{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:VPKERVHHLF5WZQPJWR2S52QJP5","short_pith_number":"pith:VPKERVHH","canonical_record":{"source":{"id":"2110.02467","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2021-10-06T02:48:58Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a30d6aa895f63b0c630a4c3180c2280ff1ed91add2a5d94c3e91fc6aa6a543a0","abstract_canon_sha256":"4e7d0515b11cc6fc78ecbabce81fe482832f574d536b9f81c112de8559fb4860"},"schema_version":"1.0"},"canonical_sha256":"abd448d4e7597b6cc1e9b4752eea097f53a1272ab9f8b6e779c8f29fa083a74c","source":{"kind":"arxiv","id":"2110.02467","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.02467","created_at":"2026-07-05T03:20:26Z"},{"alias_kind":"arxiv_version","alias_value":"2110.02467v1","created_at":"2026-07-05T03:20:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.02467","created_at":"2026-07-05T03:20:26Z"},{"alias_kind":"pith_short_12","alias_value":"VPKERVHHLF5W","created_at":"2026-07-05T03:20:26Z"},{"alias_kind":"pith_short_16","alias_value":"VPKERVHHLF5WZQPJ","created_at":"2026-07-05T03:20:26Z"},{"alias_kind":"pith_short_8","alias_value":"VPKERVHH","created_at":"2026-07-05T03:20:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:VPKERVHHLF5WZQPJWR2S52QJP5","target":"record","payload":{"canonical_record":{"source":{"id":"2110.02467","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2021-10-06T02:48:58Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a30d6aa895f63b0c630a4c3180c2280ff1ed91add2a5d94c3e91fc6aa6a543a0","abstract_canon_sha256":"4e7d0515b11cc6fc78ecbabce81fe482832f574d536b9f81c112de8559fb4860"},"schema_version":"1.0"},"canonical_sha256":"abd448d4e7597b6cc1e9b4752eea097f53a1272ab9f8b6e779c8f29fa083a74c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:20:26.466750Z","signature_b64":"hpMqEZZms6Ws/2fbUz7h7kVcLYpgU0PpUTlT/ELJivHoEmliuhvX46qfG6xP0rg8hCT1I2ekGi8bq+102tP2Ag==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"abd448d4e7597b6cc1e9b4752eea097f53a1272ab9f8b6e779c8f29fa083a74c","last_reissued_at":"2026-07-05T03:20:26.466393Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:20:26.466393Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2110.02467","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:20:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cf3MiSsEHq5r0QT5DLwHognCaQuUTyqHqLDjXjKGjY0G2ThbwSwStlEx2sI36thmZUBV7h595BGdF4KQE30sDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T05:15:00.383052Z"},"content_sha256":"54c14811fcfd9d5d7b44f2175e23970b1c81d338ff4786856f572a2e9ce7fd65","schema_version":"1.0","event_id":"sha256:54c14811fcfd9d5d7b44f2175e23970b1c81d338ff4786856f572a2e9ce7fd65"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:VPKERVHHLF5WZQPJWR2S52QJP5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"BadPre: Task-agnostic Backdoor Attacks to Pre-trained NLP Foundation Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CL","authors_text":"Chun Fan, Jiwei Li, Kangjie Chen, Shangwei Guo, Tianwei Zhang, Xiaofei Sun, Yuxian Meng","submitted_at":"2021-10-06T02:48:58Z","abstract_excerpt":"Pre-trained Natural Language Processing (NLP) models can be easily adapted to a variety of downstream language tasks. This significantly accelerates the development of language models. However, NLP models have been shown to be vulnerable to backdoor attacks, where a pre-defined trigger word in the input text causes model misprediction. Previous NLP backdoor attacks mainly focus on some specific tasks. This makes those attacks less general and applicable to other kinds of NLP models and tasks. In this work, we propose \\Name, the first task-agnostic backdoor attack against the pre-trained NLP mo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.02467","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2110.02467/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:20:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tqmP2yJtb6FR84ckvFTbqeEMuWgJ51N0k2yflV+eRFPI/2qvmmwr90+BJBNdnz8hf2kE/Z3tOgnIZguYPcXTBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T05:15:00.383654Z"},"content_sha256":"d9de270349b498c5577aa72cd2fcdbbec83c5bff5c287d234d4d0d3ee6ac6ba0","schema_version":"1.0","event_id":"sha256:d9de270349b498c5577aa72cd2fcdbbec83c5bff5c287d234d4d0d3ee6ac6ba0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VPKERVHHLF5WZQPJWR2S52QJP5/bundle.json","state_url":"https://pith.science/pith/VPKERVHHLF5WZQPJWR2S52QJP5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VPKERVHHLF5WZQPJWR2S52QJP5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T05:15:00Z","links":{"resolver":"https://pith.science/pith/VPKERVHHLF5WZQPJWR2S52QJP5","bundle":"https://pith.science/pith/VPKERVHHLF5WZQPJWR2S52QJP5/bundle.json","state":"https://pith.science/pith/VPKERVHHLF5WZQPJWR2S52QJP5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VPKERVHHLF5WZQPJWR2S52QJP5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:VPKERVHHLF5WZQPJWR2S52QJP5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4e7d0515b11cc6fc78ecbabce81fe482832f574d536b9f81c112de8559fb4860","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2021-10-06T02:48:58Z","title_canon_sha256":"a30d6aa895f63b0c630a4c3180c2280ff1ed91add2a5d94c3e91fc6aa6a543a0"},"schema_version":"1.0","source":{"id":"2110.02467","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.02467","created_at":"2026-07-05T03:20:26Z"},{"alias_kind":"arxiv_version","alias_value":"2110.02467v1","created_at":"2026-07-05T03:20:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.02467","created_at":"2026-07-05T03:20:26Z"},{"alias_kind":"pith_short_12","alias_value":"VPKERVHHLF5W","created_at":"2026-07-05T03:20:26Z"},{"alias_kind":"pith_short_16","alias_value":"VPKERVHHLF5WZQPJ","created_at":"2026-07-05T03:20:26Z"},{"alias_kind":"pith_short_8","alias_value":"VPKERVHH","created_at":"2026-07-05T03:20:26Z"}],"graph_snapshots":[{"event_id":"sha256:d9de270349b498c5577aa72cd2fcdbbec83c5bff5c287d234d4d0d3ee6ac6ba0","target":"graph","created_at":"2026-07-05T03:20:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2110.02467/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Pre-trained Natural Language Processing (NLP) models can be easily adapted to a variety of downstream language tasks. This significantly accelerates the development of language models. However, NLP models have been shown to be vulnerable to backdoor attacks, where a pre-defined trigger word in the input text causes model misprediction. Previous NLP backdoor attacks mainly focus on some specific tasks. This makes those attacks less general and applicable to other kinds of NLP models and tasks. In this work, we propose \\Name, the first task-agnostic backdoor attack against the pre-trained NLP mo","authors_text":"Chun Fan, Jiwei Li, Kangjie Chen, Shangwei Guo, Tianwei Zhang, Xiaofei Sun, Yuxian Meng","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2021-10-06T02:48:58Z","title":"BadPre: Task-agnostic Backdoor Attacks to Pre-trained NLP Foundation Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.02467","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:54c14811fcfd9d5d7b44f2175e23970b1c81d338ff4786856f572a2e9ce7fd65","target":"record","created_at":"2026-07-05T03:20:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4e7d0515b11cc6fc78ecbabce81fe482832f574d536b9f81c112de8559fb4860","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2021-10-06T02:48:58Z","title_canon_sha256":"a30d6aa895f63b0c630a4c3180c2280ff1ed91add2a5d94c3e91fc6aa6a543a0"},"schema_version":"1.0","source":{"id":"2110.02467","kind":"arxiv","version":1}},"canonical_sha256":"abd448d4e7597b6cc1e9b4752eea097f53a1272ab9f8b6e779c8f29fa083a74c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"abd448d4e7597b6cc1e9b4752eea097f53a1272ab9f8b6e779c8f29fa083a74c","first_computed_at":"2026-07-05T03:20:26.466393Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:20:26.466393Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"hpMqEZZms6Ws/2fbUz7h7kVcLYpgU0PpUTlT/ELJivHoEmliuhvX46qfG6xP0rg8hCT1I2ekGi8bq+102tP2Ag==","signature_status":"signed_v1","signed_at":"2026-07-05T03:20:26.466750Z","signed_message":"canonical_sha256_bytes"},"source_id":"2110.02467","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:54c14811fcfd9d5d7b44f2175e23970b1c81d338ff4786856f572a2e9ce7fd65","sha256:d9de270349b498c5577aa72cd2fcdbbec83c5bff5c287d234d4d0d3ee6ac6ba0"],"state_sha256":"0cc86d40d606e97c317d73a02d68b643d184d6b246732eb68f10778248d690fc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZwOv7MRBRZX1TFU0z0jk45+tVBamzZnlnAXlDZnaUpJZdMvhZVPQ4rWvrGjPnoIVJSz0fmCwpqFsVu9Ku+MHBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T05:15:00.387671Z","bundle_sha256":"5d309ba7b999ce5f00a3a453c7d44868df2ab54b07c89a40094712050f49eed0"}}