{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:6RXVXVSKFIXSEGQMN3AFTP3WZQ","short_pith_number":"pith:6RXVXVSK","canonical_record":{"source":{"id":"2202.08578","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-17T10:53:52Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"c97bce945e083a07b2d602dc641bbff71a3d4bc10eda925de710ed883e4ec1b9","abstract_canon_sha256":"d25df157d7b8e766bb8c9b93d6bbfdbc940559e2f415e00e1213d42ec3e56826"},"schema_version":"1.0"},"canonical_sha256":"f46f5bd64a2a2f221a0c6ec059bf76cc09972d618bab7e6c428967f5b3d303a9","source":{"kind":"arxiv","id":"2202.08578","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.08578","created_at":"2026-07-05T04:42:17Z"},{"alias_kind":"arxiv_version","alias_value":"2202.08578v2","created_at":"2026-07-05T04:42:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.08578","created_at":"2026-07-05T04:42:17Z"},{"alias_kind":"pith_short_12","alias_value":"6RXVXVSKFIXS","created_at":"2026-07-05T04:42:17Z"},{"alias_kind":"pith_short_16","alias_value":"6RXVXVSKFIXSEGQM","created_at":"2026-07-05T04:42:17Z"},{"alias_kind":"pith_short_8","alias_value":"6RXVXVSK","created_at":"2026-07-05T04:42:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:6RXVXVSKFIXSEGQMN3AFTP3WZQ","target":"record","payload":{"canonical_record":{"source":{"id":"2202.08578","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-17T10:53:52Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"c97bce945e083a07b2d602dc641bbff71a3d4bc10eda925de710ed883e4ec1b9","abstract_canon_sha256":"d25df157d7b8e766bb8c9b93d6bbfdbc940559e2f415e00e1213d42ec3e56826"},"schema_version":"1.0"},"canonical_sha256":"f46f5bd64a2a2f221a0c6ec059bf76cc09972d618bab7e6c428967f5b3d303a9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:42:17.016891Z","signature_b64":"Fn7y0mqkYaMdWO1kTZ2Oa0+TmTO4sIRwieMoNH0obZW+/6RL/qk/SdUSDjK7RYkeBzjR5a96hDnU7uld3j7MCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f46f5bd64a2a2f221a0c6ec059bf76cc09972d618bab7e6c428967f5b3d303a9","last_reissued_at":"2026-07-05T04:42:17.016343Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:42:17.016343Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2202.08578","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:42:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Kmples6lVamV5nabQ49WLn6iOaqf6xrVPhzowHzt7FtTsRGLV4U2VaGs5khmNj7g/fBH5Grmjw5OxUq/JQzUDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T16:48:00.572408Z"},"content_sha256":"24f0046b76af27d55cc9be4a3cf733c63ee64c1410c9cc3834fc22a8a8394c11","schema_version":"1.0","event_id":"sha256:24f0046b76af27d55cc9be4a3cf733c63ee64c1410c9cc3834fc22a8a8394c11"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:6RXVXVSKFIXSEGQMN3AFTP3WZQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"An Equivalence Between Data Poisoning and Byzantine Gradient Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"L\\^e-Nguy\\^en Hoang, Oscar Villemaud, Rachid Guerraoui, Sadegh Farhadkhani","submitted_at":"2022-02-17T10:53:52Z","abstract_excerpt":"To study the resilience of distributed learning, the \"Byzantine\" literature considers a strong threat model where workers can report arbitrary gradients to the parameter server. Whereas this model helped obtain several fundamental results, it has sometimes been considered unrealistic, when the workers are mostly trustworthy machines. In this paper, we show a surprising equivalence between this model and data poisoning, a threat considered much more realistic. More specifically, we prove that every gradient attack can be reduced to data poisoning, in any personalized federated learning system w"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.08578","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2202.08578/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:42:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RfZbnKEkY14mUpVsm7nkrYQaGk3SN19S29ca+GE6MYKzBp+EtaUfk7qhIh78znpu/kZfKO09lMT5TDMHxa44Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T16:48:00.572756Z"},"content_sha256":"2d9fe5c13d35fc2dfcf147312d4d89ac6fc787bedbb5d1e94dcc6ffffbfe9878","schema_version":"1.0","event_id":"sha256:2d9fe5c13d35fc2dfcf147312d4d89ac6fc787bedbb5d1e94dcc6ffffbfe9878"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6RXVXVSKFIXSEGQMN3AFTP3WZQ/bundle.json","state_url":"https://pith.science/pith/6RXVXVSKFIXSEGQMN3AFTP3WZQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6RXVXVSKFIXSEGQMN3AFTP3WZQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T16:48:00Z","links":{"resolver":"https://pith.science/pith/6RXVXVSKFIXSEGQMN3AFTP3WZQ","bundle":"https://pith.science/pith/6RXVXVSKFIXSEGQMN3AFTP3WZQ/bundle.json","state":"https://pith.science/pith/6RXVXVSKFIXSEGQMN3AFTP3WZQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6RXVXVSKFIXSEGQMN3AFTP3WZQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:6RXVXVSKFIXSEGQMN3AFTP3WZQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d25df157d7b8e766bb8c9b93d6bbfdbc940559e2f415e00e1213d42ec3e56826","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-17T10:53:52Z","title_canon_sha256":"c97bce945e083a07b2d602dc641bbff71a3d4bc10eda925de710ed883e4ec1b9"},"schema_version":"1.0","source":{"id":"2202.08578","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.08578","created_at":"2026-07-05T04:42:17Z"},{"alias_kind":"arxiv_version","alias_value":"2202.08578v2","created_at":"2026-07-05T04:42:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.08578","created_at":"2026-07-05T04:42:17Z"},{"alias_kind":"pith_short_12","alias_value":"6RXVXVSKFIXS","created_at":"2026-07-05T04:42:17Z"},{"alias_kind":"pith_short_16","alias_value":"6RXVXVSKFIXSEGQM","created_at":"2026-07-05T04:42:17Z"},{"alias_kind":"pith_short_8","alias_value":"6RXVXVSK","created_at":"2026-07-05T04:42:17Z"}],"graph_snapshots":[{"event_id":"sha256:2d9fe5c13d35fc2dfcf147312d4d89ac6fc787bedbb5d1e94dcc6ffffbfe9878","target":"graph","created_at":"2026-07-05T04:42:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.08578/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"To study the resilience of distributed learning, the \"Byzantine\" literature considers a strong threat model where workers can report arbitrary gradients to the parameter server. Whereas this model helped obtain several fundamental results, it has sometimes been considered unrealistic, when the workers are mostly trustworthy machines. In this paper, we show a surprising equivalence between this model and data poisoning, a threat considered much more realistic. More specifically, we prove that every gradient attack can be reduced to data poisoning, in any personalized federated learning system w","authors_text":"L\\^e-Nguy\\^en Hoang, Oscar Villemaud, Rachid Guerraoui, Sadegh Farhadkhani","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-17T10:53:52Z","title":"An Equivalence Between Data Poisoning and Byzantine Gradient Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.08578","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:24f0046b76af27d55cc9be4a3cf733c63ee64c1410c9cc3834fc22a8a8394c11","target":"record","created_at":"2026-07-05T04:42:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d25df157d7b8e766bb8c9b93d6bbfdbc940559e2f415e00e1213d42ec3e56826","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-17T10:53:52Z","title_canon_sha256":"c97bce945e083a07b2d602dc641bbff71a3d4bc10eda925de710ed883e4ec1b9"},"schema_version":"1.0","source":{"id":"2202.08578","kind":"arxiv","version":2}},"canonical_sha256":"f46f5bd64a2a2f221a0c6ec059bf76cc09972d618bab7e6c428967f5b3d303a9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f46f5bd64a2a2f221a0c6ec059bf76cc09972d618bab7e6c428967f5b3d303a9","first_computed_at":"2026-07-05T04:42:17.016343Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:42:17.016343Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Fn7y0mqkYaMdWO1kTZ2Oa0+TmTO4sIRwieMoNH0obZW+/6RL/qk/SdUSDjK7RYkeBzjR5a96hDnU7uld3j7MCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T04:42:17.016891Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.08578","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:24f0046b76af27d55cc9be4a3cf733c63ee64c1410c9cc3834fc22a8a8394c11","sha256:2d9fe5c13d35fc2dfcf147312d4d89ac6fc787bedbb5d1e94dcc6ffffbfe9878"],"state_sha256":"ab905b0f4823d7cc77f6ff147e36e04a053dd47d8d2cf1a95c917a892bf100df"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wub8fRhB2LHtEWtRcjoKv1SpwYeutElpvwMoDKBVMirRfsN3181OlB0bwK9jU2HxkFCRusxLldCI3jHnYEACAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T16:48:00.576160Z","bundle_sha256":"e7f3dbc763449965b374c84c119c5942a80487dfed3e3108d087d4e142e8aa94"}}