{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:GMJVRJEA4UTI5MV5LJOFHJHNWO","short_pith_number":"pith:GMJVRJEA","canonical_record":{"source":{"id":"2105.10051","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-05-20T21:57:32Z","cross_cats_sorted":[],"title_canon_sha256":"61fa0c22ffafd2bbcb030cbaa48779d76d63cbbd640a7154ff49baa9adeab5f6","abstract_canon_sha256":"16d4a3a36b59ac5ad308fee71e41f0124e75bc8ee85dc7fba36ccd82c6b43a90"},"schema_version":"1.0"},"canonical_sha256":"331358a480e5268eb2bd5a5c53a4edb39e6724f26a42ceb40e4e2592b96b5df4","source":{"kind":"arxiv","id":"2105.10051","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.10051","created_at":"2026-07-05T02:42:06Z"},{"alias_kind":"arxiv_version","alias_value":"2105.10051v1","created_at":"2026-07-05T02:42:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.10051","created_at":"2026-07-05T02:42:06Z"},{"alias_kind":"pith_short_12","alias_value":"GMJVRJEA4UTI","created_at":"2026-07-05T02:42:06Z"},{"alias_kind":"pith_short_16","alias_value":"GMJVRJEA4UTI5MV5","created_at":"2026-07-05T02:42:06Z"},{"alias_kind":"pith_short_8","alias_value":"GMJVRJEA","created_at":"2026-07-05T02:42:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:GMJVRJEA4UTI5MV5LJOFHJHNWO","target":"record","payload":{"canonical_record":{"source":{"id":"2105.10051","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-05-20T21:57:32Z","cross_cats_sorted":[],"title_canon_sha256":"61fa0c22ffafd2bbcb030cbaa48779d76d63cbbd640a7154ff49baa9adeab5f6","abstract_canon_sha256":"16d4a3a36b59ac5ad308fee71e41f0124e75bc8ee85dc7fba36ccd82c6b43a90"},"schema_version":"1.0"},"canonical_sha256":"331358a480e5268eb2bd5a5c53a4edb39e6724f26a42ceb40e4e2592b96b5df4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:42:06.930184Z","signature_b64":"5DbdpbHgbIn0WaEvBeOJ8H36UJTz4jCB1lDqcWrNQ1iCsBovVSKajyjvblPh74VxCY7osO/L1ZTa4ibnfsSHDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"331358a480e5268eb2bd5a5c53a4edb39e6724f26a42ceb40e4e2592b96b5df4","last_reissued_at":"2026-07-05T02:42:06.929776Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:42:06.929776Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2105.10051","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:42:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nUbDgwP3QA8qpq0YyUAH3JA3cHpeR/PcId29G1Q8j3I5izbu24fk3csubt2guLKPYd+Eq1qTMOGXYiF7yJ+PBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T12:28:19.529038Z"},"content_sha256":"27a58296076f50eb4e1ab963a10e867dcaa7e9bba7fd43ca82c53bb1e6b14fd4","schema_version":"1.0","event_id":"sha256:27a58296076f50eb4e1ab963a10e867dcaa7e9bba7fd43ca82c53bb1e6b14fd4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:GMJVRJEA4UTI5MV5LJOFHJHNWO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Preventing Machine Learning Poisoning Attacks Using Authentication and Provenance","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jack W. Stokes, Kevin Kane, Paul England","submitted_at":"2021-05-20T21:57:32Z","abstract_excerpt":"Recent research has successfully demonstrated new types of data poisoning attacks. To address this problem, some researchers have proposed both offline and online data poisoning detection defenses which employ machine learning algorithms to identify such attacks. In this work, we take a different approach to preventing data poisoning attacks which relies on cryptographically-based authentication and provenance to ensure the integrity of the data used to train a machine learning model. The same approach is also used to prevent software poisoning and model poisoning attacks. A software poisoning"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.10051","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2105.10051/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:42:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eO5VcFNXGhjMJ6WfnXieaEUnwH4o1/rMMivumDNNdOYlwveEXSPvcmkzCAwNMD0SUUCTpgVBrxh7QwCW2PnJCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T12:28:19.529553Z"},"content_sha256":"ed4901119a245712a5966601cc922316ccdeca1e7a4b7e895824cad58d8e00c1","schema_version":"1.0","event_id":"sha256:ed4901119a245712a5966601cc922316ccdeca1e7a4b7e895824cad58d8e00c1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GMJVRJEA4UTI5MV5LJOFHJHNWO/bundle.json","state_url":"https://pith.science/pith/GMJVRJEA4UTI5MV5LJOFHJHNWO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GMJVRJEA4UTI5MV5LJOFHJHNWO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T12:28:19Z","links":{"resolver":"https://pith.science/pith/GMJVRJEA4UTI5MV5LJOFHJHNWO","bundle":"https://pith.science/pith/GMJVRJEA4UTI5MV5LJOFHJHNWO/bundle.json","state":"https://pith.science/pith/GMJVRJEA4UTI5MV5LJOFHJHNWO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GMJVRJEA4UTI5MV5LJOFHJHNWO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:GMJVRJEA4UTI5MV5LJOFHJHNWO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"16d4a3a36b59ac5ad308fee71e41f0124e75bc8ee85dc7fba36ccd82c6b43a90","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-05-20T21:57:32Z","title_canon_sha256":"61fa0c22ffafd2bbcb030cbaa48779d76d63cbbd640a7154ff49baa9adeab5f6"},"schema_version":"1.0","source":{"id":"2105.10051","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.10051","created_at":"2026-07-05T02:42:06Z"},{"alias_kind":"arxiv_version","alias_value":"2105.10051v1","created_at":"2026-07-05T02:42:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.10051","created_at":"2026-07-05T02:42:06Z"},{"alias_kind":"pith_short_12","alias_value":"GMJVRJEA4UTI","created_at":"2026-07-05T02:42:06Z"},{"alias_kind":"pith_short_16","alias_value":"GMJVRJEA4UTI5MV5","created_at":"2026-07-05T02:42:06Z"},{"alias_kind":"pith_short_8","alias_value":"GMJVRJEA","created_at":"2026-07-05T02:42:06Z"}],"graph_snapshots":[{"event_id":"sha256:ed4901119a245712a5966601cc922316ccdeca1e7a4b7e895824cad58d8e00c1","target":"graph","created_at":"2026-07-05T02:42:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2105.10051/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent research has successfully demonstrated new types of data poisoning attacks. To address this problem, some researchers have proposed both offline and online data poisoning detection defenses which employ machine learning algorithms to identify such attacks. In this work, we take a different approach to preventing data poisoning attacks which relies on cryptographically-based authentication and provenance to ensure the integrity of the data used to train a machine learning model. The same approach is also used to prevent software poisoning and model poisoning attacks. A software poisoning","authors_text":"Jack W. Stokes, Kevin Kane, Paul England","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-05-20T21:57:32Z","title":"Preventing Machine Learning Poisoning Attacks Using Authentication and Provenance"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.10051","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:27a58296076f50eb4e1ab963a10e867dcaa7e9bba7fd43ca82c53bb1e6b14fd4","target":"record","created_at":"2026-07-05T02:42:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"16d4a3a36b59ac5ad308fee71e41f0124e75bc8ee85dc7fba36ccd82c6b43a90","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-05-20T21:57:32Z","title_canon_sha256":"61fa0c22ffafd2bbcb030cbaa48779d76d63cbbd640a7154ff49baa9adeab5f6"},"schema_version":"1.0","source":{"id":"2105.10051","kind":"arxiv","version":1}},"canonical_sha256":"331358a480e5268eb2bd5a5c53a4edb39e6724f26a42ceb40e4e2592b96b5df4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"331358a480e5268eb2bd5a5c53a4edb39e6724f26a42ceb40e4e2592b96b5df4","first_computed_at":"2026-07-05T02:42:06.929776Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:42:06.929776Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5DbdpbHgbIn0WaEvBeOJ8H36UJTz4jCB1lDqcWrNQ1iCsBovVSKajyjvblPh74VxCY7osO/L1ZTa4ibnfsSHDw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:42:06.930184Z","signed_message":"canonical_sha256_bytes"},"source_id":"2105.10051","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:27a58296076f50eb4e1ab963a10e867dcaa7e9bba7fd43ca82c53bb1e6b14fd4","sha256:ed4901119a245712a5966601cc922316ccdeca1e7a4b7e895824cad58d8e00c1"],"state_sha256":"f096b213a81769781359183ecc755c06a280404b70ffeb3dbea769d1667edd4d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jUSZ1R2cYz1jAPc59zEt9lgxtNrmddWJg5e+V+/cgpG68uLA3ZZk8HgCMi92IXOD2TMF2E+aNV/PxACIVWj8Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T12:28:19.535839Z","bundle_sha256":"279ba387eac7974111da13a9b198d2017fefb8e09454c832d561f5fe9c926955"}}