{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:L5YJGU3K3KZOIOXMXIT7GPV46V","short_pith_number":"pith:L5YJGU3K","canonical_record":{"source":{"id":"2305.10596","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-05-10T09:09:56Z","cross_cats_sorted":[],"title_canon_sha256":"428c191873b2312639063ea99dab423e3f7fe0ffb406190a2bcdbdb37f51afd8","abstract_canon_sha256":"ef4f04b0d2b28b1cf1eae6e3bea14163f78d4a03a04aac6a264eb331b00dcce1"},"schema_version":"1.0"},"canonical_sha256":"5f7093536adab2e43aecba27f33ebcf571e92479ec765024e9b0660f81955a87","source":{"kind":"arxiv","id":"2305.10596","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.10596","created_at":"2026-07-05T06:11:24Z"},{"alias_kind":"arxiv_version","alias_value":"2305.10596v1","created_at":"2026-07-05T06:11:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.10596","created_at":"2026-07-05T06:11:24Z"},{"alias_kind":"pith_short_12","alias_value":"L5YJGU3K3KZO","created_at":"2026-07-05T06:11:24Z"},{"alias_kind":"pith_short_16","alias_value":"L5YJGU3K3KZOIOXM","created_at":"2026-07-05T06:11:24Z"},{"alias_kind":"pith_short_8","alias_value":"L5YJGU3K","created_at":"2026-07-05T06:11:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:L5YJGU3K3KZOIOXMXIT7GPV46V","target":"record","payload":{"canonical_record":{"source":{"id":"2305.10596","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-05-10T09:09:56Z","cross_cats_sorted":[],"title_canon_sha256":"428c191873b2312639063ea99dab423e3f7fe0ffb406190a2bcdbdb37f51afd8","abstract_canon_sha256":"ef4f04b0d2b28b1cf1eae6e3bea14163f78d4a03a04aac6a264eb331b00dcce1"},"schema_version":"1.0"},"canonical_sha256":"5f7093536adab2e43aecba27f33ebcf571e92479ec765024e9b0660f81955a87","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:11:24.010116Z","signature_b64":"twMmDz6dLXHnr3TwT/qcBtUlRU5+LCntpi0psc5vErAcvu201I+s/nWIak7jra16ov2wPYYR6UsbOvw2rBIoCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5f7093536adab2e43aecba27f33ebcf571e92479ec765024e9b0660f81955a87","last_reissued_at":"2026-07-05T06:11:24.009750Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:11:24.009750Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.10596","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:11:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OO67yyJVZI1n9BSv3Xmru7BYJj3utv36oKDISD/4uNRAc8HZ2HLG1PSRk8CAhyCJuT/2KVHTkrp7TiKQnqy+CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T06:15:46.043520Z"},"content_sha256":"42611669d30e6745fcd774231784e004d45b82a148a8414f59d7c43df6e06b4f","schema_version":"1.0","event_id":"sha256:42611669d30e6745fcd774231784e004d45b82a148a8414f59d7c43df6e06b4f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:L5YJGU3K3KZOIOXMXIT7GPV46V","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards Invisible Backdoor Attacks in the Frequency Domain against Deep Neural Networks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Kefan Qiu, Xinrui Liu, Yajie Wang, Yu-an Tan, Yuanzhang Li","submitted_at":"2023-05-10T09:09:56Z","abstract_excerpt":"Deep neural networks (DNNs) have made tremendous progress in the past ten years and have been applied in various critical applications. However, recent studies have shown that deep neural networks are vulnerable to backdoor attacks. By injecting malicious data into the training set, an adversary can plant the backdoor into the original model. The backdoor can remain hidden indefinitely until activated by a sample with a specific trigger, which is hugely concealed, bringing serious security risks to critical applications. However, one main limitation of current backdoor attacks is that the trig"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.10596","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.10596/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:11:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JYTx8AwZvZmimyT7YYZj5oUKJ7g3arT8MpFWRwinUiwillUJlI69QuehA8xKwdU5ixr2wz0kYP7YUUdZY8FaBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T06:15:46.044316Z"},"content_sha256":"ea313a0487cafd862b5ecca9c67f44f381e725d47ce643720d4f319e9eb1a0ab","schema_version":"1.0","event_id":"sha256:ea313a0487cafd862b5ecca9c67f44f381e725d47ce643720d4f319e9eb1a0ab"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/L5YJGU3K3KZOIOXMXIT7GPV46V/bundle.json","state_url":"https://pith.science/pith/L5YJGU3K3KZOIOXMXIT7GPV46V/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/L5YJGU3K3KZOIOXMXIT7GPV46V/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T06:15:46Z","links":{"resolver":"https://pith.science/pith/L5YJGU3K3KZOIOXMXIT7GPV46V","bundle":"https://pith.science/pith/L5YJGU3K3KZOIOXMXIT7GPV46V/bundle.json","state":"https://pith.science/pith/L5YJGU3K3KZOIOXMXIT7GPV46V/state.json","well_known_bundle":"https://pith.science/.well-known/pith/L5YJGU3K3KZOIOXMXIT7GPV46V/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:L5YJGU3K3KZOIOXMXIT7GPV46V","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ef4f04b0d2b28b1cf1eae6e3bea14163f78d4a03a04aac6a264eb331b00dcce1","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-05-10T09:09:56Z","title_canon_sha256":"428c191873b2312639063ea99dab423e3f7fe0ffb406190a2bcdbdb37f51afd8"},"schema_version":"1.0","source":{"id":"2305.10596","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.10596","created_at":"2026-07-05T06:11:24Z"},{"alias_kind":"arxiv_version","alias_value":"2305.10596v1","created_at":"2026-07-05T06:11:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.10596","created_at":"2026-07-05T06:11:24Z"},{"alias_kind":"pith_short_12","alias_value":"L5YJGU3K3KZO","created_at":"2026-07-05T06:11:24Z"},{"alias_kind":"pith_short_16","alias_value":"L5YJGU3K3KZOIOXM","created_at":"2026-07-05T06:11:24Z"},{"alias_kind":"pith_short_8","alias_value":"L5YJGU3K","created_at":"2026-07-05T06:11:24Z"}],"graph_snapshots":[{"event_id":"sha256:ea313a0487cafd862b5ecca9c67f44f381e725d47ce643720d4f319e9eb1a0ab","target":"graph","created_at":"2026-07-05T06:11:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.10596/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) have made tremendous progress in the past ten years and have been applied in various critical applications. However, recent studies have shown that deep neural networks are vulnerable to backdoor attacks. By injecting malicious data into the training set, an adversary can plant the backdoor into the original model. The backdoor can remain hidden indefinitely until activated by a sample with a specific trigger, which is hugely concealed, bringing serious security risks to critical applications. However, one main limitation of current backdoor attacks is that the trig","authors_text":"Kefan Qiu, Xinrui Liu, Yajie Wang, Yu-an Tan, Yuanzhang Li","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-05-10T09:09:56Z","title":"Towards Invisible Backdoor Attacks in the Frequency Domain against Deep Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.10596","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:42611669d30e6745fcd774231784e004d45b82a148a8414f59d7c43df6e06b4f","target":"record","created_at":"2026-07-05T06:11:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ef4f04b0d2b28b1cf1eae6e3bea14163f78d4a03a04aac6a264eb331b00dcce1","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-05-10T09:09:56Z","title_canon_sha256":"428c191873b2312639063ea99dab423e3f7fe0ffb406190a2bcdbdb37f51afd8"},"schema_version":"1.0","source":{"id":"2305.10596","kind":"arxiv","version":1}},"canonical_sha256":"5f7093536adab2e43aecba27f33ebcf571e92479ec765024e9b0660f81955a87","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5f7093536adab2e43aecba27f33ebcf571e92479ec765024e9b0660f81955a87","first_computed_at":"2026-07-05T06:11:24.009750Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:11:24.009750Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"twMmDz6dLXHnr3TwT/qcBtUlRU5+LCntpi0psc5vErAcvu201I+s/nWIak7jra16ov2wPYYR6UsbOvw2rBIoCA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:11:24.010116Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.10596","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:42611669d30e6745fcd774231784e004d45b82a148a8414f59d7c43df6e06b4f","sha256:ea313a0487cafd862b5ecca9c67f44f381e725d47ce643720d4f319e9eb1a0ab"],"state_sha256":"58606ea2aa969e2908e280f9504ec3ba2b5ef4a5e6320061b81aaf4c4a8fb853"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WhAvF66WxhyCFfT2hEloMroZ+uS4TjOOJB0sI0N2U8q21wlfbjFdSHLwwpNZeOv6h0FrG7BwEIyEwq+jX4alBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T06:15:46.050071Z","bundle_sha256":"662a0d88938da183816687fdd38ec697ceffae43023c7d2298c84dcf5296b2b8"}}