{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:HQ3MOUHKHTBJOZJ6X32H4IBKIP","short_pith_number":"pith:HQ3MOUHK","canonical_record":{"source":{"id":"2110.13864","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-10-26T17:13:35Z","cross_cats_sorted":["cs.AI","cs.CV","cs.DC"],"title_canon_sha256":"58a17d991b66d4a5f22aae3343927980bc7f6551f0415b4829575e04feaaa7b5","abstract_canon_sha256":"124da74919fca14eaeddd8bd92cf75a97a005e745c7c7849b570febbbcaaab7b"},"schema_version":"1.0"},"canonical_sha256":"3c36c750ea3cc297653ebef47e202a43f102af70a292e8eeee9ecffbed710249","source":{"kind":"arxiv","id":"2110.13864","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.13864","created_at":"2026-07-05T03:26:10Z"},{"alias_kind":"arxiv_version","alias_value":"2110.13864v1","created_at":"2026-07-05T03:26:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.13864","created_at":"2026-07-05T03:26:10Z"},{"alias_kind":"pith_short_12","alias_value":"HQ3MOUHKHTBJ","created_at":"2026-07-05T03:26:10Z"},{"alias_kind":"pith_short_16","alias_value":"HQ3MOUHKHTBJOZJ6","created_at":"2026-07-05T03:26:10Z"},{"alias_kind":"pith_short_8","alias_value":"HQ3MOUHK","created_at":"2026-07-05T03:26:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:HQ3MOUHKHTBJOZJ6X32H4IBKIP","target":"record","payload":{"canonical_record":{"source":{"id":"2110.13864","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-10-26T17:13:35Z","cross_cats_sorted":["cs.AI","cs.CV","cs.DC"],"title_canon_sha256":"58a17d991b66d4a5f22aae3343927980bc7f6551f0415b4829575e04feaaa7b5","abstract_canon_sha256":"124da74919fca14eaeddd8bd92cf75a97a005e745c7c7849b570febbbcaaab7b"},"schema_version":"1.0"},"canonical_sha256":"3c36c750ea3cc297653ebef47e202a43f102af70a292e8eeee9ecffbed710249","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:26:10.660213Z","signature_b64":"p1QyNpHbT7lENBCCdP9nuEJCLnHCRBrHE9konLY3RUV+GJUdNQxhjK5w0I1YrjZUkm+Lx4meZOin7NgdMbJRCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3c36c750ea3cc297653ebef47e202a43f102af70a292e8eeee9ecffbed710249","last_reissued_at":"2026-07-05T03:26:10.659760Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:26:10.659760Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2110.13864","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:26:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TPmk0QgZwZ66nf85i7f/cGKxfG1IR2j5fUfxmns6C0o251HRo5tdoCbgMET5Qy5630wtcxM8tBLib9SQUo6QDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-13T04:59:10.058479Z"},"content_sha256":"20051567922ca1ea119ae819d6faa325f75d61a18c388ba6c52153a4055dbdd3","schema_version":"1.0","event_id":"sha256:20051567922ca1ea119ae819d6faa325f75d61a18c388ba6c52153a4055dbdd3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:HQ3MOUHKHTBJOZJ6X32H4IBKIP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"FL-WBC: Enhancing Robustness against Model Poisoning Attacks in Federated Learning from a Client Perspective","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CV","cs.DC"],"primary_cat":"cs.LG","authors_text":"Amin Hassanzadeh, Ang Li, Hai Li, Jingwei Sun, Louis DiValentin, Yiran Chen","submitted_at":"2021-10-26T17:13:35Z","abstract_excerpt":"Federated learning (FL) is a popular distributed learning framework that trains a global model through iterative communications between a central server and edge devices. Recent works have demonstrated that FL is vulnerable to model poisoning attacks. Several server-based defense approaches (e.g. robust aggregation), have been proposed to mitigate such attacks. However, we empirically show that under extremely strong attacks, these defensive methods fail to guarantee the robustness of FL. More importantly, we observe that as long as the global model is polluted, the impact of attacks on the gl"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.13864","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2110.13864/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:26:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0JI078RLNmQHKNc2AF95wDRLbudZhRpLi4zJ6OE4VXAb8QNcOnhlcftU5128kT/9iWIxfF+bCNdGq9NJB0zQDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-13T04:59:10.058863Z"},"content_sha256":"9a33058794a767fba4f90452456bd53f97b506d6a1e9b31d53b69ddeffc11579","schema_version":"1.0","event_id":"sha256:9a33058794a767fba4f90452456bd53f97b506d6a1e9b31d53b69ddeffc11579"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HQ3MOUHKHTBJOZJ6X32H4IBKIP/bundle.json","state_url":"https://pith.science/pith/HQ3MOUHKHTBJOZJ6X32H4IBKIP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HQ3MOUHKHTBJOZJ6X32H4IBKIP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-13T04:59:10Z","links":{"resolver":"https://pith.science/pith/HQ3MOUHKHTBJOZJ6X32H4IBKIP","bundle":"https://pith.science/pith/HQ3MOUHKHTBJOZJ6X32H4IBKIP/bundle.json","state":"https://pith.science/pith/HQ3MOUHKHTBJOZJ6X32H4IBKIP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HQ3MOUHKHTBJOZJ6X32H4IBKIP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:HQ3MOUHKHTBJOZJ6X32H4IBKIP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"124da74919fca14eaeddd8bd92cf75a97a005e745c7c7849b570febbbcaaab7b","cross_cats_sorted":["cs.AI","cs.CV","cs.DC"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-10-26T17:13:35Z","title_canon_sha256":"58a17d991b66d4a5f22aae3343927980bc7f6551f0415b4829575e04feaaa7b5"},"schema_version":"1.0","source":{"id":"2110.13864","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.13864","created_at":"2026-07-05T03:26:10Z"},{"alias_kind":"arxiv_version","alias_value":"2110.13864v1","created_at":"2026-07-05T03:26:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.13864","created_at":"2026-07-05T03:26:10Z"},{"alias_kind":"pith_short_12","alias_value":"HQ3MOUHKHTBJ","created_at":"2026-07-05T03:26:10Z"},{"alias_kind":"pith_short_16","alias_value":"HQ3MOUHKHTBJOZJ6","created_at":"2026-07-05T03:26:10Z"},{"alias_kind":"pith_short_8","alias_value":"HQ3MOUHK","created_at":"2026-07-05T03:26:10Z"}],"graph_snapshots":[{"event_id":"sha256:9a33058794a767fba4f90452456bd53f97b506d6a1e9b31d53b69ddeffc11579","target":"graph","created_at":"2026-07-05T03:26:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2110.13864/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning (FL) is a popular distributed learning framework that trains a global model through iterative communications between a central server and edge devices. Recent works have demonstrated that FL is vulnerable to model poisoning attacks. Several server-based defense approaches (e.g. robust aggregation), have been proposed to mitigate such attacks. However, we empirically show that under extremely strong attacks, these defensive methods fail to guarantee the robustness of FL. More importantly, we observe that as long as the global model is polluted, the impact of attacks on the gl","authors_text":"Amin Hassanzadeh, Ang Li, Hai Li, Jingwei Sun, Louis DiValentin, Yiran Chen","cross_cats":["cs.AI","cs.CV","cs.DC"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-10-26T17:13:35Z","title":"FL-WBC: Enhancing Robustness against Model Poisoning Attacks in Federated Learning from a Client Perspective"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.13864","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:20051567922ca1ea119ae819d6faa325f75d61a18c388ba6c52153a4055dbdd3","target":"record","created_at":"2026-07-05T03:26:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"124da74919fca14eaeddd8bd92cf75a97a005e745c7c7849b570febbbcaaab7b","cross_cats_sorted":["cs.AI","cs.CV","cs.DC"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-10-26T17:13:35Z","title_canon_sha256":"58a17d991b66d4a5f22aae3343927980bc7f6551f0415b4829575e04feaaa7b5"},"schema_version":"1.0","source":{"id":"2110.13864","kind":"arxiv","version":1}},"canonical_sha256":"3c36c750ea3cc297653ebef47e202a43f102af70a292e8eeee9ecffbed710249","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3c36c750ea3cc297653ebef47e202a43f102af70a292e8eeee9ecffbed710249","first_computed_at":"2026-07-05T03:26:10.659760Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:26:10.659760Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"p1QyNpHbT7lENBCCdP9nuEJCLnHCRBrHE9konLY3RUV+GJUdNQxhjK5w0I1YrjZUkm+Lx4meZOin7NgdMbJRCA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:26:10.660213Z","signed_message":"canonical_sha256_bytes"},"source_id":"2110.13864","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:20051567922ca1ea119ae819d6faa325f75d61a18c388ba6c52153a4055dbdd3","sha256:9a33058794a767fba4f90452456bd53f97b506d6a1e9b31d53b69ddeffc11579"],"state_sha256":"d17512e4fe73a0aab49d0f70b73cbc3cfaea9ba38efa4b629d9c34bf16baea8c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+MfD7NdfQUh+7G1ERAHOJU/XkObTC1X0jBe3txHML2T3ivKLxpv36bqZI9CoBxYoTb3pf1nor7do2Tp4eSMKAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-13T04:59:10.061506Z","bundle_sha256":"3a9e07f6d83cd0e2b168690366032038ca364996d7367d27839393d102b14b74"}}