{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:FKOVQF2XSPKLSHPMHHQLRJ537V","short_pith_number":"pith:FKOVQF2X","canonical_record":{"source":{"id":"2401.08216","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-16T09:02:34Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"08b8949efc2ecfa6525d688478ac462f48b4afef913e8de4427e6146f9eb3d85","abstract_canon_sha256":"f5dc957f3b64eb407993a5e346f7f7d0c80457b3f6653aa9a107356ae48c3377"},"schema_version":"1.0"},"canonical_sha256":"2a9d58175793d4b91dec39e0b8a7bbfd6c0e475bd82e106c81db8ccb421a9c0f","source":{"kind":"arxiv","id":"2401.08216","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.08216","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"arxiv_version","alias_value":"2401.08216v2","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.08216","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"pith_short_12","alias_value":"FKOVQF2XSPKL","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"pith_short_16","alias_value":"FKOVQF2XSPKLSHPM","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"pith_short_8","alias_value":"FKOVQF2X","created_at":"2026-07-05T07:35:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:FKOVQF2XSPKLSHPMHHQLRJ537V","target":"record","payload":{"canonical_record":{"source":{"id":"2401.08216","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-16T09:02:34Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"08b8949efc2ecfa6525d688478ac462f48b4afef913e8de4427e6146f9eb3d85","abstract_canon_sha256":"f5dc957f3b64eb407993a5e346f7f7d0c80457b3f6653aa9a107356ae48c3377"},"schema_version":"1.0"},"canonical_sha256":"2a9d58175793d4b91dec39e0b8a7bbfd6c0e475bd82e106c81db8ccb421a9c0f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:35:24.419942Z","signature_b64":"MrpyV/wHVTbEbz42JcM6BpCD8BdHjuRd8nkqDl/ke/aYAHSqHVzU6oAQ2t8lK3QN+S4RpyEZpUNqTbHef1wsDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2a9d58175793d4b91dec39e0b8a7bbfd6c0e475bd82e106c81db8ccb421a9c0f","last_reissued_at":"2026-07-05T07:35:24.419458Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:35:24.419458Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2401.08216","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:35:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hyzkNh6x09PFkjuw0ym6oKRJi8uW1bE9ptRnXTjFYJRaH7Kyd7SGILRcHMMIYQy8JSBUYtrcM7ut19p/zv/FCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T18:06:42.072683Z"},"content_sha256":"16d508bc00a0ccc48fad956e056d754c0b92ae92706fd554c087f1e97368584f","schema_version":"1.0","event_id":"sha256:16d508bc00a0ccc48fad956e056d754c0b92ae92706fd554c087f1e97368584f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:FKOVQF2XSPKLSHPMHHQLRJ537V","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards Efficient and Certified Recovery from Poisoning Attacks in Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Chee Wei Tan, Jiyuan Shen, Kwok-Yan Lam, Yu Jiang, Ziyao Liu","submitted_at":"2024-01-16T09:02:34Z","abstract_excerpt":"Federated learning (FL) is vulnerable to poisoning attacks, where malicious clients manipulate their updates to affect the global model. Although various methods exist for detecting those clients in FL, identifying malicious clients requires sufficient model updates, and hence by the time malicious clients are detected, FL models have been already poisoned. Thus, a method is needed to recover an accurate global model after malicious clients are identified. Current recovery methods rely on (i) all historical information from participating FL clients and (ii) the initial model unaffected by the "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.08216","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2401.08216/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:35:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"d+sP+I1KvYV2q7qP+cr0BqHh305RoPBnsJIKDhpvDoxXUFXtaz1V/RUrYidqUlu3hn8qjNYiaAR/JyrpkghjCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T18:06:42.073520Z"},"content_sha256":"511bd2c6ede946935dbdac20b012ba74a471c65d5e2a6036e6fe94f4614d8227","schema_version":"1.0","event_id":"sha256:511bd2c6ede946935dbdac20b012ba74a471c65d5e2a6036e6fe94f4614d8227"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FKOVQF2XSPKLSHPMHHQLRJ537V/bundle.json","state_url":"https://pith.science/pith/FKOVQF2XSPKLSHPMHHQLRJ537V/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FKOVQF2XSPKLSHPMHHQLRJ537V/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T18:06:42Z","links":{"resolver":"https://pith.science/pith/FKOVQF2XSPKLSHPMHHQLRJ537V","bundle":"https://pith.science/pith/FKOVQF2XSPKLSHPMHHQLRJ537V/bundle.json","state":"https://pith.science/pith/FKOVQF2XSPKLSHPMHHQLRJ537V/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FKOVQF2XSPKLSHPMHHQLRJ537V/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:FKOVQF2XSPKLSHPMHHQLRJ537V","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f5dc957f3b64eb407993a5e346f7f7d0c80457b3f6653aa9a107356ae48c3377","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-16T09:02:34Z","title_canon_sha256":"08b8949efc2ecfa6525d688478ac462f48b4afef913e8de4427e6146f9eb3d85"},"schema_version":"1.0","source":{"id":"2401.08216","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.08216","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"arxiv_version","alias_value":"2401.08216v2","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.08216","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"pith_short_12","alias_value":"FKOVQF2XSPKL","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"pith_short_16","alias_value":"FKOVQF2XSPKLSHPM","created_at":"2026-07-05T07:35:24Z"},{"alias_kind":"pith_short_8","alias_value":"FKOVQF2X","created_at":"2026-07-05T07:35:24Z"}],"graph_snapshots":[{"event_id":"sha256:511bd2c6ede946935dbdac20b012ba74a471c65d5e2a6036e6fe94f4614d8227","target":"graph","created_at":"2026-07-05T07:35:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2401.08216/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning (FL) is vulnerable to poisoning attacks, where malicious clients manipulate their updates to affect the global model. Although various methods exist for detecting those clients in FL, identifying malicious clients requires sufficient model updates, and hence by the time malicious clients are detected, FL models have been already poisoned. Thus, a method is needed to recover an accurate global model after malicious clients are identified. Current recovery methods rely on (i) all historical information from participating FL clients and (ii) the initial model unaffected by the ","authors_text":"Chee Wei Tan, Jiyuan Shen, Kwok-Yan Lam, Yu Jiang, Ziyao Liu","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-16T09:02:34Z","title":"Towards Efficient and Certified Recovery from Poisoning Attacks in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.08216","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:16d508bc00a0ccc48fad956e056d754c0b92ae92706fd554c087f1e97368584f","target":"record","created_at":"2026-07-05T07:35:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f5dc957f3b64eb407993a5e346f7f7d0c80457b3f6653aa9a107356ae48c3377","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-16T09:02:34Z","title_canon_sha256":"08b8949efc2ecfa6525d688478ac462f48b4afef913e8de4427e6146f9eb3d85"},"schema_version":"1.0","source":{"id":"2401.08216","kind":"arxiv","version":2}},"canonical_sha256":"2a9d58175793d4b91dec39e0b8a7bbfd6c0e475bd82e106c81db8ccb421a9c0f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2a9d58175793d4b91dec39e0b8a7bbfd6c0e475bd82e106c81db8ccb421a9c0f","first_computed_at":"2026-07-05T07:35:24.419458Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:35:24.419458Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MrpyV/wHVTbEbz42JcM6BpCD8BdHjuRd8nkqDl/ke/aYAHSqHVzU6oAQ2t8lK3QN+S4RpyEZpUNqTbHef1wsDg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:35:24.419942Z","signed_message":"canonical_sha256_bytes"},"source_id":"2401.08216","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:16d508bc00a0ccc48fad956e056d754c0b92ae92706fd554c087f1e97368584f","sha256:511bd2c6ede946935dbdac20b012ba74a471c65d5e2a6036e6fe94f4614d8227"],"state_sha256":"d3f0e842ea5f07cc6f1869a820c21826e99754fb9c986470e8b1a2e6b9e62317"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5LA8yF7YS6BI7ydP8Frna3OIKMGkIKLNdDvR/pcjyZQJF+82xFQZQCGUcMJ430mx2lVtl0pue419DaTvzXK3Bw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T18:06:42.078542Z","bundle_sha256":"6206ec7e9db270b4f289e19bff660ea4ea5e614d9ad71f17f326798c06bbda43"}}