{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:AJOFFOYD3MABHBWCEFSZU2NDJ5","short_pith_number":"pith:AJOFFOYD","canonical_record":{"source":{"id":"2311.18498","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-11-30T12:19:10Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"67dd9d77495f62546f615bfe875156b3118ce6041bab2f0fbd7f64734c185a45","abstract_canon_sha256":"9560403626e2bc71d3da894e9ef6cb68772e8b327e279f11ec0f59448a30831e"},"schema_version":"1.0"},"canonical_sha256":"025c52bb03db001386c221659a69a34f753af880fa140902a7858771ef4fad50","source":{"kind":"arxiv","id":"2311.18498","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.18498","created_at":"2026-07-05T07:18:43Z"},{"alias_kind":"arxiv_version","alias_value":"2311.18498v1","created_at":"2026-07-05T07:18:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.18498","created_at":"2026-07-05T07:18:43Z"},{"alias_kind":"pith_short_12","alias_value":"AJOFFOYD3MAB","created_at":"2026-07-05T07:18:43Z"},{"alias_kind":"pith_short_16","alias_value":"AJOFFOYD3MABHBWC","created_at":"2026-07-05T07:18:43Z"},{"alias_kind":"pith_short_8","alias_value":"AJOFFOYD","created_at":"2026-07-05T07:18:43Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:AJOFFOYD3MABHBWCEFSZU2NDJ5","target":"record","payload":{"canonical_record":{"source":{"id":"2311.18498","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-11-30T12:19:10Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"67dd9d77495f62546f615bfe875156b3118ce6041bab2f0fbd7f64734c185a45","abstract_canon_sha256":"9560403626e2bc71d3da894e9ef6cb68772e8b327e279f11ec0f59448a30831e"},"schema_version":"1.0"},"canonical_sha256":"025c52bb03db001386c221659a69a34f753af880fa140902a7858771ef4fad50","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:18:43.140946Z","signature_b64":"36resfrUCHH/hCotHSCZeiyPhCnQAkkVfZApQm2SqBPBImw2YybX1vU/sRSb1iVLL+W+jnzi2hVyyBoD0CN0Cg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"025c52bb03db001386c221659a69a34f753af880fa140902a7858771ef4fad50","last_reissued_at":"2026-07-05T07:18:43.140524Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:18:43.140524Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2311.18498","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:18:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"u0FbuyYIe3jYCSLVQpNv7Jf7M0flQLm+Gu8IsjmcdHDn0oH1vh4Q6UWz3ObMg77vhduhqXdSApryWYqM1JVnBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T06:24:07.142130Z"},"content_sha256":"2edacb47066d6430ee59dbafa5cbe90ec3526582f9aaf5fcebf525939c62fa4e","schema_version":"1.0","event_id":"sha256:2edacb47066d6430ee59dbafa5cbe90ec3526582f9aaf5fcebf525939c62fa4e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:AJOFFOYD3MABHBWCEFSZU2NDJ5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Data-Agnostic Model Poisoning against Federated Learning: A Graph Autoencoder Approach","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"H. Vincent Poor, Jingjing Zheng, Kai Li, Ozgur B. Akan, Wei Ni, Xin Yuan","submitted_at":"2023-11-30T12:19:10Z","abstract_excerpt":"This paper proposes a novel, data-agnostic, model poisoning attack on Federated Learning (FL), by designing a new adversarial graph autoencoder (GAE)-based framework. The attack requires no knowledge of FL training data and achieves both effectiveness and undetectability. By listening to the benign local models and the global model, the attacker extracts the graph structural correlations among the benign local models and the training data features substantiating the models. The attacker then adversarially regenerates the graph structural correlations while maximizing the FL training loss, and "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.18498","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.18498/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:18:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"V+itbD8eSRbfKfVncGwPkXvzVycwnxNQwVzCZdzxjir8g9m4hniVjZj50ncQCBnkDWxYzLFf2kOfNkrqlQpIDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T06:24:07.142545Z"},"content_sha256":"93f25d4190aafe2cf3de542ae67ad95842b1be055f7e7da34d4ce9e7bd5bb9b8","schema_version":"1.0","event_id":"sha256:93f25d4190aafe2cf3de542ae67ad95842b1be055f7e7da34d4ce9e7bd5bb9b8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AJOFFOYD3MABHBWCEFSZU2NDJ5/bundle.json","state_url":"https://pith.science/pith/AJOFFOYD3MABHBWCEFSZU2NDJ5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AJOFFOYD3MABHBWCEFSZU2NDJ5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T06:24:07Z","links":{"resolver":"https://pith.science/pith/AJOFFOYD3MABHBWCEFSZU2NDJ5","bundle":"https://pith.science/pith/AJOFFOYD3MABHBWCEFSZU2NDJ5/bundle.json","state":"https://pith.science/pith/AJOFFOYD3MABHBWCEFSZU2NDJ5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AJOFFOYD3MABHBWCEFSZU2NDJ5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:AJOFFOYD3MABHBWCEFSZU2NDJ5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9560403626e2bc71d3da894e9ef6cb68772e8b327e279f11ec0f59448a30831e","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-11-30T12:19:10Z","title_canon_sha256":"67dd9d77495f62546f615bfe875156b3118ce6041bab2f0fbd7f64734c185a45"},"schema_version":"1.0","source":{"id":"2311.18498","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.18498","created_at":"2026-07-05T07:18:43Z"},{"alias_kind":"arxiv_version","alias_value":"2311.18498v1","created_at":"2026-07-05T07:18:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.18498","created_at":"2026-07-05T07:18:43Z"},{"alias_kind":"pith_short_12","alias_value":"AJOFFOYD3MAB","created_at":"2026-07-05T07:18:43Z"},{"alias_kind":"pith_short_16","alias_value":"AJOFFOYD3MABHBWC","created_at":"2026-07-05T07:18:43Z"},{"alias_kind":"pith_short_8","alias_value":"AJOFFOYD","created_at":"2026-07-05T07:18:43Z"}],"graph_snapshots":[{"event_id":"sha256:93f25d4190aafe2cf3de542ae67ad95842b1be055f7e7da34d4ce9e7bd5bb9b8","target":"graph","created_at":"2026-07-05T07:18:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.18498/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This paper proposes a novel, data-agnostic, model poisoning attack on Federated Learning (FL), by designing a new adversarial graph autoencoder (GAE)-based framework. The attack requires no knowledge of FL training data and achieves both effectiveness and undetectability. By listening to the benign local models and the global model, the attacker extracts the graph structural correlations among the benign local models and the training data features substantiating the models. The attacker then adversarially regenerates the graph structural correlations while maximizing the FL training loss, and ","authors_text":"H. Vincent Poor, Jingjing Zheng, Kai Li, Ozgur B. Akan, Wei Ni, Xin Yuan","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-11-30T12:19:10Z","title":"Data-Agnostic Model Poisoning against Federated Learning: A Graph Autoencoder Approach"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.18498","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2edacb47066d6430ee59dbafa5cbe90ec3526582f9aaf5fcebf525939c62fa4e","target":"record","created_at":"2026-07-05T07:18:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9560403626e2bc71d3da894e9ef6cb68772e8b327e279f11ec0f59448a30831e","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-11-30T12:19:10Z","title_canon_sha256":"67dd9d77495f62546f615bfe875156b3118ce6041bab2f0fbd7f64734c185a45"},"schema_version":"1.0","source":{"id":"2311.18498","kind":"arxiv","version":1}},"canonical_sha256":"025c52bb03db001386c221659a69a34f753af880fa140902a7858771ef4fad50","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"025c52bb03db001386c221659a69a34f753af880fa140902a7858771ef4fad50","first_computed_at":"2026-07-05T07:18:43.140524Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:18:43.140524Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"36resfrUCHH/hCotHSCZeiyPhCnQAkkVfZApQm2SqBPBImw2YybX1vU/sRSb1iVLL+W+jnzi2hVyyBoD0CN0Cg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:18:43.140946Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.18498","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2edacb47066d6430ee59dbafa5cbe90ec3526582f9aaf5fcebf525939c62fa4e","sha256:93f25d4190aafe2cf3de542ae67ad95842b1be055f7e7da34d4ce9e7bd5bb9b8"],"state_sha256":"2248f793b9a42c791784f5af803b4d60181607f2ee2d80f4314ddd0ff4ab5424"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3bA7jGHzflPEuvJKjmFhxjYRYYQUIMNy6n9pbdFQJszihPUFrteBU2ReKE+h/oaMbWYsg0ykvYGk5AKOWZnfBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T06:24:07.144626Z","bundle_sha256":"ae0fc67fbb99082bb1e8985c883dd765ce545ecce914ab6e9ece549a8f7cec45"}}