{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:LM6NISNMWJ6I7MIX642J67HYZU","short_pith_number":"pith:LM6NISNM","canonical_record":{"source":{"id":"2502.03801","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-06T06:05:00Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"cd17a893634d8ffbcccdf9a3e59a993639c5b305917b0b638039219a9aa814a2","abstract_canon_sha256":"022b45aebbcdaced97a2d389bf864e74de70dea1c941bcec1ef729750efab4ba"},"schema_version":"1.0"},"canonical_sha256":"5b3cd449acb27c8fb117f7349f7cf8cd094bbd2b090bd1aa1460583ba6b0dd1b","source":{"kind":"arxiv","id":"2502.03801","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.03801","created_at":"2026-07-05T10:10:15Z"},{"alias_kind":"arxiv_version","alias_value":"2502.03801v1","created_at":"2026-07-05T10:10:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.03801","created_at":"2026-07-05T10:10:15Z"},{"alias_kind":"pith_short_12","alias_value":"LM6NISNMWJ6I","created_at":"2026-07-05T10:10:15Z"},{"alias_kind":"pith_short_16","alias_value":"LM6NISNMWJ6I7MIX","created_at":"2026-07-05T10:10:15Z"},{"alias_kind":"pith_short_8","alias_value":"LM6NISNM","created_at":"2026-07-05T10:10:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:LM6NISNMWJ6I7MIX642J67HYZU","target":"record","payload":{"canonical_record":{"source":{"id":"2502.03801","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-06T06:05:00Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"cd17a893634d8ffbcccdf9a3e59a993639c5b305917b0b638039219a9aa814a2","abstract_canon_sha256":"022b45aebbcdaced97a2d389bf864e74de70dea1c941bcec1ef729750efab4ba"},"schema_version":"1.0"},"canonical_sha256":"5b3cd449acb27c8fb117f7349f7cf8cd094bbd2b090bd1aa1460583ba6b0dd1b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:10:15.158653Z","signature_b64":"zYdTFyaTZ4l350k/WuScQS5s23Z5CE5faWZXCW9ZTsa+PfujY+bTcvmU0o3X7I6aWq+3OI+G+8NX1Lh4hMKiCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5b3cd449acb27c8fb117f7349f7cf8cd094bbd2b090bd1aa1460583ba6b0dd1b","last_reissued_at":"2026-07-05T10:10:15.158204Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:10:15.158204Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.03801","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:10:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XsviBcGDiaL0uz2om6hK0ryuTU1+SKRX9OHm5yMsq/rF3sC2IzyAIh4HIqmaiyEk3p6OPd03FvFRH8NuJqkCDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T04:19:24.302226Z"},"content_sha256":"7bc32632c65df574bbac88145f3f5f418d3afa97c6b5d8c0372525885c395d52","schema_version":"1.0","event_id":"sha256:7bc32632c65df574bbac88145f3f5f418d3afa97c6b5d8c0372525885c395d52"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:LM6NISNMWJ6I7MIX642J67HYZU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Heyi Zhang, Jun Wu, Tianshuo Cong, Xinlei He, Xinyi Huang, Yule Liu","submitted_at":"2025-02-06T06:05:00Z","abstract_excerpt":"Federated learning (FL) enables collaborative model training while preserving data privacy, but its decentralized nature exposes it to client-side data poisoning attacks (DPAs) and model poisoning attacks (MPAs) that degrade global model performance. While numerous proposed defenses claim substantial effectiveness, their evaluation is typically done in isolation with limited attack strategies, raising concerns about their validity. Additionally, existing studies overlook the mutual effectiveness of defenses against both DPAs and MPAs, causing fragmentation in this field. This paper aims to pro"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.03801","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.03801/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:10:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+tMQOP5cYGRgUALlOqKP/lxRg9jVzxQJ50ibWYwN80wvWCgQZ0TfW/ygtQ5rLz8wMObpPYB9n5smoHyDrR4RAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T04:19:24.302865Z"},"content_sha256":"195adb236780419d1b4dd20da129d996977cc0b66d3ee7678279748f11e7f357","schema_version":"1.0","event_id":"sha256:195adb236780419d1b4dd20da129d996977cc0b66d3ee7678279748f11e7f357"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LM6NISNMWJ6I7MIX642J67HYZU/bundle.json","state_url":"https://pith.science/pith/LM6NISNMWJ6I7MIX642J67HYZU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LM6NISNMWJ6I7MIX642J67HYZU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T04:19:24Z","links":{"resolver":"https://pith.science/pith/LM6NISNMWJ6I7MIX642J67HYZU","bundle":"https://pith.science/pith/LM6NISNMWJ6I7MIX642J67HYZU/bundle.json","state":"https://pith.science/pith/LM6NISNMWJ6I7MIX642J67HYZU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LM6NISNMWJ6I7MIX642J67HYZU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:LM6NISNMWJ6I7MIX642J67HYZU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"022b45aebbcdaced97a2d389bf864e74de70dea1c941bcec1ef729750efab4ba","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-06T06:05:00Z","title_canon_sha256":"cd17a893634d8ffbcccdf9a3e59a993639c5b305917b0b638039219a9aa814a2"},"schema_version":"1.0","source":{"id":"2502.03801","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.03801","created_at":"2026-07-05T10:10:15Z"},{"alias_kind":"arxiv_version","alias_value":"2502.03801v1","created_at":"2026-07-05T10:10:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.03801","created_at":"2026-07-05T10:10:15Z"},{"alias_kind":"pith_short_12","alias_value":"LM6NISNMWJ6I","created_at":"2026-07-05T10:10:15Z"},{"alias_kind":"pith_short_16","alias_value":"LM6NISNMWJ6I7MIX","created_at":"2026-07-05T10:10:15Z"},{"alias_kind":"pith_short_8","alias_value":"LM6NISNM","created_at":"2026-07-05T10:10:15Z"}],"graph_snapshots":[{"event_id":"sha256:195adb236780419d1b4dd20da129d996977cc0b66d3ee7678279748f11e7f357","target":"graph","created_at":"2026-07-05T10:10:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.03801/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning (FL) enables collaborative model training while preserving data privacy, but its decentralized nature exposes it to client-side data poisoning attacks (DPAs) and model poisoning attacks (MPAs) that degrade global model performance. While numerous proposed defenses claim substantial effectiveness, their evaluation is typically done in isolation with limited attack strategies, raising concerns about their validity. Additionally, existing studies overlook the mutual effectiveness of defenses against both DPAs and MPAs, causing fragmentation in this field. This paper aims to pro","authors_text":"Heyi Zhang, Jun Wu, Tianshuo Cong, Xinlei He, Xinyi Huang, Yule Liu","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-06T06:05:00Z","title":"SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.03801","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7bc32632c65df574bbac88145f3f5f418d3afa97c6b5d8c0372525885c395d52","target":"record","created_at":"2026-07-05T10:10:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"022b45aebbcdaced97a2d389bf864e74de70dea1c941bcec1ef729750efab4ba","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-06T06:05:00Z","title_canon_sha256":"cd17a893634d8ffbcccdf9a3e59a993639c5b305917b0b638039219a9aa814a2"},"schema_version":"1.0","source":{"id":"2502.03801","kind":"arxiv","version":1}},"canonical_sha256":"5b3cd449acb27c8fb117f7349f7cf8cd094bbd2b090bd1aa1460583ba6b0dd1b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5b3cd449acb27c8fb117f7349f7cf8cd094bbd2b090bd1aa1460583ba6b0dd1b","first_computed_at":"2026-07-05T10:10:15.158204Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:10:15.158204Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zYdTFyaTZ4l350k/WuScQS5s23Z5CE5faWZXCW9ZTsa+PfujY+bTcvmU0o3X7I6aWq+3OI+G+8NX1Lh4hMKiCw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:10:15.158653Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.03801","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7bc32632c65df574bbac88145f3f5f418d3afa97c6b5d8c0372525885c395d52","sha256:195adb236780419d1b4dd20da129d996977cc0b66d3ee7678279748f11e7f357"],"state_sha256":"f8e0ca603f337988edb56c02b7528abd2511501e8ee5b4229a11813af257d122"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8a7pDTm0uZltBAH1uV8Uje9jt6vIOG6538RY+aQAExL/L0RdUlj9n7fASdL7QlSYormLuKT23hsSGi3i1t+PDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T04:19:24.309342Z","bundle_sha256":"5c952ac9b2169c8fee7fd554b9451dbb2f73671d384cbd167374305b7f6320dd"}}