{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:ALWBWMQEGJZJTFFQ37W4AGRSBY","short_pith_number":"pith:ALWBWMQE","canonical_record":{"source":{"id":"2201.00763","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2022-01-03T17:10:07Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"aeb369fd23d1bdd15547b7c7dde3d14eb910e7613342c41e998e5cf7c577864d","abstract_canon_sha256":"ff41002eb114fd0cb8ba7efe4074b4b0870217aacce6ef4c05bec365900e2361"},"schema_version":"1.0"},"canonical_sha256":"02ec1b320432729994b0dfedc01a320e315abf513edc736aebcbddda39e20585","source":{"kind":"arxiv","id":"2201.00763","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.00763","created_at":"2026-07-05T03:45:06Z"},{"alias_kind":"arxiv_version","alias_value":"2201.00763v1","created_at":"2026-07-05T03:45:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.00763","created_at":"2026-07-05T03:45:06Z"},{"alias_kind":"pith_short_12","alias_value":"ALWBWMQEGJZJ","created_at":"2026-07-05T03:45:06Z"},{"alias_kind":"pith_short_16","alias_value":"ALWBWMQEGJZJTFFQ","created_at":"2026-07-05T03:45:06Z"},{"alias_kind":"pith_short_8","alias_value":"ALWBWMQE","created_at":"2026-07-05T03:45:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:ALWBWMQEGJZJTFFQ37W4AGRSBY","target":"record","payload":{"canonical_record":{"source":{"id":"2201.00763","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2022-01-03T17:10:07Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"aeb369fd23d1bdd15547b7c7dde3d14eb910e7613342c41e998e5cf7c577864d","abstract_canon_sha256":"ff41002eb114fd0cb8ba7efe4074b4b0870217aacce6ef4c05bec365900e2361"},"schema_version":"1.0"},"canonical_sha256":"02ec1b320432729994b0dfedc01a320e315abf513edc736aebcbddda39e20585","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:45:06.316733Z","signature_b64":"oQwDOwtFBmYdcPnVpXj0ZLOpjmC/CziglQH2YJRYaAEeHx5Ja+3OLWMX9pkamrBvqyVQYcKmjLZtxQw0PnEQDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"02ec1b320432729994b0dfedc01a320e315abf513edc736aebcbddda39e20585","last_reissued_at":"2026-07-05T03:45:06.316088Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:45:06.316088Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2201.00763","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:45:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QhGJPfLfTDI05HxQ9wIJwft6LTE9Be92BE2mIvYXo0g2Z7RF57fUcAMtrNHLSWflzVq5M2cNJatDnvXHt7oICA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T03:44:09.080017Z"},"content_sha256":"fd55927248716d9fa3a545ddab23e4a6cf1eb83b9f3cf2742358186e523a3780","schema_version":"1.0","event_id":"sha256:fd55927248716d9fa3a545ddab23e4a6cf1eb83b9f3cf2742358186e523a3780"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:ALWBWMQEGJZJTFFQ37W4AGRSBY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DeepSight: Mitigating Backdoor Attacks in Federated Learning Through Deep Model Inspection","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Ahmad-Reza Sadeghi, Markus Miettinen, Phillip Rieger, Thien Duc Nguyen","submitted_at":"2022-01-03T17:10:07Z","abstract_excerpt":"Federated Learning (FL) allows multiple clients to collaboratively train a Neural Network (NN) model on their private data without revealing the data. Recently, several targeted poisoning attacks against FL have been introduced. These attacks inject a backdoor into the resulting model that allows adversary-controlled inputs to be misclassified. Existing countermeasures against backdoor attacks are inefficient and often merely aim to exclude deviating models from the aggregation. However, this approach also removes benign models of clients with deviating data distributions, causing the aggregat"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.00763","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2201.00763/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:45:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rgk5Gv2TaQiCKBktZX2cmyi6vPuVt0G1O9/TLmZydXQ2jBfvt5QcHLWy5TjbtCxC7qkfR2JzEq198iF/gKNPDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T03:44:09.080610Z"},"content_sha256":"e3cded9e81f91c6bc24efa2230ff4c6ab7361bc26dcd07aa230635b01bd4632e","schema_version":"1.0","event_id":"sha256:e3cded9e81f91c6bc24efa2230ff4c6ab7361bc26dcd07aa230635b01bd4632e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ALWBWMQEGJZJTFFQ37W4AGRSBY/bundle.json","state_url":"https://pith.science/pith/ALWBWMQEGJZJTFFQ37W4AGRSBY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ALWBWMQEGJZJTFFQ37W4AGRSBY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T03:44:09Z","links":{"resolver":"https://pith.science/pith/ALWBWMQEGJZJTFFQ37W4AGRSBY","bundle":"https://pith.science/pith/ALWBWMQEGJZJTFFQ37W4AGRSBY/bundle.json","state":"https://pith.science/pith/ALWBWMQEGJZJTFFQ37W4AGRSBY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ALWBWMQEGJZJTFFQ37W4AGRSBY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:ALWBWMQEGJZJTFFQ37W4AGRSBY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ff41002eb114fd0cb8ba7efe4074b4b0870217aacce6ef4c05bec365900e2361","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2022-01-03T17:10:07Z","title_canon_sha256":"aeb369fd23d1bdd15547b7c7dde3d14eb910e7613342c41e998e5cf7c577864d"},"schema_version":"1.0","source":{"id":"2201.00763","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.00763","created_at":"2026-07-05T03:45:06Z"},{"alias_kind":"arxiv_version","alias_value":"2201.00763v1","created_at":"2026-07-05T03:45:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.00763","created_at":"2026-07-05T03:45:06Z"},{"alias_kind":"pith_short_12","alias_value":"ALWBWMQEGJZJ","created_at":"2026-07-05T03:45:06Z"},{"alias_kind":"pith_short_16","alias_value":"ALWBWMQEGJZJTFFQ","created_at":"2026-07-05T03:45:06Z"},{"alias_kind":"pith_short_8","alias_value":"ALWBWMQE","created_at":"2026-07-05T03:45:06Z"}],"graph_snapshots":[{"event_id":"sha256:e3cded9e81f91c6bc24efa2230ff4c6ab7361bc26dcd07aa230635b01bd4632e","target":"graph","created_at":"2026-07-05T03:45:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2201.00763/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated Learning (FL) allows multiple clients to collaboratively train a Neural Network (NN) model on their private data without revealing the data. Recently, several targeted poisoning attacks against FL have been introduced. These attacks inject a backdoor into the resulting model that allows adversary-controlled inputs to be misclassified. Existing countermeasures against backdoor attacks are inefficient and often merely aim to exclude deviating models from the aggregation. However, this approach also removes benign models of clients with deviating data distributions, causing the aggregat","authors_text":"Ahmad-Reza Sadeghi, Markus Miettinen, Phillip Rieger, Thien Duc Nguyen","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2022-01-03T17:10:07Z","title":"DeepSight: Mitigating Backdoor Attacks in Federated Learning Through Deep Model Inspection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.00763","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fd55927248716d9fa3a545ddab23e4a6cf1eb83b9f3cf2742358186e523a3780","target":"record","created_at":"2026-07-05T03:45:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ff41002eb114fd0cb8ba7efe4074b4b0870217aacce6ef4c05bec365900e2361","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2022-01-03T17:10:07Z","title_canon_sha256":"aeb369fd23d1bdd15547b7c7dde3d14eb910e7613342c41e998e5cf7c577864d"},"schema_version":"1.0","source":{"id":"2201.00763","kind":"arxiv","version":1}},"canonical_sha256":"02ec1b320432729994b0dfedc01a320e315abf513edc736aebcbddda39e20585","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"02ec1b320432729994b0dfedc01a320e315abf513edc736aebcbddda39e20585","first_computed_at":"2026-07-05T03:45:06.316088Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:45:06.316088Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"oQwDOwtFBmYdcPnVpXj0ZLOpjmC/CziglQH2YJRYaAEeHx5Ja+3OLWMX9pkamrBvqyVQYcKmjLZtxQw0PnEQDw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:45:06.316733Z","signed_message":"canonical_sha256_bytes"},"source_id":"2201.00763","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fd55927248716d9fa3a545ddab23e4a6cf1eb83b9f3cf2742358186e523a3780","sha256:e3cded9e81f91c6bc24efa2230ff4c6ab7361bc26dcd07aa230635b01bd4632e"],"state_sha256":"1259c1aee8348f42902e0d4d7d8be909135302f6c31f060fb8b0692b0726ed77"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VekRFrtJxUybBZxSMinLCoZuJIgooq0EZFLeIOcNa59Km688hewm3NFo8IXu2cl8fKAEhw8xXW4LbJspuQN0Ag==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T03:44:09.084766Z","bundle_sha256":"9c843490f3d3bdec0da25c7dd65b87eb2c84da2697201e9fcbf1e8062d682c26"}}