{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:5BZJTRWKNKPK27LK6UGTQ3GBCB","short_pith_number":"pith:5BZJTRWK","canonical_record":{"source":{"id":"1804.00308","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-04-01T15:56:43Z","cross_cats_sorted":["cs.GT","cs.LG"],"title_canon_sha256":"e5ab569d0ba5a91e3244ad9ef7c8dad67cb899a00fb5e6b6c43919cd0fc870dd","abstract_canon_sha256":"2ff3638923709392c5ba244bb9f9e9d45c14540607d540ac9cf54c22af7c7562"},"schema_version":"1.0"},"canonical_sha256":"e87299c6ca6a9ead7d6af50d386cc110770cbeb7f87dffa4e0b93c0b4074040a","source":{"kind":"arxiv","id":"1804.00308","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1804.00308","created_at":"2026-07-05T03:17:43Z"},{"alias_kind":"arxiv_version","alias_value":"1804.00308v3","created_at":"2026-07-05T03:17:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1804.00308","created_at":"2026-07-05T03:17:43Z"},{"alias_kind":"pith_short_12","alias_value":"5BZJTRWKNKPK","created_at":"2026-07-05T03:17:43Z"},{"alias_kind":"pith_short_16","alias_value":"5BZJTRWKNKPK27LK","created_at":"2026-07-05T03:17:43Z"},{"alias_kind":"pith_short_8","alias_value":"5BZJTRWK","created_at":"2026-07-05T03:17:43Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:5BZJTRWKNKPK27LK6UGTQ3GBCB","target":"record","payload":{"canonical_record":{"source":{"id":"1804.00308","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-04-01T15:56:43Z","cross_cats_sorted":["cs.GT","cs.LG"],"title_canon_sha256":"e5ab569d0ba5a91e3244ad9ef7c8dad67cb899a00fb5e6b6c43919cd0fc870dd","abstract_canon_sha256":"2ff3638923709392c5ba244bb9f9e9d45c14540607d540ac9cf54c22af7c7562"},"schema_version":"1.0"},"canonical_sha256":"e87299c6ca6a9ead7d6af50d386cc110770cbeb7f87dffa4e0b93c0b4074040a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:17:43.313500Z","signature_b64":"k6Eg9CUArDBjuTQkCnRL47CbRqhqUvLdP9ZJ9ucK6yIAhG3wB4oELRak67PAp44C4SDud5Rx+wgNpFCTSwSWBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e87299c6ca6a9ead7d6af50d386cc110770cbeb7f87dffa4e0b93c0b4074040a","last_reissued_at":"2026-07-05T03:17:43.312963Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:17:43.312963Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1804.00308","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:17:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"l5pkQr8DIXynO0CHdWgklWBqARHwJqTsKIrOK8UyvR93iIVFuOxkF6HybCLfOoW4Ys0kYZT2kWyotTU2qE5oAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T04:01:46.135379Z"},"content_sha256":"96cb610af8f175a53ef263f956a2f88da3c96823739f11a2ba70e5a2251d39fc","schema_version":"1.0","event_id":"sha256:96cb610af8f175a53ef263f956a2f88da3c96823739f11a2ba70e5a2251d39fc"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:5BZJTRWKNKPK27LK6UGTQ3GBCB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.GT","cs.LG"],"primary_cat":"cs.CR","authors_text":"Alina Oprea, Battista Biggio, Bo Li, Chang Liu, Cristina Nita-Rotaru, Matthew Jagielski","submitted_at":"2018-04-01T15:56:43Z","abstract_excerpt":"As machine learning becomes widely used for automated decisions, attackers have strong incentives to manipulate the results and models generated by machine learning algorithms. In this paper, we perform the first systematic study of poisoning attacks and their countermeasures for linear regression models. In poisoning attacks, attackers deliberately influence the training data to manipulate the results of a predictive model. We propose a theoretically-grounded optimization framework specifically designed for linear regression and demonstrate its effectiveness on a range of datasets and models."},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1804.00308","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1804.00308/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:17:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"usHfEmgrd3SkG/z2AT8c6U2+hMkpe9DokC74RMpIiq4Cucjc1TgGqCLfxDfUQ/40WxojYBU1T7fmS+PFHWLpAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T04:01:46.135896Z"},"content_sha256":"f01ac8c45dede40b2c3489403c2fe17efcefd2caea9af83d455e765c2cd2b58e","schema_version":"1.0","event_id":"sha256:f01ac8c45dede40b2c3489403c2fe17efcefd2caea9af83d455e765c2cd2b58e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5BZJTRWKNKPK27LK6UGTQ3GBCB/bundle.json","state_url":"https://pith.science/pith/5BZJTRWKNKPK27LK6UGTQ3GBCB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5BZJTRWKNKPK27LK6UGTQ3GBCB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T04:01:46Z","links":{"resolver":"https://pith.science/pith/5BZJTRWKNKPK27LK6UGTQ3GBCB","bundle":"https://pith.science/pith/5BZJTRWKNKPK27LK6UGTQ3GBCB/bundle.json","state":"https://pith.science/pith/5BZJTRWKNKPK27LK6UGTQ3GBCB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5BZJTRWKNKPK27LK6UGTQ3GBCB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:5BZJTRWKNKPK27LK6UGTQ3GBCB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2ff3638923709392c5ba244bb9f9e9d45c14540607d540ac9cf54c22af7c7562","cross_cats_sorted":["cs.GT","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-04-01T15:56:43Z","title_canon_sha256":"e5ab569d0ba5a91e3244ad9ef7c8dad67cb899a00fb5e6b6c43919cd0fc870dd"},"schema_version":"1.0","source":{"id":"1804.00308","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1804.00308","created_at":"2026-07-05T03:17:43Z"},{"alias_kind":"arxiv_version","alias_value":"1804.00308v3","created_at":"2026-07-05T03:17:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1804.00308","created_at":"2026-07-05T03:17:43Z"},{"alias_kind":"pith_short_12","alias_value":"5BZJTRWKNKPK","created_at":"2026-07-05T03:17:43Z"},{"alias_kind":"pith_short_16","alias_value":"5BZJTRWKNKPK27LK","created_at":"2026-07-05T03:17:43Z"},{"alias_kind":"pith_short_8","alias_value":"5BZJTRWK","created_at":"2026-07-05T03:17:43Z"}],"graph_snapshots":[{"event_id":"sha256:f01ac8c45dede40b2c3489403c2fe17efcefd2caea9af83d455e765c2cd2b58e","target":"graph","created_at":"2026-07-05T03:17:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1804.00308/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As machine learning becomes widely used for automated decisions, attackers have strong incentives to manipulate the results and models generated by machine learning algorithms. In this paper, we perform the first systematic study of poisoning attacks and their countermeasures for linear regression models. In poisoning attacks, attackers deliberately influence the training data to manipulate the results of a predictive model. We propose a theoretically-grounded optimization framework specifically designed for linear regression and demonstrate its effectiveness on a range of datasets and models.","authors_text":"Alina Oprea, Battista Biggio, Bo Li, Chang Liu, Cristina Nita-Rotaru, Matthew Jagielski","cross_cats":["cs.GT","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-04-01T15:56:43Z","title":"Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1804.00308","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:96cb610af8f175a53ef263f956a2f88da3c96823739f11a2ba70e5a2251d39fc","target":"record","created_at":"2026-07-05T03:17:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2ff3638923709392c5ba244bb9f9e9d45c14540607d540ac9cf54c22af7c7562","cross_cats_sorted":["cs.GT","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-04-01T15:56:43Z","title_canon_sha256":"e5ab569d0ba5a91e3244ad9ef7c8dad67cb899a00fb5e6b6c43919cd0fc870dd"},"schema_version":"1.0","source":{"id":"1804.00308","kind":"arxiv","version":3}},"canonical_sha256":"e87299c6ca6a9ead7d6af50d386cc110770cbeb7f87dffa4e0b93c0b4074040a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e87299c6ca6a9ead7d6af50d386cc110770cbeb7f87dffa4e0b93c0b4074040a","first_computed_at":"2026-07-05T03:17:43.312963Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:17:43.312963Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"k6Eg9CUArDBjuTQkCnRL47CbRqhqUvLdP9ZJ9ucK6yIAhG3wB4oELRak67PAp44C4SDud5Rx+wgNpFCTSwSWBw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:17:43.313500Z","signed_message":"canonical_sha256_bytes"},"source_id":"1804.00308","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:96cb610af8f175a53ef263f956a2f88da3c96823739f11a2ba70e5a2251d39fc","sha256:f01ac8c45dede40b2c3489403c2fe17efcefd2caea9af83d455e765c2cd2b58e"],"state_sha256":"48d33ee9ada409abb3bf4233b626b49c66886fc7369d9c6677079a3cf40216f8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aKjzuNH72StkzpWzvIQ5/TMx7iUrpE114VGxJSEIgfMI7yclxzTEUiUgdpY4yGCZE7SUQ62O04RjfrNtmoUUBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T04:01:46.141555Z","bundle_sha256":"5bd4f88003051465b5d2c54605e70d038dcb494e36704ea78daf39b64b448372"}}