{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:FCN32TGQHQNB5XA6IHQPWVLKR2","short_pith_number":"pith:FCN32TGQ","canonical_record":{"source":{"id":"2507.00423","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-01T04:46:23Z","cross_cats_sorted":["cs.DC","cs.LG"],"title_canon_sha256":"e8bc098bb7229930fbdab3d49bc10980ab9fa29d1c77001c0f358308a2ab6cf8","abstract_canon_sha256":"34b123cc27adc98d9c506eb08a3b951bd8292336ea3cf98721d7489bf25584f1"},"schema_version":"1.0"},"canonical_sha256":"289bbd4cd03c1a1edc1e41e0fb556a8ebe5d5683fc14d7c3ce1ff9a972228c3c","source":{"kind":"arxiv","id":"2507.00423","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.00423","created_at":"2026-07-05T11:30:08Z"},{"alias_kind":"arxiv_version","alias_value":"2507.00423v1","created_at":"2026-07-05T11:30:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.00423","created_at":"2026-07-05T11:30:08Z"},{"alias_kind":"pith_short_12","alias_value":"FCN32TGQHQNB","created_at":"2026-07-05T11:30:08Z"},{"alias_kind":"pith_short_16","alias_value":"FCN32TGQHQNB5XA6","created_at":"2026-07-05T11:30:08Z"},{"alias_kind":"pith_short_8","alias_value":"FCN32TGQ","created_at":"2026-07-05T11:30:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:FCN32TGQHQNB5XA6IHQPWVLKR2","target":"record","payload":{"canonical_record":{"source":{"id":"2507.00423","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-01T04:46:23Z","cross_cats_sorted":["cs.DC","cs.LG"],"title_canon_sha256":"e8bc098bb7229930fbdab3d49bc10980ab9fa29d1c77001c0f358308a2ab6cf8","abstract_canon_sha256":"34b123cc27adc98d9c506eb08a3b951bd8292336ea3cf98721d7489bf25584f1"},"schema_version":"1.0"},"canonical_sha256":"289bbd4cd03c1a1edc1e41e0fb556a8ebe5d5683fc14d7c3ce1ff9a972228c3c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:30:08.607560Z","signature_b64":"mi/gjG0Nuh1uOeUf89muoX2KHdAvIYTaZdpPmOwV9ayONNLwo/8hn5FXLQW1eRaCdgtNNmlUXxmYzXd4LhNWAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"289bbd4cd03c1a1edc1e41e0fb556a8ebe5d5683fc14d7c3ce1ff9a972228c3c","last_reissued_at":"2026-07-05T11:30:08.607067Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:30:08.607067Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.00423","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:30:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"62VTot4dcNo8HOCv3qIflmCUIx/n35cBRBFYSbVazqJkaSLJ9nA4ZErZG7lC7+mtpDd2kYCpVqLWjNZdLgEpDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T22:56:43.297873Z"},"content_sha256":"e34130bd48e6c980291984ba7fdd7cfbbbeb1c0552204899bd64b03d2757ed33","schema_version":"1.0","event_id":"sha256:e34130bd48e6c980291984ba7fdd7cfbbbeb1c0552204899bd64b03d2757ed33"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:FCN32TGQHQNB5XA6IHQPWVLKR2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.DC","cs.LG"],"primary_cat":"cs.CR","authors_text":"Minghong Fang, Mingwei Fang, Wenjin Mo, Zhiyuan Li","submitted_at":"2025-07-01T04:46:23Z","abstract_excerpt":"Federated learning (FL) allows multiple clients to collaboratively train a global machine learning model with coordination from a central server, without needing to share their raw data. This approach is particularly appealing in the era of privacy regulations like the GDPR, leading many prominent companies to adopt it. However, FL's distributed nature makes it susceptible to poisoning attacks, where malicious clients, controlled by an attacker, send harmful data to compromise the model. Most existing poisoning attacks in FL aim to degrade the model's integrity, such as reducing its accuracy, "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.00423","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.00423/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:30:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7ruSlgM+TgIRhNgryYYo00OLydLK+7758BX1QsBHIdfTrT7+tfIuYE0WAVsH4Y4tjjZJLlQnztQDR1UqdYldAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T22:56:43.298469Z"},"content_sha256":"0e1f71c18d41dcc7641a035a665f4416ff83c00bf8fad01c94b22b21bd2f4207","schema_version":"1.0","event_id":"sha256:0e1f71c18d41dcc7641a035a665f4416ff83c00bf8fad01c94b22b21bd2f4207"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FCN32TGQHQNB5XA6IHQPWVLKR2/bundle.json","state_url":"https://pith.science/pith/FCN32TGQHQNB5XA6IHQPWVLKR2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FCN32TGQHQNB5XA6IHQPWVLKR2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T22:56:43Z","links":{"resolver":"https://pith.science/pith/FCN32TGQHQNB5XA6IHQPWVLKR2","bundle":"https://pith.science/pith/FCN32TGQHQNB5XA6IHQPWVLKR2/bundle.json","state":"https://pith.science/pith/FCN32TGQHQNB5XA6IHQPWVLKR2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FCN32TGQHQNB5XA6IHQPWVLKR2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:FCN32TGQHQNB5XA6IHQPWVLKR2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"34b123cc27adc98d9c506eb08a3b951bd8292336ea3cf98721d7489bf25584f1","cross_cats_sorted":["cs.DC","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-01T04:46:23Z","title_canon_sha256":"e8bc098bb7229930fbdab3d49bc10980ab9fa29d1c77001c0f358308a2ab6cf8"},"schema_version":"1.0","source":{"id":"2507.00423","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.00423","created_at":"2026-07-05T11:30:08Z"},{"alias_kind":"arxiv_version","alias_value":"2507.00423v1","created_at":"2026-07-05T11:30:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.00423","created_at":"2026-07-05T11:30:08Z"},{"alias_kind":"pith_short_12","alias_value":"FCN32TGQHQNB","created_at":"2026-07-05T11:30:08Z"},{"alias_kind":"pith_short_16","alias_value":"FCN32TGQHQNB5XA6","created_at":"2026-07-05T11:30:08Z"},{"alias_kind":"pith_short_8","alias_value":"FCN32TGQ","created_at":"2026-07-05T11:30:08Z"}],"graph_snapshots":[{"event_id":"sha256:0e1f71c18d41dcc7641a035a665f4416ff83c00bf8fad01c94b22b21bd2f4207","target":"graph","created_at":"2026-07-05T11:30:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.00423/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning (FL) allows multiple clients to collaboratively train a global machine learning model with coordination from a central server, without needing to share their raw data. This approach is particularly appealing in the era of privacy regulations like the GDPR, leading many prominent companies to adopt it. However, FL's distributed nature makes it susceptible to poisoning attacks, where malicious clients, controlled by an attacker, send harmful data to compromise the model. Most existing poisoning attacks in FL aim to degrade the model's integrity, such as reducing its accuracy, ","authors_text":"Minghong Fang, Mingwei Fang, Wenjin Mo, Zhiyuan Li","cross_cats":["cs.DC","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.00423","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e34130bd48e6c980291984ba7fdd7cfbbbeb1c0552204899bd64b03d2757ed33","target":"record","created_at":"2026-07-05T11:30:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"34b123cc27adc98d9c506eb08a3b951bd8292336ea3cf98721d7489bf25584f1","cross_cats_sorted":["cs.DC","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-01T04:46:23Z","title_canon_sha256":"e8bc098bb7229930fbdab3d49bc10980ab9fa29d1c77001c0f358308a2ab6cf8"},"schema_version":"1.0","source":{"id":"2507.00423","kind":"arxiv","version":1}},"canonical_sha256":"289bbd4cd03c1a1edc1e41e0fb556a8ebe5d5683fc14d7c3ce1ff9a972228c3c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"289bbd4cd03c1a1edc1e41e0fb556a8ebe5d5683fc14d7c3ce1ff9a972228c3c","first_computed_at":"2026-07-05T11:30:08.607067Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:30:08.607067Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"mi/gjG0Nuh1uOeUf89muoX2KHdAvIYTaZdpPmOwV9ayONNLwo/8hn5FXLQW1eRaCdgtNNmlUXxmYzXd4LhNWAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:30:08.607560Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.00423","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e34130bd48e6c980291984ba7fdd7cfbbbeb1c0552204899bd64b03d2757ed33","sha256:0e1f71c18d41dcc7641a035a665f4416ff83c00bf8fad01c94b22b21bd2f4207"],"state_sha256":"55adf7624497ae17cec8b3c6638f1c256bb992203f7bd56f0a11314ad4d1967e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FqPpd9IiJ/c3CxQb/QLB4tI7Uebs4RZ+bj+v2zPXQVuQWPLYN8SrJQCQNAvcBwt55M+FKP0E6TMYa5cV+0hHBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T22:56:43.303735Z","bundle_sha256":"04c8a814c3a28fa96e17e0c03e96d418e51d283c124e5f86c8f7deac3dff4a1c"}}