{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:DH33MINYP325LII7E7MR4OIDRK","short_pith_number":"pith:DH33MINY","canonical_record":{"source":{"id":"2404.12916","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-19T14:40:38Z","cross_cats_sorted":[],"title_canon_sha256":"25267c5ea08d21d54a0a8920a621ed0a8a66b802d4e47985fc1f3a4e907d7502","abstract_canon_sha256":"36f0feaf92ba83cf2c14fef11f46e043ae92e289e243817db7311441c7b8603b"},"schema_version":"1.0"},"canonical_sha256":"19f7b621b87ef5d5a11f27d91e39038a955133b59e85cfb792629c3aa2cd87e0","source":{"kind":"arxiv","id":"2404.12916","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.12916","created_at":"2026-07-05T08:10:27Z"},{"alias_kind":"arxiv_version","alias_value":"2404.12916v2","created_at":"2026-07-05T08:10:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.12916","created_at":"2026-07-05T08:10:27Z"},{"alias_kind":"pith_short_12","alias_value":"DH33MINYP325","created_at":"2026-07-05T08:10:27Z"},{"alias_kind":"pith_short_16","alias_value":"DH33MINYP325LII7","created_at":"2026-07-05T08:10:27Z"},{"alias_kind":"pith_short_8","alias_value":"DH33MINY","created_at":"2026-07-05T08:10:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:DH33MINYP325LII7E7MR4OIDRK","target":"record","payload":{"canonical_record":{"source":{"id":"2404.12916","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-19T14:40:38Z","cross_cats_sorted":[],"title_canon_sha256":"25267c5ea08d21d54a0a8920a621ed0a8a66b802d4e47985fc1f3a4e907d7502","abstract_canon_sha256":"36f0feaf92ba83cf2c14fef11f46e043ae92e289e243817db7311441c7b8603b"},"schema_version":"1.0"},"canonical_sha256":"19f7b621b87ef5d5a11f27d91e39038a955133b59e85cfb792629c3aa2cd87e0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:10:27.355034Z","signature_b64":"+gJeNpOgTMD548MehLcJX3CfZYqgUvM/sVZci27GPoIOGMNDyEe6bJNYgOrWorx2AdSMTymvpkcLLL3g6pEUCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"19f7b621b87ef5d5a11f27d91e39038a955133b59e85cfb792629c3aa2cd87e0","last_reissued_at":"2026-07-05T08:10:27.354523Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:10:27.354523Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.12916","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:10:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"L1I3ULE6W1qBGdcTxuNJ9vu+SeRk+eCQCeGpbEekbJxMv6kvTUrzOmPsxIxuCXQP1DXuLE+zPz37F5eY+yv/Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T20:57:52.509086Z"},"content_sha256":"b14785117baf123ab435c187685a17a51537a213d07ba106a195e1f2dd54e805","schema_version":"1.0","event_id":"sha256:b14785117baf123ab435c187685a17a51537a213d07ba106a195e1f2dd54e805"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:DH33MINYP325LII7E7MR4OIDRK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Physical Backdoor Attack can Jeopardize Driving with Vision-Large-Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Rui Ye, Siheng Chen, Yanfeng Wang, Yuxi Wei, Zhen Xiang, Zhenyang Ni","submitted_at":"2024-04-19T14:40:38Z","abstract_excerpt":"Vision-Large-Language-models(VLMs) have great application prospects in autonomous driving. Despite the ability of VLMs to comprehend and make decisions in complex scenarios, their integration into safety-critical autonomous driving systems poses serious security risks. In this paper, we propose BadVLMDriver, the first backdoor attack against VLMs for autonomous driving that can be launched in practice using physical objects. Unlike existing backdoor attacks against VLMs that rely on digital modifications, BadVLMDriver uses common physical items, such as a red balloon, to induce unsafe actions "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.12916","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.12916/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:10:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uNOiIbLs+D0llueu4PoPKTO6ns42JkNL1YsfoV2asfsiAiByEenKFP+yqL7tE6gnzjaqsbxngFD0tL49lWy8Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T20:57:52.509473Z"},"content_sha256":"e735a22d4e5d0f4d1a037f4837b7a99a5dc281fd07fbef5a7bfb800fd0d6b29f","schema_version":"1.0","event_id":"sha256:e735a22d4e5d0f4d1a037f4837b7a99a5dc281fd07fbef5a7bfb800fd0d6b29f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DH33MINYP325LII7E7MR4OIDRK/bundle.json","state_url":"https://pith.science/pith/DH33MINYP325LII7E7MR4OIDRK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DH33MINYP325LII7E7MR4OIDRK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T20:57:52Z","links":{"resolver":"https://pith.science/pith/DH33MINYP325LII7E7MR4OIDRK","bundle":"https://pith.science/pith/DH33MINYP325LII7E7MR4OIDRK/bundle.json","state":"https://pith.science/pith/DH33MINYP325LII7E7MR4OIDRK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DH33MINYP325LII7E7MR4OIDRK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:DH33MINYP325LII7E7MR4OIDRK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"36f0feaf92ba83cf2c14fef11f46e043ae92e289e243817db7311441c7b8603b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-19T14:40:38Z","title_canon_sha256":"25267c5ea08d21d54a0a8920a621ed0a8a66b802d4e47985fc1f3a4e907d7502"},"schema_version":"1.0","source":{"id":"2404.12916","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.12916","created_at":"2026-07-05T08:10:27Z"},{"alias_kind":"arxiv_version","alias_value":"2404.12916v2","created_at":"2026-07-05T08:10:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.12916","created_at":"2026-07-05T08:10:27Z"},{"alias_kind":"pith_short_12","alias_value":"DH33MINYP325","created_at":"2026-07-05T08:10:27Z"},{"alias_kind":"pith_short_16","alias_value":"DH33MINYP325LII7","created_at":"2026-07-05T08:10:27Z"},{"alias_kind":"pith_short_8","alias_value":"DH33MINY","created_at":"2026-07-05T08:10:27Z"}],"graph_snapshots":[{"event_id":"sha256:e735a22d4e5d0f4d1a037f4837b7a99a5dc281fd07fbef5a7bfb800fd0d6b29f","target":"graph","created_at":"2026-07-05T08:10:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.12916/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision-Large-Language-models(VLMs) have great application prospects in autonomous driving. Despite the ability of VLMs to comprehend and make decisions in complex scenarios, their integration into safety-critical autonomous driving systems poses serious security risks. In this paper, we propose BadVLMDriver, the first backdoor attack against VLMs for autonomous driving that can be launched in practice using physical objects. Unlike existing backdoor attacks against VLMs that rely on digital modifications, BadVLMDriver uses common physical items, such as a red balloon, to induce unsafe actions ","authors_text":"Rui Ye, Siheng Chen, Yanfeng Wang, Yuxi Wei, Zhen Xiang, Zhenyang Ni","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-19T14:40:38Z","title":"Physical Backdoor Attack can Jeopardize Driving with Vision-Large-Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.12916","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b14785117baf123ab435c187685a17a51537a213d07ba106a195e1f2dd54e805","target":"record","created_at":"2026-07-05T08:10:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"36f0feaf92ba83cf2c14fef11f46e043ae92e289e243817db7311441c7b8603b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-19T14:40:38Z","title_canon_sha256":"25267c5ea08d21d54a0a8920a621ed0a8a66b802d4e47985fc1f3a4e907d7502"},"schema_version":"1.0","source":{"id":"2404.12916","kind":"arxiv","version":2}},"canonical_sha256":"19f7b621b87ef5d5a11f27d91e39038a955133b59e85cfb792629c3aa2cd87e0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"19f7b621b87ef5d5a11f27d91e39038a955133b59e85cfb792629c3aa2cd87e0","first_computed_at":"2026-07-05T08:10:27.354523Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:10:27.354523Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+gJeNpOgTMD548MehLcJX3CfZYqgUvM/sVZci27GPoIOGMNDyEe6bJNYgOrWorx2AdSMTymvpkcLLL3g6pEUCA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:10:27.355034Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.12916","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b14785117baf123ab435c187685a17a51537a213d07ba106a195e1f2dd54e805","sha256:e735a22d4e5d0f4d1a037f4837b7a99a5dc281fd07fbef5a7bfb800fd0d6b29f"],"state_sha256":"d14869505f56d882c603384ad6a150789c739b047bfe1efd9d9a52ae73e57002"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cx1nC0/br4s8Ssig1xh0S6mmwszwL2xDXNDkiaKdqa4MC/Pa9EECz/bPVklVFSsdvmGcN73Us8uqLDG9fGcXDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T20:57:52.511389Z","bundle_sha256":"7a241721172fbb9e2d14a26dc8d2e99039e437eaf20f45fa381cc7f18efda18d"}}