{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:5QMYTBCIC6J442D2BN2TJA7CP4","short_pith_number":"pith:5QMYTBCI","canonical_record":{"source":{"id":"2306.12608","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-22T00:11:53Z","cross_cats_sorted":[],"title_canon_sha256":"56f2cee17b0c976bc16fe46d3cadecdf7c7272b9437392aa5e58ab1c4c2f822d","abstract_canon_sha256":"159cb4a6d3de785f98342357738171a94833de34bdf3f0a4adbace8c9a5df15b"},"schema_version":"1.0"},"canonical_sha256":"ec198984481793ce687a0b753483e27f1ead173f03d71a9c0d56772c1521176c","source":{"kind":"arxiv","id":"2306.12608","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.12608","created_at":"2026-07-05T09:48:59Z"},{"alias_kind":"arxiv_version","alias_value":"2306.12608v4","created_at":"2026-07-05T09:48:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.12608","created_at":"2026-07-05T09:48:59Z"},{"alias_kind":"pith_short_12","alias_value":"5QMYTBCIC6J4","created_at":"2026-07-05T09:48:59Z"},{"alias_kind":"pith_short_16","alias_value":"5QMYTBCIC6J442D2","created_at":"2026-07-05T09:48:59Z"},{"alias_kind":"pith_short_8","alias_value":"5QMYTBCI","created_at":"2026-07-05T09:48:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:5QMYTBCIC6J442D2BN2TJA7CP4","target":"record","payload":{"canonical_record":{"source":{"id":"2306.12608","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-22T00:11:53Z","cross_cats_sorted":[],"title_canon_sha256":"56f2cee17b0c976bc16fe46d3cadecdf7c7272b9437392aa5e58ab1c4c2f822d","abstract_canon_sha256":"159cb4a6d3de785f98342357738171a94833de34bdf3f0a4adbace8c9a5df15b"},"schema_version":"1.0"},"canonical_sha256":"ec198984481793ce687a0b753483e27f1ead173f03d71a9c0d56772c1521176c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:48:59.567885Z","signature_b64":"cXxvY7HU8SjLBSQBQJUHgevw5/jJOVom/YN+KV3sQqlbY1TkUbhHZAzGGhiIIVsi/c45ypTeIQIbye8nx469CQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ec198984481793ce687a0b753483e27f1ead173f03d71a9c0d56772c1521176c","last_reissued_at":"2026-07-05T09:48:59.567313Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:48:59.567313Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.12608","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:48:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"o2oozmWWhxqMFeWXvUjoA0zpXDtGO6leB2Aq5unXyfBgZeC80iWWWzaFZ8S8rTL3LcDGl5eDYYUMwZMFzfRmBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T17:21:19.666460Z"},"content_sha256":"ae47161e72e6243c2ba4253f0ac76058c40dab3dff9a64678253f925d9a2e935","schema_version":"1.0","event_id":"sha256:ae47161e72e6243c2ba4253f0ac76058c40dab3dff9a64678253f925d9a2e935"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:5QMYTBCIC6J442D2BN2TJA7CP4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DP-BREM: Differentially-Private and Byzantine-Robust Federated Learning with Client Momentum","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Li Xiong, Ming Li, Xiaolan Gu","submitted_at":"2023-06-22T00:11:53Z","abstract_excerpt":"Federated Learning (FL) allows multiple participating clients to train machine learning models collaboratively while keeping their datasets local and only exchanging the gradient or model updates with a coordinating server. Existing FL protocols are vulnerable to attacks that aim to compromise data privacy and/or model robustness. Recently proposed defenses focused on ensuring either privacy or robustness, but not both. In this paper, we focus on simultaneously achieving differential privacy (DP) and Byzantine robustness for cross-silo FL, based on the idea of learning from history. The robust"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.12608","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.12608/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:48:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Q22lgi9CTgflwnZyzwh/BHdb3IHbX9G/YEmifMV/mYw731kN5tWtGuG8B5VGjNVZTi98oV85dWl0AWElOhfTCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T17:21:19.667312Z"},"content_sha256":"83f1aa20187aff2e7ea96698b3eb0205ef04790501353e16655bf70f0c17c10d","schema_version":"1.0","event_id":"sha256:83f1aa20187aff2e7ea96698b3eb0205ef04790501353e16655bf70f0c17c10d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5QMYTBCIC6J442D2BN2TJA7CP4/bundle.json","state_url":"https://pith.science/pith/5QMYTBCIC6J442D2BN2TJA7CP4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5QMYTBCIC6J442D2BN2TJA7CP4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T17:21:19Z","links":{"resolver":"https://pith.science/pith/5QMYTBCIC6J442D2BN2TJA7CP4","bundle":"https://pith.science/pith/5QMYTBCIC6J442D2BN2TJA7CP4/bundle.json","state":"https://pith.science/pith/5QMYTBCIC6J442D2BN2TJA7CP4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5QMYTBCIC6J442D2BN2TJA7CP4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:5QMYTBCIC6J442D2BN2TJA7CP4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"159cb4a6d3de785f98342357738171a94833de34bdf3f0a4adbace8c9a5df15b","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-22T00:11:53Z","title_canon_sha256":"56f2cee17b0c976bc16fe46d3cadecdf7c7272b9437392aa5e58ab1c4c2f822d"},"schema_version":"1.0","source":{"id":"2306.12608","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.12608","created_at":"2026-07-05T09:48:59Z"},{"alias_kind":"arxiv_version","alias_value":"2306.12608v4","created_at":"2026-07-05T09:48:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.12608","created_at":"2026-07-05T09:48:59Z"},{"alias_kind":"pith_short_12","alias_value":"5QMYTBCIC6J4","created_at":"2026-07-05T09:48:59Z"},{"alias_kind":"pith_short_16","alias_value":"5QMYTBCIC6J442D2","created_at":"2026-07-05T09:48:59Z"},{"alias_kind":"pith_short_8","alias_value":"5QMYTBCI","created_at":"2026-07-05T09:48:59Z"}],"graph_snapshots":[{"event_id":"sha256:83f1aa20187aff2e7ea96698b3eb0205ef04790501353e16655bf70f0c17c10d","target":"graph","created_at":"2026-07-05T09:48:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.12608/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated Learning (FL) allows multiple participating clients to train machine learning models collaboratively while keeping their datasets local and only exchanging the gradient or model updates with a coordinating server. Existing FL protocols are vulnerable to attacks that aim to compromise data privacy and/or model robustness. Recently proposed defenses focused on ensuring either privacy or robustness, but not both. In this paper, we focus on simultaneously achieving differential privacy (DP) and Byzantine robustness for cross-silo FL, based on the idea of learning from history. The robust","authors_text":"Li Xiong, Ming Li, Xiaolan Gu","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-22T00:11:53Z","title":"DP-BREM: Differentially-Private and Byzantine-Robust Federated Learning with Client Momentum"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.12608","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ae47161e72e6243c2ba4253f0ac76058c40dab3dff9a64678253f925d9a2e935","target":"record","created_at":"2026-07-05T09:48:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"159cb4a6d3de785f98342357738171a94833de34bdf3f0a4adbace8c9a5df15b","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-22T00:11:53Z","title_canon_sha256":"56f2cee17b0c976bc16fe46d3cadecdf7c7272b9437392aa5e58ab1c4c2f822d"},"schema_version":"1.0","source":{"id":"2306.12608","kind":"arxiv","version":4}},"canonical_sha256":"ec198984481793ce687a0b753483e27f1ead173f03d71a9c0d56772c1521176c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ec198984481793ce687a0b753483e27f1ead173f03d71a9c0d56772c1521176c","first_computed_at":"2026-07-05T09:48:59.567313Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:48:59.567313Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cXxvY7HU8SjLBSQBQJUHgevw5/jJOVom/YN+KV3sQqlbY1TkUbhHZAzGGhiIIVsi/c45ypTeIQIbye8nx469CQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:48:59.567885Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.12608","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ae47161e72e6243c2ba4253f0ac76058c40dab3dff9a64678253f925d9a2e935","sha256:83f1aa20187aff2e7ea96698b3eb0205ef04790501353e16655bf70f0c17c10d"],"state_sha256":"0f4a91f1cb7b4e2d26427b4e8a46191d75d44b8b3dd9d3a99b62aad02ed193a9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SxMFNCPcYtAVh/ulABD0xiWxuA9v6zbM9UpCsg5cO1s4zrhu/s2h4pCoW6vWIRSQMDPuR9XXq0iO4fb9ghQmAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T17:21:19.674555Z","bundle_sha256":"3575eee6164c91b4bea9bcf91a18b47e74dc4933a05a682901cb56df17b7f029"}}