{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:MDKHDVD5FTBABIZSGBNLWO7NGA","short_pith_number":"pith:MDKHDVD5","canonical_record":{"source":{"id":"2410.21453","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-28T18:57:15Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"b5c4c6e0499bb422bfede997f5765a304c1482af76c284143c6289ee0b9a7cbc","abstract_canon_sha256":"55d5890d33974861069c5f91bbfef9ecfae71548b0a3bc3b3ab5e2883f15c0f9"},"schema_version":"1.0"},"canonical_sha256":"60d471d47d2cc200a332305abb3bed3018c861563fa0bef2767dc366d2b04296","source":{"kind":"arxiv","id":"2410.21453","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.21453","created_at":"2026-07-05T09:47:35Z"},{"alias_kind":"arxiv_version","alias_value":"2410.21453v2","created_at":"2026-07-05T09:47:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.21453","created_at":"2026-07-05T09:47:35Z"},{"alias_kind":"pith_short_12","alias_value":"MDKHDVD5FTBA","created_at":"2026-07-05T09:47:35Z"},{"alias_kind":"pith_short_16","alias_value":"MDKHDVD5FTBABIZS","created_at":"2026-07-05T09:47:35Z"},{"alias_kind":"pith_short_8","alias_value":"MDKHDVD5","created_at":"2026-07-05T09:47:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:MDKHDVD5FTBABIZSGBNLWO7NGA","target":"record","payload":{"canonical_record":{"source":{"id":"2410.21453","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-28T18:57:15Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"b5c4c6e0499bb422bfede997f5765a304c1482af76c284143c6289ee0b9a7cbc","abstract_canon_sha256":"55d5890d33974861069c5f91bbfef9ecfae71548b0a3bc3b3ab5e2883f15c0f9"},"schema_version":"1.0"},"canonical_sha256":"60d471d47d2cc200a332305abb3bed3018c861563fa0bef2767dc366d2b04296","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:47:35.772645Z","signature_b64":"WcKisX7Sl60PENc4TL6HFuKLUhbbF/gJN2TlKAZNcNYC7TF6B9o6K9nW3A0YqPgti4FsSkR80ykzDuZj1N3BAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"60d471d47d2cc200a332305abb3bed3018c861563fa0bef2767dc366d2b04296","last_reissued_at":"2026-07-05T09:47:35.772080Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:47:35.772080Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.21453","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:47:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oOgMiON+ko+8Eo4M7lUrogSUSN7X6tSW/IM/AF1uQyhyrzMCjxazlNvt+neSZLR1WWzYQWeaypMmtb3KZAJ0BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T16:29:29.486831Z"},"content_sha256":"f3a2fa5ddbdc9b70c72a45cbf4b57fcb09c3235f02748adaeb6e214dd01142f3","schema_version":"1.0","event_id":"sha256:f3a2fa5ddbdc9b70c72a45cbf4b57fcb09c3235f02748adaeb6e214dd01142f3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:MDKHDVD5FTBABIZSGBNLWO7NGA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Inverting Gradient Attacks Makes Powerful Data Poisoning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"El-Mahdi El-Mhamdi, Nicolas Usunier, Wassim Bouaziz","submitted_at":"2024-10-28T18:57:15Z","abstract_excerpt":"Gradient attacks and data poisoning tamper with the training of machine learning algorithms to maliciously alter them and have been proven to be equivalent in convex settings. The extent of harm these attacks can produce in non-convex settings is still to be determined. Gradient attacks can affect far less systems than data poisoning but have been argued to be more harmful since they can be arbitrary, whereas data poisoning reduces the attacker's power to only being able to inject data points to training sets, via e.g. legitimate participation in a collaborative dataset. This raises the questi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.21453","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.21453/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:47:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8hE465GXf+JjlVwhN+CEY+/WZENAtlgqmqWydWIK0YR+vltP6LcUfRd4zJHTmCy08tYCojQbqrEquKg0PA8bCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T16:29:29.487155Z"},"content_sha256":"f05aac6d93e0ab85604b0e02928b8780ecaa5f7863da4d265f9574ccbbdda124","schema_version":"1.0","event_id":"sha256:f05aac6d93e0ab85604b0e02928b8780ecaa5f7863da4d265f9574ccbbdda124"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MDKHDVD5FTBABIZSGBNLWO7NGA/bundle.json","state_url":"https://pith.science/pith/MDKHDVD5FTBABIZSGBNLWO7NGA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MDKHDVD5FTBABIZSGBNLWO7NGA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T16:29:29Z","links":{"resolver":"https://pith.science/pith/MDKHDVD5FTBABIZSGBNLWO7NGA","bundle":"https://pith.science/pith/MDKHDVD5FTBABIZSGBNLWO7NGA/bundle.json","state":"https://pith.science/pith/MDKHDVD5FTBABIZSGBNLWO7NGA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MDKHDVD5FTBABIZSGBNLWO7NGA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:MDKHDVD5FTBABIZSGBNLWO7NGA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"55d5890d33974861069c5f91bbfef9ecfae71548b0a3bc3b3ab5e2883f15c0f9","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-28T18:57:15Z","title_canon_sha256":"b5c4c6e0499bb422bfede997f5765a304c1482af76c284143c6289ee0b9a7cbc"},"schema_version":"1.0","source":{"id":"2410.21453","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.21453","created_at":"2026-07-05T09:47:35Z"},{"alias_kind":"arxiv_version","alias_value":"2410.21453v2","created_at":"2026-07-05T09:47:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.21453","created_at":"2026-07-05T09:47:35Z"},{"alias_kind":"pith_short_12","alias_value":"MDKHDVD5FTBA","created_at":"2026-07-05T09:47:35Z"},{"alias_kind":"pith_short_16","alias_value":"MDKHDVD5FTBABIZS","created_at":"2026-07-05T09:47:35Z"},{"alias_kind":"pith_short_8","alias_value":"MDKHDVD5","created_at":"2026-07-05T09:47:35Z"}],"graph_snapshots":[{"event_id":"sha256:f05aac6d93e0ab85604b0e02928b8780ecaa5f7863da4d265f9574ccbbdda124","target":"graph","created_at":"2026-07-05T09:47:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.21453/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Gradient attacks and data poisoning tamper with the training of machine learning algorithms to maliciously alter them and have been proven to be equivalent in convex settings. The extent of harm these attacks can produce in non-convex settings is still to be determined. Gradient attacks can affect far less systems than data poisoning but have been argued to be more harmful since they can be arbitrary, whereas data poisoning reduces the attacker's power to only being able to inject data points to training sets, via e.g. legitimate participation in a collaborative dataset. This raises the questi","authors_text":"El-Mahdi El-Mhamdi, Nicolas Usunier, Wassim Bouaziz","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-28T18:57:15Z","title":"Inverting Gradient Attacks Makes Powerful Data Poisoning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.21453","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f3a2fa5ddbdc9b70c72a45cbf4b57fcb09c3235f02748adaeb6e214dd01142f3","target":"record","created_at":"2026-07-05T09:47:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"55d5890d33974861069c5f91bbfef9ecfae71548b0a3bc3b3ab5e2883f15c0f9","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-28T18:57:15Z","title_canon_sha256":"b5c4c6e0499bb422bfede997f5765a304c1482af76c284143c6289ee0b9a7cbc"},"schema_version":"1.0","source":{"id":"2410.21453","kind":"arxiv","version":2}},"canonical_sha256":"60d471d47d2cc200a332305abb3bed3018c861563fa0bef2767dc366d2b04296","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"60d471d47d2cc200a332305abb3bed3018c861563fa0bef2767dc366d2b04296","first_computed_at":"2026-07-05T09:47:35.772080Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:47:35.772080Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"WcKisX7Sl60PENc4TL6HFuKLUhbbF/gJN2TlKAZNcNYC7TF6B9o6K9nW3A0YqPgti4FsSkR80ykzDuZj1N3BAA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:47:35.772645Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.21453","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f3a2fa5ddbdc9b70c72a45cbf4b57fcb09c3235f02748adaeb6e214dd01142f3","sha256:f05aac6d93e0ab85604b0e02928b8780ecaa5f7863da4d265f9574ccbbdda124"],"state_sha256":"d7e482b9048991dbdfc14e5ae73772b4f1e063db75f6e2a56e795f2873d1e6f7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FKSMoQ01euPTFmdyJ41Yv4qmE5tbGwm4pOpujsYTXCtrLsPYeCGJ3xfnoydKT3A8PNcubJNRMivDJUBW3YFhBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T16:29:29.508437Z","bundle_sha256":"6063c62179f9d09e789265c9a919c450481cb1e420a216632a17da321cbc7ec0"}}