{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:KNX4ENTM57QP4WU6IWRHLTNTBI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"543c299cb5b8ad1895350191d9688c32a970b47c9d33122fd23f078c98da9751","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-28T18:39:28Z","title_canon_sha256":"e0d95cae98381d761e53dc1b5b26a90254c10f42d1111169764306e7bfae8f97"},"schema_version":"1.0","source":{"id":"2011.01767","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2011.01767","created_at":"2026-07-05T02:07:05Z"},{"alias_kind":"arxiv_version","alias_value":"2011.01767v2","created_at":"2026-07-05T02:07:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2011.01767","created_at":"2026-07-05T02:07:05Z"},{"alias_kind":"pith_short_12","alias_value":"KNX4ENTM57QP","created_at":"2026-07-05T02:07:05Z"},{"alias_kind":"pith_short_16","alias_value":"KNX4ENTM57QP4WU6","created_at":"2026-07-05T02:07:05Z"},{"alias_kind":"pith_short_8","alias_value":"KNX4ENTM","created_at":"2026-07-05T02:07:05Z"}],"graph_snapshots":[{"event_id":"sha256:bc1a1a6711a44a39cc570c331f533583c59b72aa7c640eaad5a03f1bf8dd0a04","target":"graph","created_at":"2026-07-05T02:07:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2011.01767/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Malicious clients can attack federated learning systems using malicious data, including backdoor samples, during the training phase. The compromised global model will perform well on the validation dataset designed for the task, but a small subset of data with backdoor patterns may trigger the model to make a wrong prediction. There has been an arms race between attackers who tried to conceal attacks and defenders who tried to detect attacks during the aggregation stage of training on the server-side. In this work, we propose a new and effective method to mitigate backdoor attacks after the tr","authors_text":"Chen Wu, Prasenjit Mitra, Sencun Zhu, Xian Yang","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-28T18:39:28Z","title":"Mitigating Backdoor Attacks in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2011.01767","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ce05725048a081df0354a9ebd16a423c773b9427b4535eb0bb22ac097b12a2e2","target":"record","created_at":"2026-07-05T02:07:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"543c299cb5b8ad1895350191d9688c32a970b47c9d33122fd23f078c98da9751","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-28T18:39:28Z","title_canon_sha256":"e0d95cae98381d761e53dc1b5b26a90254c10f42d1111169764306e7bfae8f97"},"schema_version":"1.0","source":{"id":"2011.01767","kind":"arxiv","version":2}},"canonical_sha256":"536fc2366cefe0fe5a9e45a275cdb30a1d3796699f9955e231ebc393fb19f23f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"536fc2366cefe0fe5a9e45a275cdb30a1d3796699f9955e231ebc393fb19f23f","first_computed_at":"2026-07-05T02:07:05.302657Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:07:05.302657Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"sA2qlk0kxT3Z7yn17iq/JuAvzWdkZIJkSObqpbykhCsOUFoDodsC0Hod3Xy57WzDsN1JtCAhPD8cNa52a6SfAg==","signature_status":"signed_v1","signed_at":"2026-07-05T02:07:05.303125Z","signed_message":"canonical_sha256_bytes"},"source_id":"2011.01767","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ce05725048a081df0354a9ebd16a423c773b9427b4535eb0bb22ac097b12a2e2","sha256:bc1a1a6711a44a39cc570c331f533583c59b72aa7c640eaad5a03f1bf8dd0a04"],"state_sha256":"db81d853f1baa99e97defc86ef2a9b011d886f8ac23992bf4fb7c0e83c0c8707"}