{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:XLHOHO2YOTKGIAKG6U4ED7E7GR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8398decae5834ba4a893b331e6c156d0852f78d5eb16626a8632a731a33bae07","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-11-14T15:56:11Z","title_canon_sha256":"b304177e622631a4ddcdb32efa7303b2a31bcbbb78a5e6d50fa835398ce3cded"},"schema_version":"1.0","source":{"id":"2411.09540","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.09540","created_at":"2026-07-05T10:45:13Z"},{"alias_kind":"arxiv_version","alias_value":"2411.09540v2","created_at":"2026-07-05T10:45:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.09540","created_at":"2026-07-05T10:45:13Z"},{"alias_kind":"pith_short_12","alias_value":"XLHOHO2YOTKG","created_at":"2026-07-05T10:45:13Z"},{"alias_kind":"pith_short_16","alias_value":"XLHOHO2YOTKGIAKG","created_at":"2026-07-05T10:45:13Z"},{"alias_kind":"pith_short_8","alias_value":"XLHOHO2Y","created_at":"2026-07-05T10:45:13Z"}],"graph_snapshots":[{"event_id":"sha256:39088f3cb608442aade9968850a30150bde167ea8b21d1b293df027f9b1cf8b3","target":"graph","created_at":"2026-07-05T10:45:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.09540/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Visual prompting (VP) is a new technique that adapts well-trained frozen models for source domain tasks to target domain tasks. This study examines VP's benefits for black-box model-level backdoor detection. The visual prompt in VP maps class subspaces between source and target domains. We identify a misalignment, termed class subspace inconsistency, between clean and poisoned datasets. Based on this, we introduce \\textsc{BProm}, a black-box model-level detection method to identify backdoors in suspicious models, if any. \\textsc{BProm} leverages the low classification accuracy of prompted mode","authors_text":"Chia-Mu Yu, Jia-Wei Chen, Zhi-Peng Zhang, Zi-Xuan Huang","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-11-14T15:56:11Z","title":"Prompting the Unseen: Detecting Hidden Backdoors in Black-Box Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.09540","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:76c283fa73f96a09351ea85d49547950db90609c041bdf184317a7e7b5904eb4","target":"record","created_at":"2026-07-05T10:45:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8398decae5834ba4a893b331e6c156d0852f78d5eb16626a8632a731a33bae07","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-11-14T15:56:11Z","title_canon_sha256":"b304177e622631a4ddcdb32efa7303b2a31bcbbb78a5e6d50fa835398ce3cded"},"schema_version":"1.0","source":{"id":"2411.09540","kind":"arxiv","version":2}},"canonical_sha256":"bacee3bb5874d4640146f53841fc9f34470bc633f67511b6e3f8146d7e4128e7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bacee3bb5874d4640146f53841fc9f34470bc633f67511b6e3f8146d7e4128e7","first_computed_at":"2026-07-05T10:45:13.914647Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:45:13.914647Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"rAQj9d34/+K1A1yr6DZbSUf9TM8SwQfgsyrRZKhUlpqy9RIogS3Fs0ASYmeEEY9rvS1/gfc1D+iSrZbhWBnVDg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:45:13.915170Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.09540","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:76c283fa73f96a09351ea85d49547950db90609c041bdf184317a7e7b5904eb4","sha256:39088f3cb608442aade9968850a30150bde167ea8b21d1b293df027f9b1cf8b3"],"state_sha256":"cbb8fdc373e2e8753e42d2582d0d2ec51774da8d9d9e1a9029c0b4cae743fef6"}