{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:G5QGGLRAKVPU42KDP2MT5SQF2M","short_pith_number":"pith:G5QGGLRA","canonical_record":{"source":{"id":"2210.12873","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-10-23T22:24:03Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"990656c9d0a38f7460e6834b1eaa6cec136684ff381148b43c348df0976ed37e","abstract_canon_sha256":"1ffcd87644abc178f56403dea9e45bc95accec5ac0d8d44013bd12abf7fbdd8e"},"schema_version":"1.0"},"canonical_sha256":"3760632e20555f4e69437e993eca05d3271ecbdf52dffe054941347802ea4a2f","source":{"kind":"arxiv","id":"2210.12873","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.12873","created_at":"2026-07-05T05:46:26Z"},{"alias_kind":"arxiv_version","alias_value":"2210.12873v2","created_at":"2026-07-05T05:46:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.12873","created_at":"2026-07-05T05:46:26Z"},{"alias_kind":"pith_short_12","alias_value":"G5QGGLRAKVPU","created_at":"2026-07-05T05:46:26Z"},{"alias_kind":"pith_short_16","alias_value":"G5QGGLRAKVPU42KD","created_at":"2026-07-05T05:46:26Z"},{"alias_kind":"pith_short_8","alias_value":"G5QGGLRA","created_at":"2026-07-05T05:46:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:G5QGGLRAKVPU42KDP2MT5SQF2M","target":"record","payload":{"canonical_record":{"source":{"id":"2210.12873","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-10-23T22:24:03Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"990656c9d0a38f7460e6834b1eaa6cec136684ff381148b43c348df0976ed37e","abstract_canon_sha256":"1ffcd87644abc178f56403dea9e45bc95accec5ac0d8d44013bd12abf7fbdd8e"},"schema_version":"1.0"},"canonical_sha256":"3760632e20555f4e69437e993eca05d3271ecbdf52dffe054941347802ea4a2f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:46:26.431920Z","signature_b64":"gPBo1P5aFEeqHVVhizNRydDXDxniJ81mQjubSE4+zV1jWzGDUXuwIY7Yr0UdBz6me8/j//O2qzMjEBfyz7PBDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3760632e20555f4e69437e993eca05d3271ecbdf52dffe054941347802ea4a2f","last_reissued_at":"2026-07-05T05:46:26.431465Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:46:26.431465Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2210.12873","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:46:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rLtXIFn2m7D2IbttdrPKlZfmFa3AY1LSMj9Vedi9K0Ycc1Pfjml8Wu4WlNPKb+rRUMpUG3Bctpf+NCCoStxvBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:28:14.316519Z"},"content_sha256":"2a90922cdb5aaf9432db7e2dbe675dace8e9fff58da89718b39a5eb56780aa8e","schema_version":"1.0","event_id":"sha256:2a90922cdb5aaf9432db7e2dbe675dace8e9fff58da89718b39a5eb56780aa8e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:G5QGGLRAKVPU42KDP2MT5SQF2M","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Guangyu Shen, Guanhong Tao, Kaiyuan Zhang, Pin-Yu Chen, Qiuling Xu, Shengwei An, Shiqing Ma, Shiwei Feng, Siyuan Cheng, Xiangyu Zhang, Yingqi Liu","submitted_at":"2022-10-23T22:24:03Z","abstract_excerpt":"Federated Learning (FL) is a distributed learning paradigm that enables different parties to train a model together for high quality and strong privacy protection. In this scenario, individual participants may get compromised and perform backdoor attacks by poisoning the data (or gradients). Existing work on robust aggregation and certified FL robustness does not study how hardening benign clients can affect the global model (and the malicious clients). In this work, we theoretically analyze the connection among cross-entropy loss, attack success rate, and clean accuracy in this setting. Moreo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.12873","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2210.12873/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:46:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AlHq/uprgTnFjovykIm2RzlMv2oWJf5oq8rbsiwl+K9pEXkgGh80cZYZku/AF27Bprw7hlM0T71W8AoQjJL1Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:28:14.317043Z"},"content_sha256":"2118bcec4c160fb3dfafbdd4f54ddfe29b79e26c1624035bbaf0ef7f4ea4664b","schema_version":"1.0","event_id":"sha256:2118bcec4c160fb3dfafbdd4f54ddfe29b79e26c1624035bbaf0ef7f4ea4664b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/G5QGGLRAKVPU42KDP2MT5SQF2M/bundle.json","state_url":"https://pith.science/pith/G5QGGLRAKVPU42KDP2MT5SQF2M/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/G5QGGLRAKVPU42KDP2MT5SQF2M/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T18:28:14Z","links":{"resolver":"https://pith.science/pith/G5QGGLRAKVPU42KDP2MT5SQF2M","bundle":"https://pith.science/pith/G5QGGLRAKVPU42KDP2MT5SQF2M/bundle.json","state":"https://pith.science/pith/G5QGGLRAKVPU42KDP2MT5SQF2M/state.json","well_known_bundle":"https://pith.science/.well-known/pith/G5QGGLRAKVPU42KDP2MT5SQF2M/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:G5QGGLRAKVPU42KDP2MT5SQF2M","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1ffcd87644abc178f56403dea9e45bc95accec5ac0d8d44013bd12abf7fbdd8e","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-10-23T22:24:03Z","title_canon_sha256":"990656c9d0a38f7460e6834b1eaa6cec136684ff381148b43c348df0976ed37e"},"schema_version":"1.0","source":{"id":"2210.12873","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.12873","created_at":"2026-07-05T05:46:26Z"},{"alias_kind":"arxiv_version","alias_value":"2210.12873v2","created_at":"2026-07-05T05:46:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.12873","created_at":"2026-07-05T05:46:26Z"},{"alias_kind":"pith_short_12","alias_value":"G5QGGLRAKVPU","created_at":"2026-07-05T05:46:26Z"},{"alias_kind":"pith_short_16","alias_value":"G5QGGLRAKVPU42KD","created_at":"2026-07-05T05:46:26Z"},{"alias_kind":"pith_short_8","alias_value":"G5QGGLRA","created_at":"2026-07-05T05:46:26Z"}],"graph_snapshots":[{"event_id":"sha256:2118bcec4c160fb3dfafbdd4f54ddfe29b79e26c1624035bbaf0ef7f4ea4664b","target":"graph","created_at":"2026-07-05T05:46:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.12873/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated Learning (FL) is a distributed learning paradigm that enables different parties to train a model together for high quality and strong privacy protection. In this scenario, individual participants may get compromised and perform backdoor attacks by poisoning the data (or gradients). Existing work on robust aggregation and certified FL robustness does not study how hardening benign clients can affect the global model (and the malicious clients). In this work, we theoretically analyze the connection among cross-entropy loss, attack success rate, and clean accuracy in this setting. Moreo","authors_text":"Guangyu Shen, Guanhong Tao, Kaiyuan Zhang, Pin-Yu Chen, Qiuling Xu, Shengwei An, Shiqing Ma, Shiwei Feng, Siyuan Cheng, Xiangyu Zhang, Yingqi Liu","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-10-23T22:24:03Z","title":"FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.12873","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2a90922cdb5aaf9432db7e2dbe675dace8e9fff58da89718b39a5eb56780aa8e","target":"record","created_at":"2026-07-05T05:46:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1ffcd87644abc178f56403dea9e45bc95accec5ac0d8d44013bd12abf7fbdd8e","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-10-23T22:24:03Z","title_canon_sha256":"990656c9d0a38f7460e6834b1eaa6cec136684ff381148b43c348df0976ed37e"},"schema_version":"1.0","source":{"id":"2210.12873","kind":"arxiv","version":2}},"canonical_sha256":"3760632e20555f4e69437e993eca05d3271ecbdf52dffe054941347802ea4a2f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3760632e20555f4e69437e993eca05d3271ecbdf52dffe054941347802ea4a2f","first_computed_at":"2026-07-05T05:46:26.431465Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:46:26.431465Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gPBo1P5aFEeqHVVhizNRydDXDxniJ81mQjubSE4+zV1jWzGDUXuwIY7Yr0UdBz6me8/j//O2qzMjEBfyz7PBDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T05:46:26.431920Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.12873","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2a90922cdb5aaf9432db7e2dbe675dace8e9fff58da89718b39a5eb56780aa8e","sha256:2118bcec4c160fb3dfafbdd4f54ddfe29b79e26c1624035bbaf0ef7f4ea4664b"],"state_sha256":"55054619151e0d5f89fac0ecd0fec09cc4d9204bc1aa43322a69a819631e9956"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rkgYK23pS+ryDxonqxJqQ3pQPSyvAh3b98pttGLRxE80eX4iLyiXYgEu97vuTB20iu1UQTD82L1zNxi7uBnYCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T18:28:14.324943Z","bundle_sha256":"6a12d13054db8ce9b6884c67f78bf7e58fb7fe0472173447706f22acf28b50a1"}}