{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:JSOVQ7BQP5H2WLDONIE5JD7OTI","short_pith_number":"pith:JSOVQ7BQ","canonical_record":{"source":{"id":"2002.00211","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-01T14:09:48Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"fa2187b02045271d96098fd7255f89c89d53cb5923ffcb1217d7339279ba63ec","abstract_canon_sha256":"d999ecd90c620ed00349331e1a33abd4124d414286c96ead9ff4022b55c60952"},"schema_version":"1.0"},"canonical_sha256":"4c9d587c307f4fab2c6e6a09d48fee9a265e724591510ea5518ffb911003eb22","source":{"kind":"arxiv","id":"2002.00211","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.00211","created_at":"2026-07-05T00:37:52Z"},{"alias_kind":"arxiv_version","alias_value":"2002.00211v1","created_at":"2026-07-05T00:37:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.00211","created_at":"2026-07-05T00:37:52Z"},{"alias_kind":"pith_short_12","alias_value":"JSOVQ7BQP5H2","created_at":"2026-07-05T00:37:52Z"},{"alias_kind":"pith_short_16","alias_value":"JSOVQ7BQP5H2WLDO","created_at":"2026-07-05T00:37:52Z"},{"alias_kind":"pith_short_8","alias_value":"JSOVQ7BQ","created_at":"2026-07-05T00:37:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:JSOVQ7BQP5H2WLDONIE5JD7OTI","target":"record","payload":{"canonical_record":{"source":{"id":"2002.00211","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-01T14:09:48Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"fa2187b02045271d96098fd7255f89c89d53cb5923ffcb1217d7339279ba63ec","abstract_canon_sha256":"d999ecd90c620ed00349331e1a33abd4124d414286c96ead9ff4022b55c60952"},"schema_version":"1.0"},"canonical_sha256":"4c9d587c307f4fab2c6e6a09d48fee9a265e724591510ea5518ffb911003eb22","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:37:52.688417Z","signature_b64":"cp2hOCsN8vHPRgeN8uPH/K2vhB9iUzj452YeA6gaNhFrRqWqQjoFgvgR9KwOs8ngnOoq280UCcp4aDXN3/KJBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4c9d587c307f4fab2c6e6a09d48fee9a265e724591510ea5518ffb911003eb22","last_reissued_at":"2026-07-05T00:37:52.688007Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:37:52.688007Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2002.00211","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:37:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/N+y29oEuNV3jNP8z6A+JKMeY/y/81fpz5HK6z8QaWqXEiAjIjEVcTAHsjZVMNAhTy3tHBdjrGj+3L/PcIYUAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T04:28:03.241565Z"},"content_sha256":"20a671a9d9c868a951feb18cacc32e94f074a1659bf4a61cd2040f6d9d4406aa","schema_version":"1.0","event_id":"sha256:20a671a9d9c868a951feb18cacc32e94f074a1659bf4a61cd2040f6d9d4406aa"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:JSOVQ7BQP5H2WLDONIE5JD7OTI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Learning to Detect Malicious Clients for Robust Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Suyi Li, Tianjian Chen, Wei Wang, Yang Liu, Yong Cheng","submitted_at":"2020-02-01T14:09:48Z","abstract_excerpt":"Federated learning systems are vulnerable to attacks from malicious clients. As the central server in the system cannot govern the behaviors of the clients, a rogue client may initiate an attack by sending malicious model updates to the server, so as to degrade the learning performance or enforce targeted model poisoning attacks (a.k.a. backdoor attacks). Therefore, timely detecting these malicious model updates and the underlying attackers becomes critically important. In this work, we propose a new framework for robust federated learning where the central server learns to detect and remove t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.00211","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2002.00211/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:37:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"t0EYIlk1uIZ/Ka2lrPHMXAwETTvr42d7202KS/Q0reUR6VpDuFE0pUTe/eUUVQyGKqqJDuZeEMbs1g/+2EL4Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T04:28:03.242350Z"},"content_sha256":"8a394826de1d6f4d7959e97f38159473225c171f10b367b6c8a524577fe6cfd1","schema_version":"1.0","event_id":"sha256:8a394826de1d6f4d7959e97f38159473225c171f10b367b6c8a524577fe6cfd1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JSOVQ7BQP5H2WLDONIE5JD7OTI/bundle.json","state_url":"https://pith.science/pith/JSOVQ7BQP5H2WLDONIE5JD7OTI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JSOVQ7BQP5H2WLDONIE5JD7OTI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T04:28:03Z","links":{"resolver":"https://pith.science/pith/JSOVQ7BQP5H2WLDONIE5JD7OTI","bundle":"https://pith.science/pith/JSOVQ7BQP5H2WLDONIE5JD7OTI/bundle.json","state":"https://pith.science/pith/JSOVQ7BQP5H2WLDONIE5JD7OTI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JSOVQ7BQP5H2WLDONIE5JD7OTI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:JSOVQ7BQP5H2WLDONIE5JD7OTI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d999ecd90c620ed00349331e1a33abd4124d414286c96ead9ff4022b55c60952","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-01T14:09:48Z","title_canon_sha256":"fa2187b02045271d96098fd7255f89c89d53cb5923ffcb1217d7339279ba63ec"},"schema_version":"1.0","source":{"id":"2002.00211","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.00211","created_at":"2026-07-05T00:37:52Z"},{"alias_kind":"arxiv_version","alias_value":"2002.00211v1","created_at":"2026-07-05T00:37:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.00211","created_at":"2026-07-05T00:37:52Z"},{"alias_kind":"pith_short_12","alias_value":"JSOVQ7BQP5H2","created_at":"2026-07-05T00:37:52Z"},{"alias_kind":"pith_short_16","alias_value":"JSOVQ7BQP5H2WLDO","created_at":"2026-07-05T00:37:52Z"},{"alias_kind":"pith_short_8","alias_value":"JSOVQ7BQ","created_at":"2026-07-05T00:37:52Z"}],"graph_snapshots":[{"event_id":"sha256:8a394826de1d6f4d7959e97f38159473225c171f10b367b6c8a524577fe6cfd1","target":"graph","created_at":"2026-07-05T00:37:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2002.00211/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning systems are vulnerable to attacks from malicious clients. As the central server in the system cannot govern the behaviors of the clients, a rogue client may initiate an attack by sending malicious model updates to the server, so as to degrade the learning performance or enforce targeted model poisoning attacks (a.k.a. backdoor attacks). Therefore, timely detecting these malicious model updates and the underlying attackers becomes critically important. In this work, we propose a new framework for robust federated learning where the central server learns to detect and remove t","authors_text":"Suyi Li, Tianjian Chen, Wei Wang, Yang Liu, Yong Cheng","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-01T14:09:48Z","title":"Learning to Detect Malicious Clients for Robust Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.00211","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:20a671a9d9c868a951feb18cacc32e94f074a1659bf4a61cd2040f6d9d4406aa","target":"record","created_at":"2026-07-05T00:37:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d999ecd90c620ed00349331e1a33abd4124d414286c96ead9ff4022b55c60952","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-01T14:09:48Z","title_canon_sha256":"fa2187b02045271d96098fd7255f89c89d53cb5923ffcb1217d7339279ba63ec"},"schema_version":"1.0","source":{"id":"2002.00211","kind":"arxiv","version":1}},"canonical_sha256":"4c9d587c307f4fab2c6e6a09d48fee9a265e724591510ea5518ffb911003eb22","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4c9d587c307f4fab2c6e6a09d48fee9a265e724591510ea5518ffb911003eb22","first_computed_at":"2026-07-05T00:37:52.688007Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:37:52.688007Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cp2hOCsN8vHPRgeN8uPH/K2vhB9iUzj452YeA6gaNhFrRqWqQjoFgvgR9KwOs8ngnOoq280UCcp4aDXN3/KJBw==","signature_status":"signed_v1","signed_at":"2026-07-05T00:37:52.688417Z","signed_message":"canonical_sha256_bytes"},"source_id":"2002.00211","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:20a671a9d9c868a951feb18cacc32e94f074a1659bf4a61cd2040f6d9d4406aa","sha256:8a394826de1d6f4d7959e97f38159473225c171f10b367b6c8a524577fe6cfd1"],"state_sha256":"9c7aa523a14296897fa310bf0d473028d96efcd176f5dd05049c0e6b52b12546"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"E5USyXm8+hU/sY7X8nYBe1vokdwocBFtUhLmnS7McCIUwVO1gJ0sUYlz7Yo3lYeGZ9r55fQJjH7FP68TyXCYBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T04:28:03.249723Z","bundle_sha256":"29c38e1f3baed2409b1f6e4a57c241de833b44d402d2f62e8ee08c08fc278e85"}}