{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:TFCAPNKRMCZ62PWPZPSKXUUSGT","short_pith_number":"pith:TFCAPNKR","canonical_record":{"source":{"id":"2311.11509","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CL","submitted_at":"2023-11-20T03:17:21Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"362b3d2d1b68a65626f528a3e1f5832c59e8c4ee008fd5de34b3abc57e3bd3d6","abstract_canon_sha256":"db847dccbae1eeef101497947c5327de2f814cfab43714a157c68e855579d5e4"},"schema_version":"1.0"},"canonical_sha256":"994407b55160b3ed3ecfcbe4abd29234da5cab5f6ea8f6caa72c694dac27b5aa","source":{"kind":"arxiv","id":"2311.11509","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.11509","created_at":"2026-07-05T07:46:26Z"},{"alias_kind":"arxiv_version","alias_value":"2311.11509v3","created_at":"2026-07-05T07:46:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.11509","created_at":"2026-07-05T07:46:26Z"},{"alias_kind":"pith_short_12","alias_value":"TFCAPNKRMCZ6","created_at":"2026-07-05T07:46:26Z"},{"alias_kind":"pith_short_16","alias_value":"TFCAPNKRMCZ62PWP","created_at":"2026-07-05T07:46:26Z"},{"alias_kind":"pith_short_8","alias_value":"TFCAPNKR","created_at":"2026-07-05T07:46:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:TFCAPNKRMCZ62PWPZPSKXUUSGT","target":"record","payload":{"canonical_record":{"source":{"id":"2311.11509","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CL","submitted_at":"2023-11-20T03:17:21Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"362b3d2d1b68a65626f528a3e1f5832c59e8c4ee008fd5de34b3abc57e3bd3d6","abstract_canon_sha256":"db847dccbae1eeef101497947c5327de2f814cfab43714a157c68e855579d5e4"},"schema_version":"1.0"},"canonical_sha256":"994407b55160b3ed3ecfcbe4abd29234da5cab5f6ea8f6caa72c694dac27b5aa","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:46:26.851502Z","signature_b64":"2hO1NnC3Qx5m83NPe9NxeUD5euCWwCqwdYARqDiQ+Gu1Ms14JDWsHbZbWROGnVi5qwATEgkuwzhLxxv/IbbvDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"994407b55160b3ed3ecfcbe4abd29234da5cab5f6ea8f6caa72c694dac27b5aa","last_reissued_at":"2026-07-05T07:46:26.850963Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:46:26.850963Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2311.11509","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:46:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WJMP5iZdeL1hIFiuA/1edZQHD1l2rzKSe3IfhHUjZXqF1KAWX0XkWIQV8esXmk6Sk9GF4bMhHHpkDVy7uZXBBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T01:09:16.201476Z"},"content_sha256":"0932f6a41d88260be0df3ff70dc71db3b26a28112b21166786af8dcc808dfbb8","schema_version":"1.0","event_id":"sha256:0932f6a41d88260be0df3ff70dc71db3b26a28112b21166786af8dcc808dfbb8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:TFCAPNKRMCZ62PWPZPSKXUUSGT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Token-Level Adversarial Prompt Detection Based on Perplexity Measures and Contextual Information","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CL","authors_text":"Gang Wu, Heng Huang, Ruiyi Zhang, Saayan Mitra, Tong Sun, Viswanathan Swaminathan, Zhengmian Hu","submitted_at":"2023-11-20T03:17:21Z","abstract_excerpt":"In recent years, Large Language Models (LLM) have emerged as pivotal tools in various applications. However, these models are susceptible to adversarial prompt attacks, where attackers can carefully curate input strings that mislead LLMs into generating incorrect or undesired outputs. Previous work has revealed that with relatively simple yet effective attacks based on discrete optimization, it is possible to generate adversarial prompts that bypass moderation and alignment of the models. This vulnerability to adversarial prompts underscores a significant concern regarding the robustness and r"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.11509","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.11509/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:46:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yH/JLBBoSeN6auTfCs7mC8SnpMm/o8rInGKJY9IrsZVk8K2d+FZhk2K7enoa0q0PNCVjrrobXfQ8S3i3YAs3DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T01:09:16.202393Z"},"content_sha256":"168937297ec5e20c1838050a00ce3516f9c6841af5220777f4b29c1e02afe74d","schema_version":"1.0","event_id":"sha256:168937297ec5e20c1838050a00ce3516f9c6841af5220777f4b29c1e02afe74d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TFCAPNKRMCZ62PWPZPSKXUUSGT/bundle.json","state_url":"https://pith.science/pith/TFCAPNKRMCZ62PWPZPSKXUUSGT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TFCAPNKRMCZ62PWPZPSKXUUSGT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T01:09:16Z","links":{"resolver":"https://pith.science/pith/TFCAPNKRMCZ62PWPZPSKXUUSGT","bundle":"https://pith.science/pith/TFCAPNKRMCZ62PWPZPSKXUUSGT/bundle.json","state":"https://pith.science/pith/TFCAPNKRMCZ62PWPZPSKXUUSGT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TFCAPNKRMCZ62PWPZPSKXUUSGT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:TFCAPNKRMCZ62PWPZPSKXUUSGT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"db847dccbae1eeef101497947c5327de2f814cfab43714a157c68e855579d5e4","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CL","submitted_at":"2023-11-20T03:17:21Z","title_canon_sha256":"362b3d2d1b68a65626f528a3e1f5832c59e8c4ee008fd5de34b3abc57e3bd3d6"},"schema_version":"1.0","source":{"id":"2311.11509","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.11509","created_at":"2026-07-05T07:46:26Z"},{"alias_kind":"arxiv_version","alias_value":"2311.11509v3","created_at":"2026-07-05T07:46:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.11509","created_at":"2026-07-05T07:46:26Z"},{"alias_kind":"pith_short_12","alias_value":"TFCAPNKRMCZ6","created_at":"2026-07-05T07:46:26Z"},{"alias_kind":"pith_short_16","alias_value":"TFCAPNKRMCZ62PWP","created_at":"2026-07-05T07:46:26Z"},{"alias_kind":"pith_short_8","alias_value":"TFCAPNKR","created_at":"2026-07-05T07:46:26Z"}],"graph_snapshots":[{"event_id":"sha256:168937297ec5e20c1838050a00ce3516f9c6841af5220777f4b29c1e02afe74d","target":"graph","created_at":"2026-07-05T07:46:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.11509/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In recent years, Large Language Models (LLM) have emerged as pivotal tools in various applications. However, these models are susceptible to adversarial prompt attacks, where attackers can carefully curate input strings that mislead LLMs into generating incorrect or undesired outputs. Previous work has revealed that with relatively simple yet effective attacks based on discrete optimization, it is possible to generate adversarial prompts that bypass moderation and alignment of the models. This vulnerability to adversarial prompts underscores a significant concern regarding the robustness and r","authors_text":"Gang Wu, Heng Huang, Ruiyi Zhang, Saayan Mitra, Tong Sun, Viswanathan Swaminathan, Zhengmian Hu","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CL","submitted_at":"2023-11-20T03:17:21Z","title":"Token-Level Adversarial Prompt Detection Based on Perplexity Measures and Contextual Information"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.11509","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0932f6a41d88260be0df3ff70dc71db3b26a28112b21166786af8dcc808dfbb8","target":"record","created_at":"2026-07-05T07:46:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"db847dccbae1eeef101497947c5327de2f814cfab43714a157c68e855579d5e4","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CL","submitted_at":"2023-11-20T03:17:21Z","title_canon_sha256":"362b3d2d1b68a65626f528a3e1f5832c59e8c4ee008fd5de34b3abc57e3bd3d6"},"schema_version":"1.0","source":{"id":"2311.11509","kind":"arxiv","version":3}},"canonical_sha256":"994407b55160b3ed3ecfcbe4abd29234da5cab5f6ea8f6caa72c694dac27b5aa","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"994407b55160b3ed3ecfcbe4abd29234da5cab5f6ea8f6caa72c694dac27b5aa","first_computed_at":"2026-07-05T07:46:26.850963Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:46:26.850963Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2hO1NnC3Qx5m83NPe9NxeUD5euCWwCqwdYARqDiQ+Gu1Ms14JDWsHbZbWROGnVi5qwATEgkuwzhLxxv/IbbvDg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:46:26.851502Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.11509","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0932f6a41d88260be0df3ff70dc71db3b26a28112b21166786af8dcc808dfbb8","sha256:168937297ec5e20c1838050a00ce3516f9c6841af5220777f4b29c1e02afe74d"],"state_sha256":"ee55e7b171714531fe884967fa7dc14e5fbf2332c2104821206e7ec2f023c9b8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"P+zf2FvSJElZsowvs+lmgmoTLW+6hTMwL2Lj4ZvRIIDrzSaY+tCXix/3WEIFt/DgP4HdrrxWBI5+3Q5PXFCIDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T01:09:16.214469Z","bundle_sha256":"3afe75ae51696d1c04adbeb591f44183ac8d62dd562701ae4cb8472a6f47193f"}}