{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:5CWUG477YF3BYGMSVYGZRDHLF4","short_pith_number":"pith:5CWUG477","canonical_record":{"source":{"id":"2107.03311","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-07-07T15:42:49Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"9f88037c0448c8c0d58faec0bd5b819c5d2aa4ba57d6a693d70026e49efd2c0c","abstract_canon_sha256":"bae0477ec43ead39442f1883e0ff7d8c2f09e820dcaaa710552d939d12b4227e"},"schema_version":"1.0"},"canonical_sha256":"e8ad4373ffc1761c1992ae0d988ceb2f2df3540901178e27ce512e4d29aeb6f1","source":{"kind":"arxiv","id":"2107.03311","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.03311","created_at":"2026-07-05T05:36:00Z"},{"alias_kind":"arxiv_version","alias_value":"2107.03311v4","created_at":"2026-07-05T05:36:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.03311","created_at":"2026-07-05T05:36:00Z"},{"alias_kind":"pith_short_12","alias_value":"5CWUG477YF3B","created_at":"2026-07-05T05:36:00Z"},{"alias_kind":"pith_short_16","alias_value":"5CWUG477YF3BYGMS","created_at":"2026-07-05T05:36:00Z"},{"alias_kind":"pith_short_8","alias_value":"5CWUG477","created_at":"2026-07-05T05:36:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:5CWUG477YF3BYGMSVYGZRDHLF4","target":"record","payload":{"canonical_record":{"source":{"id":"2107.03311","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-07-07T15:42:49Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"9f88037c0448c8c0d58faec0bd5b819c5d2aa4ba57d6a693d70026e49efd2c0c","abstract_canon_sha256":"bae0477ec43ead39442f1883e0ff7d8c2f09e820dcaaa710552d939d12b4227e"},"schema_version":"1.0"},"canonical_sha256":"e8ad4373ffc1761c1992ae0d988ceb2f2df3540901178e27ce512e4d29aeb6f1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:36:00.650933Z","signature_b64":"L0QdGb4q8H82cRF40coZe+XNvFVb3OPGe8onGIeT59atwVaTmrHz3UkH5hb8FQF0178v578K1BqBBQLrBchNCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e8ad4373ffc1761c1992ae0d988ceb2f2df3540901178e27ce512e4d29aeb6f1","last_reissued_at":"2026-07-05T05:36:00.650518Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:36:00.650518Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2107.03311","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:36:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NXWYD9kjcl0/s/tzk1PxM6Rh7FPapqM/t5XGwFP15hXAAJ5ZYxSYh9ZfFDyuv06TIKDYNOzR/gXcixs1YXwiDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T13:58:09.370116Z"},"content_sha256":"90fcc3a89ef9796cb5bc4ebaaca9eac075c93e184b405317792262b10e0cd6bb","schema_version":"1.0","event_id":"sha256:90fcc3a89ef9796cb5bc4ebaaca9eac075c93e184b405317792262b10e0cd6bb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:5CWUG477YF3BYGMSVYGZRDHLF4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"RoFL: Robustness of Secure Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Alexander Viand, Anwar Hithnawi, Hidde Lycklama, Lukas Burkhalter, Nicolas K\\\"uchler","submitted_at":"2021-07-07T15:42:49Z","abstract_excerpt":"Even though recent years have seen many attacks exposing severe vulnerabilities in Federated Learning (FL), a holistic understanding of what enables these attacks and how they can be mitigated effectively is still lacking. In this work, we demystify the inner workings of existing (targeted) attacks. We provide new insights into why these attacks are possible and why a definitive solution to FL robustness is challenging. We show that the need for ML algorithms to memorize tail data has significant implications for FL integrity. This phenomenon has largely been studied in the context of privacy;"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.03311","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2107.03311/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:36:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"P2oBD9i8peZgwqJEAaTIJpXIGqsZ9OZuEo+NQixDWq2LQXp4hS0B9GX92rRtJIAwnloDNoaB/XwYSNYWC5J7Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T13:58:09.370514Z"},"content_sha256":"4c6d065e6a9f4e8fad7f7a0b24ffb9eb232d33c5238659fcc1c9bda7cec15e32","schema_version":"1.0","event_id":"sha256:4c6d065e6a9f4e8fad7f7a0b24ffb9eb232d33c5238659fcc1c9bda7cec15e32"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5CWUG477YF3BYGMSVYGZRDHLF4/bundle.json","state_url":"https://pith.science/pith/5CWUG477YF3BYGMSVYGZRDHLF4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5CWUG477YF3BYGMSVYGZRDHLF4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-08T13:58:09Z","links":{"resolver":"https://pith.science/pith/5CWUG477YF3BYGMSVYGZRDHLF4","bundle":"https://pith.science/pith/5CWUG477YF3BYGMSVYGZRDHLF4/bundle.json","state":"https://pith.science/pith/5CWUG477YF3BYGMSVYGZRDHLF4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5CWUG477YF3BYGMSVYGZRDHLF4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:5CWUG477YF3BYGMSVYGZRDHLF4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bae0477ec43ead39442f1883e0ff7d8c2f09e820dcaaa710552d939d12b4227e","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-07-07T15:42:49Z","title_canon_sha256":"9f88037c0448c8c0d58faec0bd5b819c5d2aa4ba57d6a693d70026e49efd2c0c"},"schema_version":"1.0","source":{"id":"2107.03311","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.03311","created_at":"2026-07-05T05:36:00Z"},{"alias_kind":"arxiv_version","alias_value":"2107.03311v4","created_at":"2026-07-05T05:36:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.03311","created_at":"2026-07-05T05:36:00Z"},{"alias_kind":"pith_short_12","alias_value":"5CWUG477YF3B","created_at":"2026-07-05T05:36:00Z"},{"alias_kind":"pith_short_16","alias_value":"5CWUG477YF3BYGMS","created_at":"2026-07-05T05:36:00Z"},{"alias_kind":"pith_short_8","alias_value":"5CWUG477","created_at":"2026-07-05T05:36:00Z"}],"graph_snapshots":[{"event_id":"sha256:4c6d065e6a9f4e8fad7f7a0b24ffb9eb232d33c5238659fcc1c9bda7cec15e32","target":"graph","created_at":"2026-07-05T05:36:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2107.03311/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Even though recent years have seen many attacks exposing severe vulnerabilities in Federated Learning (FL), a holistic understanding of what enables these attacks and how they can be mitigated effectively is still lacking. In this work, we demystify the inner workings of existing (targeted) attacks. We provide new insights into why these attacks are possible and why a definitive solution to FL robustness is challenging. We show that the need for ML algorithms to memorize tail data has significant implications for FL integrity. This phenomenon has largely been studied in the context of privacy;","authors_text":"Alexander Viand, Anwar Hithnawi, Hidde Lycklama, Lukas Burkhalter, Nicolas K\\\"uchler","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-07-07T15:42:49Z","title":"RoFL: Robustness of Secure Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.03311","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:90fcc3a89ef9796cb5bc4ebaaca9eac075c93e184b405317792262b10e0cd6bb","target":"record","created_at":"2026-07-05T05:36:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bae0477ec43ead39442f1883e0ff7d8c2f09e820dcaaa710552d939d12b4227e","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-07-07T15:42:49Z","title_canon_sha256":"9f88037c0448c8c0d58faec0bd5b819c5d2aa4ba57d6a693d70026e49efd2c0c"},"schema_version":"1.0","source":{"id":"2107.03311","kind":"arxiv","version":4}},"canonical_sha256":"e8ad4373ffc1761c1992ae0d988ceb2f2df3540901178e27ce512e4d29aeb6f1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e8ad4373ffc1761c1992ae0d988ceb2f2df3540901178e27ce512e4d29aeb6f1","first_computed_at":"2026-07-05T05:36:00.650518Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:36:00.650518Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"L0QdGb4q8H82cRF40coZe+XNvFVb3OPGe8onGIeT59atwVaTmrHz3UkH5hb8FQF0178v578K1BqBBQLrBchNCA==","signature_status":"signed_v1","signed_at":"2026-07-05T05:36:00.650933Z","signed_message":"canonical_sha256_bytes"},"source_id":"2107.03311","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:90fcc3a89ef9796cb5bc4ebaaca9eac075c93e184b405317792262b10e0cd6bb","sha256:4c6d065e6a9f4e8fad7f7a0b24ffb9eb232d33c5238659fcc1c9bda7cec15e32"],"state_sha256":"c89e3953196ec9140afc08e3961b6c32c5a3fc91149b4906ea86263855912fb7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tj5WF5moRqkF8TENH2Bx73OoAQxYEXIwU4Lx/HixGw+GEPaTtTBqI1LGCoLEg84yPZ8es92AA33Sq0RXbEJIDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-08T13:58:09.372583Z","bundle_sha256":"daec3b0dd5e343677199046cca8875f76170ccfc084d9905e797c1b51e12f53d"}}