{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:WGKBKIUBNCCVMLQY7PL4F6NKZO","short_pith_number":"pith:WGKBKIUB","canonical_record":{"source":{"id":"2409.15968","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-09-24T10:56:18Z","cross_cats_sorted":[],"title_canon_sha256":"1306ace372ee4d7111fb3815dde898e0fbb04fd6c6f4b8aa917d185ce3d58bea","abstract_canon_sha256":"b7ca97c1302dab00e8c1c6e786c3e1c9ef6f03589b35772e76ef84c007ceaad6"},"schema_version":"1.0"},"canonical_sha256":"b1941522816885562e18fbd7c2f9aacb89064f776d63f14ce08638a6cc6b2a21","source":{"kind":"arxiv","id":"2409.15968","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.15968","created_at":"2026-07-05T09:11:03Z"},{"alias_kind":"arxiv_version","alias_value":"2409.15968v1","created_at":"2026-07-05T09:11:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.15968","created_at":"2026-07-05T09:11:03Z"},{"alias_kind":"pith_short_12","alias_value":"WGKBKIUBNCCV","created_at":"2026-07-05T09:11:03Z"},{"alias_kind":"pith_short_16","alias_value":"WGKBKIUBNCCVMLQY","created_at":"2026-07-05T09:11:03Z"},{"alias_kind":"pith_short_8","alias_value":"WGKBKIUB","created_at":"2026-07-05T09:11:03Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:WGKBKIUBNCCVMLQY7PL4F6NKZO","target":"record","payload":{"canonical_record":{"source":{"id":"2409.15968","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-09-24T10:56:18Z","cross_cats_sorted":[],"title_canon_sha256":"1306ace372ee4d7111fb3815dde898e0fbb04fd6c6f4b8aa917d185ce3d58bea","abstract_canon_sha256":"b7ca97c1302dab00e8c1c6e786c3e1c9ef6f03589b35772e76ef84c007ceaad6"},"schema_version":"1.0"},"canonical_sha256":"b1941522816885562e18fbd7c2f9aacb89064f776d63f14ce08638a6cc6b2a21","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:11:03.018155Z","signature_b64":"MXrHIYmLPoriOtXXfAFwBqTlVmEMyj2Yav6sv+7q8hj9AZ7xmXUKyrQ/12Tty4Q43DHx6xv525zwpYEEcl9JAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b1941522816885562e18fbd7c2f9aacb89064f776d63f14ce08638a6cc6b2a21","last_reissued_at":"2026-07-05T09:11:03.017660Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:11:03.017660Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.15968","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:11:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tZmLvv4SguM8HdVX8D42ZJ7MF9a7xnbmjQ2y/4dEexyGQIQOScdwwhHyAQREVnzddMOTxbAjBrwnfpt4wxg1AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T11:44:25.469469Z"},"content_sha256":"1f3e8674dc59e198672d59d9703a4ceffc9d8e3418b051f0e4eac0ab9650068c","schema_version":"1.0","event_id":"sha256:1f3e8674dc59e198672d59d9703a4ceffc9d8e3418b051f0e4eac0ab9650068c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:WGKBKIUBNCCVMLQY7PL4F6NKZO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Backdoor Defense in CLIP","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Jiawei Liang, Junhao Kuang, Kuanrong Liu, Siyuan Liang, Xiaochun Cao","submitted_at":"2024-09-24T10:56:18Z","abstract_excerpt":"Multimodal contrastive pretraining, exemplified by models like CLIP, has been found to be vulnerable to backdoor attacks. While current backdoor defense methods primarily employ conventional data augmentation to create augmented samples aimed at feature alignment, these methods fail to capture the distinct features of backdoor samples, resulting in suboptimal defense performance. Observations reveal that adversarial examples and backdoor samples exhibit similarities in the feature space within the compromised models. Building on this insight, we propose Adversarial Backdoor Defense (ABD), a no"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.15968","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.15968/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:11:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mWHZWAJD88p4IcWMOqYyH1lKxJ8zKNa9hp8f4iiWPFua/LGK4qKcqyKLSNAJ5dyuJs4Ml7hqh+OxPbs2nSzjBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T11:44:25.470672Z"},"content_sha256":"4027508022bdcc96d015e6f439c3a1a5c4f6e8df334820920d119ad1d9595d0b","schema_version":"1.0","event_id":"sha256:4027508022bdcc96d015e6f439c3a1a5c4f6e8df334820920d119ad1d9595d0b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WGKBKIUBNCCVMLQY7PL4F6NKZO/bundle.json","state_url":"https://pith.science/pith/WGKBKIUBNCCVMLQY7PL4F6NKZO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WGKBKIUBNCCVMLQY7PL4F6NKZO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T11:44:25Z","links":{"resolver":"https://pith.science/pith/WGKBKIUBNCCVMLQY7PL4F6NKZO","bundle":"https://pith.science/pith/WGKBKIUBNCCVMLQY7PL4F6NKZO/bundle.json","state":"https://pith.science/pith/WGKBKIUBNCCVMLQY7PL4F6NKZO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WGKBKIUBNCCVMLQY7PL4F6NKZO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:WGKBKIUBNCCVMLQY7PL4F6NKZO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b7ca97c1302dab00e8c1c6e786c3e1c9ef6f03589b35772e76ef84c007ceaad6","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-09-24T10:56:18Z","title_canon_sha256":"1306ace372ee4d7111fb3815dde898e0fbb04fd6c6f4b8aa917d185ce3d58bea"},"schema_version":"1.0","source":{"id":"2409.15968","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.15968","created_at":"2026-07-05T09:11:03Z"},{"alias_kind":"arxiv_version","alias_value":"2409.15968v1","created_at":"2026-07-05T09:11:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.15968","created_at":"2026-07-05T09:11:03Z"},{"alias_kind":"pith_short_12","alias_value":"WGKBKIUBNCCV","created_at":"2026-07-05T09:11:03Z"},{"alias_kind":"pith_short_16","alias_value":"WGKBKIUBNCCVMLQY","created_at":"2026-07-05T09:11:03Z"},{"alias_kind":"pith_short_8","alias_value":"WGKBKIUB","created_at":"2026-07-05T09:11:03Z"}],"graph_snapshots":[{"event_id":"sha256:4027508022bdcc96d015e6f439c3a1a5c4f6e8df334820920d119ad1d9595d0b","target":"graph","created_at":"2026-07-05T09:11:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.15968/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multimodal contrastive pretraining, exemplified by models like CLIP, has been found to be vulnerable to backdoor attacks. While current backdoor defense methods primarily employ conventional data augmentation to create augmented samples aimed at feature alignment, these methods fail to capture the distinct features of backdoor samples, resulting in suboptimal defense performance. Observations reveal that adversarial examples and backdoor samples exhibit similarities in the feature space within the compromised models. Building on this insight, we propose Adversarial Backdoor Defense (ABD), a no","authors_text":"Jiawei Liang, Junhao Kuang, Kuanrong Liu, Siyuan Liang, Xiaochun Cao","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-09-24T10:56:18Z","title":"Adversarial Backdoor Defense in CLIP"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.15968","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1f3e8674dc59e198672d59d9703a4ceffc9d8e3418b051f0e4eac0ab9650068c","target":"record","created_at":"2026-07-05T09:11:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b7ca97c1302dab00e8c1c6e786c3e1c9ef6f03589b35772e76ef84c007ceaad6","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-09-24T10:56:18Z","title_canon_sha256":"1306ace372ee4d7111fb3815dde898e0fbb04fd6c6f4b8aa917d185ce3d58bea"},"schema_version":"1.0","source":{"id":"2409.15968","kind":"arxiv","version":1}},"canonical_sha256":"b1941522816885562e18fbd7c2f9aacb89064f776d63f14ce08638a6cc6b2a21","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b1941522816885562e18fbd7c2f9aacb89064f776d63f14ce08638a6cc6b2a21","first_computed_at":"2026-07-05T09:11:03.017660Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:11:03.017660Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MXrHIYmLPoriOtXXfAFwBqTlVmEMyj2Yav6sv+7q8hj9AZ7xmXUKyrQ/12Tty4Q43DHx6xv525zwpYEEcl9JAg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:11:03.018155Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.15968","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1f3e8674dc59e198672d59d9703a4ceffc9d8e3418b051f0e4eac0ab9650068c","sha256:4027508022bdcc96d015e6f439c3a1a5c4f6e8df334820920d119ad1d9595d0b"],"state_sha256":"dd27f30ec5a440e21bf9d3a4b889fc9c454a307e6486e278c1e82790f6560b64"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KosQRYnf1E6Zw5sJZ4E+AqdFcZXt0cr1Yunvm3+1gfzFWNhHTh5iyGemRv2eWBh5q8emZNxhBE4APN1F2W9tAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T11:44:25.478435Z","bundle_sha256":"1a4c55baaad3bbf181c24a3a605c1ce9da04f5684b5091e7c2e0252e2735704a"}}