{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:3W2KDI4DJ4ANDXDMYTJ5TQE36G","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1715061a04f71bf802c802f4f05149fa150422db79f1145b63421556845dffac","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-18T21:25:03Z","title_canon_sha256":"bb7deb50464845a1646d4535c94ac193bd70618863d48391a86f43ec34ba0ffd"},"schema_version":"1.0","source":{"id":"1911.07963","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.07963","created_at":"2026-07-05T00:23:25Z"},{"alias_kind":"arxiv_version","alias_value":"1911.07963v2","created_at":"2026-07-05T00:23:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.07963","created_at":"2026-07-05T00:23:25Z"},{"alias_kind":"pith_short_12","alias_value":"3W2KDI4DJ4AN","created_at":"2026-07-05T00:23:25Z"},{"alias_kind":"pith_short_16","alias_value":"3W2KDI4DJ4ANDXDM","created_at":"2026-07-05T00:23:25Z"},{"alias_kind":"pith_short_8","alias_value":"3W2KDI4D","created_at":"2026-07-05T00:23:25Z"}],"graph_snapshots":[{"event_id":"sha256:f1b2af243816f3433dfec5d4fb183f48de59995a4617d7eaecf0a003a2680303","target":"graph","created_at":"2026-07-05T00:23:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1911.07963/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The decentralized nature of federated learning makes detecting and defending against adversarial attacks a challenging task. This paper focuses on backdoor attacks in the federated learning setting, where the goal of the adversary is to reduce the performance of the model on targeted tasks while maintaining good performance on the main task. Unlike existing works, we allow non-malicious clients to have correctly labeled samples from the targeted tasks. We conduct a comprehensive study of backdoor attacks and defenses for the EMNIST dataset, a real-life, user-partitioned, and non-iid dataset. W","authors_text":"Ananda Theertha Suresh, H. Brendan McMahan, Peter Kairouz, Ziteng Sun","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-18T21:25:03Z","title":"Can You Really Backdoor Federated Learning?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.07963","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:763f95c852895341f879337a2e1da2a6f7c13160c563d36eea0b12e4d0befb91","target":"record","created_at":"2026-07-05T00:23:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1715061a04f71bf802c802f4f05149fa150422db79f1145b63421556845dffac","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-18T21:25:03Z","title_canon_sha256":"bb7deb50464845a1646d4535c94ac193bd70618863d48391a86f43ec34ba0ffd"},"schema_version":"1.0","source":{"id":"1911.07963","kind":"arxiv","version":2}},"canonical_sha256":"ddb4a1a3834f00d1dc6cc4d3d9c09bf1abf72bdd67cb8d0684e0e5db7b95dd67","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ddb4a1a3834f00d1dc6cc4d3d9c09bf1abf72bdd67cb8d0684e0e5db7b95dd67","first_computed_at":"2026-07-05T00:23:25.530232Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:23:25.530232Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Gq+uSlXmItpzEY+EbID+oVA9p8zDT7vjw+MsQSPDLZDrrK0Vrqq/CnX0TWTO7/zy0HPKfL9aT6eqnDjR8OlbCA==","signature_status":"signed_v1","signed_at":"2026-07-05T00:23:25.530739Z","signed_message":"canonical_sha256_bytes"},"source_id":"1911.07963","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:763f95c852895341f879337a2e1da2a6f7c13160c563d36eea0b12e4d0befb91","sha256:f1b2af243816f3433dfec5d4fb183f48de59995a4617d7eaecf0a003a2680303"],"state_sha256":"b0254f716ced8b7434e5bf7ff65c33dd65cd00dcb22681b755fdd997f2000152"}