{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:AIR23QHBF3SYBTSLJJAJSQIBAD","short_pith_number":"pith:AIR23QHB","canonical_record":{"source":{"id":"2408.04683","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-08T08:23:03Z","cross_cats_sorted":["cs.AI","cs.SE"],"title_canon_sha256":"3e110b0bc94ea48c3552bcb90358159f14b4eca3891b21787a9872ce32ac5c21","abstract_canon_sha256":"9c097aa2611c0aed01424d33f788d1fbcac245817ceb597d3ff70b06d579b43d"},"schema_version":"1.0"},"canonical_sha256":"0223adc0e12ee580ce4b4a4099410100e0f292105326915bfee35d075447fa89","source":{"kind":"arxiv","id":"2408.04683","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.04683","created_at":"2026-07-05T10:17:10Z"},{"alias_kind":"arxiv_version","alias_value":"2408.04683v2","created_at":"2026-07-05T10:17:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.04683","created_at":"2026-07-05T10:17:10Z"},{"alias_kind":"pith_short_12","alias_value":"AIR23QHBF3SY","created_at":"2026-07-05T10:17:10Z"},{"alias_kind":"pith_short_16","alias_value":"AIR23QHBF3SYBTSL","created_at":"2026-07-05T10:17:10Z"},{"alias_kind":"pith_short_8","alias_value":"AIR23QHB","created_at":"2026-07-05T10:17:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:AIR23QHBF3SYBTSLJJAJSQIBAD","target":"record","payload":{"canonical_record":{"source":{"id":"2408.04683","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-08T08:23:03Z","cross_cats_sorted":["cs.AI","cs.SE"],"title_canon_sha256":"3e110b0bc94ea48c3552bcb90358159f14b4eca3891b21787a9872ce32ac5c21","abstract_canon_sha256":"9c097aa2611c0aed01424d33f788d1fbcac245817ceb597d3ff70b06d579b43d"},"schema_version":"1.0"},"canonical_sha256":"0223adc0e12ee580ce4b4a4099410100e0f292105326915bfee35d075447fa89","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:17:10.661988Z","signature_b64":"kbfQoUKsqjeZL5hWq5qyf7fB2KntCxKgZcRQmE9sZKnuFMhB3zl7JWZJzSBiL3DpjOhX4MMaaCzr8n/Xy7yzBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0223adc0e12ee580ce4b4a4099410100e0f292105326915bfee35d075447fa89","last_reissued_at":"2026-07-05T10:17:10.661484Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:17:10.661484Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.04683","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:17:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Bs76y3FgiyV8EcJ5CAA+tdyKDVsRKI62senRPdb4nyYttk1Ut4SpzWzE9oHF597x/8WS/uXGJyVXyJWz40dUCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T03:30:19.964291Z"},"content_sha256":"c1f46bb05e7370651b700b46722998fcf94fa59fd3bf43e110e651be1ab8d228","schema_version":"1.0","event_id":"sha256:c1f46bb05e7370651b700b46722998fcf94fa59fd3bf43e110e651be1ab8d228"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:AIR23QHBF3SYBTSLJJAJSQIBAD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Eliminating Backdoors in Neural Code Models for Secure Code Understanding","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.SE"],"primary_cat":"cs.CR","authors_text":"An Guo, Baowen Xu, Chunrong Fang, Quanjun Zhang, Weisong Sun, Yang Liu, Yebo Feng, Yuan Xiao, Yuchen Chen, Zhenyu Chen","submitted_at":"2024-08-08T08:23:03Z","abstract_excerpt":"Neural code models (NCMs) have been widely used to address various code understanding tasks, such as defect detection. However, numerous recent studies reveal that such models are vulnerable to backdoor attacks. Backdoored NCMs function normally on normal/clean code snippets, but exhibit adversary-expected behavior on poisoned code snippets injected with the adversary-crafted trigger. It poses a significant security threat. Therefore, there is an urgent need for effective techniques to detect and eliminate backdoors stealthily implanted in NCMs.\n  To address this issue, in this paper, we innov"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.04683","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.04683/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:17:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mmWvkbA77KTp7d3rgGwKd7bPykS3AEHKi96lYckjGgkxa7f1WTU5YH/BrednLfRXmrmHz9Jo7UBj2hCFyYs7BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T03:30:19.964894Z"},"content_sha256":"212a815341a23b78fdaf8aac387e9597a1c1553b8ca8bcaed55c21aed76a53e9","schema_version":"1.0","event_id":"sha256:212a815341a23b78fdaf8aac387e9597a1c1553b8ca8bcaed55c21aed76a53e9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AIR23QHBF3SYBTSLJJAJSQIBAD/bundle.json","state_url":"https://pith.science/pith/AIR23QHBF3SYBTSLJJAJSQIBAD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AIR23QHBF3SYBTSLJJAJSQIBAD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T03:30:19Z","links":{"resolver":"https://pith.science/pith/AIR23QHBF3SYBTSLJJAJSQIBAD","bundle":"https://pith.science/pith/AIR23QHBF3SYBTSLJJAJSQIBAD/bundle.json","state":"https://pith.science/pith/AIR23QHBF3SYBTSLJJAJSQIBAD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AIR23QHBF3SYBTSLJJAJSQIBAD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:AIR23QHBF3SYBTSLJJAJSQIBAD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9c097aa2611c0aed01424d33f788d1fbcac245817ceb597d3ff70b06d579b43d","cross_cats_sorted":["cs.AI","cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-08T08:23:03Z","title_canon_sha256":"3e110b0bc94ea48c3552bcb90358159f14b4eca3891b21787a9872ce32ac5c21"},"schema_version":"1.0","source":{"id":"2408.04683","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.04683","created_at":"2026-07-05T10:17:10Z"},{"alias_kind":"arxiv_version","alias_value":"2408.04683v2","created_at":"2026-07-05T10:17:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.04683","created_at":"2026-07-05T10:17:10Z"},{"alias_kind":"pith_short_12","alias_value":"AIR23QHBF3SY","created_at":"2026-07-05T10:17:10Z"},{"alias_kind":"pith_short_16","alias_value":"AIR23QHBF3SYBTSL","created_at":"2026-07-05T10:17:10Z"},{"alias_kind":"pith_short_8","alias_value":"AIR23QHB","created_at":"2026-07-05T10:17:10Z"}],"graph_snapshots":[{"event_id":"sha256:212a815341a23b78fdaf8aac387e9597a1c1553b8ca8bcaed55c21aed76a53e9","target":"graph","created_at":"2026-07-05T10:17:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.04683/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Neural code models (NCMs) have been widely used to address various code understanding tasks, such as defect detection. However, numerous recent studies reveal that such models are vulnerable to backdoor attacks. Backdoored NCMs function normally on normal/clean code snippets, but exhibit adversary-expected behavior on poisoned code snippets injected with the adversary-crafted trigger. It poses a significant security threat. Therefore, there is an urgent need for effective techniques to detect and eliminate backdoors stealthily implanted in NCMs.\n  To address this issue, in this paper, we innov","authors_text":"An Guo, Baowen Xu, Chunrong Fang, Quanjun Zhang, Weisong Sun, Yang Liu, Yebo Feng, Yuan Xiao, Yuchen Chen, Zhenyu Chen","cross_cats":["cs.AI","cs.SE"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-08T08:23:03Z","title":"Eliminating Backdoors in Neural Code Models for Secure Code Understanding"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.04683","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c1f46bb05e7370651b700b46722998fcf94fa59fd3bf43e110e651be1ab8d228","target":"record","created_at":"2026-07-05T10:17:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9c097aa2611c0aed01424d33f788d1fbcac245817ceb597d3ff70b06d579b43d","cross_cats_sorted":["cs.AI","cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-08T08:23:03Z","title_canon_sha256":"3e110b0bc94ea48c3552bcb90358159f14b4eca3891b21787a9872ce32ac5c21"},"schema_version":"1.0","source":{"id":"2408.04683","kind":"arxiv","version":2}},"canonical_sha256":"0223adc0e12ee580ce4b4a4099410100e0f292105326915bfee35d075447fa89","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0223adc0e12ee580ce4b4a4099410100e0f292105326915bfee35d075447fa89","first_computed_at":"2026-07-05T10:17:10.661484Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:17:10.661484Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kbfQoUKsqjeZL5hWq5qyf7fB2KntCxKgZcRQmE9sZKnuFMhB3zl7JWZJzSBiL3DpjOhX4MMaaCzr8n/Xy7yzBg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:17:10.661988Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.04683","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c1f46bb05e7370651b700b46722998fcf94fa59fd3bf43e110e651be1ab8d228","sha256:212a815341a23b78fdaf8aac387e9597a1c1553b8ca8bcaed55c21aed76a53e9"],"state_sha256":"549eeab60a70fcf8a67b674a5e83aeeba713a5f8eef1033a864e5d3ed73d75bc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yo38k/uKUibmK/FbvqWzaIodKFtv7yL8VWvTovSYLZBzBbr3Hp8qB2ocd/e0zkgRFa0ZsYoHRNoyr7glhoPOAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T03:30:19.970750Z","bundle_sha256":"bfb3a39e55ee145a3d9e73a17b8f07bd871b16a2ce8f158a6b61cc9de0d65a60"}}