{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:4IA65L7BMNLTUUOI4QLGPB2OQP","short_pith_number":"pith:4IA65L7B","canonical_record":{"source":{"id":"2404.13647","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-04-21T12:49:12Z","cross_cats_sorted":[],"title_canon_sha256":"f6d88c5c53e98def3dc8f2dae7a6b88ce29c36ff4752df3526732899cf387671","abstract_canon_sha256":"7b91045e8770b46827116e8c517196fdab3ec8701138237d08ac09df6af48d11"},"schema_version":"1.0"},"canonical_sha256":"e201eeafe163573a51c8e41667874e83f567709223b9cef1fdbb23f386c4aab9","source":{"kind":"arxiv","id":"2404.13647","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.13647","created_at":"2026-07-05T09:54:01Z"},{"alias_kind":"arxiv_version","alias_value":"2404.13647v2","created_at":"2026-07-05T09:54:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.13647","created_at":"2026-07-05T09:54:01Z"},{"alias_kind":"pith_short_12","alias_value":"4IA65L7BMNLT","created_at":"2026-07-05T09:54:01Z"},{"alias_kind":"pith_short_16","alias_value":"4IA65L7BMNLTUUOI","created_at":"2026-07-05T09:54:01Z"},{"alias_kind":"pith_short_8","alias_value":"4IA65L7B","created_at":"2026-07-05T09:54:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:4IA65L7BMNLTUUOI4QLGPB2OQP","target":"record","payload":{"canonical_record":{"source":{"id":"2404.13647","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-04-21T12:49:12Z","cross_cats_sorted":[],"title_canon_sha256":"f6d88c5c53e98def3dc8f2dae7a6b88ce29c36ff4752df3526732899cf387671","abstract_canon_sha256":"7b91045e8770b46827116e8c517196fdab3ec8701138237d08ac09df6af48d11"},"schema_version":"1.0"},"canonical_sha256":"e201eeafe163573a51c8e41667874e83f567709223b9cef1fdbb23f386c4aab9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:54:01.757490Z","signature_b64":"8K0mf6N56fITGjJW93eSTl4gqPOxNKlfa1vBUT7YbZ22iv2T9OpG6sOumOJxlEbaA1msDtzqpON5u8S1G11ZDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e201eeafe163573a51c8e41667874e83f567709223b9cef1fdbb23f386c4aab9","last_reissued_at":"2026-07-05T09:54:01.757016Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:54:01.757016Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.13647","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:54:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/UyCilCIXgOPV9fZSGOBuxQLQgf+yWwLlypXIksVQ6W1e5N6ii4CFkzERp9WfxR9zriBr9Mu8Kq7OhiePVL8Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T21:35:02.337427Z"},"content_sha256":"069362d8bc9b5fa6ac5333dbad77f1f99ec0aee970df67401d4de01151b9b5c4","schema_version":"1.0","event_id":"sha256:069362d8bc9b5fa6ac5333dbad77f1f99ec0aee970df67401d4de01151b9b5c4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:4IA65L7BMNLTUUOI4QLGPB2OQP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Mean Aggregator is More Robust than Robust Aggregators under Label Poisoning Attacks on Distributed Heterogeneous Data","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Jie Peng, Qing Ling, Stefan Vlaski, Weiyu Li","submitted_at":"2024-04-21T12:49:12Z","abstract_excerpt":"Robustness to malicious attacks is of paramount importance for distributed learning. Existing works usually consider the classical Byzantine attacks model, which assumes that some workers can send arbitrarily malicious messages to the server and disturb the aggregation steps of the distributed learning process. To defend against such worst-case Byzantine attacks, various robust aggregators have been proposed. They are proven to be effective and much superior to the often-used mean aggregator. In this paper, however, we demonstrate that the robust aggregators are too conservative for a class of"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.13647","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.13647/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:54:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bgoSaDOwqLH5vpjuG0U+sfSVWI/tY9GywOpBbEwM10eC98Mrjz85GYHR6jDhWhrMfM40AUJTpnDyI/cM3Iw5Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T21:35:02.338247Z"},"content_sha256":"1f6282754699c9aa24d0026e033aff6aae35ea399743bd4b5a40f7c3a0a731c8","schema_version":"1.0","event_id":"sha256:1f6282754699c9aa24d0026e033aff6aae35ea399743bd4b5a40f7c3a0a731c8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4IA65L7BMNLTUUOI4QLGPB2OQP/bundle.json","state_url":"https://pith.science/pith/4IA65L7BMNLTUUOI4QLGPB2OQP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4IA65L7BMNLTUUOI4QLGPB2OQP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T21:35:02Z","links":{"resolver":"https://pith.science/pith/4IA65L7BMNLTUUOI4QLGPB2OQP","bundle":"https://pith.science/pith/4IA65L7BMNLTUUOI4QLGPB2OQP/bundle.json","state":"https://pith.science/pith/4IA65L7BMNLTUUOI4QLGPB2OQP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4IA65L7BMNLTUUOI4QLGPB2OQP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:4IA65L7BMNLTUUOI4QLGPB2OQP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7b91045e8770b46827116e8c517196fdab3ec8701138237d08ac09df6af48d11","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-04-21T12:49:12Z","title_canon_sha256":"f6d88c5c53e98def3dc8f2dae7a6b88ce29c36ff4752df3526732899cf387671"},"schema_version":"1.0","source":{"id":"2404.13647","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.13647","created_at":"2026-07-05T09:54:01Z"},{"alias_kind":"arxiv_version","alias_value":"2404.13647v2","created_at":"2026-07-05T09:54:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.13647","created_at":"2026-07-05T09:54:01Z"},{"alias_kind":"pith_short_12","alias_value":"4IA65L7BMNLT","created_at":"2026-07-05T09:54:01Z"},{"alias_kind":"pith_short_16","alias_value":"4IA65L7BMNLTUUOI","created_at":"2026-07-05T09:54:01Z"},{"alias_kind":"pith_short_8","alias_value":"4IA65L7B","created_at":"2026-07-05T09:54:01Z"}],"graph_snapshots":[{"event_id":"sha256:1f6282754699c9aa24d0026e033aff6aae35ea399743bd4b5a40f7c3a0a731c8","target":"graph","created_at":"2026-07-05T09:54:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.13647/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Robustness to malicious attacks is of paramount importance for distributed learning. Existing works usually consider the classical Byzantine attacks model, which assumes that some workers can send arbitrarily malicious messages to the server and disturb the aggregation steps of the distributed learning process. To defend against such worst-case Byzantine attacks, various robust aggregators have been proposed. They are proven to be effective and much superior to the often-used mean aggregator. In this paper, however, we demonstrate that the robust aggregators are too conservative for a class of","authors_text":"Jie Peng, Qing Ling, Stefan Vlaski, Weiyu Li","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-04-21T12:49:12Z","title":"Mean Aggregator is More Robust than Robust Aggregators under Label Poisoning Attacks on Distributed Heterogeneous Data"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.13647","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:069362d8bc9b5fa6ac5333dbad77f1f99ec0aee970df67401d4de01151b9b5c4","target":"record","created_at":"2026-07-05T09:54:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7b91045e8770b46827116e8c517196fdab3ec8701138237d08ac09df6af48d11","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-04-21T12:49:12Z","title_canon_sha256":"f6d88c5c53e98def3dc8f2dae7a6b88ce29c36ff4752df3526732899cf387671"},"schema_version":"1.0","source":{"id":"2404.13647","kind":"arxiv","version":2}},"canonical_sha256":"e201eeafe163573a51c8e41667874e83f567709223b9cef1fdbb23f386c4aab9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e201eeafe163573a51c8e41667874e83f567709223b9cef1fdbb23f386c4aab9","first_computed_at":"2026-07-05T09:54:01.757016Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:54:01.757016Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8K0mf6N56fITGjJW93eSTl4gqPOxNKlfa1vBUT7YbZ22iv2T9OpG6sOumOJxlEbaA1msDtzqpON5u8S1G11ZDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:54:01.757490Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.13647","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:069362d8bc9b5fa6ac5333dbad77f1f99ec0aee970df67401d4de01151b9b5c4","sha256:1f6282754699c9aa24d0026e033aff6aae35ea399743bd4b5a40f7c3a0a731c8"],"state_sha256":"c448c854de71273e84a57cd6cc87ad0eec057490afa334adf15aa95e4c52e520"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9sb5PDByLMKEX2IanlUxFOEdwTiICcR3Z2I8/KEZVDKOvyaUYRxDkkoSp9UMrCQ6v3y8hMlcsP5ygKxGtIMbBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T21:35:02.344300Z","bundle_sha256":"1eabc491269c7b2bc9aa302833fe9fec6bebee4d904a08449ab4586b5329d2ea"}}