{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:DCRZL6BSZZIERPDHZN2W75VYJN","short_pith_number":"pith:DCRZL6BS","canonical_record":{"source":{"id":"2311.06996","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-13T00:34:45Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"8996c50a616dbe9e3988db774f5afc1130de11a5c9bb58f5625911de29dfcbc4","abstract_canon_sha256":"2331281a456a5874c42bb6aa6870d9e573bc6d6d6ca7ecd46f107c3a36a17977"},"schema_version":"1.0"},"canonical_sha256":"18a395f832ce5048bc67cb756ff6b84b437bea238430b081d82e35bae48ede48","source":{"kind":"arxiv","id":"2311.06996","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.06996","created_at":"2026-07-05T07:16:03Z"},{"alias_kind":"arxiv_version","alias_value":"2311.06996v2","created_at":"2026-07-05T07:16:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.06996","created_at":"2026-07-05T07:16:03Z"},{"alias_kind":"pith_short_12","alias_value":"DCRZL6BSZZIE","created_at":"2026-07-05T07:16:03Z"},{"alias_kind":"pith_short_16","alias_value":"DCRZL6BSZZIERPDH","created_at":"2026-07-05T07:16:03Z"},{"alias_kind":"pith_short_8","alias_value":"DCRZL6BS","created_at":"2026-07-05T07:16:03Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:DCRZL6BSZZIERPDHZN2W75VYJN","target":"record","payload":{"canonical_record":{"source":{"id":"2311.06996","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-13T00:34:45Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"8996c50a616dbe9e3988db774f5afc1130de11a5c9bb58f5625911de29dfcbc4","abstract_canon_sha256":"2331281a456a5874c42bb6aa6870d9e573bc6d6d6ca7ecd46f107c3a36a17977"},"schema_version":"1.0"},"canonical_sha256":"18a395f832ce5048bc67cb756ff6b84b437bea238430b081d82e35bae48ede48","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:16:03.210671Z","signature_b64":"lM8loGpL2H0BqTXyiA8p5/g0tbDJ9gk/xQBc2p2vUCiy8FXF8Si1KhtdFJeCPD8VsZO2sb245RrDTAVbIer1DQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"18a395f832ce5048bc67cb756ff6b84b437bea238430b081d82e35bae48ede48","last_reissued_at":"2026-07-05T07:16:03.210192Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:16:03.210192Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2311.06996","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:16:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TFgx8yb5xI0mk+i/jjsJTmfWdca08+sb2W7ge46vHOjPUmVs3SXyRLDWOIwkUuSQ5TInBwycApLfJHf5lTAFAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T12:58:39.181052Z"},"content_sha256":"92edd4b71adc2872cada213f1200b6c9b37fd8e2c6214195990bd55fb6c9d611","schema_version":"1.0","event_id":"sha256:92edd4b71adc2872cada213f1200b6c9b37fd8e2c6214195990bd55fb6c9d611"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:DCRZL6BSZZIERPDHZN2W75VYJN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"AGRAMPLIFIER: Defending Federated Learning Against Poisoning Attacks Through Local Update Amplification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Guangdong Bai, Jingwei Wang, Leo Yu Zhang, Liyue Shen, Yanjun Zhang, Yong Xiang, Zirui Gong","submitted_at":"2023-11-13T00:34:45Z","abstract_excerpt":"The collaborative nature of federated learning (FL) poses a major threat in the form of manipulation of local training data and local updates, known as the Byzantine poisoning attack. To address this issue, many Byzantine-robust aggregation rules (AGRs) have been proposed to filter out or moderate suspicious local updates uploaded by Byzantine participants.\n  This paper introduces a novel approach called AGRAMPLIFIER, aiming to simultaneously improve the robustness, fidelity, and efficiency of the existing AGRs. The core idea of AGRAMPLIFIER is to amplify the \"morality\" of local updates by ide"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.06996","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.06996/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:16:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ib+uoNHDzB0dw6TjhISzKrLZqLHtzSssdPAvJfU0PpSfqeqgUpfJPGxDNOXHVTXrzRoxkfHpKiofnI+qwrGzCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T12:58:39.182565Z"},"content_sha256":"f06e52d64ba6729dac575f2042cdb4c04ef63c783fea9d38cd8b3f2bb447a559","schema_version":"1.0","event_id":"sha256:f06e52d64ba6729dac575f2042cdb4c04ef63c783fea9d38cd8b3f2bb447a559"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DCRZL6BSZZIERPDHZN2W75VYJN/bundle.json","state_url":"https://pith.science/pith/DCRZL6BSZZIERPDHZN2W75VYJN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DCRZL6BSZZIERPDHZN2W75VYJN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T12:58:39Z","links":{"resolver":"https://pith.science/pith/DCRZL6BSZZIERPDHZN2W75VYJN","bundle":"https://pith.science/pith/DCRZL6BSZZIERPDHZN2W75VYJN/bundle.json","state":"https://pith.science/pith/DCRZL6BSZZIERPDHZN2W75VYJN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DCRZL6BSZZIERPDHZN2W75VYJN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:DCRZL6BSZZIERPDHZN2W75VYJN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2331281a456a5874c42bb6aa6870d9e573bc6d6d6ca7ecd46f107c3a36a17977","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-13T00:34:45Z","title_canon_sha256":"8996c50a616dbe9e3988db774f5afc1130de11a5c9bb58f5625911de29dfcbc4"},"schema_version":"1.0","source":{"id":"2311.06996","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.06996","created_at":"2026-07-05T07:16:03Z"},{"alias_kind":"arxiv_version","alias_value":"2311.06996v2","created_at":"2026-07-05T07:16:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.06996","created_at":"2026-07-05T07:16:03Z"},{"alias_kind":"pith_short_12","alias_value":"DCRZL6BSZZIE","created_at":"2026-07-05T07:16:03Z"},{"alias_kind":"pith_short_16","alias_value":"DCRZL6BSZZIERPDH","created_at":"2026-07-05T07:16:03Z"},{"alias_kind":"pith_short_8","alias_value":"DCRZL6BS","created_at":"2026-07-05T07:16:03Z"}],"graph_snapshots":[{"event_id":"sha256:f06e52d64ba6729dac575f2042cdb4c04ef63c783fea9d38cd8b3f2bb447a559","target":"graph","created_at":"2026-07-05T07:16:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.06996/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The collaborative nature of federated learning (FL) poses a major threat in the form of manipulation of local training data and local updates, known as the Byzantine poisoning attack. To address this issue, many Byzantine-robust aggregation rules (AGRs) have been proposed to filter out or moderate suspicious local updates uploaded by Byzantine participants.\n  This paper introduces a novel approach called AGRAMPLIFIER, aiming to simultaneously improve the robustness, fidelity, and efficiency of the existing AGRs. The core idea of AGRAMPLIFIER is to amplify the \"morality\" of local updates by ide","authors_text":"Guangdong Bai, Jingwei Wang, Leo Yu Zhang, Liyue Shen, Yanjun Zhang, Yong Xiang, Zirui Gong","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-13T00:34:45Z","title":"AGRAMPLIFIER: Defending Federated Learning Against Poisoning Attacks Through Local Update Amplification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.06996","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:92edd4b71adc2872cada213f1200b6c9b37fd8e2c6214195990bd55fb6c9d611","target":"record","created_at":"2026-07-05T07:16:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2331281a456a5874c42bb6aa6870d9e573bc6d6d6ca7ecd46f107c3a36a17977","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-13T00:34:45Z","title_canon_sha256":"8996c50a616dbe9e3988db774f5afc1130de11a5c9bb58f5625911de29dfcbc4"},"schema_version":"1.0","source":{"id":"2311.06996","kind":"arxiv","version":2}},"canonical_sha256":"18a395f832ce5048bc67cb756ff6b84b437bea238430b081d82e35bae48ede48","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"18a395f832ce5048bc67cb756ff6b84b437bea238430b081d82e35bae48ede48","first_computed_at":"2026-07-05T07:16:03.210192Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:16:03.210192Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lM8loGpL2H0BqTXyiA8p5/g0tbDJ9gk/xQBc2p2vUCiy8FXF8Si1KhtdFJeCPD8VsZO2sb245RrDTAVbIer1DQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:16:03.210671Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.06996","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:92edd4b71adc2872cada213f1200b6c9b37fd8e2c6214195990bd55fb6c9d611","sha256:f06e52d64ba6729dac575f2042cdb4c04ef63c783fea9d38cd8b3f2bb447a559"],"state_sha256":"2e00434159f93cfd15a30934d8ccaaac1736d691c59436c329d3881b78300d37"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8jD0yL3p5JASc+bNSMEVPYhcAIIaIHMo5Bvc/CpPsooukvkGzTHNTU13dVTAhtF+syebEeOdS47HiiVdlhLIAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T12:58:39.192799Z","bundle_sha256":"b697879911826d795d97df935602153e5a649a221fa5e1ce77b184869fe70d30"}}