{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:IC3N5UVGHE24EBTOT465255T32","short_pith_number":"pith:IC3N5UVG","canonical_record":{"source":{"id":"2410.11205","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-15T02:45:19Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"4034b277d129504bfddb0c5a4f94b78d82aa03867e4661c22876382cd34eebdf","abstract_canon_sha256":"b4456684d39d247d985c98221fb8751b14af1a1d90dd0a814768165efe7caf21"},"schema_version":"1.0"},"canonical_sha256":"40b6ded2a63935c2066e9f3ddd77b3debb18d1ec635c893825b82c5b37b73478","source":{"kind":"arxiv","id":"2410.11205","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.11205","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"arxiv_version","alias_value":"2410.11205v1","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.11205","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"pith_short_12","alias_value":"IC3N5UVGHE24","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"pith_short_16","alias_value":"IC3N5UVGHE24EBTO","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"pith_short_8","alias_value":"IC3N5UVG","created_at":"2026-07-05T09:20:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:IC3N5UVGHE24EBTOT465255T32","target":"record","payload":{"canonical_record":{"source":{"id":"2410.11205","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-15T02:45:19Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"4034b277d129504bfddb0c5a4f94b78d82aa03867e4661c22876382cd34eebdf","abstract_canon_sha256":"b4456684d39d247d985c98221fb8751b14af1a1d90dd0a814768165efe7caf21"},"schema_version":"1.0"},"canonical_sha256":"40b6ded2a63935c2066e9f3ddd77b3debb18d1ec635c893825b82c5b37b73478","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:20:30.718693Z","signature_b64":"TKtIGjSrYk/hwmtdGNuHT7BTOSL75z91/NDaYJH4Rg1iD8wO2n5cYM7UIF6V/H9rX4jlfAdG9EGsMuc1/JWKDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"40b6ded2a63935c2066e9f3ddd77b3debb18d1ec635c893825b82c5b37b73478","last_reissued_at":"2026-07-05T09:20:30.718075Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:20:30.718075Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.11205","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:20:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uahkQ7OYX6GMrkQIhKCrmuCrlnKs0S/i7i1j2FYXi9Gii3tJvvVaQDgSflCuk/AE77lxVCo+8WaHoQGBLv55DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T15:16:26.657737Z"},"content_sha256":"2b6f529e9adb1bcdee0676cc47bef010be212ecb100953d4b66cf99cbcede483","schema_version":"1.0","event_id":"sha256:2b6f529e9adb1bcdee0676cc47bef010be212ecb100953d4b66cf99cbcede483"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:IC3N5UVGHE24EBTOT465255T32","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarially Guided Stateful Defense Against Backdoor Attacks in Federated Deep Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Hassan Ali, Salil S. Kanhere, Sanjay Jha, Surya Nepal","submitted_at":"2024-10-15T02:45:19Z","abstract_excerpt":"Recent works have shown that Federated Learning (FL) is vulnerable to backdoor attacks. Existing defenses cluster submitted updates from clients and select the best cluster for aggregation. However, they often rely on unrealistic assumptions regarding client submissions and sampled clients population while choosing the best cluster. We show that in realistic FL settings, state-of-the-art (SOTA) defenses struggle to perform well against backdoor attacks in FL. To address this, we highlight that backdoored submissions are adversarially biased and overconfident compared to clean submissions. We, "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.11205","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.11205/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:20:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TgfTz4iz28IoGOOc069ZotKJpW+jFcyAH585FURBFk1nbOqnv4wQPOeZskwYjJx4RZt68/88GPMrg36vqPNGCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T15:16:26.658250Z"},"content_sha256":"a01835e471b347f79e9df73dd6978caef99ac2171dcc5780254287fe4cb0c6a5","schema_version":"1.0","event_id":"sha256:a01835e471b347f79e9df73dd6978caef99ac2171dcc5780254287fe4cb0c6a5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IC3N5UVGHE24EBTOT465255T32/bundle.json","state_url":"https://pith.science/pith/IC3N5UVGHE24EBTOT465255T32/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IC3N5UVGHE24EBTOT465255T32/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T15:16:26Z","links":{"resolver":"https://pith.science/pith/IC3N5UVGHE24EBTOT465255T32","bundle":"https://pith.science/pith/IC3N5UVGHE24EBTOT465255T32/bundle.json","state":"https://pith.science/pith/IC3N5UVGHE24EBTOT465255T32/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IC3N5UVGHE24EBTOT465255T32/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:IC3N5UVGHE24EBTOT465255T32","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b4456684d39d247d985c98221fb8751b14af1a1d90dd0a814768165efe7caf21","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-15T02:45:19Z","title_canon_sha256":"4034b277d129504bfddb0c5a4f94b78d82aa03867e4661c22876382cd34eebdf"},"schema_version":"1.0","source":{"id":"2410.11205","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.11205","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"arxiv_version","alias_value":"2410.11205v1","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.11205","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"pith_short_12","alias_value":"IC3N5UVGHE24","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"pith_short_16","alias_value":"IC3N5UVGHE24EBTO","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"pith_short_8","alias_value":"IC3N5UVG","created_at":"2026-07-05T09:20:30Z"}],"graph_snapshots":[{"event_id":"sha256:a01835e471b347f79e9df73dd6978caef99ac2171dcc5780254287fe4cb0c6a5","target":"graph","created_at":"2026-07-05T09:20:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.11205/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent works have shown that Federated Learning (FL) is vulnerable to backdoor attacks. Existing defenses cluster submitted updates from clients and select the best cluster for aggregation. However, they often rely on unrealistic assumptions regarding client submissions and sampled clients population while choosing the best cluster. We show that in realistic FL settings, state-of-the-art (SOTA) defenses struggle to perform well against backdoor attacks in FL. To address this, we highlight that backdoored submissions are adversarially biased and overconfident compared to clean submissions. We, ","authors_text":"Hassan Ali, Salil S. Kanhere, Sanjay Jha, Surya Nepal","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-15T02:45:19Z","title":"Adversarially Guided Stateful Defense Against Backdoor Attacks in Federated Deep Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.11205","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2b6f529e9adb1bcdee0676cc47bef010be212ecb100953d4b66cf99cbcede483","target":"record","created_at":"2026-07-05T09:20:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b4456684d39d247d985c98221fb8751b14af1a1d90dd0a814768165efe7caf21","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-15T02:45:19Z","title_canon_sha256":"4034b277d129504bfddb0c5a4f94b78d82aa03867e4661c22876382cd34eebdf"},"schema_version":"1.0","source":{"id":"2410.11205","kind":"arxiv","version":1}},"canonical_sha256":"40b6ded2a63935c2066e9f3ddd77b3debb18d1ec635c893825b82c5b37b73478","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"40b6ded2a63935c2066e9f3ddd77b3debb18d1ec635c893825b82c5b37b73478","first_computed_at":"2026-07-05T09:20:30.718075Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:20:30.718075Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TKtIGjSrYk/hwmtdGNuHT7BTOSL75z91/NDaYJH4Rg1iD8wO2n5cYM7UIF6V/H9rX4jlfAdG9EGsMuc1/JWKDw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:20:30.718693Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.11205","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2b6f529e9adb1bcdee0676cc47bef010be212ecb100953d4b66cf99cbcede483","sha256:a01835e471b347f79e9df73dd6978caef99ac2171dcc5780254287fe4cb0c6a5"],"state_sha256":"6fcfb9fd427d89d32136623dc1fb53c40ac10de97a45f6d77c1afe286f5fbae3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MXSvHEdvicDt48wZJQ6Ir4cCj92S/mKcxZpdJS6Hwa56cynnZ2bOy5MI8Nk8n1QvyIdjmQAQRq6gUB7dyZtFBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T15:16:26.663747Z","bundle_sha256":"96ce5ce57777f5124fc4699bd8b365c492882954bcb27454dff0515011994d4a"}}