{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:3FVMI7YUPVQJGDBBF46LE4YJSL","short_pith_number":"pith:3FVMI7YU","canonical_record":{"source":{"id":"2502.05211","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-03T23:14:02Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"de2e65f2c5516d620e7f3cb1d7907c9ee4c3237ae21b6fc387f83ba27d7d322f","abstract_canon_sha256":"a2ae1ff5625029f2c614615cd88f752c760f7bc5b40f959b80637aa9ff017e4f"},"schema_version":"1.0"},"canonical_sha256":"d96ac47f147d60930c212f3cb2730992d9a9263bf7ac7bdd0cc413caf678a475","source":{"kind":"arxiv","id":"2502.05211","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.05211","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"arxiv_version","alias_value":"2502.05211v1","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.05211","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"pith_short_12","alias_value":"3FVMI7YUPVQJ","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"pith_short_16","alias_value":"3FVMI7YUPVQJGDBB","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"pith_short_8","alias_value":"3FVMI7YU","created_at":"2026-07-05T10:11:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:3FVMI7YUPVQJGDBBF46LE4YJSL","target":"record","payload":{"canonical_record":{"source":{"id":"2502.05211","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-03T23:14:02Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"de2e65f2c5516d620e7f3cb1d7907c9ee4c3237ae21b6fc387f83ba27d7d322f","abstract_canon_sha256":"a2ae1ff5625029f2c614615cd88f752c760f7bc5b40f959b80637aa9ff017e4f"},"schema_version":"1.0"},"canonical_sha256":"d96ac47f147d60930c212f3cb2730992d9a9263bf7ac7bdd0cc413caf678a475","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:11:34.172363Z","signature_b64":"m/12qKk2yDCDzm3wzD3ChBPwz5yv8JaL2PPdx4lhZ2QTYWtu1Qhg+jb/r7H68FACUe6a5WK0d+usndfUPI4QCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d96ac47f147d60930c212f3cb2730992d9a9263bf7ac7bdd0cc413caf678a475","last_reissued_at":"2026-07-05T10:11:34.171658Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:11:34.171658Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.05211","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:11:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eeCBhbzDFJ3K2J98aeHDdgWp+ZrSNRjMr+MqJCL27kb4n8GSwnXTVheBVCTEuvdCgnX9u8TXTYCVo+q/FmERAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T23:27:25.563365Z"},"content_sha256":"159ea679ac0b2228f23a287dd893102750bc57963fd633fd98adb6d7ed5ba264","schema_version":"1.0","event_id":"sha256:159ea679ac0b2228f23a287dd893102750bc57963fd633fd98adb6d7ed5ba264"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:3FVMI7YUPVQJGDBBF46LE4YJSL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Decoding FL Defenses: Systemization, Pitfalls, and Remedies","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Amir Houmansadr, Fatima Muhammad Anwar, Momin Ahmad Khan, Virat Shejwalkar, Yasra Chandio","submitted_at":"2025-02-03T23:14:02Z","abstract_excerpt":"While the community has designed various defenses to counter the threat of poisoning attacks in Federated Learning (FL), there are no guidelines for evaluating these defenses. These defenses are prone to subtle pitfalls in their experimental setups that lead to a false sense of security, rendering them unsuitable for practical deployment. In this paper, we systematically understand, identify, and provide a better approach to address these challenges. First, we design a comprehensive systemization of FL defenses along three dimensions: i) how client updates are processed, ii) what the server kn"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.05211","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.05211/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:11:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hKMZSZK7xop44n82W7AS+i1vKmwn49tIvHscQqh3NIBv6acW3HiebKAV94pii5xdot4fo4II9dweSBGTWk22Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T23:27:25.564278Z"},"content_sha256":"1208fa240b0243c456d0c5c5618570307c7171d1d2a838f9eaeb192feac02516","schema_version":"1.0","event_id":"sha256:1208fa240b0243c456d0c5c5618570307c7171d1d2a838f9eaeb192feac02516"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3FVMI7YUPVQJGDBBF46LE4YJSL/bundle.json","state_url":"https://pith.science/pith/3FVMI7YUPVQJGDBBF46LE4YJSL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3FVMI7YUPVQJGDBBF46LE4YJSL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T23:27:25Z","links":{"resolver":"https://pith.science/pith/3FVMI7YUPVQJGDBBF46LE4YJSL","bundle":"https://pith.science/pith/3FVMI7YUPVQJGDBBF46LE4YJSL/bundle.json","state":"https://pith.science/pith/3FVMI7YUPVQJGDBBF46LE4YJSL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3FVMI7YUPVQJGDBBF46LE4YJSL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:3FVMI7YUPVQJGDBBF46LE4YJSL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a2ae1ff5625029f2c614615cd88f752c760f7bc5b40f959b80637aa9ff017e4f","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-03T23:14:02Z","title_canon_sha256":"de2e65f2c5516d620e7f3cb1d7907c9ee4c3237ae21b6fc387f83ba27d7d322f"},"schema_version":"1.0","source":{"id":"2502.05211","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.05211","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"arxiv_version","alias_value":"2502.05211v1","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.05211","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"pith_short_12","alias_value":"3FVMI7YUPVQJ","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"pith_short_16","alias_value":"3FVMI7YUPVQJGDBB","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"pith_short_8","alias_value":"3FVMI7YU","created_at":"2026-07-05T10:11:34Z"}],"graph_snapshots":[{"event_id":"sha256:1208fa240b0243c456d0c5c5618570307c7171d1d2a838f9eaeb192feac02516","target":"graph","created_at":"2026-07-05T10:11:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.05211/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While the community has designed various defenses to counter the threat of poisoning attacks in Federated Learning (FL), there are no guidelines for evaluating these defenses. These defenses are prone to subtle pitfalls in their experimental setups that lead to a false sense of security, rendering them unsuitable for practical deployment. In this paper, we systematically understand, identify, and provide a better approach to address these challenges. First, we design a comprehensive systemization of FL defenses along three dimensions: i) how client updates are processed, ii) what the server kn","authors_text":"Amir Houmansadr, Fatima Muhammad Anwar, Momin Ahmad Khan, Virat Shejwalkar, Yasra Chandio","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-03T23:14:02Z","title":"Decoding FL Defenses: Systemization, Pitfalls, and Remedies"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.05211","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:159ea679ac0b2228f23a287dd893102750bc57963fd633fd98adb6d7ed5ba264","target":"record","created_at":"2026-07-05T10:11:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a2ae1ff5625029f2c614615cd88f752c760f7bc5b40f959b80637aa9ff017e4f","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-03T23:14:02Z","title_canon_sha256":"de2e65f2c5516d620e7f3cb1d7907c9ee4c3237ae21b6fc387f83ba27d7d322f"},"schema_version":"1.0","source":{"id":"2502.05211","kind":"arxiv","version":1}},"canonical_sha256":"d96ac47f147d60930c212f3cb2730992d9a9263bf7ac7bdd0cc413caf678a475","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d96ac47f147d60930c212f3cb2730992d9a9263bf7ac7bdd0cc413caf678a475","first_computed_at":"2026-07-05T10:11:34.171658Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:11:34.171658Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"m/12qKk2yDCDzm3wzD3ChBPwz5yv8JaL2PPdx4lhZ2QTYWtu1Qhg+jb/r7H68FACUe6a5WK0d+usndfUPI4QCA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:11:34.172363Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.05211","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:159ea679ac0b2228f23a287dd893102750bc57963fd633fd98adb6d7ed5ba264","sha256:1208fa240b0243c456d0c5c5618570307c7171d1d2a838f9eaeb192feac02516"],"state_sha256":"a0c1ae0f4eecb448085da9ffc3fa91c0f9337da98bafbe89f8a943f88565b8be"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lnph4uBoDu0Lpqr9g+JythHnLEJIjvSVhyf4taDtYrdDaaS/2swH83wFbm9k8AnGn+T1GRTku3ruFH97Gip7AA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T23:27:25.571373Z","bundle_sha256":"b367d7a7f94ce29a15b282f64a5e3cc81b808afd17dd592ee9bfb596db7b8c55"}}