{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:OFTWJTP2GD4Q24GUIABQIGYSRH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3c919e9f98e27b1795a9f79bd426223be48153692ace4b3e1f52d084d350f731","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-06-12T16:52:52Z","title_canon_sha256":"b79b76879b6d62a3eaefa8d26f49d1487eaf4f39d7230e45d65e035da2aadcab"},"schema_version":"1.0","source":{"id":"2206.10341","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2206.10341","created_at":"2026-07-05T04:33:46Z"},{"alias_kind":"arxiv_version","alias_value":"2206.10341v1","created_at":"2026-07-05T04:33:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2206.10341","created_at":"2026-07-05T04:33:46Z"},{"alias_kind":"pith_short_12","alias_value":"OFTWJTP2GD4Q","created_at":"2026-07-05T04:33:46Z"},{"alias_kind":"pith_short_16","alias_value":"OFTWJTP2GD4Q24GU","created_at":"2026-07-05T04:33:46Z"},{"alias_kind":"pith_short_8","alias_value":"OFTWJTP2","created_at":"2026-07-05T04:33:46Z"}],"graph_snapshots":[{"event_id":"sha256:bc2417e10619aa71817cbd11fac6829cd84b819c2d1b2c6c6fa897969f23cf30","target":"graph","created_at":"2026-07-05T04:33:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2206.10341/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Due to their decentralized nature, federated learning (FL) systems have an inherent vulnerability during their training to adversarial backdoor attacks. In this type of attack, the goal of the attacker is to use poisoned updates to implant so-called backdoors into the learned model such that, at test time, the model's outputs can be fixed to a given target for certain inputs. (As a simple toy example, if a user types \"people from New York\" into a mobile keyboard app that uses a backdoored next word prediction model, then the model could autocomplete the sentence to \"people from New York are ru","authors_text":"Ashwinee Panda, Joseph E. Gonzalez, Kannan Ramchandran, Linyue Song, Michael W. Mahoney, Prateek Mittal, Yaoqing Yang, Zhengming Zhang","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-06-12T16:52:52Z","title":"Neurotoxin: Durable Backdoors in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2206.10341","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:63f64afb12c650aa2b95c5e26a7c35a93ec2197d46e8e6cffef3ff12e9bb2ae5","target":"record","created_at":"2026-07-05T04:33:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3c919e9f98e27b1795a9f79bd426223be48153692ace4b3e1f52d084d350f731","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-06-12T16:52:52Z","title_canon_sha256":"b79b76879b6d62a3eaefa8d26f49d1487eaf4f39d7230e45d65e035da2aadcab"},"schema_version":"1.0","source":{"id":"2206.10341","kind":"arxiv","version":1}},"canonical_sha256":"716764cdfa30f90d70d44003041b1289feb1ae1451b77f3626e7f9a8b4f5c725","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"716764cdfa30f90d70d44003041b1289feb1ae1451b77f3626e7f9a8b4f5c725","first_computed_at":"2026-07-05T04:33:46.550048Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:33:46.550048Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"0MDWoRJvfT7GHBwC9M4FPE1l9MVp2u1/EhA+MQJBQWp1dvU/HyatPXftEJWYN6XFvHVMnYrbaAhz+eWADwNGDw==","signature_status":"signed_v1","signed_at":"2026-07-05T04:33:46.550480Z","signed_message":"canonical_sha256_bytes"},"source_id":"2206.10341","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:63f64afb12c650aa2b95c5e26a7c35a93ec2197d46e8e6cffef3ff12e9bb2ae5","sha256:bc2417e10619aa71817cbd11fac6829cd84b819c2d1b2c6c6fa897969f23cf30"],"state_sha256":"0d7be331c5f739ced826abea57b5e150b25d270caaba1dadf8bb41b8d7165017"}