{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:WTS25IJJGMGJAFJOO6MWK7B5QE","short_pith_number":"pith:WTS25IJJ","canonical_record":{"source":{"id":"2502.13141","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-18T18:59:00Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"d1fc827d7cc033b4530c226a5b4d17c183c5ecf25bcc92a9f4a24cf08069a062","abstract_canon_sha256":"c74cd67a99c7b988fa2431332cd582a846978c9cf0119a220256e3d8e9ca8eef"},"schema_version":"1.0"},"canonical_sha256":"b4e5aea129330c90152e7799657c3d810848a3886ee0a86d3fd955117bd6c140","source":{"kind":"arxiv","id":"2502.13141","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.13141","created_at":"2026-07-05T10:16:30Z"},{"alias_kind":"arxiv_version","alias_value":"2502.13141v1","created_at":"2026-07-05T10:16:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.13141","created_at":"2026-07-05T10:16:30Z"},{"alias_kind":"pith_short_12","alias_value":"WTS25IJJGMGJ","created_at":"2026-07-05T10:16:30Z"},{"alias_kind":"pith_short_16","alias_value":"WTS25IJJGMGJAFJO","created_at":"2026-07-05T10:16:30Z"},{"alias_kind":"pith_short_8","alias_value":"WTS25IJJ","created_at":"2026-07-05T10:16:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:WTS25IJJGMGJAFJOO6MWK7B5QE","target":"record","payload":{"canonical_record":{"source":{"id":"2502.13141","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-18T18:59:00Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"d1fc827d7cc033b4530c226a5b4d17c183c5ecf25bcc92a9f4a24cf08069a062","abstract_canon_sha256":"c74cd67a99c7b988fa2431332cd582a846978c9cf0119a220256e3d8e9ca8eef"},"schema_version":"1.0"},"canonical_sha256":"b4e5aea129330c90152e7799657c3d810848a3886ee0a86d3fd955117bd6c140","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:16:30.159173Z","signature_b64":"rNyix+zHoCPkoQvFwyyiFYmGp5umWsMkPtXGXjYm3pzkotKV+mJzBFK3qsR9IyhgAUDLofj5jq108rMGYT6MBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b4e5aea129330c90152e7799657c3d810848a3886ee0a86d3fd955117bd6c140","last_reissued_at":"2026-07-05T10:16:30.158688Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:16:30.158688Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.13141","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:16:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hdEHwPhqJ214OIXtWQTcaCh11I6p6xJMEL0rywKQazqwN1In7TwSgo4GkKRijNWBNiaL8+yUUl5kMZ2BEW0OCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T00:30:32.406621Z"},"content_sha256":"ae85448ed8bed7853e2611463fedfd41af396881591296e1b05b588a564ad9c6","schema_version":"1.0","event_id":"sha256:ae85448ed8bed7853e2611463fedfd41af396881591296e1b05b588a564ad9c6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:WTS25IJJGMGJAFJOO6MWK7B5QE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CL","authors_text":"Huawei Lin, Tan Yu, Tong Geng, Weijie Zhao, Yingjie Lao","submitted_at":"2025-02-18T18:59:00Z","abstract_excerpt":"Large Language Models (LLMs) are vulnerable to attacks like prompt injection, backdoor attacks, and adversarial attacks, which manipulate prompts or models to generate harmful outputs. In this paper, departing from traditional deep learning attack paradigms, we explore their intrinsic relationship and collectively term them Prompt Trigger Attacks (PTA). This raises a key question: Can we determine if a prompt is benign or poisoned? To address this, we propose UniGuardian, the first unified defense mechanism designed to detect prompt injection, backdoor attacks, and adversarial attacks in LLMs."},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.13141","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.13141/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:16:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zbW0e4tEno1au6VaIyjeWlIxsEpvAeClbqr2NQmv1zCU+VQLXQ7osEsIa0c4f0fdgN33cnAw3mOvxTlTR9c7Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T00:30:32.407607Z"},"content_sha256":"640b1e0ebeecc8245544d95bf437c872d2fd9a77a6c5949483214cc72aed8d59","schema_version":"1.0","event_id":"sha256:640b1e0ebeecc8245544d95bf437c872d2fd9a77a6c5949483214cc72aed8d59"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WTS25IJJGMGJAFJOO6MWK7B5QE/bundle.json","state_url":"https://pith.science/pith/WTS25IJJGMGJAFJOO6MWK7B5QE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WTS25IJJGMGJAFJOO6MWK7B5QE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T00:30:32Z","links":{"resolver":"https://pith.science/pith/WTS25IJJGMGJAFJOO6MWK7B5QE","bundle":"https://pith.science/pith/WTS25IJJGMGJAFJOO6MWK7B5QE/bundle.json","state":"https://pith.science/pith/WTS25IJJGMGJAFJOO6MWK7B5QE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WTS25IJJGMGJAFJOO6MWK7B5QE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:WTS25IJJGMGJAFJOO6MWK7B5QE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c74cd67a99c7b988fa2431332cd582a846978c9cf0119a220256e3d8e9ca8eef","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-18T18:59:00Z","title_canon_sha256":"d1fc827d7cc033b4530c226a5b4d17c183c5ecf25bcc92a9f4a24cf08069a062"},"schema_version":"1.0","source":{"id":"2502.13141","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.13141","created_at":"2026-07-05T10:16:30Z"},{"alias_kind":"arxiv_version","alias_value":"2502.13141v1","created_at":"2026-07-05T10:16:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.13141","created_at":"2026-07-05T10:16:30Z"},{"alias_kind":"pith_short_12","alias_value":"WTS25IJJGMGJ","created_at":"2026-07-05T10:16:30Z"},{"alias_kind":"pith_short_16","alias_value":"WTS25IJJGMGJAFJO","created_at":"2026-07-05T10:16:30Z"},{"alias_kind":"pith_short_8","alias_value":"WTS25IJJ","created_at":"2026-07-05T10:16:30Z"}],"graph_snapshots":[{"event_id":"sha256:640b1e0ebeecc8245544d95bf437c872d2fd9a77a6c5949483214cc72aed8d59","target":"graph","created_at":"2026-07-05T10:16:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.13141/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) are vulnerable to attacks like prompt injection, backdoor attacks, and adversarial attacks, which manipulate prompts or models to generate harmful outputs. In this paper, departing from traditional deep learning attack paradigms, we explore their intrinsic relationship and collectively term them Prompt Trigger Attacks (PTA). This raises a key question: Can we determine if a prompt is benign or poisoned? To address this, we propose UniGuardian, the first unified defense mechanism designed to detect prompt injection, backdoor attacks, and adversarial attacks in LLMs.","authors_text":"Huawei Lin, Tan Yu, Tong Geng, Weijie Zhao, Yingjie Lao","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-18T18:59:00Z","title":"UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.13141","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ae85448ed8bed7853e2611463fedfd41af396881591296e1b05b588a564ad9c6","target":"record","created_at":"2026-07-05T10:16:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c74cd67a99c7b988fa2431332cd582a846978c9cf0119a220256e3d8e9ca8eef","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-18T18:59:00Z","title_canon_sha256":"d1fc827d7cc033b4530c226a5b4d17c183c5ecf25bcc92a9f4a24cf08069a062"},"schema_version":"1.0","source":{"id":"2502.13141","kind":"arxiv","version":1}},"canonical_sha256":"b4e5aea129330c90152e7799657c3d810848a3886ee0a86d3fd955117bd6c140","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b4e5aea129330c90152e7799657c3d810848a3886ee0a86d3fd955117bd6c140","first_computed_at":"2026-07-05T10:16:30.158688Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:16:30.158688Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"rNyix+zHoCPkoQvFwyyiFYmGp5umWsMkPtXGXjYm3pzkotKV+mJzBFK3qsR9IyhgAUDLofj5jq108rMGYT6MBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:16:30.159173Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.13141","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ae85448ed8bed7853e2611463fedfd41af396881591296e1b05b588a564ad9c6","sha256:640b1e0ebeecc8245544d95bf437c872d2fd9a77a6c5949483214cc72aed8d59"],"state_sha256":"7a4dc6e1f8f8e5ad4ffe44f313ee5cd4ff8a2ebaa65666f38967cdcc2d4430bd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1s1Fk+9wfamlJCTH3EKX/AUThCdVgVe6nBh9W/nno2OMjxC7dG/G83sLRzeGIqjhDMdT1szt0aWzOrqbu0ekDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T00:30:32.418037Z","bundle_sha256":"10cb8d2689c852a7cc19629f7fe29bda6013bfa29208a7a1e1c7badb2bcab5d5"}}