{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:VIGCACX4KQ63ECL36MXV627FS5","short_pith_number":"pith:VIGCACX4","canonical_record":{"source":{"id":"2003.01031","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-02T17:04:38Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"f8b85566032a0c8e3e0cff415ea40b3c0e4b95782934de452543c391b9c344b8","abstract_canon_sha256":"1c87eee0a94ff2796f270eea9a05f3f3bc2c1e816004aa4566e1a44c51aba0a2"},"schema_version":"1.0"},"canonical_sha256":"aa0c200afc543db2097bf32f5f6be597471757cc407122749da8fd1a143489ec","source":{"kind":"arxiv","id":"2003.01031","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2003.01031","created_at":"2026-07-05T02:05:39Z"},{"alias_kind":"arxiv_version","alias_value":"2003.01031v3","created_at":"2026-07-05T02:05:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2003.01031","created_at":"2026-07-05T02:05:39Z"},{"alias_kind":"pith_short_12","alias_value":"VIGCACX4KQ63","created_at":"2026-07-05T02:05:39Z"},{"alias_kind":"pith_short_16","alias_value":"VIGCACX4KQ63ECL3","created_at":"2026-07-05T02:05:39Z"},{"alias_kind":"pith_short_8","alias_value":"VIGCACX4","created_at":"2026-07-05T02:05:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:VIGCACX4KQ63ECL36MXV627FS5","target":"record","payload":{"canonical_record":{"source":{"id":"2003.01031","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-02T17:04:38Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"f8b85566032a0c8e3e0cff415ea40b3c0e4b95782934de452543c391b9c344b8","abstract_canon_sha256":"1c87eee0a94ff2796f270eea9a05f3f3bc2c1e816004aa4566e1a44c51aba0a2"},"schema_version":"1.0"},"canonical_sha256":"aa0c200afc543db2097bf32f5f6be597471757cc407122749da8fd1a143489ec","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:05:39.310331Z","signature_b64":"BhFFSNhxCT2RQQgjwlXtp/e0830BYsazceIMyJjZrkI0yUshMfZqwmFVKxz5GcBOo7jDWgSdVq5dAnVlr8TpAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"aa0c200afc543db2097bf32f5f6be597471757cc407122749da8fd1a143489ec","last_reissued_at":"2026-07-05T02:05:39.309736Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:05:39.309736Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2003.01031","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:05:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"clO/0RisCIjRX/0FhMwTKqq1Jhax/HQQ3c3ZdpnLBEoGvyf5GL56wvEk/VUf+0MQ6u0WaKLk/+2HhRaWyJCjCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T04:51:51.202996Z"},"content_sha256":"1da05a6a828d258b8eacc741d4ad5cbedb902903ac30950979771bdb5425ba74","schema_version":"1.0","event_id":"sha256:1da05a6a828d258b8eacc741d4ad5cbedb902903ac30950979771bdb5425ba74"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:VIGCACX4KQ63ECL36MXV627FS5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Explanation-Guided Backdoor Poisoning Attacks Against Malware Classifiers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Alina Oprea, Giorgio Severi, Jim Meyer, Scott Coull","submitted_at":"2020-03-02T17:04:38Z","abstract_excerpt":"Training pipelines for machine learning (ML) based malware classification often rely on crowdsourced threat feeds, exposing a natural attack injection point. In this paper, we study the susceptibility of feature-based ML malware classifiers to backdoor poisoning attacks, specifically focusing on challenging \"clean label\" attacks where attackers do not control the sample labeling process. We propose the use of techniques from explainable machine learning to guide the selection of relevant features and values to create effective backdoor triggers in a model-agnostic fashion. Using multiple refer"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2003.01031","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2003.01031/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:05:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bQmz43o+rzWwH4qDLe71GbLfCn7oaxXL4WxhRB8/RrqG9hBuhW7oeE4F3LN/5Fe/O6kh3a1QzR1w2+aa5dnlCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T04:51:51.203381Z"},"content_sha256":"0f1d117d1234b44648a46ad3083a7ebdfa3d580810eb524372ed1c5734460947","schema_version":"1.0","event_id":"sha256:0f1d117d1234b44648a46ad3083a7ebdfa3d580810eb524372ed1c5734460947"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VIGCACX4KQ63ECL36MXV627FS5/bundle.json","state_url":"https://pith.science/pith/VIGCACX4KQ63ECL36MXV627FS5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VIGCACX4KQ63ECL36MXV627FS5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-09T04:51:51Z","links":{"resolver":"https://pith.science/pith/VIGCACX4KQ63ECL36MXV627FS5","bundle":"https://pith.science/pith/VIGCACX4KQ63ECL36MXV627FS5/bundle.json","state":"https://pith.science/pith/VIGCACX4KQ63ECL36MXV627FS5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VIGCACX4KQ63ECL36MXV627FS5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:VIGCACX4KQ63ECL36MXV627FS5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1c87eee0a94ff2796f270eea9a05f3f3bc2c1e816004aa4566e1a44c51aba0a2","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-02T17:04:38Z","title_canon_sha256":"f8b85566032a0c8e3e0cff415ea40b3c0e4b95782934de452543c391b9c344b8"},"schema_version":"1.0","source":{"id":"2003.01031","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2003.01031","created_at":"2026-07-05T02:05:39Z"},{"alias_kind":"arxiv_version","alias_value":"2003.01031v3","created_at":"2026-07-05T02:05:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2003.01031","created_at":"2026-07-05T02:05:39Z"},{"alias_kind":"pith_short_12","alias_value":"VIGCACX4KQ63","created_at":"2026-07-05T02:05:39Z"},{"alias_kind":"pith_short_16","alias_value":"VIGCACX4KQ63ECL3","created_at":"2026-07-05T02:05:39Z"},{"alias_kind":"pith_short_8","alias_value":"VIGCACX4","created_at":"2026-07-05T02:05:39Z"}],"graph_snapshots":[{"event_id":"sha256:0f1d117d1234b44648a46ad3083a7ebdfa3d580810eb524372ed1c5734460947","target":"graph","created_at":"2026-07-05T02:05:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2003.01031/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Training pipelines for machine learning (ML) based malware classification often rely on crowdsourced threat feeds, exposing a natural attack injection point. In this paper, we study the susceptibility of feature-based ML malware classifiers to backdoor poisoning attacks, specifically focusing on challenging \"clean label\" attacks where attackers do not control the sample labeling process. We propose the use of techniques from explainable machine learning to guide the selection of relevant features and values to create effective backdoor triggers in a model-agnostic fashion. Using multiple refer","authors_text":"Alina Oprea, Giorgio Severi, Jim Meyer, Scott Coull","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-02T17:04:38Z","title":"Explanation-Guided Backdoor Poisoning Attacks Against Malware Classifiers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2003.01031","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1da05a6a828d258b8eacc741d4ad5cbedb902903ac30950979771bdb5425ba74","target":"record","created_at":"2026-07-05T02:05:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1c87eee0a94ff2796f270eea9a05f3f3bc2c1e816004aa4566e1a44c51aba0a2","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-02T17:04:38Z","title_canon_sha256":"f8b85566032a0c8e3e0cff415ea40b3c0e4b95782934de452543c391b9c344b8"},"schema_version":"1.0","source":{"id":"2003.01031","kind":"arxiv","version":3}},"canonical_sha256":"aa0c200afc543db2097bf32f5f6be597471757cc407122749da8fd1a143489ec","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"aa0c200afc543db2097bf32f5f6be597471757cc407122749da8fd1a143489ec","first_computed_at":"2026-07-05T02:05:39.309736Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:05:39.309736Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"BhFFSNhxCT2RQQgjwlXtp/e0830BYsazceIMyJjZrkI0yUshMfZqwmFVKxz5GcBOo7jDWgSdVq5dAnVlr8TpAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T02:05:39.310331Z","signed_message":"canonical_sha256_bytes"},"source_id":"2003.01031","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1da05a6a828d258b8eacc741d4ad5cbedb902903ac30950979771bdb5425ba74","sha256:0f1d117d1234b44648a46ad3083a7ebdfa3d580810eb524372ed1c5734460947"],"state_sha256":"9d20353b2afbce2e81bbb266ba303b08eb7a4a6146a2c65db80f29e530675dba"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"G4s5yXH4oAixMOJW1w1ctEaea+F0Gn+vePgHopv9k8ViWRLDbO5CyiEEmfAF86nrS/cAYV84NZ5qJIKjJ7b+Bg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-09T04:51:51.205893Z","bundle_sha256":"b57351ad91474340ae2f79d0f0f6129197ea7663312ab1853571c6f832197be6"}}