{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:3KX2HDMCW26Y6MECDG6ZIOGPTA","short_pith_number":"pith:3KX2HDMC","canonical_record":{"source":{"id":"1911.11815","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-11-26T20:10:04Z","cross_cats_sorted":["cs.DC","cs.LG"],"title_canon_sha256":"9f61ec45e48979ac74b9ddec2187736ef1deee7ca1bb6f1a3c128f8285b17013","abstract_canon_sha256":"d336804f368f9343391b9a00ba84ac3517d3871b9cfeabe6efc2444de6992d30"},"schema_version":"1.0"},"canonical_sha256":"daafa38d82b6bd8f308219bd9438cf981b8b13025cd1ea2cc9070d49f7d72de6","source":{"kind":"arxiv","id":"1911.11815","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.11815","created_at":"2026-07-05T03:33:36Z"},{"alias_kind":"arxiv_version","alias_value":"1911.11815v4","created_at":"2026-07-05T03:33:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.11815","created_at":"2026-07-05T03:33:36Z"},{"alias_kind":"pith_short_12","alias_value":"3KX2HDMCW26Y","created_at":"2026-07-05T03:33:36Z"},{"alias_kind":"pith_short_16","alias_value":"3KX2HDMCW26Y6MEC","created_at":"2026-07-05T03:33:36Z"},{"alias_kind":"pith_short_8","alias_value":"3KX2HDMC","created_at":"2026-07-05T03:33:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:3KX2HDMCW26Y6MECDG6ZIOGPTA","target":"record","payload":{"canonical_record":{"source":{"id":"1911.11815","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-11-26T20:10:04Z","cross_cats_sorted":["cs.DC","cs.LG"],"title_canon_sha256":"9f61ec45e48979ac74b9ddec2187736ef1deee7ca1bb6f1a3c128f8285b17013","abstract_canon_sha256":"d336804f368f9343391b9a00ba84ac3517d3871b9cfeabe6efc2444de6992d30"},"schema_version":"1.0"},"canonical_sha256":"daafa38d82b6bd8f308219bd9438cf981b8b13025cd1ea2cc9070d49f7d72de6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:33:36.826983Z","signature_b64":"YUXz/dIon5RYyHmF/eAg6p2xTADABvPHuV7HTjOVktPp7S3MejPs8vL30FM03svr4tcOk6jaaVX7pVrwcRL+Aw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"daafa38d82b6bd8f308219bd9438cf981b8b13025cd1ea2cc9070d49f7d72de6","last_reissued_at":"2026-07-05T03:33:36.826544Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:33:36.826544Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1911.11815","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:33:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JCl7qwJ16PLRpAEV+l2Qu/YjLLqHvISliKB0AijXymRQRRDjY3tRcj0rXg512B9W0ibUp+5FjIaQoQ5JGpgyCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T04:41:52.978222Z"},"content_sha256":"838aa6a47fc37ca41b977f057643cdd2ce1054c227a9e96aaa0de8d1322ccf6f","schema_version":"1.0","event_id":"sha256:838aa6a47fc37ca41b977f057643cdd2ce1054c227a9e96aaa0de8d1322ccf6f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:3KX2HDMCW26Y6MECDG6ZIOGPTA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Local Model Poisoning Attacks to Byzantine-Robust Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.DC","cs.LG"],"primary_cat":"cs.CR","authors_text":"Jinyuan Jia, Minghong Fang, Neil Zhenqiang Gong, Xiaoyu Cao","submitted_at":"2019-11-26T20:10:04Z","abstract_excerpt":"In federated learning, multiple client devices jointly learn a machine learning model: each client device maintains a local model for its local training dataset, while a master device maintains a global model via aggregating the local models from the client devices. The machine learning community recently proposed several federated learning methods that were claimed to be robust against Byzantine failures (e.g., system failures, adversarial manipulations) of certain client devices. In this work, we perform the first systematic study on local model poisoning attacks to federated learning. We as"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.11815","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1911.11815/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:33:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FCqFOKlp4FDIivDB+KirbCJwhy49ycpcYRRKkT3MgBqtQxgdbLFlTTiNziRDpZwKkkcBvmW+lUGCXDi+/w4zAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T04:41:52.978705Z"},"content_sha256":"9753fd8a9c989e6e298b37a381b5ff01d2929fd27c21c01fd252bf6d3711b534","schema_version":"1.0","event_id":"sha256:9753fd8a9c989e6e298b37a381b5ff01d2929fd27c21c01fd252bf6d3711b534"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3KX2HDMCW26Y6MECDG6ZIOGPTA/bundle.json","state_url":"https://pith.science/pith/3KX2HDMCW26Y6MECDG6ZIOGPTA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3KX2HDMCW26Y6MECDG6ZIOGPTA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T04:41:52Z","links":{"resolver":"https://pith.science/pith/3KX2HDMCW26Y6MECDG6ZIOGPTA","bundle":"https://pith.science/pith/3KX2HDMCW26Y6MECDG6ZIOGPTA/bundle.json","state":"https://pith.science/pith/3KX2HDMCW26Y6MECDG6ZIOGPTA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3KX2HDMCW26Y6MECDG6ZIOGPTA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:3KX2HDMCW26Y6MECDG6ZIOGPTA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d336804f368f9343391b9a00ba84ac3517d3871b9cfeabe6efc2444de6992d30","cross_cats_sorted":["cs.DC","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-11-26T20:10:04Z","title_canon_sha256":"9f61ec45e48979ac74b9ddec2187736ef1deee7ca1bb6f1a3c128f8285b17013"},"schema_version":"1.0","source":{"id":"1911.11815","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.11815","created_at":"2026-07-05T03:33:36Z"},{"alias_kind":"arxiv_version","alias_value":"1911.11815v4","created_at":"2026-07-05T03:33:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.11815","created_at":"2026-07-05T03:33:36Z"},{"alias_kind":"pith_short_12","alias_value":"3KX2HDMCW26Y","created_at":"2026-07-05T03:33:36Z"},{"alias_kind":"pith_short_16","alias_value":"3KX2HDMCW26Y6MEC","created_at":"2026-07-05T03:33:36Z"},{"alias_kind":"pith_short_8","alias_value":"3KX2HDMC","created_at":"2026-07-05T03:33:36Z"}],"graph_snapshots":[{"event_id":"sha256:9753fd8a9c989e6e298b37a381b5ff01d2929fd27c21c01fd252bf6d3711b534","target":"graph","created_at":"2026-07-05T03:33:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1911.11815/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In federated learning, multiple client devices jointly learn a machine learning model: each client device maintains a local model for its local training dataset, while a master device maintains a global model via aggregating the local models from the client devices. The machine learning community recently proposed several federated learning methods that were claimed to be robust against Byzantine failures (e.g., system failures, adversarial manipulations) of certain client devices. In this work, we perform the first systematic study on local model poisoning attacks to federated learning. We as","authors_text":"Jinyuan Jia, Minghong Fang, Neil Zhenqiang Gong, Xiaoyu Cao","cross_cats":["cs.DC","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-11-26T20:10:04Z","title":"Local Model Poisoning Attacks to Byzantine-Robust Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.11815","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:838aa6a47fc37ca41b977f057643cdd2ce1054c227a9e96aaa0de8d1322ccf6f","target":"record","created_at":"2026-07-05T03:33:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d336804f368f9343391b9a00ba84ac3517d3871b9cfeabe6efc2444de6992d30","cross_cats_sorted":["cs.DC","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-11-26T20:10:04Z","title_canon_sha256":"9f61ec45e48979ac74b9ddec2187736ef1deee7ca1bb6f1a3c128f8285b17013"},"schema_version":"1.0","source":{"id":"1911.11815","kind":"arxiv","version":4}},"canonical_sha256":"daafa38d82b6bd8f308219bd9438cf981b8b13025cd1ea2cc9070d49f7d72de6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"daafa38d82b6bd8f308219bd9438cf981b8b13025cd1ea2cc9070d49f7d72de6","first_computed_at":"2026-07-05T03:33:36.826544Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:33:36.826544Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"YUXz/dIon5RYyHmF/eAg6p2xTADABvPHuV7HTjOVktPp7S3MejPs8vL30FM03svr4tcOk6jaaVX7pVrwcRL+Aw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:33:36.826983Z","signed_message":"canonical_sha256_bytes"},"source_id":"1911.11815","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:838aa6a47fc37ca41b977f057643cdd2ce1054c227a9e96aaa0de8d1322ccf6f","sha256:9753fd8a9c989e6e298b37a381b5ff01d2929fd27c21c01fd252bf6d3711b534"],"state_sha256":"0ca17922adfe8043565cc7e54acd9d0fcb548d37fae2c2fa38cde6b72b5057a5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eD5mgaZap2XDNTzsvFMsEeDgE4U7lqpD7tSdUHWPOq5bPsknwPL9pk0hfPa34yjy9LG4K1MWxGnmd8t/ZALdCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T04:41:52.981767Z","bundle_sha256":"c649276209b7ed65ab634beadad20b7e3549b07691557ca01fda6701f880809e"}}