{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:2ZZBRMMMWSUM2UFFXOVLAIC7EM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"874572678e71e410ce0112ac59fc0d63d87087584d6345bf01410a858bdc01c2","cross_cats_sorted":["cs.CR","cs.DC","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-07-09T21:50:54Z","title_canon_sha256":"740a5202237e804eeb47cabe1f5fbf11e16f0336f82834e71b4586938986ba6b"},"schema_version":"1.0","source":{"id":"2007.05084","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2007.05084","created_at":"2026-07-05T01:17:43Z"},{"alias_kind":"arxiv_version","alias_value":"2007.05084v1","created_at":"2026-07-05T01:17:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2007.05084","created_at":"2026-07-05T01:17:43Z"},{"alias_kind":"pith_short_12","alias_value":"2ZZBRMMMWSUM","created_at":"2026-07-05T01:17:43Z"},{"alias_kind":"pith_short_16","alias_value":"2ZZBRMMMWSUM2UFF","created_at":"2026-07-05T01:17:43Z"},{"alias_kind":"pith_short_8","alias_value":"2ZZBRMMM","created_at":"2026-07-05T01:17:43Z"}],"graph_snapshots":[{"event_id":"sha256:9b8a505202fced4cea4b51d7ed2659154b1a6ae25be60518ef890bf6e21d6b47","target":"graph","created_at":"2026-07-05T01:17:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2007.05084/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Due to its decentralized nature, Federated Learning (FL) lends itself to adversarial attacks in the form of backdoors during training. The goal of a backdoor is to corrupt the performance of the trained model on specific sub-tasks (e.g., by classifying green cars as frogs). A range of FL backdoor attacks have been introduced in the literature, but also methods to defend against them, and it is currently an open question whether FL systems can be tailored to be robust against backdoors. In this work, we provide evidence to the contrary. We first establish that, in the general case, robustness t","authors_text":"Dimitris Papailiopoulos, Harit Vishwakarma, Hongyi Wang, Jy-yong Sohn, Kangwook Lee, Kartik Sreenivasan, Saurabh Agarwal, Shashank Rajput","cross_cats":["cs.CR","cs.DC","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-07-09T21:50:54Z","title":"Attack of the Tails: Yes, You Really Can Backdoor Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2007.05084","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:000d32375a617c99cd74145b2d6bf52b4fa3d34de1f27b8bfa54735671c6928b","target":"record","created_at":"2026-07-05T01:17:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"874572678e71e410ce0112ac59fc0d63d87087584d6345bf01410a858bdc01c2","cross_cats_sorted":["cs.CR","cs.DC","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-07-09T21:50:54Z","title_canon_sha256":"740a5202237e804eeb47cabe1f5fbf11e16f0336f82834e71b4586938986ba6b"},"schema_version":"1.0","source":{"id":"2007.05084","kind":"arxiv","version":1}},"canonical_sha256":"d67218b18cb4a8cd50a5bbaab0205f230c44e9e880392475316a8484fab9f46e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d67218b18cb4a8cd50a5bbaab0205f230c44e9e880392475316a8484fab9f46e","first_computed_at":"2026-07-05T01:17:43.204833Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:17:43.204833Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"G+mov/SLZggVFESBG2fRUFf/Q81EPOmWFUrhmZJl0inT2NaDo9cptFyvpK3hGvoSJPyKK376tg+FJ9kkhIn0BQ==","signature_status":"signed_v1","signed_at":"2026-07-05T01:17:43.205329Z","signed_message":"canonical_sha256_bytes"},"source_id":"2007.05084","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:000d32375a617c99cd74145b2d6bf52b4fa3d34de1f27b8bfa54735671c6928b","sha256:9b8a505202fced4cea4b51d7ed2659154b1a6ae25be60518ef890bf6e21d6b47"],"state_sha256":"7e741e6d0d8ca6bbb881834d8dc8f0fdcc35ca26c16c24a8e830cd34dda7bcd3"}