{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:CP5NDVGVZ57FYLMKQHO6W7JYXU","short_pith_number":"pith:CP5NDVGV","canonical_record":{"source":{"id":"2207.04209","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-07-09T07:05:53Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"ba07c3ad3a3cbce0e90f03d1d7ac95caaa430dc1f6c59575ff0f5d96d92880fb","abstract_canon_sha256":"2672d7deeb3469d63326a7773b483d0617c4bf8bc4e1e547d88c2fcca7cc2c10"},"schema_version":"1.0"},"canonical_sha256":"13fad1d4d5cf7e5c2d8a81ddeb7d38bd2d15e7b440749a36a17d95fb72579950","source":{"kind":"arxiv","id":"2207.04209","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.04209","created_at":"2026-07-05T04:38:56Z"},{"alias_kind":"arxiv_version","alias_value":"2207.04209v1","created_at":"2026-07-05T04:38:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.04209","created_at":"2026-07-05T04:38:56Z"},{"alias_kind":"pith_short_12","alias_value":"CP5NDVGVZ57F","created_at":"2026-07-05T04:38:56Z"},{"alias_kind":"pith_short_16","alias_value":"CP5NDVGVZ57FYLMK","created_at":"2026-07-05T04:38:56Z"},{"alias_kind":"pith_short_8","alias_value":"CP5NDVGV","created_at":"2026-07-05T04:38:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:CP5NDVGVZ57FYLMKQHO6W7JYXU","target":"record","payload":{"canonical_record":{"source":{"id":"2207.04209","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-07-09T07:05:53Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"ba07c3ad3a3cbce0e90f03d1d7ac95caaa430dc1f6c59575ff0f5d96d92880fb","abstract_canon_sha256":"2672d7deeb3469d63326a7773b483d0617c4bf8bc4e1e547d88c2fcca7cc2c10"},"schema_version":"1.0"},"canonical_sha256":"13fad1d4d5cf7e5c2d8a81ddeb7d38bd2d15e7b440749a36a17d95fb72579950","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:38:56.666960Z","signature_b64":"cXqQruw1M9xmDEU2vY7NJgswN0wsTRk1Haj3T17p1YRoNNdDjk8sl2/UMqi8rjxuhIo2hdDoznAt+4qaxOHZCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"13fad1d4d5cf7e5c2d8a81ddeb7d38bd2d15e7b440749a36a17d95fb72579950","last_reissued_at":"2026-07-05T04:38:56.666497Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:38:56.666497Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2207.04209","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:38:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rOsSNhXA3GUggVOKG0zRGPHrBnTGtjqzcKb3YLcJpAawMCQNcV5Jds9y68erkrlg6ZxpV49CBxoQDnc3WOChCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T18:53:15.894225Z"},"content_sha256":"b49e7aebb97e4438d4cd9a5db98cc688181378525950d8e9bbe3046d87cfad39","schema_version":"1.0","event_id":"sha256:b49e7aebb97e4438d4cd9a5db98cc688181378525950d8e9bbe3046d87cfad39"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:CP5NDVGVZ57FYLMKQHO6W7JYXU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Invisible Backdoor Attacks Using Data Poisoning in the Frequency Domain","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Chang Yue, Kai Chen, Peizhuo Lv, Ruigang Liang","submitted_at":"2022-07-09T07:05:53Z","abstract_excerpt":"With the broad application of deep neural networks (DNNs), backdoor attacks have gradually attracted attention. Backdoor attacks are insidious, and poisoned models perform well on benign samples and are only triggered when given specific inputs, which cause the neural network to produce incorrect outputs. The state-of-the-art backdoor attack work is implemented by data poisoning, i.e., the attacker injects poisoned samples into the dataset, and the models trained with that dataset are infected with the backdoor. However, most of the triggers used in the current study are fixed patterns patched"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.04209","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2207.04209/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:38:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kQ8m/C9hQpc52l3mMshwhiamlQVZFlnYLhUr74a6xJsltgvv04xW7vED8RaIw40fJMCp8aqf7ZXHDKqfIj43AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T18:53:15.894800Z"},"content_sha256":"0e73c18d11e1d99ef8064b6b3b1de9aa3f5360f4a5073ba13f539ad9ac13c1d6","schema_version":"1.0","event_id":"sha256:0e73c18d11e1d99ef8064b6b3b1de9aa3f5360f4a5073ba13f539ad9ac13c1d6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CP5NDVGVZ57FYLMKQHO6W7JYXU/bundle.json","state_url":"https://pith.science/pith/CP5NDVGVZ57FYLMKQHO6W7JYXU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CP5NDVGVZ57FYLMKQHO6W7JYXU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T18:53:15Z","links":{"resolver":"https://pith.science/pith/CP5NDVGVZ57FYLMKQHO6W7JYXU","bundle":"https://pith.science/pith/CP5NDVGVZ57FYLMKQHO6W7JYXU/bundle.json","state":"https://pith.science/pith/CP5NDVGVZ57FYLMKQHO6W7JYXU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CP5NDVGVZ57FYLMKQHO6W7JYXU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:CP5NDVGVZ57FYLMKQHO6W7JYXU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2672d7deeb3469d63326a7773b483d0617c4bf8bc4e1e547d88c2fcca7cc2c10","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-07-09T07:05:53Z","title_canon_sha256":"ba07c3ad3a3cbce0e90f03d1d7ac95caaa430dc1f6c59575ff0f5d96d92880fb"},"schema_version":"1.0","source":{"id":"2207.04209","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.04209","created_at":"2026-07-05T04:38:56Z"},{"alias_kind":"arxiv_version","alias_value":"2207.04209v1","created_at":"2026-07-05T04:38:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.04209","created_at":"2026-07-05T04:38:56Z"},{"alias_kind":"pith_short_12","alias_value":"CP5NDVGVZ57F","created_at":"2026-07-05T04:38:56Z"},{"alias_kind":"pith_short_16","alias_value":"CP5NDVGVZ57FYLMK","created_at":"2026-07-05T04:38:56Z"},{"alias_kind":"pith_short_8","alias_value":"CP5NDVGV","created_at":"2026-07-05T04:38:56Z"}],"graph_snapshots":[{"event_id":"sha256:0e73c18d11e1d99ef8064b6b3b1de9aa3f5360f4a5073ba13f539ad9ac13c1d6","target":"graph","created_at":"2026-07-05T04:38:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2207.04209/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the broad application of deep neural networks (DNNs), backdoor attacks have gradually attracted attention. Backdoor attacks are insidious, and poisoned models perform well on benign samples and are only triggered when given specific inputs, which cause the neural network to produce incorrect outputs. The state-of-the-art backdoor attack work is implemented by data poisoning, i.e., the attacker injects poisoned samples into the dataset, and the models trained with that dataset are infected with the backdoor. However, most of the triggers used in the current study are fixed patterns patched","authors_text":"Chang Yue, Kai Chen, Peizhuo Lv, Ruigang Liang","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-07-09T07:05:53Z","title":"Invisible Backdoor Attacks Using Data Poisoning in the Frequency Domain"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.04209","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b49e7aebb97e4438d4cd9a5db98cc688181378525950d8e9bbe3046d87cfad39","target":"record","created_at":"2026-07-05T04:38:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2672d7deeb3469d63326a7773b483d0617c4bf8bc4e1e547d88c2fcca7cc2c10","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-07-09T07:05:53Z","title_canon_sha256":"ba07c3ad3a3cbce0e90f03d1d7ac95caaa430dc1f6c59575ff0f5d96d92880fb"},"schema_version":"1.0","source":{"id":"2207.04209","kind":"arxiv","version":1}},"canonical_sha256":"13fad1d4d5cf7e5c2d8a81ddeb7d38bd2d15e7b440749a36a17d95fb72579950","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"13fad1d4d5cf7e5c2d8a81ddeb7d38bd2d15e7b440749a36a17d95fb72579950","first_computed_at":"2026-07-05T04:38:56.666497Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:38:56.666497Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cXqQruw1M9xmDEU2vY7NJgswN0wsTRk1Haj3T17p1YRoNNdDjk8sl2/UMqi8rjxuhIo2hdDoznAt+4qaxOHZCw==","signature_status":"signed_v1","signed_at":"2026-07-05T04:38:56.666960Z","signed_message":"canonical_sha256_bytes"},"source_id":"2207.04209","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b49e7aebb97e4438d4cd9a5db98cc688181378525950d8e9bbe3046d87cfad39","sha256:0e73c18d11e1d99ef8064b6b3b1de9aa3f5360f4a5073ba13f539ad9ac13c1d6"],"state_sha256":"a2a3c308a841bbb2fea91977e9f7a85633e16874355d8220e74ff5b4130017e5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XidqGf4kTAUEdr3UM8ZXzglkAC2UBF/QToweVkHrU1SJxQc794WwFoRiwIGz+qxru264UWENTARePUc7vefbBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T18:53:15.898334Z","bundle_sha256":"12b7669ac8e853baef028d78b161b360107bfeffe902dc9c5b9a72fe42e956f7"}}