdd6c1a1eccba71","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"aa005dd2f542101a7ba860cd1fc895c0ce019ac66d7e59441fdd6c1a1eccba71","first_computed_at":"2026-07-05T09:21:28.821886Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:21:28.821886Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LjwXGq+/Aw5yzl27X4tKiXudXFaljVwvowiIAHxJ2RQWaQRXJ8qXIk8CDSn1elLyo9mFNPOWpllHSNaDaaRgAg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:21:28.822301Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.09838","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:09dad8dc4b3b67f6e1285376dca7f4f6e00795f0faaef0c656629b0225195465","sha256:dc22dcfab6ea09c880b953456e7998dfba12fb3bcd8cf434a938dd2d6076eadf"],"state_sha256":"5e78d9da4297e5f28b942dc4b0ddd5d77260644dda92d04a1be17bb81e96abf8"}