{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:X5DXQYLXWYWBICNRGESS3RT7F5","short_pith_number":"pith:X5DXQYLX","canonical_record":{"source":{"id":"2111.08429","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-11-16T13:06:31Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"5e5c8ac180d30b784a4bed8af77f0de65b0a8b70a6bddbcec9801e6cd988e15a","abstract_canon_sha256":"4cf03f2ee817c5297af75f4f0ad1456514a19682dd84ce2015f9ee7d2b64a02b"},"schema_version":"1.0"},"canonical_sha256":"bf47786177b62c1409b131252dc67f2f6fa9bf9cba826439a34974752e066cd6","source":{"kind":"arxiv","id":"2111.08429","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.08429","created_at":"2026-07-05T03:32:33Z"},{"alias_kind":"arxiv_version","alias_value":"2111.08429v1","created_at":"2026-07-05T03:32:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.08429","created_at":"2026-07-05T03:32:33Z"},{"alias_kind":"pith_short_12","alias_value":"X5DXQYLXWYWB","created_at":"2026-07-05T03:32:33Z"},{"alias_kind":"pith_short_16","alias_value":"X5DXQYLXWYWBICNR","created_at":"2026-07-05T03:32:33Z"},{"alias_kind":"pith_short_8","alias_value":"X5DXQYLX","created_at":"2026-07-05T03:32:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:X5DXQYLXWYWBICNRGESS3RT7F5","target":"record","payload":{"canonical_record":{"source":{"id":"2111.08429","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-11-16T13:06:31Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"5e5c8ac180d30b784a4bed8af77f0de65b0a8b70a6bddbcec9801e6cd988e15a","abstract_canon_sha256":"4cf03f2ee817c5297af75f4f0ad1456514a19682dd84ce2015f9ee7d2b64a02b"},"schema_version":"1.0"},"canonical_sha256":"bf47786177b62c1409b131252dc67f2f6fa9bf9cba826439a34974752e066cd6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:32:33.900105Z","signature_b64":"xDugNAfpshyBQEc22BGeySTPREEiqu5c++S4yuPHyCBBNZUvCGO/1T2xtiac4Mtew2hsfPhLZgJDd3u1wi+ECg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bf47786177b62c1409b131252dc67f2f6fa9bf9cba826439a34974752e066cd6","last_reissued_at":"2026-07-05T03:32:33.899593Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:32:33.899593Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2111.08429","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:32:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"w30dIAPKZ+18Eao3LQUEGaNHqocu3PIuNvejN/wuW8JEY+GTZkaSOynm8XmF1ySgeZU2R8LSw+Bp9LzTPmM3Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T18:59:28.558532Z"},"content_sha256":"599aab942271502679b07d70683ae50fc7840540aceb422e388b31034232c9a5","schema_version":"1.0","event_id":"sha256:599aab942271502679b07d70683ae50fc7840540aceb422e388b31034232c9a5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:X5DXQYLXWYWBICNRGESS3RT7F5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defences","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.CR","authors_text":"Benedetta Tondi, Mauro Barni, Wei Guo","submitted_at":"2021-11-16T13:06:31Z","abstract_excerpt":"Together with impressive advances touching every aspect of our society, AI technology based on Deep Neural Networks (DNN) is bringing increasing security concerns. While attacks operating at test time have monopolised the initial attention of researchers, backdoor attacks, exploiting the possibility of corrupting DNN models by interfering with the training process, represents a further serious threat undermining the dependability of AI techniques. In a backdoor attack, the attacker corrupts the training data so to induce an erroneous behaviour at test time. Test time errors, however, are activ"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.08429","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2111.08429/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:32:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KT9EPJfXkUrIhqe5U5Luw8Gq0/vji0HUbqhS67LA4cLOJjI0ZEc3lAQG9AhPrRfgMAuPafDhg/XYDgPwEFp3AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T18:59:28.559481Z"},"content_sha256":"f868b0861f867fc4b110b7c8b2971eff9709cbe280c85cc84a401f7abc349835","schema_version":"1.0","event_id":"sha256:f868b0861f867fc4b110b7c8b2971eff9709cbe280c85cc84a401f7abc349835"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/X5DXQYLXWYWBICNRGESS3RT7F5/bundle.json","state_url":"https://pith.science/pith/X5DXQYLXWYWBICNRGESS3RT7F5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/X5DXQYLXWYWBICNRGESS3RT7F5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T18:59:28Z","links":{"resolver":"https://pith.science/pith/X5DXQYLXWYWBICNRGESS3RT7F5","bundle":"https://pith.science/pith/X5DXQYLXWYWBICNRGESS3RT7F5/bundle.json","state":"https://pith.science/pith/X5DXQYLXWYWBICNRGESS3RT7F5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/X5DXQYLXWYWBICNRGESS3RT7F5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:X5DXQYLXWYWBICNRGESS3RT7F5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4cf03f2ee817c5297af75f4f0ad1456514a19682dd84ce2015f9ee7d2b64a02b","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-11-16T13:06:31Z","title_canon_sha256":"5e5c8ac180d30b784a4bed8af77f0de65b0a8b70a6bddbcec9801e6cd988e15a"},"schema_version":"1.0","source":{"id":"2111.08429","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.08429","created_at":"2026-07-05T03:32:33Z"},{"alias_kind":"arxiv_version","alias_value":"2111.08429v1","created_at":"2026-07-05T03:32:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.08429","created_at":"2026-07-05T03:32:33Z"},{"alias_kind":"pith_short_12","alias_value":"X5DXQYLXWYWB","created_at":"2026-07-05T03:32:33Z"},{"alias_kind":"pith_short_16","alias_value":"X5DXQYLXWYWBICNR","created_at":"2026-07-05T03:32:33Z"},{"alias_kind":"pith_short_8","alias_value":"X5DXQYLX","created_at":"2026-07-05T03:32:33Z"}],"graph_snapshots":[{"event_id":"sha256:f868b0861f867fc4b110b7c8b2971eff9709cbe280c85cc84a401f7abc349835","target":"graph","created_at":"2026-07-05T03:32:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2111.08429/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Together with impressive advances touching every aspect of our society, AI technology based on Deep Neural Networks (DNN) is bringing increasing security concerns. While attacks operating at test time have monopolised the initial attention of researchers, backdoor attacks, exploiting the possibility of corrupting DNN models by interfering with the training process, represents a further serious threat undermining the dependability of AI techniques. In a backdoor attack, the attacker corrupts the training data so to induce an erroneous behaviour at test time. Test time errors, however, are activ","authors_text":"Benedetta Tondi, Mauro Barni, Wei Guo","cross_cats":["cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-11-16T13:06:31Z","title":"An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defences"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.08429","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:599aab942271502679b07d70683ae50fc7840540aceb422e388b31034232c9a5","target":"record","created_at":"2026-07-05T03:32:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4cf03f2ee817c5297af75f4f0ad1456514a19682dd84ce2015f9ee7d2b64a02b","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-11-16T13:06:31Z","title_canon_sha256":"5e5c8ac180d30b784a4bed8af77f0de65b0a8b70a6bddbcec9801e6cd988e15a"},"schema_version":"1.0","source":{"id":"2111.08429","kind":"arxiv","version":1}},"canonical_sha256":"bf47786177b62c1409b131252dc67f2f6fa9bf9cba826439a34974752e066cd6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bf47786177b62c1409b131252dc67f2f6fa9bf9cba826439a34974752e066cd6","first_computed_at":"2026-07-05T03:32:33.899593Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:32:33.899593Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xDugNAfpshyBQEc22BGeySTPREEiqu5c++S4yuPHyCBBNZUvCGO/1T2xtiac4Mtew2hsfPhLZgJDd3u1wi+ECg==","signature_status":"signed_v1","signed_at":"2026-07-05T03:32:33.900105Z","signed_message":"canonical_sha256_bytes"},"source_id":"2111.08429","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:599aab942271502679b07d70683ae50fc7840540aceb422e388b31034232c9a5","sha256:f868b0861f867fc4b110b7c8b2971eff9709cbe280c85cc84a401f7abc349835"],"state_sha256":"52e177912e662f36ad480666d4a0d9175455ee5541e929a32a5e120cab91873a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1w1pJunq5uzouEBmxJh4o58XStg3bQ/F63X9CB10rXpIcua6BiTIWZmeeQktULAkOPDpbGnwEL6qVReBKGZJDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T18:59:28.575643Z","bundle_sha256":"def6111e64c86baae2bdcf4be934d457900e3a8abae6c5e3cfe8adbbc530e75c"}}