{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:YONXWUEXGAU3E5CK3D7SWPXFXE","short_pith_number":"pith:YONXWUEX","canonical_record":{"source":{"id":"2507.05113","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.MM","submitted_at":"2025-07-07T15:29:26Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"e1298e4023fe46e0eff4aaa555af6efe7ad0d5874e33f4119590a9c354430e49","abstract_canon_sha256":"d67db92e338ba77b848103ba6586df378870c3a5e065817aad7cc232d18d1f3a"},"schema_version":"1.0"},"canonical_sha256":"c39b7b50973029b2744ad8ff2b3ee5b900922100feb235f1a7984e142f61dc64","source":{"kind":"arxiv","id":"2507.05113","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.05113","created_at":"2026-07-05T11:43:13Z"},{"alias_kind":"arxiv_version","alias_value":"2507.05113v2","created_at":"2026-07-05T11:43:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.05113","created_at":"2026-07-05T11:43:13Z"},{"alias_kind":"pith_short_12","alias_value":"YONXWUEXGAU3","created_at":"2026-07-05T11:43:13Z"},{"alias_kind":"pith_short_16","alias_value":"YONXWUEXGAU3E5CK","created_at":"2026-07-05T11:43:13Z"},{"alias_kind":"pith_short_8","alias_value":"YONXWUEX","created_at":"2026-07-05T11:43:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:YONXWUEXGAU3E5CK3D7SWPXFXE","target":"record","payload":{"canonical_record":{"source":{"id":"2507.05113","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.MM","submitted_at":"2025-07-07T15:29:26Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"e1298e4023fe46e0eff4aaa555af6efe7ad0d5874e33f4119590a9c354430e49","abstract_canon_sha256":"d67db92e338ba77b848103ba6586df378870c3a5e065817aad7cc232d18d1f3a"},"schema_version":"1.0"},"canonical_sha256":"c39b7b50973029b2744ad8ff2b3ee5b900922100feb235f1a7984e142f61dc64","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:43:13.108764Z","signature_b64":"vlk7MzB3xbLh3cQuWpYh9r1PMvrFbmXzXwQzK8AxscjrtPgdhIGIterNi1tjiFIR7a8ERcLiRNm4LZsl4kvtAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c39b7b50973029b2744ad8ff2b3ee5b900922100feb235f1a7984e142f61dc64","last_reissued_at":"2026-07-05T11:43:13.108225Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:43:13.108225Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.05113","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:43:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9x6IGIuXu9V7MzzBbOdc2yy0Q0TdIqIrK5xcdbSE/paPzpmsUCoSqddVxOUup5J4JDtQuKT2EBwyjjkfs3mCDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T17:10:08.452545Z"},"content_sha256":"56a7c7615ecd2942d2a7d20c9393948b41cff01f28b2316c89a2f498228d184e","schema_version":"1.0","event_id":"sha256:56a7c7615ecd2942d2a7d20c9393948b41cff01f28b2316c89a2f498228d184e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:YONXWUEXGAU3E5CK3D7SWPXFXE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"CLIP-Guided Backdoor Defense through Entropy-Based Poisoned Dataset Separation","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.MM","authors_text":"Binyan Xu, Di Tang, Fan Yang, Kehuan Zhang, Xilin Dai","submitted_at":"2025-07-07T15:29:26Z","abstract_excerpt":"Deep Neural Networks (DNNs) are susceptible to backdoor attacks, where adversaries poison training data to implant backdoor into the victim model. Current backdoor defenses on poisoned data often suffer from high computational costs or low effectiveness against advanced attacks like clean-label and clean-image backdoors. To address them, we introduce CLIP-Guided backdoor Defense (CGD), an efficient and effective method that mitigates various backdoor attacks. CGD utilizes a publicly accessible CLIP model to identify inputs that are likely to be clean or poisoned. It then retrains the model wit"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.05113","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.05113/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:43:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"U6neZrKQl5mVlLwpTx9L9smIci7MpVJ/mj/OGouMsBlKtmkD3WAfh831TA1M7uwpj7g4LL4qp7O2z/US4jJ+CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T17:10:08.453078Z"},"content_sha256":"5adc64c37245f1474bc445b96e9b9e54458a1ae9a147b621c4d90c0c133a2caf","schema_version":"1.0","event_id":"sha256:5adc64c37245f1474bc445b96e9b9e54458a1ae9a147b621c4d90c0c133a2caf"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YONXWUEXGAU3E5CK3D7SWPXFXE/bundle.json","state_url":"https://pith.science/pith/YONXWUEXGAU3E5CK3D7SWPXFXE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YONXWUEXGAU3E5CK3D7SWPXFXE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T17:10:08Z","links":{"resolver":"https://pith.science/pith/YONXWUEXGAU3E5CK3D7SWPXFXE","bundle":"https://pith.science/pith/YONXWUEXGAU3E5CK3D7SWPXFXE/bundle.json","state":"https://pith.science/pith/YONXWUEXGAU3E5CK3D7SWPXFXE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YONXWUEXGAU3E5CK3D7SWPXFXE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:YONXWUEXGAU3E5CK3D7SWPXFXE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d67db92e338ba77b848103ba6586df378870c3a5e065817aad7cc232d18d1f3a","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.MM","submitted_at":"2025-07-07T15:29:26Z","title_canon_sha256":"e1298e4023fe46e0eff4aaa555af6efe7ad0d5874e33f4119590a9c354430e49"},"schema_version":"1.0","source":{"id":"2507.05113","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.05113","created_at":"2026-07-05T11:43:13Z"},{"alias_kind":"arxiv_version","alias_value":"2507.05113v2","created_at":"2026-07-05T11:43:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.05113","created_at":"2026-07-05T11:43:13Z"},{"alias_kind":"pith_short_12","alias_value":"YONXWUEXGAU3","created_at":"2026-07-05T11:43:13Z"},{"alias_kind":"pith_short_16","alias_value":"YONXWUEXGAU3E5CK","created_at":"2026-07-05T11:43:13Z"},{"alias_kind":"pith_short_8","alias_value":"YONXWUEX","created_at":"2026-07-05T11:43:13Z"}],"graph_snapshots":[{"event_id":"sha256:5adc64c37245f1474bc445b96e9b9e54458a1ae9a147b621c4d90c0c133a2caf","target":"graph","created_at":"2026-07-05T11:43:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.05113/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep Neural Networks (DNNs) are susceptible to backdoor attacks, where adversaries poison training data to implant backdoor into the victim model. Current backdoor defenses on poisoned data often suffer from high computational costs or low effectiveness against advanced attacks like clean-label and clean-image backdoors. To address them, we introduce CLIP-Guided backdoor Defense (CGD), an efficient and effective method that mitigates various backdoor attacks. CGD utilizes a publicly accessible CLIP model to identify inputs that are likely to be clean or poisoned. It then retrains the model wit","authors_text":"Binyan Xu, Di Tang, Fan Yang, Kehuan Zhang, Xilin Dai","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.MM","submitted_at":"2025-07-07T15:29:26Z","title":"CLIP-Guided Backdoor Defense through Entropy-Based Poisoned Dataset Separation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.05113","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:56a7c7615ecd2942d2a7d20c9393948b41cff01f28b2316c89a2f498228d184e","target":"record","created_at":"2026-07-05T11:43:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d67db92e338ba77b848103ba6586df378870c3a5e065817aad7cc232d18d1f3a","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.MM","submitted_at":"2025-07-07T15:29:26Z","title_canon_sha256":"e1298e4023fe46e0eff4aaa555af6efe7ad0d5874e33f4119590a9c354430e49"},"schema_version":"1.0","source":{"id":"2507.05113","kind":"arxiv","version":2}},"canonical_sha256":"c39b7b50973029b2744ad8ff2b3ee5b900922100feb235f1a7984e142f61dc64","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c39b7b50973029b2744ad8ff2b3ee5b900922100feb235f1a7984e142f61dc64","first_computed_at":"2026-07-05T11:43:13.108225Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:43:13.108225Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vlk7MzB3xbLh3cQuWpYh9r1PMvrFbmXzXwQzK8AxscjrtPgdhIGIterNi1tjiFIR7a8ERcLiRNm4LZsl4kvtAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:43:13.108764Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.05113","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:56a7c7615ecd2942d2a7d20c9393948b41cff01f28b2316c89a2f498228d184e","sha256:5adc64c37245f1474bc445b96e9b9e54458a1ae9a147b621c4d90c0c133a2caf"],"state_sha256":"4c7b783f27e4ffd8e1c58d26d05b610f63415c3484726168fbfb4d70decf0764"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xp+IKXE0BqX5AZxIKUZsLcQ+mLsPXhZIqh+X1fA/LCLRnc6eG24XvWaiAwSwDxoGTxLdfCriI+JNSZDy0/9mCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T17:10:08.457831Z","bundle_sha256":"2f0bffa6cf0a30566a80babd3091619d67d272ca2c0fdb412b8db1457859bc41"}}