{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:7EA6HWLAIRD24L66I5AUUGZPDB","short_pith_number":"pith:7EA6HWLA","canonical_record":{"source":{"id":"2304.12961","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-04-25T16:11:10Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"807e70e1082f64b9ecf47c8d8a644e89796f7ec6e6bd5f35a715ebfba6543c02","abstract_canon_sha256":"ee506d59d9d3ea661e16b699581a0803b199c4a9b7915e58f885e441c53f5028"},"schema_version":"1.0"},"canonical_sha256":"f901e3d9604447ae2fde47414a1b2f184ce70636eb0ec37cfe7ce9d2a767cfe7","source":{"kind":"arxiv","id":"2304.12961","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.12961","created_at":"2026-07-05T06:13:56Z"},{"alias_kind":"arxiv_version","alias_value":"2304.12961v2","created_at":"2026-07-05T06:13:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.12961","created_at":"2026-07-05T06:13:56Z"},{"alias_kind":"pith_short_12","alias_value":"7EA6HWLAIRD2","created_at":"2026-07-05T06:13:56Z"},{"alias_kind":"pith_short_16","alias_value":"7EA6HWLAIRD24L66","created_at":"2026-07-05T06:13:56Z"},{"alias_kind":"pith_short_8","alias_value":"7EA6HWLA","created_at":"2026-07-05T06:13:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:7EA6HWLAIRD24L66I5AUUGZPDB","target":"record","payload":{"canonical_record":{"source":{"id":"2304.12961","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-04-25T16:11:10Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"807e70e1082f64b9ecf47c8d8a644e89796f7ec6e6bd5f35a715ebfba6543c02","abstract_canon_sha256":"ee506d59d9d3ea661e16b699581a0803b199c4a9b7915e58f885e441c53f5028"},"schema_version":"1.0"},"canonical_sha256":"f901e3d9604447ae2fde47414a1b2f184ce70636eb0ec37cfe7ce9d2a767cfe7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:13:56.301440Z","signature_b64":"xANIeORvn0/qzPuV5pN6LbkLaUgK8wGuG8VLUQEmuqg4cnzGqreSRcFoDC00s0zlLQeCqW1S1PLzyc23fCUwCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f901e3d9604447ae2fde47414a1b2f184ce70636eb0ec37cfe7ce9d2a767cfe7","last_reissued_at":"2026-07-05T06:13:56.300962Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:13:56.300962Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2304.12961","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:13:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1GWt8E+xDWpJsglH5glWtixEL9DNPGrR/gReJzQ54rvgXCZSzpKg17LSZvjiVLYN7AolsayZLegPRjAt0Q1sDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T13:59:39.151698Z"},"content_sha256":"201b3a6051af36ee9b7812847e224cff4635d0a4de4bcaa3ff9c054344565681","schema_version":"1.0","event_id":"sha256:201b3a6051af36ee9b7812847e224cff4635d0a4de4bcaa3ff9c054344565681"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:7EA6HWLAIRD24L66I5AUUGZPDB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Chameleon: Adapting to Peer Images for Planting Durable Backdoors in Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Songze Li, Yanbo Dai","submitted_at":"2023-04-25T16:11:10Z","abstract_excerpt":"In a federated learning (FL) system, distributed clients upload their local models to a central server to aggregate into a global model. Malicious clients may plant backdoors into the global model through uploading poisoned local models, causing images with specific patterns to be misclassified into some target labels. Backdoors planted by current attacks are not durable, and vanish quickly once the attackers stop model poisoning. In this paper, we investigate the connection between the durability of FL backdoors and the relationships between benign images and poisoned images (i.e., the images"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.12961","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2304.12961/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:13:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5Px7g8TR8uBBkHt8sziE8R8xsHhcIb2blybBuy8grLYjH81y9Ckjw5VukZZc6tpT3VF0iUgJqng5sSOu1+5sBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T13:59:39.153377Z"},"content_sha256":"b0c59ab729ab86938b14f4903c17c20552368ee3fd141532b1e9e1acb8d13535","schema_version":"1.0","event_id":"sha256:b0c59ab729ab86938b14f4903c17c20552368ee3fd141532b1e9e1acb8d13535"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7EA6HWLAIRD24L66I5AUUGZPDB/bundle.json","state_url":"https://pith.science/pith/7EA6HWLAIRD24L66I5AUUGZPDB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7EA6HWLAIRD24L66I5AUUGZPDB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T13:59:39Z","links":{"resolver":"https://pith.science/pith/7EA6HWLAIRD24L66I5AUUGZPDB","bundle":"https://pith.science/pith/7EA6HWLAIRD24L66I5AUUGZPDB/bundle.json","state":"https://pith.science/pith/7EA6HWLAIRD24L66I5AUUGZPDB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7EA6HWLAIRD24L66I5AUUGZPDB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:7EA6HWLAIRD24L66I5AUUGZPDB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ee506d59d9d3ea661e16b699581a0803b199c4a9b7915e58f885e441c53f5028","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-04-25T16:11:10Z","title_canon_sha256":"807e70e1082f64b9ecf47c8d8a644e89796f7ec6e6bd5f35a715ebfba6543c02"},"schema_version":"1.0","source":{"id":"2304.12961","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.12961","created_at":"2026-07-05T06:13:56Z"},{"alias_kind":"arxiv_version","alias_value":"2304.12961v2","created_at":"2026-07-05T06:13:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.12961","created_at":"2026-07-05T06:13:56Z"},{"alias_kind":"pith_short_12","alias_value":"7EA6HWLAIRD2","created_at":"2026-07-05T06:13:56Z"},{"alias_kind":"pith_short_16","alias_value":"7EA6HWLAIRD24L66","created_at":"2026-07-05T06:13:56Z"},{"alias_kind":"pith_short_8","alias_value":"7EA6HWLA","created_at":"2026-07-05T06:13:56Z"}],"graph_snapshots":[{"event_id":"sha256:b0c59ab729ab86938b14f4903c17c20552368ee3fd141532b1e9e1acb8d13535","target":"graph","created_at":"2026-07-05T06:13:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2304.12961/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In a federated learning (FL) system, distributed clients upload their local models to a central server to aggregate into a global model. Malicious clients may plant backdoors into the global model through uploading poisoned local models, causing images with specific patterns to be misclassified into some target labels. Backdoors planted by current attacks are not durable, and vanish quickly once the attackers stop model poisoning. In this paper, we investigate the connection between the durability of FL backdoors and the relationships between benign images and poisoned images (i.e., the images","authors_text":"Songze Li, Yanbo Dai","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-04-25T16:11:10Z","title":"Chameleon: Adapting to Peer Images for Planting Durable Backdoors in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.12961","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:201b3a6051af36ee9b7812847e224cff4635d0a4de4bcaa3ff9c054344565681","target":"record","created_at":"2026-07-05T06:13:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ee506d59d9d3ea661e16b699581a0803b199c4a9b7915e58f885e441c53f5028","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-04-25T16:11:10Z","title_canon_sha256":"807e70e1082f64b9ecf47c8d8a644e89796f7ec6e6bd5f35a715ebfba6543c02"},"schema_version":"1.0","source":{"id":"2304.12961","kind":"arxiv","version":2}},"canonical_sha256":"f901e3d9604447ae2fde47414a1b2f184ce70636eb0ec37cfe7ce9d2a767cfe7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f901e3d9604447ae2fde47414a1b2f184ce70636eb0ec37cfe7ce9d2a767cfe7","first_computed_at":"2026-07-05T06:13:56.300962Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:13:56.300962Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xANIeORvn0/qzPuV5pN6LbkLaUgK8wGuG8VLUQEmuqg4cnzGqreSRcFoDC00s0zlLQeCqW1S1PLzyc23fCUwCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:13:56.301440Z","signed_message":"canonical_sha256_bytes"},"source_id":"2304.12961","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:201b3a6051af36ee9b7812847e224cff4635d0a4de4bcaa3ff9c054344565681","sha256:b0c59ab729ab86938b14f4903c17c20552368ee3fd141532b1e9e1acb8d13535"],"state_sha256":"81d8198cfad8e683e4618566408ecf88a3c52ca78b81100abe32d8c7f8c2c72a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8xrIVXFwcL6LbgITPUV436DIusqU4YXybPwTqEhF8jdYnaZALA0mH5bKJCfn0/I++9vBoq+3lVSG/dApROPRAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T13:59:39.160336Z","bundle_sha256":"0fedd2c232ddd0a06e8d364504d836295ca6359bddded9bf8c4902dc91d27f04"}}