{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:HKRHB3GGZYEWTH5FDAJKXOHOT3","short_pith_number":"pith:HKRHB3GG","canonical_record":{"source":{"id":"2007.08432","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-07-16T16:16:57Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"53eeb2c69f6f60b85a742dee6bcf3a63f8bf822f3897f3624121b97a626e9f6f","abstract_canon_sha256":"be39b6484bb852efd63ea5977e9b2a501704a51534662ef1c153f61b3d08adfa"},"schema_version":"1.0"},"canonical_sha256":"3aa270ecc6ce09699fa51812abb8ee9edbb06b2c52fe3e94497257d167dacaad","source":{"kind":"arxiv","id":"2007.08432","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2007.08432","created_at":"2026-07-05T01:26:31Z"},{"alias_kind":"arxiv_version","alias_value":"2007.08432v2","created_at":"2026-07-05T01:26:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2007.08432","created_at":"2026-07-05T01:26:31Z"},{"alias_kind":"pith_short_12","alias_value":"HKRHB3GGZYEW","created_at":"2026-07-05T01:26:31Z"},{"alias_kind":"pith_short_16","alias_value":"HKRHB3GGZYEWTH5F","created_at":"2026-07-05T01:26:31Z"},{"alias_kind":"pith_short_8","alias_value":"HKRHB3GG","created_at":"2026-07-05T01:26:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:HKRHB3GGZYEWTH5FDAJKXOHOT3","target":"record","payload":{"canonical_record":{"source":{"id":"2007.08432","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-07-16T16:16:57Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"53eeb2c69f6f60b85a742dee6bcf3a63f8bf822f3897f3624121b97a626e9f6f","abstract_canon_sha256":"be39b6484bb852efd63ea5977e9b2a501704a51534662ef1c153f61b3d08adfa"},"schema_version":"1.0"},"canonical_sha256":"3aa270ecc6ce09699fa51812abb8ee9edbb06b2c52fe3e94497257d167dacaad","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:26:31.068530Z","signature_b64":"XknsEM+5fUS1JFl7aZHLsTcqO1chAAnGh148xF6KNw0QZfJw2dnRxDnRk5yznhAxzPwWToz12MdGxz+H0RgVDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3aa270ecc6ce09699fa51812abb8ee9edbb06b2c52fe3e94497257d167dacaad","last_reissued_at":"2026-07-05T01:26:31.068035Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:26:31.068035Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2007.08432","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:26:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GrG608lcMjXVl2lQnSiEXmYyyYf7LY11GcnmKAi+NCaNM6Pi7ReJ9PdvQc7OxXgKk8/r7iYzP9D/Qwc/pv0ZAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:21:08.402826Z"},"content_sha256":"cafadc0dfa1373c1ea2adb31acdbf1d782429d62bc4ac7849c3477602230bea2","schema_version":"1.0","event_id":"sha256:cafadc0dfa1373c1ea2adb31acdbf1d782429d62bc4ac7849c3477602230bea2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:HKRHB3GGZYEWTH5FDAJKXOHOT3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Data Poisoning Attacks Against Federated Learning Systems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Ling Liu, Mehmet Emre Gursoy, Stacey Truex, Vale Tolpegin","submitted_at":"2020-07-16T16:16:57Z","abstract_excerpt":"Federated learning (FL) is an emerging paradigm for distributed training of large-scale deep neural networks in which participants' data remains on their own devices with only model updates being shared with a central server. However, the distributed nature of FL gives rise to new threats caused by potentially malicious participants. In this paper, we study targeted data poisoning attacks against FL systems in which a malicious subset of the participants aim to poison the global model by sending model updates derived from mislabeled data. We first demonstrate that such data poisoning attacks c"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2007.08432","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2007.08432/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:26:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Opa7y3pxOKai8kjqFbWynjvgpheTTpLBHGC3vY8aMVFO5GWPmSzXhz3298go7B0EqV9O9F/pRZOADiMm8H79Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:21:08.403616Z"},"content_sha256":"9c600cb35d2c1dc50766922f98f192a91a2a13378785f1398d9f76ed188363bb","schema_version":"1.0","event_id":"sha256:9c600cb35d2c1dc50766922f98f192a91a2a13378785f1398d9f76ed188363bb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HKRHB3GGZYEWTH5FDAJKXOHOT3/bundle.json","state_url":"https://pith.science/pith/HKRHB3GGZYEWTH5FDAJKXOHOT3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HKRHB3GGZYEWTH5FDAJKXOHOT3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T16:21:08Z","links":{"resolver":"https://pith.science/pith/HKRHB3GGZYEWTH5FDAJKXOHOT3","bundle":"https://pith.science/pith/HKRHB3GGZYEWTH5FDAJKXOHOT3/bundle.json","state":"https://pith.science/pith/HKRHB3GGZYEWTH5FDAJKXOHOT3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HKRHB3GGZYEWTH5FDAJKXOHOT3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:HKRHB3GGZYEWTH5FDAJKXOHOT3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"be39b6484bb852efd63ea5977e9b2a501704a51534662ef1c153f61b3d08adfa","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-07-16T16:16:57Z","title_canon_sha256":"53eeb2c69f6f60b85a742dee6bcf3a63f8bf822f3897f3624121b97a626e9f6f"},"schema_version":"1.0","source":{"id":"2007.08432","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2007.08432","created_at":"2026-07-05T01:26:31Z"},{"alias_kind":"arxiv_version","alias_value":"2007.08432v2","created_at":"2026-07-05T01:26:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2007.08432","created_at":"2026-07-05T01:26:31Z"},{"alias_kind":"pith_short_12","alias_value":"HKRHB3GGZYEW","created_at":"2026-07-05T01:26:31Z"},{"alias_kind":"pith_short_16","alias_value":"HKRHB3GGZYEWTH5F","created_at":"2026-07-05T01:26:31Z"},{"alias_kind":"pith_short_8","alias_value":"HKRHB3GG","created_at":"2026-07-05T01:26:31Z"}],"graph_snapshots":[{"event_id":"sha256:9c600cb35d2c1dc50766922f98f192a91a2a13378785f1398d9f76ed188363bb","target":"graph","created_at":"2026-07-05T01:26:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2007.08432/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning (FL) is an emerging paradigm for distributed training of large-scale deep neural networks in which participants' data remains on their own devices with only model updates being shared with a central server. However, the distributed nature of FL gives rise to new threats caused by potentially malicious participants. In this paper, we study targeted data poisoning attacks against FL systems in which a malicious subset of the participants aim to poison the global model by sending model updates derived from mislabeled data. We first demonstrate that such data poisoning attacks c","authors_text":"Ling Liu, Mehmet Emre Gursoy, Stacey Truex, Vale Tolpegin","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-07-16T16:16:57Z","title":"Data Poisoning Attacks Against Federated Learning Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2007.08432","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cafadc0dfa1373c1ea2adb31acdbf1d782429d62bc4ac7849c3477602230bea2","target":"record","created_at":"2026-07-05T01:26:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"be39b6484bb852efd63ea5977e9b2a501704a51534662ef1c153f61b3d08adfa","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-07-16T16:16:57Z","title_canon_sha256":"53eeb2c69f6f60b85a742dee6bcf3a63f8bf822f3897f3624121b97a626e9f6f"},"schema_version":"1.0","source":{"id":"2007.08432","kind":"arxiv","version":2}},"canonical_sha256":"3aa270ecc6ce09699fa51812abb8ee9edbb06b2c52fe3e94497257d167dacaad","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3aa270ecc6ce09699fa51812abb8ee9edbb06b2c52fe3e94497257d167dacaad","first_computed_at":"2026-07-05T01:26:31.068035Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:26:31.068035Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"XknsEM+5fUS1JFl7aZHLsTcqO1chAAnGh148xF6KNw0QZfJw2dnRxDnRk5yznhAxzPwWToz12MdGxz+H0RgVDA==","signature_status":"signed_v1","signed_at":"2026-07-05T01:26:31.068530Z","signed_message":"canonical_sha256_bytes"},"source_id":"2007.08432","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cafadc0dfa1373c1ea2adb31acdbf1d782429d62bc4ac7849c3477602230bea2","sha256:9c600cb35d2c1dc50766922f98f192a91a2a13378785f1398d9f76ed188363bb"],"state_sha256":"85409bd6b7fca6cc1f990652458400cb09d54e650ed9360df7070850254ccf79"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"66PqrbhZvNsij0859O5f+bGBblDBygcTy93fbGD/60AyCJy+QI5hwGz1Ij3L4SgVNFrJ136qL64UO+usVBjGCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T16:21:08.464819Z","bundle_sha256":"5da1d39e79c357635745858c4c0222b8c28bbaa4d8ab7377084397ff56b282f0"}}