{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:3O7I2K4S5UDTXL7KN2KWQJYQAW","short_pith_number":"pith:3O7I2K4S","canonical_record":{"source":{"id":"2309.10607","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-19T13:31:33Z","cross_cats_sorted":[],"title_canon_sha256":"e6c2bbc8c2bc88c046004072cc591bb746933c989044c81a6e1f84049b7552ec","abstract_canon_sha256":"46de6d7a8b94457b55418954f13e014aca3cc955d9f656d63f14a68a34cad67b"},"schema_version":"1.0"},"canonical_sha256":"dbbe8d2b92ed073bafea6e9568271005802874832ba29761eded8a35e169a832","source":{"kind":"arxiv","id":"2309.10607","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.10607","created_at":"2026-07-05T06:52:14Z"},{"alias_kind":"arxiv_version","alias_value":"2309.10607v1","created_at":"2026-07-05T06:52:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.10607","created_at":"2026-07-05T06:52:14Z"},{"alias_kind":"pith_short_12","alias_value":"3O7I2K4S5UDT","created_at":"2026-07-05T06:52:14Z"},{"alias_kind":"pith_short_16","alias_value":"3O7I2K4S5UDTXL7K","created_at":"2026-07-05T06:52:14Z"},{"alias_kind":"pith_short_8","alias_value":"3O7I2K4S","created_at":"2026-07-05T06:52:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:3O7I2K4S5UDTXL7KN2KWQJYQAW","target":"record","payload":{"canonical_record":{"source":{"id":"2309.10607","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-19T13:31:33Z","cross_cats_sorted":[],"title_canon_sha256":"e6c2bbc8c2bc88c046004072cc591bb746933c989044c81a6e1f84049b7552ec","abstract_canon_sha256":"46de6d7a8b94457b55418954f13e014aca3cc955d9f656d63f14a68a34cad67b"},"schema_version":"1.0"},"canonical_sha256":"dbbe8d2b92ed073bafea6e9568271005802874832ba29761eded8a35e169a832","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:52:14.638676Z","signature_b64":"3fp5UMKXq3Xcyz7jKmo2trTK8S/XjZP37utAJTLmLV3j672/9pyz4sDPyei1XpnShnXrfCSM7THAU52+x6npBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dbbe8d2b92ed073bafea6e9568271005802874832ba29761eded8a35e169a832","last_reissued_at":"2026-07-05T06:52:14.638260Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:52:14.638260Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.10607","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:52:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"H7hMEbRzaStlAiBn95yvnjttHVbCFo66A9+OFjY4+V+fM6BSG1olVy+bujBm8t0UGupL2oz1Q0II30abtohvBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T01:21:18.685688Z"},"content_sha256":"fc126b010b5e4f3a2680383deb5d037ce6ba6235d714e18c49907d4559e518a5","schema_version":"1.0","event_id":"sha256:fc126b010b5e4f3a2680383deb5d037ce6ba6235d714e18c49907d4559e518a5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:3O7I2K4S5UDTXL7KN2KWQJYQAW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SPFL: A Self-purified Federated Learning Method Against Poisoning Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chip-Hong Chang, Huawei Li, Jing Ye, Weiyang He, Xiaowei Li, Zizhen Liu","submitted_at":"2023-09-19T13:31:33Z","abstract_excerpt":"While Federated learning (FL) is attractive for pulling privacy-preserving distributed training data, the credibility of participating clients and non-inspectable data pose new security threats, of which poisoning attacks are particularly rampant and hard to defend without compromising privacy, performance or other desirable properties of FL. To tackle this problem, we propose a self-purified FL (SPFL) method that enables benign clients to exploit trusted historical features of locally purified model to supervise the training of aggregated model in each iteration. The purification is performed"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.10607","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.10607/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:52:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0ZIJ/wxDOeAO3N7/uTCgZzyBmbzkdNaP8u1dotJiT/Esp/iXR83l2XvQ8i/0iQoPgolA2EzpSSVXTWZ8VTCaCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T01:21:18.686212Z"},"content_sha256":"cf17234bdff9b388ea925408a0d49b1ec3232249355e4a80f2d877127815c8df","schema_version":"1.0","event_id":"sha256:cf17234bdff9b388ea925408a0d49b1ec3232249355e4a80f2d877127815c8df"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3O7I2K4S5UDTXL7KN2KWQJYQAW/bundle.json","state_url":"https://pith.science/pith/3O7I2K4S5UDTXL7KN2KWQJYQAW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3O7I2K4S5UDTXL7KN2KWQJYQAW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T01:21:18Z","links":{"resolver":"https://pith.science/pith/3O7I2K4S5UDTXL7KN2KWQJYQAW","bundle":"https://pith.science/pith/3O7I2K4S5UDTXL7KN2KWQJYQAW/bundle.json","state":"https://pith.science/pith/3O7I2K4S5UDTXL7KN2KWQJYQAW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3O7I2K4S5UDTXL7KN2KWQJYQAW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:3O7I2K4S5UDTXL7KN2KWQJYQAW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"46de6d7a8b94457b55418954f13e014aca3cc955d9f656d63f14a68a34cad67b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-19T13:31:33Z","title_canon_sha256":"e6c2bbc8c2bc88c046004072cc591bb746933c989044c81a6e1f84049b7552ec"},"schema_version":"1.0","source":{"id":"2309.10607","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.10607","created_at":"2026-07-05T06:52:14Z"},{"alias_kind":"arxiv_version","alias_value":"2309.10607v1","created_at":"2026-07-05T06:52:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.10607","created_at":"2026-07-05T06:52:14Z"},{"alias_kind":"pith_short_12","alias_value":"3O7I2K4S5UDT","created_at":"2026-07-05T06:52:14Z"},{"alias_kind":"pith_short_16","alias_value":"3O7I2K4S5UDTXL7K","created_at":"2026-07-05T06:52:14Z"},{"alias_kind":"pith_short_8","alias_value":"3O7I2K4S","created_at":"2026-07-05T06:52:14Z"}],"graph_snapshots":[{"event_id":"sha256:cf17234bdff9b388ea925408a0d49b1ec3232249355e4a80f2d877127815c8df","target":"graph","created_at":"2026-07-05T06:52:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.10607/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While Federated learning (FL) is attractive for pulling privacy-preserving distributed training data, the credibility of participating clients and non-inspectable data pose new security threats, of which poisoning attacks are particularly rampant and hard to defend without compromising privacy, performance or other desirable properties of FL. To tackle this problem, we propose a self-purified FL (SPFL) method that enables benign clients to exploit trusted historical features of locally purified model to supervise the training of aggregated model in each iteration. The purification is performed","authors_text":"Chip-Hong Chang, Huawei Li, Jing Ye, Weiyang He, Xiaowei Li, Zizhen Liu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-19T13:31:33Z","title":"SPFL: A Self-purified Federated Learning Method Against Poisoning Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.10607","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fc126b010b5e4f3a2680383deb5d037ce6ba6235d714e18c49907d4559e518a5","target":"record","created_at":"2026-07-05T06:52:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"46de6d7a8b94457b55418954f13e014aca3cc955d9f656d63f14a68a34cad67b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-19T13:31:33Z","title_canon_sha256":"e6c2bbc8c2bc88c046004072cc591bb746933c989044c81a6e1f84049b7552ec"},"schema_version":"1.0","source":{"id":"2309.10607","kind":"arxiv","version":1}},"canonical_sha256":"dbbe8d2b92ed073bafea6e9568271005802874832ba29761eded8a35e169a832","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dbbe8d2b92ed073bafea6e9568271005802874832ba29761eded8a35e169a832","first_computed_at":"2026-07-05T06:52:14.638260Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:52:14.638260Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"3fp5UMKXq3Xcyz7jKmo2trTK8S/XjZP37utAJTLmLV3j672/9pyz4sDPyei1XpnShnXrfCSM7THAU52+x6npBA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:52:14.638676Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.10607","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fc126b010b5e4f3a2680383deb5d037ce6ba6235d714e18c49907d4559e518a5","sha256:cf17234bdff9b388ea925408a0d49b1ec3232249355e4a80f2d877127815c8df"],"state_sha256":"1f44d1b3c39828e50834f85790eb97f37d4682beafff897b9d83f15c1a4dd16f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lGt768mK2KzqPUuOLRA0dzjVmVZ6OxLADrwJx3hjySvj3AzFRmlgC5DOCCq9I/V/WdGaNeXDLLdHuA9GQYg5CQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T01:21:18.691489Z","bundle_sha256":"b10fdb0c95aad18a2758bc3dbe30c26fbd2eee8f9d2ce8b285a98bc74113a6db"}}