{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:NH6DKLMWQ2REV2Z52VWIN3ASOU","short_pith_number":"pith:NH6DKLMW","canonical_record":{"source":{"id":"2310.05862","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-10-05T19:42:03Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"title_canon_sha256":"3782dbd04c91a8957728e2e0610fa24f7636f7556ab64191eea7cbe06de95d38","abstract_canon_sha256":"43117823807c54603e8c8346bdf5eb32de96d7b1d902bfc8e6b9bb9e164f8c8c"},"schema_version":"1.0"},"canonical_sha256":"69fc352d9686a24aeb3dd56c86ec127530dffeaac8d4187b577e6b280395cfbf","source":{"kind":"arxiv","id":"2310.05862","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.05862","created_at":"2026-07-05T08:29:45Z"},{"alias_kind":"arxiv_version","alias_value":"2310.05862v2","created_at":"2026-07-05T08:29:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.05862","created_at":"2026-07-05T08:29:45Z"},{"alias_kind":"pith_short_12","alias_value":"NH6DKLMWQ2RE","created_at":"2026-07-05T08:29:45Z"},{"alias_kind":"pith_short_16","alias_value":"NH6DKLMWQ2REV2Z5","created_at":"2026-07-05T08:29:45Z"},{"alias_kind":"pith_short_8","alias_value":"NH6DKLMW","created_at":"2026-07-05T08:29:45Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:NH6DKLMWQ2REV2Z52VWIN3ASOU","target":"record","payload":{"canonical_record":{"source":{"id":"2310.05862","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-10-05T19:42:03Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"title_canon_sha256":"3782dbd04c91a8957728e2e0610fa24f7636f7556ab64191eea7cbe06de95d38","abstract_canon_sha256":"43117823807c54603e8c8346bdf5eb32de96d7b1d902bfc8e6b9bb9e164f8c8c"},"schema_version":"1.0"},"canonical_sha256":"69fc352d9686a24aeb3dd56c86ec127530dffeaac8d4187b577e6b280395cfbf","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:29:45.030137Z","signature_b64":"m8gaCP9ioiA7Nf0EWbcjO90enYtYPaAiKgYFD376/zOkRlLhd8CKCIFRosZGQMO6RfDVeRwdBt4rOU+QpFL0AA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"69fc352d9686a24aeb3dd56c86ec127530dffeaac8d4187b577e6b280395cfbf","last_reissued_at":"2026-07-05T08:29:45.029788Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:29:45.029788Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.05862","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:29:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jRNQK6BQBJSVGpGOsNteJm7+v15cRBJajaojlNeYyPYKbwEGlP146UzIWz1Hs/OOH/4DzvNpgcdMO2xJKiIDDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T03:26:43.314282Z"},"content_sha256":"50f54a6c020e44b7e5f772a802e4e5837753e2a75f59943a63e40538863621a0","schema_version":"1.0","event_id":"sha256:50f54a6c020e44b7e5f772a802e4e5837753e2a75f59943a63e40538863621a0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:NH6DKLMWQ2REV2Z52VWIN3ASOU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Better Safe than Sorry: Pre-training CLIP against Targeted Data Poisoning and Backdoor Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Baharan Mirzasoleiman, Jingdong Gao, Wenhan Yang","submitted_at":"2023-10-05T19:42:03Z","abstract_excerpt":"Contrastive Language-Image Pre-training (CLIP) on large image-caption datasets has achieved remarkable success in zero-shot classification and enabled transferability to new domains. However, CLIP is extremely more vulnerable to targeted data poisoning and backdoor attacks, compared to supervised learning. Perhaps surprisingly, poisoning 0.0001% of CLIP pre-training data is enough to make targeted data poisoning attacks successful. This is four orders of magnitude smaller than what is required to poison supervised models. Despite this vulnerability, existing methods are very limited in defendi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.05862","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.05862/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:29:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TpebH9HgQQfjDKNU9IyS8K9+Z2jlkFFSO8RQ8ItmCJ+34pnx6sCstQ4BeQ8eIyycJwsLyfVjbDtvo+IlKpiIAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T03:26:43.314872Z"},"content_sha256":"e923badec651652a818eeb9b1159b55f903beda42a708166f4106886cacda8bf","schema_version":"1.0","event_id":"sha256:e923badec651652a818eeb9b1159b55f903beda42a708166f4106886cacda8bf"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NH6DKLMWQ2REV2Z52VWIN3ASOU/bundle.json","state_url":"https://pith.science/pith/NH6DKLMWQ2REV2Z52VWIN3ASOU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NH6DKLMWQ2REV2Z52VWIN3ASOU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T03:26:43Z","links":{"resolver":"https://pith.science/pith/NH6DKLMWQ2REV2Z52VWIN3ASOU","bundle":"https://pith.science/pith/NH6DKLMWQ2REV2Z52VWIN3ASOU/bundle.json","state":"https://pith.science/pith/NH6DKLMWQ2REV2Z52VWIN3ASOU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NH6DKLMWQ2REV2Z52VWIN3ASOU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:NH6DKLMWQ2REV2Z52VWIN3ASOU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"43117823807c54603e8c8346bdf5eb32de96d7b1d902bfc8e6b9bb9e164f8c8c","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-10-05T19:42:03Z","title_canon_sha256":"3782dbd04c91a8957728e2e0610fa24f7636f7556ab64191eea7cbe06de95d38"},"schema_version":"1.0","source":{"id":"2310.05862","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.05862","created_at":"2026-07-05T08:29:45Z"},{"alias_kind":"arxiv_version","alias_value":"2310.05862v2","created_at":"2026-07-05T08:29:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.05862","created_at":"2026-07-05T08:29:45Z"},{"alias_kind":"pith_short_12","alias_value":"NH6DKLMWQ2RE","created_at":"2026-07-05T08:29:45Z"},{"alias_kind":"pith_short_16","alias_value":"NH6DKLMWQ2REV2Z5","created_at":"2026-07-05T08:29:45Z"},{"alias_kind":"pith_short_8","alias_value":"NH6DKLMW","created_at":"2026-07-05T08:29:45Z"}],"graph_snapshots":[{"event_id":"sha256:e923badec651652a818eeb9b1159b55f903beda42a708166f4106886cacda8bf","target":"graph","created_at":"2026-07-05T08:29:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.05862/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Contrastive Language-Image Pre-training (CLIP) on large image-caption datasets has achieved remarkable success in zero-shot classification and enabled transferability to new domains. However, CLIP is extremely more vulnerable to targeted data poisoning and backdoor attacks, compared to supervised learning. Perhaps surprisingly, poisoning 0.0001% of CLIP pre-training data is enough to make targeted data poisoning attacks successful. This is four orders of magnitude smaller than what is required to poison supervised models. Despite this vulnerability, existing methods are very limited in defendi","authors_text":"Baharan Mirzasoleiman, Jingdong Gao, Wenhan Yang","cross_cats":["cs.AI","cs.CR","cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-10-05T19:42:03Z","title":"Better Safe than Sorry: Pre-training CLIP against Targeted Data Poisoning and Backdoor Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.05862","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:50f54a6c020e44b7e5f772a802e4e5837753e2a75f59943a63e40538863621a0","target":"record","created_at":"2026-07-05T08:29:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"43117823807c54603e8c8346bdf5eb32de96d7b1d902bfc8e6b9bb9e164f8c8c","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-10-05T19:42:03Z","title_canon_sha256":"3782dbd04c91a8957728e2e0610fa24f7636f7556ab64191eea7cbe06de95d38"},"schema_version":"1.0","source":{"id":"2310.05862","kind":"arxiv","version":2}},"canonical_sha256":"69fc352d9686a24aeb3dd56c86ec127530dffeaac8d4187b577e6b280395cfbf","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"69fc352d9686a24aeb3dd56c86ec127530dffeaac8d4187b577e6b280395cfbf","first_computed_at":"2026-07-05T08:29:45.029788Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:29:45.029788Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"m8gaCP9ioiA7Nf0EWbcjO90enYtYPaAiKgYFD376/zOkRlLhd8CKCIFRosZGQMO6RfDVeRwdBt4rOU+QpFL0AA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:29:45.030137Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.05862","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:50f54a6c020e44b7e5f772a802e4e5837753e2a75f59943a63e40538863621a0","sha256:e923badec651652a818eeb9b1159b55f903beda42a708166f4106886cacda8bf"],"state_sha256":"83ace6e55d5ecaa0d694cf9d34732a6612c9e1f4e3e0373d4f41e9dd026a918a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"x26LTQEBSWaxR4bVPGoud0GZF83o/uHVbU9nB4eCLOr4pRORu2qQC7to6nXD6Zx7wXMqNGEMXktDXYZKKLO2DQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T03:26:43.320220Z","bundle_sha256":"0f4dca0da2f86add5a82a4332246d6da41f1a05ded7d086579d2913d0460558a"}}