{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:5CB2JZ3AUHVUVL7LC6YLNJ4YEB","short_pith_number":"pith:5CB2JZ3A","canonical_record":{"source":{"id":"2308.11333","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-08-22T10:16:12Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"c581a398c259f41bcfa8358a8241a5195626a8145678254aa38afd5a7c573714","abstract_canon_sha256":"3e5de6cbff7ef1043a9080ef126645822821f99efd18d00b8643db9266fadcbe"},"schema_version":"1.0"},"canonical_sha256":"e883a4e760a1eb4aafeb17b0b6a798206723eacc9af3c6e9c2549ac49cbaf059","source":{"kind":"arxiv","id":"2308.11333","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.11333","created_at":"2026-07-05T12:06:57Z"},{"alias_kind":"arxiv_version","alias_value":"2308.11333v2","created_at":"2026-07-05T12:06:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.11333","created_at":"2026-07-05T12:06:57Z"},{"alias_kind":"pith_short_12","alias_value":"5CB2JZ3AUHVU","created_at":"2026-07-05T12:06:57Z"},{"alias_kind":"pith_short_16","alias_value":"5CB2JZ3AUHVUVL7L","created_at":"2026-07-05T12:06:57Z"},{"alias_kind":"pith_short_8","alias_value":"5CB2JZ3A","created_at":"2026-07-05T12:06:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:5CB2JZ3AUHVUVL7LC6YLNJ4YEB","target":"record","payload":{"canonical_record":{"source":{"id":"2308.11333","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-08-22T10:16:12Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"c581a398c259f41bcfa8358a8241a5195626a8145678254aa38afd5a7c573714","abstract_canon_sha256":"3e5de6cbff7ef1043a9080ef126645822821f99efd18d00b8643db9266fadcbe"},"schema_version":"1.0"},"canonical_sha256":"e883a4e760a1eb4aafeb17b0b6a798206723eacc9af3c6e9c2549ac49cbaf059","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:06:57.703068Z","signature_b64":"zRb5pnNeJnpFvgtuDzhpQ9sssN9QSx35f5A5RbuXCpTDUUJPRLMEutdsscxgz03HbbL/Uy06FJtIvY0xWYWRBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e883a4e760a1eb4aafeb17b0b6a798206723eacc9af3c6e9c2549ac49cbaf059","last_reissued_at":"2026-07-05T12:06:57.702574Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:06:57.702574Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2308.11333","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:06:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pBNJ6kKpyhdKTiB3kfogK7eJCtu2JPFX+b+enTAzRvo1WSJNllwC3YrW1emUgQxSC/XSptxXMq4d2jt1OlIzAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T13:54:06.625848Z"},"content_sha256":"b229ca0dfb84b84ab49d3a254a145e0ed9e10cbc015f80de48e31a16d6b61d7c","schema_version":"1.0","event_id":"sha256:b229ca0dfb84b84ab49d3a254a145e0ed9e10cbc015f80de48e31a16d6b61d7c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:5CB2JZ3AUHVUVL7LC6YLNJ4YEB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"FilterFL: Knowledge Filtering-based Data-Free Backdoor Defense for Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Ming Hu, Mingsong Chen, Pengyu Zhang, Xiaofei Xie, Yanxin Yang, Yihao Huang, Yue Cao","submitted_at":"2023-08-22T10:16:12Z","abstract_excerpt":"As a distributed machine learning paradigm, Federated Learning (FL) enables large-scale clients to collaboratively train a model without sharing their raw data. However, due to the lack of data auditing for untrusted clients, FL is vulnerable to poisoning attacks, especially backdoor attacks. By using poisoned data for local training or directly changing the model parameters, attackers can easily inject backdoors into the model, which can trigger the model to make misclassification of targeted patterns in images. To address these issues, we propose a novel data-free trigger-generation-based de"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.11333","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2308.11333/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:06:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VKmsrzpQPqQUS428FzauQhMHFjTPD5xybLTBl9KpqI2znq3x+vKxn1LXYc7QA3natrDK7uxqZXsh/kpSsJAFAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T13:54:06.626226Z"},"content_sha256":"41ca45904adf8b48dfbf21d2aea189cb497ea7350b42e1a69100da141a16c620","schema_version":"1.0","event_id":"sha256:41ca45904adf8b48dfbf21d2aea189cb497ea7350b42e1a69100da141a16c620"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5CB2JZ3AUHVUVL7LC6YLNJ4YEB/bundle.json","state_url":"https://pith.science/pith/5CB2JZ3AUHVUVL7LC6YLNJ4YEB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5CB2JZ3AUHVUVL7LC6YLNJ4YEB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T13:54:06Z","links":{"resolver":"https://pith.science/pith/5CB2JZ3AUHVUVL7LC6YLNJ4YEB","bundle":"https://pith.science/pith/5CB2JZ3AUHVUVL7LC6YLNJ4YEB/bundle.json","state":"https://pith.science/pith/5CB2JZ3AUHVUVL7LC6YLNJ4YEB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5CB2JZ3AUHVUVL7LC6YLNJ4YEB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:5CB2JZ3AUHVUVL7LC6YLNJ4YEB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3e5de6cbff7ef1043a9080ef126645822821f99efd18d00b8643db9266fadcbe","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-08-22T10:16:12Z","title_canon_sha256":"c581a398c259f41bcfa8358a8241a5195626a8145678254aa38afd5a7c573714"},"schema_version":"1.0","source":{"id":"2308.11333","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.11333","created_at":"2026-07-05T12:06:57Z"},{"alias_kind":"arxiv_version","alias_value":"2308.11333v2","created_at":"2026-07-05T12:06:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.11333","created_at":"2026-07-05T12:06:57Z"},{"alias_kind":"pith_short_12","alias_value":"5CB2JZ3AUHVU","created_at":"2026-07-05T12:06:57Z"},{"alias_kind":"pith_short_16","alias_value":"5CB2JZ3AUHVUVL7L","created_at":"2026-07-05T12:06:57Z"},{"alias_kind":"pith_short_8","alias_value":"5CB2JZ3A","created_at":"2026-07-05T12:06:57Z"}],"graph_snapshots":[{"event_id":"sha256:41ca45904adf8b48dfbf21d2aea189cb497ea7350b42e1a69100da141a16c620","target":"graph","created_at":"2026-07-05T12:06:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2308.11333/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As a distributed machine learning paradigm, Federated Learning (FL) enables large-scale clients to collaboratively train a model without sharing their raw data. However, due to the lack of data auditing for untrusted clients, FL is vulnerable to poisoning attacks, especially backdoor attacks. By using poisoned data for local training or directly changing the model parameters, attackers can easily inject backdoors into the model, which can trigger the model to make misclassification of targeted patterns in images. To address these issues, we propose a novel data-free trigger-generation-based de","authors_text":"Ming Hu, Mingsong Chen, Pengyu Zhang, Xiaofei Xie, Yanxin Yang, Yihao Huang, Yue Cao","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-08-22T10:16:12Z","title":"FilterFL: Knowledge Filtering-based Data-Free Backdoor Defense for Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.11333","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b229ca0dfb84b84ab49d3a254a145e0ed9e10cbc015f80de48e31a16d6b61d7c","target":"record","created_at":"2026-07-05T12:06:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3e5de6cbff7ef1043a9080ef126645822821f99efd18d00b8643db9266fadcbe","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-08-22T10:16:12Z","title_canon_sha256":"c581a398c259f41bcfa8358a8241a5195626a8145678254aa38afd5a7c573714"},"schema_version":"1.0","source":{"id":"2308.11333","kind":"arxiv","version":2}},"canonical_sha256":"e883a4e760a1eb4aafeb17b0b6a798206723eacc9af3c6e9c2549ac49cbaf059","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e883a4e760a1eb4aafeb17b0b6a798206723eacc9af3c6e9c2549ac49cbaf059","first_computed_at":"2026-07-05T12:06:57.702574Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:06:57.702574Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zRb5pnNeJnpFvgtuDzhpQ9sssN9QSx35f5A5RbuXCpTDUUJPRLMEutdsscxgz03HbbL/Uy06FJtIvY0xWYWRBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T12:06:57.703068Z","signed_message":"canonical_sha256_bytes"},"source_id":"2308.11333","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b229ca0dfb84b84ab49d3a254a145e0ed9e10cbc015f80de48e31a16d6b61d7c","sha256:41ca45904adf8b48dfbf21d2aea189cb497ea7350b42e1a69100da141a16c620"],"state_sha256":"a919d6f17104de95499c1b1c5f9728a026150e60e6be5ca2e713a05b23cbd041"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lbYZK/6wEAiC3unPriKbSTICiSQ3uBdnKRpxeSjP/J/RncxRXNQoqbx6OscRjS3EsxD1NATFp18HAO9ALYIqBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T13:54:06.628741Z","bundle_sha256":"cf4e7b954e3bdeec354659999e799a3f4a7c3ffc24d94f653c95a08b75a50ff4"}}