{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:ZJCYIDJZY5XO2HFW3JLMAO3X2A","short_pith_number":"pith:ZJCYIDJZ","canonical_record":{"source":{"id":"2007.08142","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-07-16T06:55:00Z","cross_cats_sorted":[],"title_canon_sha256":"82efa92b12e592a8162cd53bee4b7a3248fa84a6cfe4400b9055ea43eacfe35c","abstract_canon_sha256":"75fe0bd06b1c187c226d719bf461384b36fed6cd6eef2d138067ffd9133b9eca"},"schema_version":"1.0"},"canonical_sha256":"ca45840d39c76eed1cb6da56c03b77d0165f4957a0c3ad6fd012d623502df47e","source":{"kind":"arxiv","id":"2007.08142","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2007.08142","created_at":"2026-07-05T01:57:52Z"},{"alias_kind":"arxiv_version","alias_value":"2007.08142v2","created_at":"2026-07-05T01:57:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2007.08142","created_at":"2026-07-05T01:57:52Z"},{"alias_kind":"pith_short_12","alias_value":"ZJCYIDJZY5XO","created_at":"2026-07-05T01:57:52Z"},{"alias_kind":"pith_short_16","alias_value":"ZJCYIDJZY5XO2HFW","created_at":"2026-07-05T01:57:52Z"},{"alias_kind":"pith_short_8","alias_value":"ZJCYIDJZ","created_at":"2026-07-05T01:57:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:ZJCYIDJZY5XO2HFW3JLMAO3X2A","target":"record","payload":{"canonical_record":{"source":{"id":"2007.08142","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-07-16T06:55:00Z","cross_cats_sorted":[],"title_canon_sha256":"82efa92b12e592a8162cd53bee4b7a3248fa84a6cfe4400b9055ea43eacfe35c","abstract_canon_sha256":"75fe0bd06b1c187c226d719bf461384b36fed6cd6eef2d138067ffd9133b9eca"},"schema_version":"1.0"},"canonical_sha256":"ca45840d39c76eed1cb6da56c03b77d0165f4957a0c3ad6fd012d623502df47e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:57:52.572053Z","signature_b64":"1Oi8wfmBpDdtQtLpRcyONTleKjuhjcmwHAEO4SjGjgchuWxN4tO9vuYs7YsdpWWBruejvm0I9S0fSZL7EJy9AQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ca45840d39c76eed1cb6da56c03b77d0165f4957a0c3ad6fd012d623502df47e","last_reissued_at":"2026-07-05T01:57:52.571547Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:57:52.571547Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2007.08142","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:57:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SWu1bdfToHAO/+bDumY2ljsObOYYEex2xyCpquoulqiLjvyWkyI27OvgDYpcy+CWCvQjZEtJfv0RzHBlCgArBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:50:38.336355Z"},"content_sha256":"3dcc39a7df69f47fc061ea3b1430debcf8a5f1700f9b57d88ea3b48eb4d1077e","schema_version":"1.0","event_id":"sha256:3dcc39a7df69f47fc061ea3b1430debcf8a5f1700f9b57d88ea3b48eb4d1077e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:ZJCYIDJZY5XO2HFW3JLMAO3X2A","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Odyssey: Creation, Analysis and Detection of Trojan Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Ajmal Mian, Marzieh Edraki, Mubarak Shah, Nazanin Rahnavard, Nazmul Karim","submitted_at":"2020-07-16T06:55:00Z","abstract_excerpt":"Along with the success of deep neural network (DNN) models, rise the threats to the integrity of these models. A recent threat is the Trojan attack where an attacker interferes with the training pipeline by inserting triggers into some of the training samples and trains the model to act maliciously only for samples that contain the trigger. Since the knowledge of triggers is privy to the attacker, detection of Trojan networks is challenging. Existing Trojan detectors make strong assumptions about the types of triggers and attacks. We propose a detector that is based on the analysis of the intr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2007.08142","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2007.08142/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:57:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ElVwt9gyfLt5A96j4DPCWyj3xscCffTVNWcAPrCqsCcUWrfFg8X97SD4mYEIbzDwo3RUff2+Ex/DHIb3NVRdAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:50:38.336963Z"},"content_sha256":"963a183564d50667e0bb80f447a7657fb03ca022c1fa8031bc08c7126aabf539","schema_version":"1.0","event_id":"sha256:963a183564d50667e0bb80f447a7657fb03ca022c1fa8031bc08c7126aabf539"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZJCYIDJZY5XO2HFW3JLMAO3X2A/bundle.json","state_url":"https://pith.science/pith/ZJCYIDJZY5XO2HFW3JLMAO3X2A/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZJCYIDJZY5XO2HFW3JLMAO3X2A/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T05:50:38Z","links":{"resolver":"https://pith.science/pith/ZJCYIDJZY5XO2HFW3JLMAO3X2A","bundle":"https://pith.science/pith/ZJCYIDJZY5XO2HFW3JLMAO3X2A/bundle.json","state":"https://pith.science/pith/ZJCYIDJZY5XO2HFW3JLMAO3X2A/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZJCYIDJZY5XO2HFW3JLMAO3X2A/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:ZJCYIDJZY5XO2HFW3JLMAO3X2A","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"75fe0bd06b1c187c226d719bf461384b36fed6cd6eef2d138067ffd9133b9eca","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-07-16T06:55:00Z","title_canon_sha256":"82efa92b12e592a8162cd53bee4b7a3248fa84a6cfe4400b9055ea43eacfe35c"},"schema_version":"1.0","source":{"id":"2007.08142","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2007.08142","created_at":"2026-07-05T01:57:52Z"},{"alias_kind":"arxiv_version","alias_value":"2007.08142v2","created_at":"2026-07-05T01:57:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2007.08142","created_at":"2026-07-05T01:57:52Z"},{"alias_kind":"pith_short_12","alias_value":"ZJCYIDJZY5XO","created_at":"2026-07-05T01:57:52Z"},{"alias_kind":"pith_short_16","alias_value":"ZJCYIDJZY5XO2HFW","created_at":"2026-07-05T01:57:52Z"},{"alias_kind":"pith_short_8","alias_value":"ZJCYIDJZ","created_at":"2026-07-05T01:57:52Z"}],"graph_snapshots":[{"event_id":"sha256:963a183564d50667e0bb80f447a7657fb03ca022c1fa8031bc08c7126aabf539","target":"graph","created_at":"2026-07-05T01:57:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2007.08142/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Along with the success of deep neural network (DNN) models, rise the threats to the integrity of these models. A recent threat is the Trojan attack where an attacker interferes with the training pipeline by inserting triggers into some of the training samples and trains the model to act maliciously only for samples that contain the trigger. Since the knowledge of triggers is privy to the attacker, detection of Trojan networks is challenging. Existing Trojan detectors make strong assumptions about the types of triggers and attacks. We propose a detector that is based on the analysis of the intr","authors_text":"Ajmal Mian, Marzieh Edraki, Mubarak Shah, Nazanin Rahnavard, Nazmul Karim","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-07-16T06:55:00Z","title":"Odyssey: Creation, Analysis and Detection of Trojan Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2007.08142","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3dcc39a7df69f47fc061ea3b1430debcf8a5f1700f9b57d88ea3b48eb4d1077e","target":"record","created_at":"2026-07-05T01:57:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"75fe0bd06b1c187c226d719bf461384b36fed6cd6eef2d138067ffd9133b9eca","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-07-16T06:55:00Z","title_canon_sha256":"82efa92b12e592a8162cd53bee4b7a3248fa84a6cfe4400b9055ea43eacfe35c"},"schema_version":"1.0","source":{"id":"2007.08142","kind":"arxiv","version":2}},"canonical_sha256":"ca45840d39c76eed1cb6da56c03b77d0165f4957a0c3ad6fd012d623502df47e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ca45840d39c76eed1cb6da56c03b77d0165f4957a0c3ad6fd012d623502df47e","first_computed_at":"2026-07-05T01:57:52.571547Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:57:52.571547Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1Oi8wfmBpDdtQtLpRcyONTleKjuhjcmwHAEO4SjGjgchuWxN4tO9vuYs7YsdpWWBruejvm0I9S0fSZL7EJy9AQ==","signature_status":"signed_v1","signed_at":"2026-07-05T01:57:52.572053Z","signed_message":"canonical_sha256_bytes"},"source_id":"2007.08142","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3dcc39a7df69f47fc061ea3b1430debcf8a5f1700f9b57d88ea3b48eb4d1077e","sha256:963a183564d50667e0bb80f447a7657fb03ca022c1fa8031bc08c7126aabf539"],"state_sha256":"0492e5db021dd1c7c53171e0fc3df384ba9e96d9c083a611adec281bfe91db32"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tGMEUr5Ep+SjTAvVtdD820QPFABAyxZYu+PMfoT5nvBO0zPGVXpW4wg+HPFJEafIqBelRTp3R1SZbwzCNdjRBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T05:50:38.340338Z","bundle_sha256":"ddaf87c431e989f44d9eded9f9f64a6a452497b2787b1bee2a0317c4359d1c90"}}