{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:DKDI2N6WU2W25ZEHXDDLRVAKNH","short_pith_number":"pith:DKDI2N6W","canonical_record":{"source":{"id":"2506.02156","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T18:37:15Z","cross_cats_sorted":[],"title_canon_sha256":"b0490625d08de014b77d8b91abc80724ad8f8b83c16182fc81821d7229a64280","abstract_canon_sha256":"050d7a1b5e6b8f0d04112e5ae039299f0a0e472776a998538abb18235fd6f385"},"schema_version":"1.0"},"canonical_sha256":"1a868d37d6a6adaee487b8c6b8d40a69c14e7ff0180b3373d4924aa71741b506","source":{"kind":"arxiv","id":"2506.02156","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.02156","created_at":"2026-07-05T11:22:41Z"},{"alias_kind":"arxiv_version","alias_value":"2506.02156v2","created_at":"2026-07-05T11:22:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.02156","created_at":"2026-07-05T11:22:41Z"},{"alias_kind":"pith_short_12","alias_value":"DKDI2N6WU2W2","created_at":"2026-07-05T11:22:41Z"},{"alias_kind":"pith_short_16","alias_value":"DKDI2N6WU2W25ZEH","created_at":"2026-07-05T11:22:41Z"},{"alias_kind":"pith_short_8","alias_value":"DKDI2N6W","created_at":"2026-07-05T11:22:41Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:DKDI2N6WU2W25ZEHXDDLRVAKNH","target":"record","payload":{"canonical_record":{"source":{"id":"2506.02156","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T18:37:15Z","cross_cats_sorted":[],"title_canon_sha256":"b0490625d08de014b77d8b91abc80724ad8f8b83c16182fc81821d7229a64280","abstract_canon_sha256":"050d7a1b5e6b8f0d04112e5ae039299f0a0e472776a998538abb18235fd6f385"},"schema_version":"1.0"},"canonical_sha256":"1a868d37d6a6adaee487b8c6b8d40a69c14e7ff0180b3373d4924aa71741b506","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:22:41.321297Z","signature_b64":"Qos2WjGZgl2Km7EccKxAI6IfT6WnO8mZ/Qt4vuwRdVuOZH7yMDMMvxhxjZcNBL52zzm+khRSZX3M3Hy9iMbmBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1a868d37d6a6adaee487b8c6b8d40a69c14e7ff0180b3373d4924aa71741b506","last_reissued_at":"2026-07-05T11:22:41.320793Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:22:41.320793Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.02156","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:22:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/D87rzZhtgP651UFb8pcfadAho2pnNw+qMXdsz+uoNhY2Yhlr3ZCetkXiWiFXBY5BueEHDhjPy6otShvxacPDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T12:06:17.987253Z"},"content_sha256":"59e395069e3023127d2a0a68786e7db411ad6beb1948ea59b3375af440fa5e5c","schema_version":"1.0","event_id":"sha256:59e395069e3023127d2a0a68786e7db411ad6beb1948ea59b3375af440fa5e5c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:DKDI2N6WU2W25ZEHXDDLRVAKNH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Mitigating Data Poisoning Attacks to Local Differential Privacy","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Boyang Wang, Ninghui Li, Wenhai Sun, Xiaolin Li","submitted_at":"2025-06-02T18:37:15Z","abstract_excerpt":"The distributed nature of local differential privacy (LDP) invites data poisoning attacks and poses unforeseen threats to the underlying LDP-supported applications. In this paper, we propose a comprehensive mitigation framework for popular frequency estimation, which contains a suite of novel defenses, including malicious user detection, attack pattern recognition, and damaged utility recovery. In addition to existing attacks, we explore new adaptive adversarial activities for our mitigation design. For detection, we present a new method to precisely identify bogus reports and thus LDP aggrega"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.02156","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.02156/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:22:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"brZ4C9u3hluzpiRXklSVpthYc8hc7jH5cryFqkX7Y6NiGPtU7XRgsL/pU52NDz3rngdhyFEJ5w4fVztQ/kwABw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T12:06:17.988095Z"},"content_sha256":"443f16225e685cc8242b29c7c11356c1fcb84f54319fbd62152bc89ba4a5a20d","schema_version":"1.0","event_id":"sha256:443f16225e685cc8242b29c7c11356c1fcb84f54319fbd62152bc89ba4a5a20d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DKDI2N6WU2W25ZEHXDDLRVAKNH/bundle.json","state_url":"https://pith.science/pith/DKDI2N6WU2W25ZEHXDDLRVAKNH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DKDI2N6WU2W25ZEHXDDLRVAKNH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T12:06:17Z","links":{"resolver":"https://pith.science/pith/DKDI2N6WU2W25ZEHXDDLRVAKNH","bundle":"https://pith.science/pith/DKDI2N6WU2W25ZEHXDDLRVAKNH/bundle.json","state":"https://pith.science/pith/DKDI2N6WU2W25ZEHXDDLRVAKNH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DKDI2N6WU2W25ZEHXDDLRVAKNH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:DKDI2N6WU2W25ZEHXDDLRVAKNH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"050d7a1b5e6b8f0d04112e5ae039299f0a0e472776a998538abb18235fd6f385","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T18:37:15Z","title_canon_sha256":"b0490625d08de014b77d8b91abc80724ad8f8b83c16182fc81821d7229a64280"},"schema_version":"1.0","source":{"id":"2506.02156","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.02156","created_at":"2026-07-05T11:22:41Z"},{"alias_kind":"arxiv_version","alias_value":"2506.02156v2","created_at":"2026-07-05T11:22:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.02156","created_at":"2026-07-05T11:22:41Z"},{"alias_kind":"pith_short_12","alias_value":"DKDI2N6WU2W2","created_at":"2026-07-05T11:22:41Z"},{"alias_kind":"pith_short_16","alias_value":"DKDI2N6WU2W25ZEH","created_at":"2026-07-05T11:22:41Z"},{"alias_kind":"pith_short_8","alias_value":"DKDI2N6W","created_at":"2026-07-05T11:22:41Z"}],"graph_snapshots":[{"event_id":"sha256:443f16225e685cc8242b29c7c11356c1fcb84f54319fbd62152bc89ba4a5a20d","target":"graph","created_at":"2026-07-05T11:22:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.02156/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The distributed nature of local differential privacy (LDP) invites data poisoning attacks and poses unforeseen threats to the underlying LDP-supported applications. In this paper, we propose a comprehensive mitigation framework for popular frequency estimation, which contains a suite of novel defenses, including malicious user detection, attack pattern recognition, and damaged utility recovery. In addition to existing attacks, we explore new adaptive adversarial activities for our mitigation design. For detection, we present a new method to precisely identify bogus reports and thus LDP aggrega","authors_text":"Boyang Wang, Ninghui Li, Wenhai Sun, Xiaolin Li","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T18:37:15Z","title":"Mitigating Data Poisoning Attacks to Local Differential Privacy"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.02156","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:59e395069e3023127d2a0a68786e7db411ad6beb1948ea59b3375af440fa5e5c","target":"record","created_at":"2026-07-05T11:22:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"050d7a1b5e6b8f0d04112e5ae039299f0a0e472776a998538abb18235fd6f385","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T18:37:15Z","title_canon_sha256":"b0490625d08de014b77d8b91abc80724ad8f8b83c16182fc81821d7229a64280"},"schema_version":"1.0","source":{"id":"2506.02156","kind":"arxiv","version":2}},"canonical_sha256":"1a868d37d6a6adaee487b8c6b8d40a69c14e7ff0180b3373d4924aa71741b506","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1a868d37d6a6adaee487b8c6b8d40a69c14e7ff0180b3373d4924aa71741b506","first_computed_at":"2026-07-05T11:22:41.320793Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:22:41.320793Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Qos2WjGZgl2Km7EccKxAI6IfT6WnO8mZ/Qt4vuwRdVuOZH7yMDMMvxhxjZcNBL52zzm+khRSZX3M3Hy9iMbmBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:22:41.321297Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.02156","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:59e395069e3023127d2a0a68786e7db411ad6beb1948ea59b3375af440fa5e5c","sha256:443f16225e685cc8242b29c7c11356c1fcb84f54319fbd62152bc89ba4a5a20d"],"state_sha256":"c7c9969ec1c7b13cf8d8d17c0657b01db1e7b0df964262bb74902396cf5f3c14"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"u45lTO987x3MWBhvot/iZ8MAZqvvVZEz0zDmJ2bFFAIzqdKCd1RgHSSiNWVwmfk0T8nzxrWqHy9U9G+GfldKCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T12:06:17.995967Z","bundle_sha256":"38f25ecc95dddb9582ba385def5135ebebc9c10fc4018845b3fe41aabf033280"}}