{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:VVSRQPCYY5ND2ALDFF7KYCBOHI","short_pith_number":"pith:VVSRQPCY","canonical_record":{"source":{"id":"2310.08259","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-12T12:05:51Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"ad6561febe1bb1694c392843cc3935c872e647bf925bba088ec87e1c632d0e96","abstract_canon_sha256":"87aad5200b81c57adda41f963eccd5d4cd01947e05fc8cb2002b9e517e7abefb"},"schema_version":"1.0"},"canonical_sha256":"ad65183c58c75a3d0163297eac082e3a38a550479fff3fe198acc67892d48792","source":{"kind":"arxiv","id":"2310.08259","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.08259","created_at":"2026-07-05T07:00:13Z"},{"alias_kind":"arxiv_version","alias_value":"2310.08259v1","created_at":"2026-07-05T07:00:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.08259","created_at":"2026-07-05T07:00:13Z"},{"alias_kind":"pith_short_12","alias_value":"VVSRQPCYY5ND","created_at":"2026-07-05T07:00:13Z"},{"alias_kind":"pith_short_16","alias_value":"VVSRQPCYY5ND2ALD","created_at":"2026-07-05T07:00:13Z"},{"alias_kind":"pith_short_8","alias_value":"VVSRQPCY","created_at":"2026-07-05T07:00:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:VVSRQPCYY5ND2ALDFF7KYCBOHI","target":"record","payload":{"canonical_record":{"source":{"id":"2310.08259","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-12T12:05:51Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"ad6561febe1bb1694c392843cc3935c872e647bf925bba088ec87e1c632d0e96","abstract_canon_sha256":"87aad5200b81c57adda41f963eccd5d4cd01947e05fc8cb2002b9e517e7abefb"},"schema_version":"1.0"},"canonical_sha256":"ad65183c58c75a3d0163297eac082e3a38a550479fff3fe198acc67892d48792","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:00:13.078446Z","signature_b64":"ogUN4VEAH6WkmKD0WRa0YBNdWhnjGjsORXoC8+SCc8DHBNwLz4XHcEamX8dUJl7rgRS7nZHFvUq0pghbTK5RBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ad65183c58c75a3d0163297eac082e3a38a550479fff3fe198acc67892d48792","last_reissued_at":"2026-07-05T07:00:13.078019Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:00:13.078019Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.08259","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:00:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ru8oNIV342eMiff4ggUzDxdGx1+8MJcJnEvsM+2hSaQAR1RLtOCWkFLQuXrCWO88qrVcgk1ke1l5r++ibxnLCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T21:24:04.158427Z"},"content_sha256":"c9b53a3d379cd4d9b523b80053f1680d6a83c6a48d32f317cbfdfdd4a6093b7b","schema_version":"1.0","event_id":"sha256:c9b53a3d379cd4d9b523b80053f1680d6a83c6a48d32f317cbfdfdd4a6093b7b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:VVSRQPCYY5ND2ALDFF7KYCBOHI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Invisible Threats: Backdoor Attack in OCR Systems","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Luca Pajola, Mauro Conti, Nicola Farronato, Stefanos Koffas, Stjepan Picek","submitted_at":"2023-10-12T12:05:51Z","abstract_excerpt":"Optical Character Recognition (OCR) is a widely used tool to extract text from scanned documents. Today, the state-of-the-art is achieved by exploiting deep neural networks. However, the cost of this performance is paid at the price of system vulnerability. For instance, in backdoor attacks, attackers compromise the training phase by inserting a backdoor in the victim's model that will be activated at testing time by specific patterns while leaving the overall model performance intact. This work proposes a backdoor attack for OCR resulting in the injection of non-readable characters from malic"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.08259","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.08259/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:00:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BKnOMAA6bvIk73lXfM8phWUQki2Ds2hWNoFF/nw1gzmDUQ56u9fQdgYau2NA/eWpbDVqM7heYMtOoewHVBA7Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T21:24:04.161661Z"},"content_sha256":"7c179033fa3247bce867947baab58bb7c22fc82ef6a3e4f0e874b30da1f090d8","schema_version":"1.0","event_id":"sha256:7c179033fa3247bce867947baab58bb7c22fc82ef6a3e4f0e874b30da1f090d8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VVSRQPCYY5ND2ALDFF7KYCBOHI/bundle.json","state_url":"https://pith.science/pith/VVSRQPCYY5ND2ALDFF7KYCBOHI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VVSRQPCYY5ND2ALDFF7KYCBOHI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T21:24:04Z","links":{"resolver":"https://pith.science/pith/VVSRQPCYY5ND2ALDFF7KYCBOHI","bundle":"https://pith.science/pith/VVSRQPCYY5ND2ALDFF7KYCBOHI/bundle.json","state":"https://pith.science/pith/VVSRQPCYY5ND2ALDFF7KYCBOHI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VVSRQPCYY5ND2ALDFF7KYCBOHI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:VVSRQPCYY5ND2ALDFF7KYCBOHI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"87aad5200b81c57adda41f963eccd5d4cd01947e05fc8cb2002b9e517e7abefb","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-12T12:05:51Z","title_canon_sha256":"ad6561febe1bb1694c392843cc3935c872e647bf925bba088ec87e1c632d0e96"},"schema_version":"1.0","source":{"id":"2310.08259","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.08259","created_at":"2026-07-05T07:00:13Z"},{"alias_kind":"arxiv_version","alias_value":"2310.08259v1","created_at":"2026-07-05T07:00:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.08259","created_at":"2026-07-05T07:00:13Z"},{"alias_kind":"pith_short_12","alias_value":"VVSRQPCYY5ND","created_at":"2026-07-05T07:00:13Z"},{"alias_kind":"pith_short_16","alias_value":"VVSRQPCYY5ND2ALD","created_at":"2026-07-05T07:00:13Z"},{"alias_kind":"pith_short_8","alias_value":"VVSRQPCY","created_at":"2026-07-05T07:00:13Z"}],"graph_snapshots":[{"event_id":"sha256:7c179033fa3247bce867947baab58bb7c22fc82ef6a3e4f0e874b30da1f090d8","target":"graph","created_at":"2026-07-05T07:00:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.08259/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Optical Character Recognition (OCR) is a widely used tool to extract text from scanned documents. Today, the state-of-the-art is achieved by exploiting deep neural networks. However, the cost of this performance is paid at the price of system vulnerability. For instance, in backdoor attacks, attackers compromise the training phase by inserting a backdoor in the victim's model that will be activated at testing time by specific patterns while leaving the overall model performance intact. This work proposes a backdoor attack for OCR resulting in the injection of non-readable characters from malic","authors_text":"Luca Pajola, Mauro Conti, Nicola Farronato, Stefanos Koffas, Stjepan Picek","cross_cats":["cs.CV","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-12T12:05:51Z","title":"Invisible Threats: Backdoor Attack in OCR Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.08259","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c9b53a3d379cd4d9b523b80053f1680d6a83c6a48d32f317cbfdfdd4a6093b7b","target":"record","created_at":"2026-07-05T07:00:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"87aad5200b81c57adda41f963eccd5d4cd01947e05fc8cb2002b9e517e7abefb","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-12T12:05:51Z","title_canon_sha256":"ad6561febe1bb1694c392843cc3935c872e647bf925bba088ec87e1c632d0e96"},"schema_version":"1.0","source":{"id":"2310.08259","kind":"arxiv","version":1}},"canonical_sha256":"ad65183c58c75a3d0163297eac082e3a38a550479fff3fe198acc67892d48792","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ad65183c58c75a3d0163297eac082e3a38a550479fff3fe198acc67892d48792","first_computed_at":"2026-07-05T07:00:13.078019Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:00:13.078019Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ogUN4VEAH6WkmKD0WRa0YBNdWhnjGjsORXoC8+SCc8DHBNwLz4XHcEamX8dUJl7rgRS7nZHFvUq0pghbTK5RBg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:00:13.078446Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.08259","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c9b53a3d379cd4d9b523b80053f1680d6a83c6a48d32f317cbfdfdd4a6093b7b","sha256:7c179033fa3247bce867947baab58bb7c22fc82ef6a3e4f0e874b30da1f090d8"],"state_sha256":"cca14374ffa6da84f7085db0741f4094930dfa8b08b9ed9155de2e79dc89567d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"E6xQV8e3RlzNImFFkpK0lKGdamf+EFbcZPgy+xJAtyg2XzClHc/bGae7SMAQRdNEqDYlV1nKB1+9XTGF3bRWDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T21:24:04.222463Z","bundle_sha256":"482e2349171da0d82d1ac057ebf7898cdd1bfa099dc8d5ecc6a9163cb86c028b"}}