{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:JZA667HG3GM7ENXTTGQJIVTOYU","short_pith_number":"pith:JZA667HG","canonical_record":{"source":{"id":"2607.07314","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2026-07-08T11:55:00Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"086d5ffcf3fe14c149adbccfe0bd341da19601ebd81b3d8472dd268753681b06","abstract_canon_sha256":"1ec7fc7dfa9f150015447d36f345300adc0755ded501e1b4b9a9a30b975cc9cb"},"schema_version":"1.0"},"canonical_sha256":"4e41ef7ce6d999f236f399a094566ec5237816bfa3fafc0d0f440f4934ec8ffd","source":{"kind":"arxiv","id":"2607.07314","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.07314","created_at":"2026-07-09T01:20:20Z"},{"alias_kind":"arxiv_version","alias_value":"2607.07314v1","created_at":"2026-07-09T01:20:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.07314","created_at":"2026-07-09T01:20:20Z"},{"alias_kind":"pith_short_12","alias_value":"JZA667HG3GM7","created_at":"2026-07-09T01:20:20Z"},{"alias_kind":"pith_short_16","alias_value":"JZA667HG3GM7ENXT","created_at":"2026-07-09T01:20:20Z"},{"alias_kind":"pith_short_8","alias_value":"JZA667HG","created_at":"2026-07-09T01:20:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:JZA667HG3GM7ENXTTGQJIVTOYU","target":"record","payload":{"canonical_record":{"source":{"id":"2607.07314","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2026-07-08T11:55:00Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"086d5ffcf3fe14c149adbccfe0bd341da19601ebd81b3d8472dd268753681b06","abstract_canon_sha256":"1ec7fc7dfa9f150015447d36f345300adc0755ded501e1b4b9a9a30b975cc9cb"},"schema_version":"1.0"},"canonical_sha256":"4e41ef7ce6d999f236f399a094566ec5237816bfa3fafc0d0f440f4934ec8ffd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-09T01:20:20.670532Z","signature_b64":"ycyFbqOsO1zogsDxoaWhGkttnBi0wyJoMBHRr2veminVvCJxpmjK/eVS8qyw5jatxrBvxZ7TIxRocI+VGCeXAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4e41ef7ce6d999f236f399a094566ec5237816bfa3fafc0d0f440f4934ec8ffd","last_reissued_at":"2026-07-09T01:20:20.670091Z","signature_status":"signed_v1","first_computed_at":"2026-07-09T01:20:20.670091Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.07314","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-09T01:20:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MMOjHvESniO7UX6O0/oZpDnos2VMOOFA8/EBO7aWXUHB/KQVciljsZODG7Za7ILvQhiQ/zfznucW3VwT2y8KBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T15:52:17.733560Z"},"content_sha256":"d9efea4a49468fc81ff82fe4dbf2259958f0418ca9871e3f407797016bc1899b","schema_version":"1.0","event_id":"sha256:d9efea4a49468fc81ff82fe4dbf2259958f0418ca9871e3f407797016bc1899b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:JZA667HG3GM7ENXTTGQJIVTOYU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"FedCVESA: Taking Away Training Data in Federated Learning via Correlation Value Encoding and Segmented Aggregation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Bang Zhang, Chongkai Li, Wenjian Luo","submitted_at":"2026-07-08T11:55:00Z","abstract_excerpt":"Federated learning (FL) avoids explicit data exposure by keeping raw data on local clients, yet privacy risks remain in the training process and the learned model itself. Recently, centralized Taking Away Training Data (TATD) attacks have shown that malicious training could abuse the memorization capacity of deep models to store and later recover training data. However, this memorization-based threat has not been systematically studied under FL environments, where multi-client averaging could overwrite encoded training data. In this paper, we study a white-box TATD attack in which a malicious "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.07314","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.07314/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-09T01:20:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jJ1BberC3wD0ciEGqOU7dq8nry/Juat9Wx3SeGjmYIMp3/MtEp5ehbY/S2BimH0VrbKeTvGv//2hxpIMGnqHAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T15:52:17.733953Z"},"content_sha256":"f8545d33f2fa0a508080da22e31bef6219b397fe3620b8755714504b3f2581dc","schema_version":"1.0","event_id":"sha256:f8545d33f2fa0a508080da22e31bef6219b397fe3620b8755714504b3f2581dc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JZA667HG3GM7ENXTTGQJIVTOYU/bundle.json","state_url":"https://pith.science/pith/JZA667HG3GM7ENXTTGQJIVTOYU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JZA667HG3GM7ENXTTGQJIVTOYU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T15:52:17Z","links":{"resolver":"https://pith.science/pith/JZA667HG3GM7ENXTTGQJIVTOYU","bundle":"https://pith.science/pith/JZA667HG3GM7ENXTTGQJIVTOYU/bundle.json","state":"https://pith.science/pith/JZA667HG3GM7ENXTTGQJIVTOYU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JZA667HG3GM7ENXTTGQJIVTOYU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:JZA667HG3GM7ENXTTGQJIVTOYU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1ec7fc7dfa9f150015447d36f345300adc0755ded501e1b4b9a9a30b975cc9cb","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2026-07-08T11:55:00Z","title_canon_sha256":"086d5ffcf3fe14c149adbccfe0bd341da19601ebd81b3d8472dd268753681b06"},"schema_version":"1.0","source":{"id":"2607.07314","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.07314","created_at":"2026-07-09T01:20:20Z"},{"alias_kind":"arxiv_version","alias_value":"2607.07314v1","created_at":"2026-07-09T01:20:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.07314","created_at":"2026-07-09T01:20:20Z"},{"alias_kind":"pith_short_12","alias_value":"JZA667HG3GM7","created_at":"2026-07-09T01:20:20Z"},{"alias_kind":"pith_short_16","alias_value":"JZA667HG3GM7ENXT","created_at":"2026-07-09T01:20:20Z"},{"alias_kind":"pith_short_8","alias_value":"JZA667HG","created_at":"2026-07-09T01:20:20Z"}],"graph_snapshots":[{"event_id":"sha256:f8545d33f2fa0a508080da22e31bef6219b397fe3620b8755714504b3f2581dc","target":"graph","created_at":"2026-07-09T01:20:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.07314/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning (FL) avoids explicit data exposure by keeping raw data on local clients, yet privacy risks remain in the training process and the learned model itself. Recently, centralized Taking Away Training Data (TATD) attacks have shown that malicious training could abuse the memorization capacity of deep models to store and later recover training data. However, this memorization-based threat has not been systematically studied under FL environments, where multi-client averaging could overwrite encoded training data. In this paper, we study a white-box TATD attack in which a malicious ","authors_text":"Bang Zhang, Chongkai Li, Wenjian Luo","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2026-07-08T11:55:00Z","title":"FedCVESA: Taking Away Training Data in Federated Learning via Correlation Value Encoding and Segmented Aggregation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.07314","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d9efea4a49468fc81ff82fe4dbf2259958f0418ca9871e3f407797016bc1899b","target":"record","created_at":"2026-07-09T01:20:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1ec7fc7dfa9f150015447d36f345300adc0755ded501e1b4b9a9a30b975cc9cb","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2026-07-08T11:55:00Z","title_canon_sha256":"086d5ffcf3fe14c149adbccfe0bd341da19601ebd81b3d8472dd268753681b06"},"schema_version":"1.0","source":{"id":"2607.07314","kind":"arxiv","version":1}},"canonical_sha256":"4e41ef7ce6d999f236f399a094566ec5237816bfa3fafc0d0f440f4934ec8ffd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4e41ef7ce6d999f236f399a094566ec5237816bfa3fafc0d0f440f4934ec8ffd","first_computed_at":"2026-07-09T01:20:20.670091Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-09T01:20:20.670091Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ycyFbqOsO1zogsDxoaWhGkttnBi0wyJoMBHRr2veminVvCJxpmjK/eVS8qyw5jatxrBvxZ7TIxRocI+VGCeXAA==","signature_status":"signed_v1","signed_at":"2026-07-09T01:20:20.670532Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.07314","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d9efea4a49468fc81ff82fe4dbf2259958f0418ca9871e3f407797016bc1899b","sha256:f8545d33f2fa0a508080da22e31bef6219b397fe3620b8755714504b3f2581dc"],"state_sha256":"43699ed22f2884ba6ae812c779f25eb47ef83f75fd591afebc2c70c0759c2252"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"v8sz2xORdA/uau+96SdiJZbA1KKmI/u+OVxfmmgWE7uIx8iXLMShrfn7YsMJf6B6D+5AwCNayIkR/IKtK4O1DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T15:52:17.736324Z","bundle_sha256":"cad1245c666fddbfce94cd977a3149f3a8042ad6492890e1fbc81a56171e36c5"}}