{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:KNX4ENTM57QP4WU6IWRHLTNTBI","short_pith_number":"pith:KNX4ENTM","canonical_record":{"source":{"id":"2011.01767","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-28T18:39:28Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"e0d95cae98381d761e53dc1b5b26a90254c10f42d1111169764306e7bfae8f97","abstract_canon_sha256":"543c299cb5b8ad1895350191d9688c32a970b47c9d33122fd23f078c98da9751"},"schema_version":"1.0"},"canonical_sha256":"536fc2366cefe0fe5a9e45a275cdb30a1d3796699f9955e231ebc393fb19f23f","source":{"kind":"arxiv","id":"2011.01767","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2011.01767","created_at":"2026-07-05T02:07:05Z"},{"alias_kind":"arxiv_version","alias_value":"2011.01767v2","created_at":"2026-07-05T02:07:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2011.01767","created_at":"2026-07-05T02:07:05Z"},{"alias_kind":"pith_short_12","alias_value":"KNX4ENTM57QP","created_at":"2026-07-05T02:07:05Z"},{"alias_kind":"pith_short_16","alias_value":"KNX4ENTM57QP4WU6","created_at":"2026-07-05T02:07:05Z"},{"alias_kind":"pith_short_8","alias_value":"KNX4ENTM","created_at":"2026-07-05T02:07:05Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:KNX4ENTM57QP4WU6IWRHLTNTBI","target":"record","payload":{"canonical_record":{"source":{"id":"2011.01767","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-28T18:39:28Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"e0d95cae98381d761e53dc1b5b26a90254c10f42d1111169764306e7bfae8f97","abstract_canon_sha256":"543c299cb5b8ad1895350191d9688c32a970b47c9d33122fd23f078c98da9751"},"schema_version":"1.0"},"canonical_sha256":"536fc2366cefe0fe5a9e45a275cdb30a1d3796699f9955e231ebc393fb19f23f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:07:05.303125Z","signature_b64":"sA2qlk0kxT3Z7yn17iq/JuAvzWdkZIJkSObqpbykhCsOUFoDodsC0Hod3Xy57WzDsN1JtCAhPD8cNa52a6SfAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"536fc2366cefe0fe5a9e45a275cdb30a1d3796699f9955e231ebc393fb19f23f","last_reissued_at":"2026-07-05T02:07:05.302657Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:07:05.302657Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2011.01767","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:07:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OB8ERaodo1aVhgmwgpwvfgIp14gzX6qiGqNyxCtYRrjwW5TrvCLWMH7X0qS6EfPTOd4kOBdii7H6gJMTVGLZBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T19:24:07.821284Z"},"content_sha256":"ce05725048a081df0354a9ebd16a423c773b9427b4535eb0bb22ac097b12a2e2","schema_version":"1.0","event_id":"sha256:ce05725048a081df0354a9ebd16a423c773b9427b4535eb0bb22ac097b12a2e2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:KNX4ENTM57QP4WU6IWRHLTNTBI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Mitigating Backdoor Attacks in Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Chen Wu, Prasenjit Mitra, Sencun Zhu, Xian Yang","submitted_at":"2020-10-28T18:39:28Z","abstract_excerpt":"Malicious clients can attack federated learning systems using malicious data, including backdoor samples, during the training phase. The compromised global model will perform well on the validation dataset designed for the task, but a small subset of data with backdoor patterns may trigger the model to make a wrong prediction. There has been an arms race between attackers who tried to conceal attacks and defenders who tried to detect attacks during the aggregation stage of training on the server-side. In this work, we propose a new and effective method to mitigate backdoor attacks after the tr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2011.01767","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2011.01767/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:07:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UOfPcuzvu7arME3qx1/dnY4dZF32T6y1eKtEel/GZHlu1OpZylHFFVFCo3lIweEHByrAOO8UFOaOaK6+uQsKCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T19:24:07.821787Z"},"content_sha256":"bc1a1a6711a44a39cc570c331f533583c59b72aa7c640eaad5a03f1bf8dd0a04","schema_version":"1.0","event_id":"sha256:bc1a1a6711a44a39cc570c331f533583c59b72aa7c640eaad5a03f1bf8dd0a04"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KNX4ENTM57QP4WU6IWRHLTNTBI/bundle.json","state_url":"https://pith.science/pith/KNX4ENTM57QP4WU6IWRHLTNTBI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KNX4ENTM57QP4WU6IWRHLTNTBI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T19:24:07Z","links":{"resolver":"https://pith.science/pith/KNX4ENTM57QP4WU6IWRHLTNTBI","bundle":"https://pith.science/pith/KNX4ENTM57QP4WU6IWRHLTNTBI/bundle.json","state":"https://pith.science/pith/KNX4ENTM57QP4WU6IWRHLTNTBI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KNX4ENTM57QP4WU6IWRHLTNTBI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:KNX4ENTM57QP4WU6IWRHLTNTBI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"543c299cb5b8ad1895350191d9688c32a970b47c9d33122fd23f078c98da9751","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-28T18:39:28Z","title_canon_sha256":"e0d95cae98381d761e53dc1b5b26a90254c10f42d1111169764306e7bfae8f97"},"schema_version":"1.0","source":{"id":"2011.01767","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2011.01767","created_at":"2026-07-05T02:07:05Z"},{"alias_kind":"arxiv_version","alias_value":"2011.01767v2","created_at":"2026-07-05T02:07:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2011.01767","created_at":"2026-07-05T02:07:05Z"},{"alias_kind":"pith_short_12","alias_value":"KNX4ENTM57QP","created_at":"2026-07-05T02:07:05Z"},{"alias_kind":"pith_short_16","alias_value":"KNX4ENTM57QP4WU6","created_at":"2026-07-05T02:07:05Z"},{"alias_kind":"pith_short_8","alias_value":"KNX4ENTM","created_at":"2026-07-05T02:07:05Z"}],"graph_snapshots":[{"event_id":"sha256:bc1a1a6711a44a39cc570c331f533583c59b72aa7c640eaad5a03f1bf8dd0a04","target":"graph","created_at":"2026-07-05T02:07:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2011.01767/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Malicious clients can attack federated learning systems using malicious data, including backdoor samples, during the training phase. The compromised global model will perform well on the validation dataset designed for the task, but a small subset of data with backdoor patterns may trigger the model to make a wrong prediction. There has been an arms race between attackers who tried to conceal attacks and defenders who tried to detect attacks during the aggregation stage of training on the server-side. In this work, we propose a new and effective method to mitigate backdoor attacks after the tr","authors_text":"Chen Wu, Prasenjit Mitra, Sencun Zhu, Xian Yang","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-28T18:39:28Z","title":"Mitigating Backdoor Attacks in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2011.01767","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ce05725048a081df0354a9ebd16a423c773b9427b4535eb0bb22ac097b12a2e2","target":"record","created_at":"2026-07-05T02:07:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"543c299cb5b8ad1895350191d9688c32a970b47c9d33122fd23f078c98da9751","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-28T18:39:28Z","title_canon_sha256":"e0d95cae98381d761e53dc1b5b26a90254c10f42d1111169764306e7bfae8f97"},"schema_version":"1.0","source":{"id":"2011.01767","kind":"arxiv","version":2}},"canonical_sha256":"536fc2366cefe0fe5a9e45a275cdb30a1d3796699f9955e231ebc393fb19f23f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"536fc2366cefe0fe5a9e45a275cdb30a1d3796699f9955e231ebc393fb19f23f","first_computed_at":"2026-07-05T02:07:05.302657Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:07:05.302657Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"sA2qlk0kxT3Z7yn17iq/JuAvzWdkZIJkSObqpbykhCsOUFoDodsC0Hod3Xy57WzDsN1JtCAhPD8cNa52a6SfAg==","signature_status":"signed_v1","signed_at":"2026-07-05T02:07:05.303125Z","signed_message":"canonical_sha256_bytes"},"source_id":"2011.01767","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ce05725048a081df0354a9ebd16a423c773b9427b4535eb0bb22ac097b12a2e2","sha256:bc1a1a6711a44a39cc570c331f533583c59b72aa7c640eaad5a03f1bf8dd0a04"],"state_sha256":"db81d853f1baa99e97defc86ef2a9b011d886f8ac23992bf4fb7c0e83c0c8707"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3lcsTdbQZdA+otbz+TZXNHVKnSPyNjWtVY8rYA1GbG0PZVss3+z5JhjSndh2ollsACo+NnmqazAhUlg7zdg6Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T19:24:07.826158Z","bundle_sha256":"57b5a208fd3c64c0d692f8ac6c521ac4a549809a1c5835a2735c4cb86c67d72c"}}