{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:AZMYRK4JZ5VLIYF67MAQSE53HQ","short_pith_number":"pith:AZMYRK4J","canonical_record":{"source":{"id":"2608.09314","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-08-10T08:56:50Z","cross_cats_sorted":[],"title_canon_sha256":"b12299d20f90a19a346498a5d5fa00185025a4d8091400fef48ba8f933746ae5","abstract_canon_sha256":"adaff0a3663d9156818be89a2940f33f8c712057c795fb5d4987aec0d2ff8991"},"schema_version":"1.0"},"canonical_sha256":"065988ab89cf6ab460befb010913bb3c06276bab29a2de4e04c4ba43f3acfaa3","source":{"kind":"arxiv","id":"2608.09314","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.09314","created_at":"2026-08-11T02:22:19Z"},{"alias_kind":"arxiv_version","alias_value":"2608.09314v1","created_at":"2026-08-11T02:22:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.09314","created_at":"2026-08-11T02:22:19Z"},{"alias_kind":"pith_short_12","alias_value":"AZMYRK4JZ5VL","created_at":"2026-08-11T02:22:19Z"},{"alias_kind":"pith_short_16","alias_value":"AZMYRK4JZ5VLIYF6","created_at":"2026-08-11T02:22:19Z"},{"alias_kind":"pith_short_8","alias_value":"AZMYRK4J","created_at":"2026-08-11T02:22:19Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:AZMYRK4JZ5VLIYF67MAQSE53HQ","target":"record","payload":{"canonical_record":{"source":{"id":"2608.09314","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-08-10T08:56:50Z","cross_cats_sorted":[],"title_canon_sha256":"b12299d20f90a19a346498a5d5fa00185025a4d8091400fef48ba8f933746ae5","abstract_canon_sha256":"adaff0a3663d9156818be89a2940f33f8c712057c795fb5d4987aec0d2ff8991"},"schema_version":"1.0"},"canonical_sha256":"065988ab89cf6ab460befb010913bb3c06276bab29a2de4e04c4ba43f3acfaa3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-11T02:22:19.628205Z","signature_b64":"eCHTsp1Kk9uZJwQo646m9XRm6IaH9C5bmBY2dnuBs+wgmbkgka/X46Z0uf0kx8cDy4+JDJWe/FQY2aGNhaTRAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"065988ab89cf6ab460befb010913bb3c06276bab29a2de4e04c4ba43f3acfaa3","last_reissued_at":"2026-08-11T02:22:19.626592Z","signature_status":"signed_v1","first_computed_at":"2026-08-11T02:22:19.626592Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.09314","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-11T02:22:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RpyjZ7qYdwtj4lI/1AMAzZaJUc+nC4vW6hMxf0wOYHioQ12daJlB0a2YEQXQpjTJXinwYNx/Va7ECNs+TajNAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T00:22:46.148985Z"},"content_sha256":"699b831c70f4e46c0d557fc832779671b6b8c57e6ce32c68f3310fe94bd21365","schema_version":"1.0","event_id":"sha256:699b831c70f4e46c0d557fc832779671b6b8c57e6ce32c68f3310fe94bd21365"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:AZMYRK4JZ5VLIYF67MAQSE53HQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Targeted Label-Flipping and Oversampling Attacks on Federated Conditional GANs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Avishek Ghosh, Panav Shah","submitted_at":"2026-08-10T08:56:50Z","abstract_excerpt":"In a federated learning setup for GANs, several adversarial attacks are possible. One such attack is label flipping, in which malicious clients deliberately alter label information during local training in order to manipulate the global generator. The objective of this attack is to skew the learned generation distribution so that samples conditioned on a target label are instead mapped to a source class. In this work, we investigate the effectiveness of label flipping attacks in federated GANs through both theoretical analysis and empirical evaluation. We further consider an oversampling based"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.09314","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.09314/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-11T02:22:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"v0i5y7ToHNVjU64bnPSc0SO9vsPtKYgouarRvbVejow8MCVMMqYvUnqJtTMrqoh18GfMXLOjukXe0V6CgWnwCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T00:22:46.149704Z"},"content_sha256":"1972606ab6bc3aaaa9ba52b7e4ec02a69dcb7b44edcb84d43458f8d2b7e0f12f","schema_version":"1.0","event_id":"sha256:1972606ab6bc3aaaa9ba52b7e4ec02a69dcb7b44edcb84d43458f8d2b7e0f12f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AZMYRK4JZ5VLIYF67MAQSE53HQ/bundle.json","state_url":"https://pith.science/pith/AZMYRK4JZ5VLIYF67MAQSE53HQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AZMYRK4JZ5VLIYF67MAQSE53HQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T00:22:46Z","links":{"resolver":"https://pith.science/pith/AZMYRK4JZ5VLIYF67MAQSE53HQ","bundle":"https://pith.science/pith/AZMYRK4JZ5VLIYF67MAQSE53HQ/bundle.json","state":"https://pith.science/pith/AZMYRK4JZ5VLIYF67MAQSE53HQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AZMYRK4JZ5VLIYF67MAQSE53HQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:AZMYRK4JZ5VLIYF67MAQSE53HQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"adaff0a3663d9156818be89a2940f33f8c712057c795fb5d4987aec0d2ff8991","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-08-10T08:56:50Z","title_canon_sha256":"b12299d20f90a19a346498a5d5fa00185025a4d8091400fef48ba8f933746ae5"},"schema_version":"1.0","source":{"id":"2608.09314","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.09314","created_at":"2026-08-11T02:22:19Z"},{"alias_kind":"arxiv_version","alias_value":"2608.09314v1","created_at":"2026-08-11T02:22:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.09314","created_at":"2026-08-11T02:22:19Z"},{"alias_kind":"pith_short_12","alias_value":"AZMYRK4JZ5VL","created_at":"2026-08-11T02:22:19Z"},{"alias_kind":"pith_short_16","alias_value":"AZMYRK4JZ5VLIYF6","created_at":"2026-08-11T02:22:19Z"},{"alias_kind":"pith_short_8","alias_value":"AZMYRK4J","created_at":"2026-08-11T02:22:19Z"}],"graph_snapshots":[{"event_id":"sha256:1972606ab6bc3aaaa9ba52b7e4ec02a69dcb7b44edcb84d43458f8d2b7e0f12f","target":"graph","created_at":"2026-08-11T02:22:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.09314/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In a federated learning setup for GANs, several adversarial attacks are possible. One such attack is label flipping, in which malicious clients deliberately alter label information during local training in order to manipulate the global generator. The objective of this attack is to skew the learned generation distribution so that samples conditioned on a target label are instead mapped to a source class. In this work, we investigate the effectiveness of label flipping attacks in federated GANs through both theoretical analysis and empirical evaluation. We further consider an oversampling based","authors_text":"Avishek Ghosh, Panav Shah","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-08-10T08:56:50Z","title":"Targeted Label-Flipping and Oversampling Attacks on Federated Conditional GANs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.09314","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:699b831c70f4e46c0d557fc832779671b6b8c57e6ce32c68f3310fe94bd21365","target":"record","created_at":"2026-08-11T02:22:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"adaff0a3663d9156818be89a2940f33f8c712057c795fb5d4987aec0d2ff8991","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-08-10T08:56:50Z","title_canon_sha256":"b12299d20f90a19a346498a5d5fa00185025a4d8091400fef48ba8f933746ae5"},"schema_version":"1.0","source":{"id":"2608.09314","kind":"arxiv","version":1}},"canonical_sha256":"065988ab89cf6ab460befb010913bb3c06276bab29a2de4e04c4ba43f3acfaa3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"065988ab89cf6ab460befb010913bb3c06276bab29a2de4e04c4ba43f3acfaa3","first_computed_at":"2026-08-11T02:22:19.626592Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-11T02:22:19.626592Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"eCHTsp1Kk9uZJwQo646m9XRm6IaH9C5bmBY2dnuBs+wgmbkgka/X46Z0uf0kx8cDy4+JDJWe/FQY2aGNhaTRAg==","signature_status":"signed_v1","signed_at":"2026-08-11T02:22:19.628205Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.09314","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:699b831c70f4e46c0d557fc832779671b6b8c57e6ce32c68f3310fe94bd21365","sha256:1972606ab6bc3aaaa9ba52b7e4ec02a69dcb7b44edcb84d43458f8d2b7e0f12f"],"state_sha256":"b57f9460a6c1017cd9020ac62c1b0fe0c9bb3d12280b0b26302c3093884b8da0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AhPhnuZ2l6nT9n/ef8gjTjwoNOwC7/hstorh7HgnH8RIQ6Q+pwUn1DV0+yFAst/3mgHnLUbVIKdTrgRZ6JTSCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T00:22:46.158037Z","bundle_sha256":"3cf2b5b312134720ef8d4565eab23fbf8e6f5f2f62a1c8606a735f36fd984599"}}