{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:PFFUIBJ7IMFUDHMUXRDKNEUT2M","short_pith_number":"pith:PFFUIBJ7","canonical_record":{"source":{"id":"2407.05285","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-07-07T07:06:49Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"850131af7fd743a27c15f975b1325ee80f35da2e4bec7aca3586a2b49377338a","abstract_canon_sha256":"ffe576f49c257d77dd2a7b7b265fa99d32f6e2e28f852db2eabf950418b09e68"},"schema_version":"1.0"},"canonical_sha256":"794b44053f430b419d94bc46a69293d30903e8dd9937c6011b7ddb5e9f4c7cfc","source":{"kind":"arxiv","id":"2407.05285","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.05285","created_at":"2026-07-05T09:57:20Z"},{"alias_kind":"arxiv_version","alias_value":"2407.05285v4","created_at":"2026-07-05T09:57:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.05285","created_at":"2026-07-05T09:57:20Z"},{"alias_kind":"pith_short_12","alias_value":"PFFUIBJ7IMFU","created_at":"2026-07-05T09:57:20Z"},{"alias_kind":"pith_short_16","alias_value":"PFFUIBJ7IMFUDHMU","created_at":"2026-07-05T09:57:20Z"},{"alias_kind":"pith_short_8","alias_value":"PFFUIBJ7","created_at":"2026-07-05T09:57:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:PFFUIBJ7IMFUDHMUXRDKNEUT2M","target":"record","payload":{"canonical_record":{"source":{"id":"2407.05285","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-07-07T07:06:49Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"850131af7fd743a27c15f975b1325ee80f35da2e4bec7aca3586a2b49377338a","abstract_canon_sha256":"ffe576f49c257d77dd2a7b7b265fa99d32f6e2e28f852db2eabf950418b09e68"},"schema_version":"1.0"},"canonical_sha256":"794b44053f430b419d94bc46a69293d30903e8dd9937c6011b7ddb5e9f4c7cfc","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:57:20.849247Z","signature_b64":"hZxadfKnP/OJMy0CnWILsYb+npPT9/ME59D1kHBSRt5Rqpvc41D7ILhPT7aWEX6vFICEnegmT/HZyvwCO6q5CQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"794b44053f430b419d94bc46a69293d30903e8dd9937c6011b7ddb5e9f4c7cfc","last_reissued_at":"2026-07-05T09:57:20.848814Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:57:20.848814Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.05285","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:57:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HzRxyLKKanNz6Pf99ShDoU2pRaY4aY8+NToH+CHRqYVZjLLRhuZMUqQGrXxdWncQlFNLd4chDJgjMjid99XfAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T13:13:40.318392Z"},"content_sha256":"3ed6c5f35eeae3a73387af4991e7623cda318431225a3255cc926b569a306d2c","schema_version":"1.0","event_id":"sha256:3ed6c5f35eeae3a73387af4991e7623cda318431225a3255cc926b569a306d2c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:PFFUIBJ7IMFUDHMUXRDKNEUT2M","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Mjolnir: Breaking the Shield of Perturbation-Protected Gradients via Adaptive Diffusion","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Kaiwei Lin, Qihua Zhou, Ruibin Li, Siqi Cai, Song Guo, Xuan Liu","submitted_at":"2024-07-07T07:06:49Z","abstract_excerpt":"Perturbation-based mechanisms, such as differential privacy, mitigate gradient leakage attacks by introducing noise into the gradients, thereby preventing attackers from reconstructing clients' private data from the leaked gradients. However, can gradient perturbation protection mechanisms truly defend against all gradient leakage attacks? In this paper, we present the first attempt to break the shield of gradient perturbation protection in Federated Learning for the extraction of private information. We focus on common noise distributions, specifically Gaussian and Laplace, and apply our appr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.05285","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.05285/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:57:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6kphoUJl1fPsH7cNc7Abi8UuM37Vssz0qr9Cvbs/8smGiQ9yQZxonkkS8ulRt8V/3hHuq0R0T2PGUcTnTbc3Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T13:13:40.319259Z"},"content_sha256":"f4aa366bf5df24548e1027a1f30f6344f23a7b86abaf8a01455a3494f18aac52","schema_version":"1.0","event_id":"sha256:f4aa366bf5df24548e1027a1f30f6344f23a7b86abaf8a01455a3494f18aac52"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PFFUIBJ7IMFUDHMUXRDKNEUT2M/bundle.json","state_url":"https://pith.science/pith/PFFUIBJ7IMFUDHMUXRDKNEUT2M/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PFFUIBJ7IMFUDHMUXRDKNEUT2M/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T13:13:40Z","links":{"resolver":"https://pith.science/pith/PFFUIBJ7IMFUDHMUXRDKNEUT2M","bundle":"https://pith.science/pith/PFFUIBJ7IMFUDHMUXRDKNEUT2M/bundle.json","state":"https://pith.science/pith/PFFUIBJ7IMFUDHMUXRDKNEUT2M/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PFFUIBJ7IMFUDHMUXRDKNEUT2M/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:PFFUIBJ7IMFUDHMUXRDKNEUT2M","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ffe576f49c257d77dd2a7b7b265fa99d32f6e2e28f852db2eabf950418b09e68","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-07-07T07:06:49Z","title_canon_sha256":"850131af7fd743a27c15f975b1325ee80f35da2e4bec7aca3586a2b49377338a"},"schema_version":"1.0","source":{"id":"2407.05285","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.05285","created_at":"2026-07-05T09:57:20Z"},{"alias_kind":"arxiv_version","alias_value":"2407.05285v4","created_at":"2026-07-05T09:57:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.05285","created_at":"2026-07-05T09:57:20Z"},{"alias_kind":"pith_short_12","alias_value":"PFFUIBJ7IMFU","created_at":"2026-07-05T09:57:20Z"},{"alias_kind":"pith_short_16","alias_value":"PFFUIBJ7IMFUDHMU","created_at":"2026-07-05T09:57:20Z"},{"alias_kind":"pith_short_8","alias_value":"PFFUIBJ7","created_at":"2026-07-05T09:57:20Z"}],"graph_snapshots":[{"event_id":"sha256:f4aa366bf5df24548e1027a1f30f6344f23a7b86abaf8a01455a3494f18aac52","target":"graph","created_at":"2026-07-05T09:57:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.05285/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Perturbation-based mechanisms, such as differential privacy, mitigate gradient leakage attacks by introducing noise into the gradients, thereby preventing attackers from reconstructing clients' private data from the leaked gradients. However, can gradient perturbation protection mechanisms truly defend against all gradient leakage attacks? In this paper, we present the first attempt to break the shield of gradient perturbation protection in Federated Learning for the extraction of private information. We focus on common noise distributions, specifically Gaussian and Laplace, and apply our appr","authors_text":"Kaiwei Lin, Qihua Zhou, Ruibin Li, Siqi Cai, Song Guo, Xuan Liu","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-07-07T07:06:49Z","title":"Mjolnir: Breaking the Shield of Perturbation-Protected Gradients via Adaptive Diffusion"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.05285","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3ed6c5f35eeae3a73387af4991e7623cda318431225a3255cc926b569a306d2c","target":"record","created_at":"2026-07-05T09:57:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ffe576f49c257d77dd2a7b7b265fa99d32f6e2e28f852db2eabf950418b09e68","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-07-07T07:06:49Z","title_canon_sha256":"850131af7fd743a27c15f975b1325ee80f35da2e4bec7aca3586a2b49377338a"},"schema_version":"1.0","source":{"id":"2407.05285","kind":"arxiv","version":4}},"canonical_sha256":"794b44053f430b419d94bc46a69293d30903e8dd9937c6011b7ddb5e9f4c7cfc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"794b44053f430b419d94bc46a69293d30903e8dd9937c6011b7ddb5e9f4c7cfc","first_computed_at":"2026-07-05T09:57:20.848814Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:57:20.848814Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"hZxadfKnP/OJMy0CnWILsYb+npPT9/ME59D1kHBSRt5Rqpvc41D7ILhPT7aWEX6vFICEnegmT/HZyvwCO6q5CQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:57:20.849247Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.05285","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3ed6c5f35eeae3a73387af4991e7623cda318431225a3255cc926b569a306d2c","sha256:f4aa366bf5df24548e1027a1f30f6344f23a7b86abaf8a01455a3494f18aac52"],"state_sha256":"5f7da4e34f0c6f6ef071411cec5e61132ff279d4601fbb6d8e0bbb74d6e27135"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aPF4NpV5GenXAr9iQuMV0w4bbgyrha6AdUEY8x6ZF1nFfLco1gweD+CUR6CeJOv36msSKcsMBHpASrj1DPL4Cg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T13:13:40.326508Z","bundle_sha256":"d1ad0a7fac5afa4b3e3acffd08407a9019dff1c951f1b5b6ae218aa4d320a14e"}}