{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:G7DKC5CCP2L3DFANDH3RGBBX5Z","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e616903cadeb6b4297faacfa2ed6ca869149f720292955a66c5ba49a0bdce70b","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-02-26T14:04:16Z","title_canon_sha256":"15284fe0acf609bb0f820241c1cf5311c4a8d94b460b43ab82241d3616a4bdbc"},"schema_version":"1.0","source":{"id":"2002.11497","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.11497","created_at":"2026-07-05T00:44:28Z"},{"alias_kind":"arxiv_version","alias_value":"2002.11497v2","created_at":"2026-07-05T00:44:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.11497","created_at":"2026-07-05T00:44:28Z"},{"alias_kind":"pith_short_12","alias_value":"G7DKC5CCP2L3","created_at":"2026-07-05T00:44:28Z"},{"alias_kind":"pith_short_16","alias_value":"G7DKC5CCP2L3DFAN","created_at":"2026-07-05T00:44:28Z"},{"alias_kind":"pith_short_8","alias_value":"G7DKC5CC","created_at":"2026-07-05T00:44:28Z"}],"graph_snapshots":[{"event_id":"sha256:9bb88d4e9539ad1079a91875c0f039c0d3115ff7764c3dfe76897a179f0f151b","target":"graph","created_at":"2026-07-05T00:44:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2002.11497/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning algorithms are vulnerable to data poisoning attacks. Prior taxonomies that focus on specific scenarios, e.g., indiscriminate or targeted, have enabled defenses for the corresponding subset of known attacks. Yet, this introduces an inevitable arms race between adversaries and defenders. In this work, we study the feasibility of an attack-agnostic defense relying on artifacts that are common to all poisoning attacks. Specifically, we focus on a common element between all attacks: they modify gradients computed to train the model. We identify two main artifacts of gradients compu","authors_text":"Nicolas Papernot, Sanghyun Hong, Tudor Dumitra\\c{s}, Varun Chandrasekaran, Yi\\u{g}itcan Kaya","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-02-26T14:04:16Z","title":"On the Effectiveness of Mitigating Data Poisoning Attacks with Gradient Shaping"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.11497","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:80747c4ba805d48125f1133a3dec41ae807b51b4026ae28fd25285b5c91a7be2","target":"record","created_at":"2026-07-05T00:44:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e616903cadeb6b4297faacfa2ed6ca869149f720292955a66c5ba49a0bdce70b","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-02-26T14:04:16Z","title_canon_sha256":"15284fe0acf609bb0f820241c1cf5311c4a8d94b460b43ab82241d3616a4bdbc"},"schema_version":"1.0","source":{"id":"2002.11497","kind":"arxiv","version":2}},"canonical_sha256":"37c6a174427e97b1940d19f7130437ee7f0f619d3ebd0b4ae969d13485c74c7e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"37c6a174427e97b1940d19f7130437ee7f0f619d3ebd0b4ae969d13485c74c7e","first_computed_at":"2026-07-05T00:44:28.956182Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:44:28.956182Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IPFHqDD+NSf6VkxLX3aF5zMkRxC+HGdk3eXiEsC5zQQG8+J43rk88KGmHxoRsJPqOIwGV/i6pjG4PENYGlMrCw==","signature_status":"signed_v1","signed_at":"2026-07-05T00:44:28.956603Z","signed_message":"canonical_sha256_bytes"},"source_id":"2002.11497","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:80747c4ba805d48125f1133a3dec41ae807b51b4026ae28fd25285b5c91a7be2","sha256:9bb88d4e9539ad1079a91875c0f039c0d3115ff7764c3dfe76897a179f0f151b"],"state_sha256":"07879abc634b1321169ce604feead6b8c1432e1b7b32d21e3703455d92a4e767"}