{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:DWF4JEWNVWXINBACUEOVAFSGKW","short_pith_number":"pith:DWF4JEWN","canonical_record":{"source":{"id":"2202.11196","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-02-21T17:13:03Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"b298c8cce366bbe56ade147ad1b931585540e4c5581fd53addf3f13a2224d9a0","abstract_canon_sha256":"bdf87a877dca3d4071cdb1d2d8c25cf2742b3542acb92213673bef4c47770a21"},"schema_version":"1.0"},"canonical_sha256":"1d8bc492cdadae868402a11d50164655a9266603391a15ec30a53516d2b7d21d","source":{"kind":"arxiv","id":"2202.11196","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.11196","created_at":"2026-07-05T03:59:29Z"},{"alias_kind":"arxiv_version","alias_value":"2202.11196v1","created_at":"2026-07-05T03:59:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.11196","created_at":"2026-07-05T03:59:29Z"},{"alias_kind":"pith_short_12","alias_value":"DWF4JEWNVWXI","created_at":"2026-07-05T03:59:29Z"},{"alias_kind":"pith_short_16","alias_value":"DWF4JEWNVWXINBAC","created_at":"2026-07-05T03:59:29Z"},{"alias_kind":"pith_short_8","alias_value":"DWF4JEWN","created_at":"2026-07-05T03:59:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:DWF4JEWNVWXINBACUEOVAFSGKW","target":"record","payload":{"canonical_record":{"source":{"id":"2202.11196","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-02-21T17:13:03Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"b298c8cce366bbe56ade147ad1b931585540e4c5581fd53addf3f13a2224d9a0","abstract_canon_sha256":"bdf87a877dca3d4071cdb1d2d8c25cf2742b3542acb92213673bef4c47770a21"},"schema_version":"1.0"},"canonical_sha256":"1d8bc492cdadae868402a11d50164655a9266603391a15ec30a53516d2b7d21d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:59:29.390414Z","signature_b64":"nXPYcsfE29wFwiJGBdWCNAYhqZyvsbVfh/cx74albE+x6li9M7dtGvd0ubUi4UM1gLWd7KYn+0/2jQ3lhSu0CQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1d8bc492cdadae868402a11d50164655a9266603391a15ec30a53516d2b7d21d","last_reissued_at":"2026-07-05T03:59:29.390025Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:59:29.390025Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2202.11196","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:59:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"B7A8DUx8v6x4jNe4kKo56VRUkP2x8xVIY5iKEasoI1OWt+3/5CeVaKrOLsKXMI3MRsTcDX47DlLihLU8Ejb1AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:36:19.690263Z"},"content_sha256":"923d03a5734256c47c794c803b99ec926e9e5df3f52bd72cbd2a8dd58b79d60b","schema_version":"1.0","event_id":"sha256:923d03a5734256c47c794c803b99ec926e9e5df3f52bd72cbd2a8dd58b79d60b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:DWF4JEWNVWXINBACUEOVAFSGKW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Backdoor Defense in Federated Learning Using Differential Testing and Outlier Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Farinaz Koushanfar, Huili Chen, Yein Kim","submitted_at":"2022-02-21T17:13:03Z","abstract_excerpt":"The goal of federated learning (FL) is to train one global model by aggregating model parameters updated independently on edge devices without accessing users' private data. However, FL is susceptible to backdoor attacks where a small fraction of malicious agents inject a targeted misclassification behavior in the global model by uploading polluted model updates to the server. In this work, we propose DifFense, an automated defense framework to protect an FL system from backdoor attacks by leveraging differential testing and two-step MAD outlier detection, without requiring any previous knowle"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.11196","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2202.11196/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:59:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"S5YtG2tAPC4BmUnMf0IEbsDg9Pn+knGG95EoeY1BSudGldtIQNb2opc6oioG5Qt4wNZGJXY0e1U4UuXp8SMOBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:36:19.690754Z"},"content_sha256":"c6abce794404cb38ea23dc8870abb884487e9e1066cee76832f156684f9a9be5","schema_version":"1.0","event_id":"sha256:c6abce794404cb38ea23dc8870abb884487e9e1066cee76832f156684f9a9be5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DWF4JEWNVWXINBACUEOVAFSGKW/bundle.json","state_url":"https://pith.science/pith/DWF4JEWNVWXINBACUEOVAFSGKW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DWF4JEWNVWXINBACUEOVAFSGKW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T16:36:19Z","links":{"resolver":"https://pith.science/pith/DWF4JEWNVWXINBACUEOVAFSGKW","bundle":"https://pith.science/pith/DWF4JEWNVWXINBACUEOVAFSGKW/bundle.json","state":"https://pith.science/pith/DWF4JEWNVWXINBACUEOVAFSGKW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DWF4JEWNVWXINBACUEOVAFSGKW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:DWF4JEWNVWXINBACUEOVAFSGKW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bdf87a877dca3d4071cdb1d2d8c25cf2742b3542acb92213673bef4c47770a21","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-02-21T17:13:03Z","title_canon_sha256":"b298c8cce366bbe56ade147ad1b931585540e4c5581fd53addf3f13a2224d9a0"},"schema_version":"1.0","source":{"id":"2202.11196","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.11196","created_at":"2026-07-05T03:59:29Z"},{"alias_kind":"arxiv_version","alias_value":"2202.11196v1","created_at":"2026-07-05T03:59:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.11196","created_at":"2026-07-05T03:59:29Z"},{"alias_kind":"pith_short_12","alias_value":"DWF4JEWNVWXI","created_at":"2026-07-05T03:59:29Z"},{"alias_kind":"pith_short_16","alias_value":"DWF4JEWNVWXINBAC","created_at":"2026-07-05T03:59:29Z"},{"alias_kind":"pith_short_8","alias_value":"DWF4JEWN","created_at":"2026-07-05T03:59:29Z"}],"graph_snapshots":[{"event_id":"sha256:c6abce794404cb38ea23dc8870abb884487e9e1066cee76832f156684f9a9be5","target":"graph","created_at":"2026-07-05T03:59:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.11196/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The goal of federated learning (FL) is to train one global model by aggregating model parameters updated independently on edge devices without accessing users' private data. However, FL is susceptible to backdoor attacks where a small fraction of malicious agents inject a targeted misclassification behavior in the global model by uploading polluted model updates to the server. In this work, we propose DifFense, an automated defense framework to protect an FL system from backdoor attacks by leveraging differential testing and two-step MAD outlier detection, without requiring any previous knowle","authors_text":"Farinaz Koushanfar, Huili Chen, Yein Kim","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-02-21T17:13:03Z","title":"Backdoor Defense in Federated Learning Using Differential Testing and Outlier Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.11196","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:923d03a5734256c47c794c803b99ec926e9e5df3f52bd72cbd2a8dd58b79d60b","target":"record","created_at":"2026-07-05T03:59:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bdf87a877dca3d4071cdb1d2d8c25cf2742b3542acb92213673bef4c47770a21","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-02-21T17:13:03Z","title_canon_sha256":"b298c8cce366bbe56ade147ad1b931585540e4c5581fd53addf3f13a2224d9a0"},"schema_version":"1.0","source":{"id":"2202.11196","kind":"arxiv","version":1}},"canonical_sha256":"1d8bc492cdadae868402a11d50164655a9266603391a15ec30a53516d2b7d21d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1d8bc492cdadae868402a11d50164655a9266603391a15ec30a53516d2b7d21d","first_computed_at":"2026-07-05T03:59:29.390025Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:59:29.390025Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"nXPYcsfE29wFwiJGBdWCNAYhqZyvsbVfh/cx74albE+x6li9M7dtGvd0ubUi4UM1gLWd7KYn+0/2jQ3lhSu0CQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:59:29.390414Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.11196","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:923d03a5734256c47c794c803b99ec926e9e5df3f52bd72cbd2a8dd58b79d60b","sha256:c6abce794404cb38ea23dc8870abb884487e9e1066cee76832f156684f9a9be5"],"state_sha256":"3b866c058817c6a2ca48fe0a382192939d71d49dfe143fb5fc09dd73d6e02122"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nyEUki89tO6Qs9H8cFiPGYEdZnD5IfoCvf/Ngawzuxm2xSvMY0LH62AfRi0qAMOG9JjM6hR3BUKjdMlekvOcBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T16:36:19.694994Z","bundle_sha256":"97e0f347414a1859e6a6809499349a4603d1b38a8c92af7e8b861c2395a5f2aa"}}