{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:WKOVQWI3X34RWWP7BH36AQYBAX","short_pith_number":"pith:WKOVQWI3","canonical_record":{"source":{"id":"2507.11092","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-07-15T08:38:59Z","cross_cats_sorted":[],"title_canon_sha256":"efa49e2f8f1ff0d1b6dd207eabca40f092b34e52ebeedf7dd497cbb44fc38599","abstract_canon_sha256":"5644c2e21c5c635255807b73640274627ec83f6ae7694efacdf3030cafad29fd"},"schema_version":"1.0"},"canonical_sha256":"b29d58591bbef91b59ff09f7e0430105d5843a28d30553c59ab768b539420b2b","source":{"kind":"arxiv","id":"2507.11092","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.11092","created_at":"2026-07-05T11:37:31Z"},{"alias_kind":"arxiv_version","alias_value":"2507.11092v1","created_at":"2026-07-05T11:37:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.11092","created_at":"2026-07-05T11:37:31Z"},{"alias_kind":"pith_short_12","alias_value":"WKOVQWI3X34R","created_at":"2026-07-05T11:37:31Z"},{"alias_kind":"pith_short_16","alias_value":"WKOVQWI3X34RWWP7","created_at":"2026-07-05T11:37:31Z"},{"alias_kind":"pith_short_8","alias_value":"WKOVQWI3","created_at":"2026-07-05T11:37:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:WKOVQWI3X34RWWP7BH36AQYBAX","target":"record","payload":{"canonical_record":{"source":{"id":"2507.11092","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-07-15T08:38:59Z","cross_cats_sorted":[],"title_canon_sha256":"efa49e2f8f1ff0d1b6dd207eabca40f092b34e52ebeedf7dd497cbb44fc38599","abstract_canon_sha256":"5644c2e21c5c635255807b73640274627ec83f6ae7694efacdf3030cafad29fd"},"schema_version":"1.0"},"canonical_sha256":"b29d58591bbef91b59ff09f7e0430105d5843a28d30553c59ab768b539420b2b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:37:31.774107Z","signature_b64":"x8tPk/NwWEVVNPIXpx0PYtJC7XTykSoJGmAzVuLpcjp7bklqHH3ppI+6LPXrnYG7rqdcNIQxD7f0s97War+WDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b29d58591bbef91b59ff09f7e0430105d5843a28d30553c59ab768b539420b2b","last_reissued_at":"2026-07-05T11:37:31.773556Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:37:31.773556Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.11092","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:37:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ey3wk0gOlBwtMguUgIg6jjoRtemCtuSx9Lx7ZbptRLXnqmhFaYtrPn2aSyo47WIz01e6WmewQG5iS1JUzt4+CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T23:53:34.429776Z"},"content_sha256":"aeea36c1c437bc88718d602972aa98dc814ecb44b0e2d4a07d458d7d294da1fe","schema_version":"1.0","event_id":"sha256:aeea36c1c437bc88718d602972aa98dc814ecb44b0e2d4a07d458d7d294da1fe"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:WKOVQWI3X34RWWP7BH36AQYBAX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MT4DP: Data Poisoning Attack Detection for DL-based Code Search Models via Metamorphic Testing","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Gong Chen, Songqiang Chen, Tegawend\\'e F. Bissyand\\'e, Wenjie Liu, Xiaoyuan Xie, Xunzhu Tang","submitted_at":"2025-07-15T08:38:59Z","abstract_excerpt":"Recently, several studies have indicated that data poisoning attacks pose a severe security threat to deep learning-based (DL-based) code search models. Attackers inject carefully crafted malicious patterns into the training data, misleading the code search model to learn these patterns during training. During the usage of the poisoned code search model for inference, once the malicious pattern is triggered, the model tends to rank the vulnerability code higher. However, existing detection methods for data poisoning attacks on DL-based code search models remain insufficiently effective. To add"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.11092","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.11092/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:37:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"85fAkVx5wY+cdEP/SCczOXtnipLY6F3naNI9Dji80VcBEdAIjZIXxSHUIcF5BprCJaYcY3PAdGm9IYpgInJPBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T23:53:34.430637Z"},"content_sha256":"4fb79624a75c6219651d3d740635316af3397284883b0f899f4e388b545776ad","schema_version":"1.0","event_id":"sha256:4fb79624a75c6219651d3d740635316af3397284883b0f899f4e388b545776ad"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WKOVQWI3X34RWWP7BH36AQYBAX/bundle.json","state_url":"https://pith.science/pith/WKOVQWI3X34RWWP7BH36AQYBAX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WKOVQWI3X34RWWP7BH36AQYBAX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T23:53:34Z","links":{"resolver":"https://pith.science/pith/WKOVQWI3X34RWWP7BH36AQYBAX","bundle":"https://pith.science/pith/WKOVQWI3X34RWWP7BH36AQYBAX/bundle.json","state":"https://pith.science/pith/WKOVQWI3X34RWWP7BH36AQYBAX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WKOVQWI3X34RWWP7BH36AQYBAX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:WKOVQWI3X34RWWP7BH36AQYBAX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5644c2e21c5c635255807b73640274627ec83f6ae7694efacdf3030cafad29fd","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-07-15T08:38:59Z","title_canon_sha256":"efa49e2f8f1ff0d1b6dd207eabca40f092b34e52ebeedf7dd497cbb44fc38599"},"schema_version":"1.0","source":{"id":"2507.11092","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.11092","created_at":"2026-07-05T11:37:31Z"},{"alias_kind":"arxiv_version","alias_value":"2507.11092v1","created_at":"2026-07-05T11:37:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.11092","created_at":"2026-07-05T11:37:31Z"},{"alias_kind":"pith_short_12","alias_value":"WKOVQWI3X34R","created_at":"2026-07-05T11:37:31Z"},{"alias_kind":"pith_short_16","alias_value":"WKOVQWI3X34RWWP7","created_at":"2026-07-05T11:37:31Z"},{"alias_kind":"pith_short_8","alias_value":"WKOVQWI3","created_at":"2026-07-05T11:37:31Z"}],"graph_snapshots":[{"event_id":"sha256:4fb79624a75c6219651d3d740635316af3397284883b0f899f4e388b545776ad","target":"graph","created_at":"2026-07-05T11:37:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.11092/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recently, several studies have indicated that data poisoning attacks pose a severe security threat to deep learning-based (DL-based) code search models. Attackers inject carefully crafted malicious patterns into the training data, misleading the code search model to learn these patterns during training. During the usage of the poisoned code search model for inference, once the malicious pattern is triggered, the model tends to rank the vulnerability code higher. However, existing detection methods for data poisoning attacks on DL-based code search models remain insufficiently effective. To add","authors_text":"Gong Chen, Songqiang Chen, Tegawend\\'e F. Bissyand\\'e, Wenjie Liu, Xiaoyuan Xie, Xunzhu Tang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-07-15T08:38:59Z","title":"MT4DP: Data Poisoning Attack Detection for DL-based Code Search Models via Metamorphic Testing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.11092","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:aeea36c1c437bc88718d602972aa98dc814ecb44b0e2d4a07d458d7d294da1fe","target":"record","created_at":"2026-07-05T11:37:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5644c2e21c5c635255807b73640274627ec83f6ae7694efacdf3030cafad29fd","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-07-15T08:38:59Z","title_canon_sha256":"efa49e2f8f1ff0d1b6dd207eabca40f092b34e52ebeedf7dd497cbb44fc38599"},"schema_version":"1.0","source":{"id":"2507.11092","kind":"arxiv","version":1}},"canonical_sha256":"b29d58591bbef91b59ff09f7e0430105d5843a28d30553c59ab768b539420b2b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b29d58591bbef91b59ff09f7e0430105d5843a28d30553c59ab768b539420b2b","first_computed_at":"2026-07-05T11:37:31.773556Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:37:31.773556Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"x8tPk/NwWEVVNPIXpx0PYtJC7XTykSoJGmAzVuLpcjp7bklqHH3ppI+6LPXrnYG7rqdcNIQxD7f0s97War+WDw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:37:31.774107Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.11092","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:aeea36c1c437bc88718d602972aa98dc814ecb44b0e2d4a07d458d7d294da1fe","sha256:4fb79624a75c6219651d3d740635316af3397284883b0f899f4e388b545776ad"],"state_sha256":"b63935fd40e34718545de6aa30bff31f1f7ca873683fd0bc95141b7eee6aead5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"t0Px8qvGk4ijbhsbxFXA6wKsVDZ4KPaGuZUVUQPYFOUWdoHUgPKSlAyhm+q68swbb5YD7iXjiWKZMkmyuKM8BQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T23:53:34.437500Z","bundle_sha256":"2348a112f8726d349e40fb8c65e6b08e5842c897de237a1bc773e7100eaf8f52"}}