{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:U5DIXMVVURYYAFNKFYSGW4VSEM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7c7bd22bbfdb19507e98757d57ae688f68124bf3a715c56938231799e2b239a0","cross_cats_sorted":["cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-28T20:02:47Z","title_canon_sha256":"4882e7157cd286b8876265ce223226b1411c885116e22c80a7dc5eb83e5c014e"},"schema_version":"1.0","source":{"id":"2410.21492","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.21492","created_at":"2026-07-05T09:40:20Z"},{"alias_kind":"arxiv_version","alias_value":"2410.21492v2","created_at":"2026-07-05T09:40:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.21492","created_at":"2026-07-05T09:40:20Z"},{"alias_kind":"pith_short_12","alias_value":"U5DIXMVVURYY","created_at":"2026-07-05T09:40:20Z"},{"alias_kind":"pith_short_16","alias_value":"U5DIXMVVURYYAFNK","created_at":"2026-07-05T09:40:20Z"},{"alias_kind":"pith_short_8","alias_value":"U5DIXMVV","created_at":"2026-07-05T09:40:20Z"}],"graph_snapshots":[{"event_id":"sha256:6a81422b5bc005126a652f0aec44cec13b86cfc70448dda0e57ab0aba1921cbb","target":"graph","created_at":"2026-07-05T09:40:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.21492/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have been widely deployed as the backbone with additional tools and text information for real-world applications. However, integrating external information into LLM-integrated applications raises significant security concerns. Among these, prompt injection attacks are particularly threatening, where malicious instructions injected in the external text information can exploit LLMs to generate answers as the attackers desire. While both training-time and test-time defense methods have been developed to mitigate such attacks, the unaffordable training costs associated","authors_text":"Chaowei Xiao, Edward Suh, Fangzhou Wu, Jinsheng Pan, Jiongxiao Wang, Muhao Chen, Wendi Li, Z. Morley Mao","cross_cats":["cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-28T20:02:47Z","title":"FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.21492","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:427bbbc7fdf6c23e030755ced4a9e8f7bad0c5a292606a15754f7cbe0789e39d","target":"record","created_at":"2026-07-05T09:40:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7c7bd22bbfdb19507e98757d57ae688f68124bf3a715c56938231799e2b239a0","cross_cats_sorted":["cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-28T20:02:47Z","title_canon_sha256":"4882e7157cd286b8876265ce223226b1411c885116e22c80a7dc5eb83e5c014e"},"schema_version":"1.0","source":{"id":"2410.21492","kind":"arxiv","version":2}},"canonical_sha256":"a7468bb2b5a4718015aa2e246b72b22303e4a18b6591de7b51eab94db4cd0f11","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a7468bb2b5a4718015aa2e246b72b22303e4a18b6591de7b51eab94db4cd0f11","first_computed_at":"2026-07-05T09:40:20.525226Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:40:20.525226Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HtlRQ9fjDr19qmA39+zWluDnEZ1CgMIoM/yI4PPiZzI9ad/dc09Ct4WP6Dw1fzKVxs1q1DJXqpTPq94tMabaCA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:40:20.525660Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.21492","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:427bbbc7fdf6c23e030755ced4a9e8f7bad0c5a292606a15754f7cbe0789e39d","sha256:6a81422b5bc005126a652f0aec44cec13b86cfc70448dda0e57ab0aba1921cbb"],"state_sha256":"4e0841262184a3beba0d7e464297897cd3affbd05c93790228cb80cc7e9ca462"}