{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2023:BQYR577QSBSXL73RPSDA5WLSRE","short_pith_number":"pith:BQYR577Q","schema_version":"1.0","canonical_sha256":"0c311efff0906575ff717c860ed9728911020f543aff47586569c343e7eda373","source":{"kind":"arxiv","id":"2303.03320","version":3},"attestation_state":"computed","paper":{"title":"Learning to Backdoor Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.DC"],"primary_cat":"cs.LG","authors_text":"Chen Wu, Henger Li, Sencun Zhu, Zizhan Zheng","submitted_at":"2023-03-06T17:47:04Z","abstract_excerpt":"In a federated learning (FL) system, malicious participants can easily embed backdoors into the aggregated model while maintaining the model's performance on the main task. To this end, various defenses, including training stage aggregation-based defenses and post-training mitigation defenses, have been proposed recently. While these defenses obtain reasonable performance against existing backdoor attacks, which are mainly heuristics based, we show that they are insufficient in the face of more advanced attacks. In particular, we propose a general reinforcement learning-based backdoor attack f"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2303.03320","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-03-06T17:47:04Z","cross_cats_sorted":["cs.CR","cs.DC"],"title_canon_sha256":"2a71b1d8b9d0812fc5c28c78ed3f5c0aa1dbbb706cd23e4d26052d35703b0678","abstract_canon_sha256":"7fd94dbd05ee84f2ca4a4efecaa48d05349a1211c2bf8cf41fcecc481c93ff02"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:14:41.493775Z","signature_b64":"2Y0mqXz1bxFREP8Q4DxOgNBrspONFgNj6LyOskw35kQ+VHneWPEQfgK6eZ6FMBhuzUGRlrQ22Le7F1zuabfADQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0c311efff0906575ff717c860ed9728911020f543aff47586569c343e7eda373","last_reissued_at":"2026-07-05T06:14:41.493335Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:14:41.493335Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Learning to Backdoor Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.DC"],"primary_cat":"cs.LG","authors_text":"Chen Wu, Henger Li, Sencun Zhu, Zizhan Zheng","submitted_at":"2023-03-06T17:47:04Z","abstract_excerpt":"In a federated learning (FL) system, malicious participants can easily embed backdoors into the aggregated model while maintaining the model's performance on the main task. To this end, various defenses, including training stage aggregation-based defenses and post-training mitigation defenses, have been proposed recently. While these defenses obtain reasonable performance against existing backdoor attacks, which are mainly heuristics based, we show that they are insufficient in the face of more advanced attacks. In particular, we propose a general reinforcement learning-based backdoor attack f"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.03320","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2303.03320/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2303.03320","created_at":"2026-07-05T06:14:41.493403+00:00"},{"alias_kind":"arxiv_version","alias_value":"2303.03320v3","created_at":"2026-07-05T06:14:41.493403+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.03320","created_at":"2026-07-05T06:14:41.493403+00:00"},{"alias_kind":"pith_short_12","alias_value":"BQYR577QSBSX","created_at":"2026-07-05T06:14:41.493403+00:00"},{"alias_kind":"pith_short_16","alias_value":"BQYR577QSBSXL73R","created_at":"2026-07-05T06:14:41.493403+00:00"},{"alias_kind":"pith_short_8","alias_value":"BQYR577Q","created_at":"2026-07-05T06:14:41.493403+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/BQYR577QSBSXL73RPSDA5WLSRE","json":"https://pith.science/pith/BQYR577QSBSXL73RPSDA5WLSRE.json","graph_json":"https://pith.science/api/pith-number/BQYR577QSBSXL73RPSDA5WLSRE/graph.json","events_json":"https://pith.science/api/pith-number/BQYR577QSBSXL73RPSDA5WLSRE/events.json","paper":"https://pith.science/paper/BQYR577Q"},"agent_actions":{"view_html":"https://pith.science/pith/BQYR577QSBSXL73RPSDA5WLSRE","download_json":"https://pith.science/pith/BQYR577QSBSXL73RPSDA5WLSRE.json","view_paper":"https://pith.science/paper/BQYR577Q","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2303.03320&json=true","fetch_graph":"https://pith.science/api/pith-number/BQYR577QSBSXL73RPSDA5WLSRE/graph.json","fetch_events":"https://pith.science/api/pith-number/BQYR577QSBSXL73RPSDA5WLSRE/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/BQYR577QSBSXL73RPSDA5WLSRE/action/timestamp_anchor","attest_storage":"https://pith.science/pith/BQYR577QSBSXL73RPSDA5WLSRE/action/storage_attestation","attest_author":"https://pith.science/pith/BQYR577QSBSXL73RPSDA5WLSRE/action/author_attestation","sign_citation":"https://pith.science/pith/BQYR577QSBSXL73RPSDA5WLSRE/action/citation_signature","submit_replication":"https://pith.science/pith/BQYR577QSBSXL73RPSDA5WLSRE/action/replication_record"}},"created_at":"2026-07-05T06:14:41.493403+00:00","updated_at":"2026-07-05T06:14:41.493403+00:00"}