{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:U4JH3HCBQ2MCLJ76A6L7PI5MGS","short_pith_number":"pith:U4JH3HCB","canonical_record":{"source":{"id":"2201.13164","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-01-31T12:19:28Z","cross_cats_sorted":[],"title_canon_sha256":"0743ebd73c160863822f626234599993a50b0c6d1a0edb718749ec9a127692c7","abstract_canon_sha256":"9d5c55668b29deb40d8872ca9fd267ead5feac63a8dfcfb32fb1c5b72cb15d56"},"schema_version":"1.0"},"canonical_sha256":"a7127d9c41869825a7fe0797f7a3ac34b2ad765d3c6d377142b37b43866d9ac0","source":{"kind":"arxiv","id":"2201.13164","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.13164","created_at":"2026-07-05T10:21:53Z"},{"alias_kind":"arxiv_version","alias_value":"2201.13164v1","created_at":"2026-07-05T10:21:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.13164","created_at":"2026-07-05T10:21:53Z"},{"alias_kind":"pith_short_12","alias_value":"U4JH3HCBQ2MC","created_at":"2026-07-05T10:21:53Z"},{"alias_kind":"pith_short_16","alias_value":"U4JH3HCBQ2MCLJ76","created_at":"2026-07-05T10:21:53Z"},{"alias_kind":"pith_short_8","alias_value":"U4JH3HCB","created_at":"2026-07-05T10:21:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:U4JH3HCBQ2MCLJ76A6L7PI5MGS","target":"record","payload":{"canonical_record":{"source":{"id":"2201.13164","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-01-31T12:19:28Z","cross_cats_sorted":[],"title_canon_sha256":"0743ebd73c160863822f626234599993a50b0c6d1a0edb718749ec9a127692c7","abstract_canon_sha256":"9d5c55668b29deb40d8872ca9fd267ead5feac63a8dfcfb32fb1c5b72cb15d56"},"schema_version":"1.0"},"canonical_sha256":"a7127d9c41869825a7fe0797f7a3ac34b2ad765d3c6d377142b37b43866d9ac0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:21:53.748215Z","signature_b64":"6aLU1jyi1UNITUjkbvpFzbwhTfpnYDzCe4Uo5Jf6MykjunetVvBLnknUM2sHOTrlnhP+q9gjHzON49gkBOZMDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a7127d9c41869825a7fe0797f7a3ac34b2ad765d3c6d377142b37b43866d9ac0","last_reissued_at":"2026-07-05T10:21:53.747697Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:21:53.747697Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2201.13164","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:21:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1DnCjp5S5pmun2wSHOVtyqQXV0DZoZRF4rre/S+24RDwvbP+Gl1ZQ3aKEwUpIPTsxz80zDI+F1+PxZmcl3d8DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T02:46:48.308742Z"},"content_sha256":"f147ff9f33fc5325d57c58ad21d0fae3075747c9dd0755ffd6d202087cc6160e","schema_version":"1.0","event_id":"sha256:f147ff9f33fc5325d57c58ad21d0fae3075747c9dd0755ffd6d202087cc6160e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:U4JH3HCBQ2MCLJ76A6L7PI5MGS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Imperceptible and Multi-channel Backdoor Attack against Deep Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Jian Wang, Mingfu Xue, Shifeng Ni, Weiqiang Liu, Yinghao Wu, Yushu Zhang","submitted_at":"2022-01-31T12:19:28Z","abstract_excerpt":"Recent researches demonstrate that Deep Neural Networks (DNN) models are vulnerable to backdoor attacks. The backdoored DNN model will behave maliciously when images containing backdoor triggers arrive. To date, existing backdoor attacks are single-trigger and single-target attacks, and the triggers of most existing backdoor attacks are obvious thus are easy to be detected or noticed. In this paper, we propose a novel imperceptible and multi-channel backdoor attack against Deep Neural Networks by exploiting Discrete Cosine Transform (DCT) steganography. Based on the proposed backdoor attack me"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.13164","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2201.13164/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:21:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OOL6xYd6eoI4yMW2t+D4PpZjQs/v7GEi4W4Yge2kFAccUmM6Liu0sKBfAMSGaqMmwNv0LY3P/u23QWJ/dOwVBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T02:46:48.309079Z"},"content_sha256":"145e03e587c2c57d63a36b1bb09d351cb3d13c76ed6ebb76e1e2c967a16bb86a","schema_version":"1.0","event_id":"sha256:145e03e587c2c57d63a36b1bb09d351cb3d13c76ed6ebb76e1e2c967a16bb86a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/U4JH3HCBQ2MCLJ76A6L7PI5MGS/bundle.json","state_url":"https://pith.science/pith/U4JH3HCBQ2MCLJ76A6L7PI5MGS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/U4JH3HCBQ2MCLJ76A6L7PI5MGS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T02:46:48Z","links":{"resolver":"https://pith.science/pith/U4JH3HCBQ2MCLJ76A6L7PI5MGS","bundle":"https://pith.science/pith/U4JH3HCBQ2MCLJ76A6L7PI5MGS/bundle.json","state":"https://pith.science/pith/U4JH3HCBQ2MCLJ76A6L7PI5MGS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/U4JH3HCBQ2MCLJ76A6L7PI5MGS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:U4JH3HCBQ2MCLJ76A6L7PI5MGS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9d5c55668b29deb40d8872ca9fd267ead5feac63a8dfcfb32fb1c5b72cb15d56","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-01-31T12:19:28Z","title_canon_sha256":"0743ebd73c160863822f626234599993a50b0c6d1a0edb718749ec9a127692c7"},"schema_version":"1.0","source":{"id":"2201.13164","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.13164","created_at":"2026-07-05T10:21:53Z"},{"alias_kind":"arxiv_version","alias_value":"2201.13164v1","created_at":"2026-07-05T10:21:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.13164","created_at":"2026-07-05T10:21:53Z"},{"alias_kind":"pith_short_12","alias_value":"U4JH3HCBQ2MC","created_at":"2026-07-05T10:21:53Z"},{"alias_kind":"pith_short_16","alias_value":"U4JH3HCBQ2MCLJ76","created_at":"2026-07-05T10:21:53Z"},{"alias_kind":"pith_short_8","alias_value":"U4JH3HCB","created_at":"2026-07-05T10:21:53Z"}],"graph_snapshots":[{"event_id":"sha256:145e03e587c2c57d63a36b1bb09d351cb3d13c76ed6ebb76e1e2c967a16bb86a","target":"graph","created_at":"2026-07-05T10:21:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2201.13164/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent researches demonstrate that Deep Neural Networks (DNN) models are vulnerable to backdoor attacks. The backdoored DNN model will behave maliciously when images containing backdoor triggers arrive. To date, existing backdoor attacks are single-trigger and single-target attacks, and the triggers of most existing backdoor attacks are obvious thus are easy to be detected or noticed. In this paper, we propose a novel imperceptible and multi-channel backdoor attack against Deep Neural Networks by exploiting Discrete Cosine Transform (DCT) steganography. Based on the proposed backdoor attack me","authors_text":"Jian Wang, Mingfu Xue, Shifeng Ni, Weiqiang Liu, Yinghao Wu, Yushu Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-01-31T12:19:28Z","title":"Imperceptible and Multi-channel Backdoor Attack against Deep Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.13164","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f147ff9f33fc5325d57c58ad21d0fae3075747c9dd0755ffd6d202087cc6160e","target":"record","created_at":"2026-07-05T10:21:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9d5c55668b29deb40d8872ca9fd267ead5feac63a8dfcfb32fb1c5b72cb15d56","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-01-31T12:19:28Z","title_canon_sha256":"0743ebd73c160863822f626234599993a50b0c6d1a0edb718749ec9a127692c7"},"schema_version":"1.0","source":{"id":"2201.13164","kind":"arxiv","version":1}},"canonical_sha256":"a7127d9c41869825a7fe0797f7a3ac34b2ad765d3c6d377142b37b43866d9ac0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a7127d9c41869825a7fe0797f7a3ac34b2ad765d3c6d377142b37b43866d9ac0","first_computed_at":"2026-07-05T10:21:53.747697Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:21:53.747697Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6aLU1jyi1UNITUjkbvpFzbwhTfpnYDzCe4Uo5Jf6MykjunetVvBLnknUM2sHOTrlnhP+q9gjHzON49gkBOZMDA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:21:53.748215Z","signed_message":"canonical_sha256_bytes"},"source_id":"2201.13164","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f147ff9f33fc5325d57c58ad21d0fae3075747c9dd0755ffd6d202087cc6160e","sha256:145e03e587c2c57d63a36b1bb09d351cb3d13c76ed6ebb76e1e2c967a16bb86a"],"state_sha256":"67b1c03ef0e1c4a9bd695c549874ed5310d32980f8a5b619da4f6ddef1c70eb6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"n9fzZKf8LfXixBgDyRTqqAia7blOpssXBxBu3JOcQ7TP/WhmgE/4UoA7qKcyZ/RrBSGai9l4AWKe5q1BZA5kBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T02:46:48.312690Z","bundle_sha256":"03cc2076aeabb513380bce7a922791bd928e803f79b8572acce9b596d76039e9"}}