{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:PMYE6V6ZK5S6XN5XVNNIPLHI6P","short_pith_number":"pith:PMYE6V6Z","canonical_record":{"source":{"id":"2304.10638","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-04-20T20:32:40Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"4ecb736fb7cf4f3ab4900114ea405466bfcb9bf958acb54776d681e735a0303d","abstract_canon_sha256":"ac2c88e203b056331631fee7e869f6ba0fc77d48d18990662a67190af947da15"},"schema_version":"1.0"},"canonical_sha256":"7b304f57d95765ebb7b7ab5a87ace8f3c7cb05d458b351226f1d984ecac20205","source":{"kind":"arxiv","id":"2304.10638","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.10638","created_at":"2026-07-05T06:03:13Z"},{"alias_kind":"arxiv_version","alias_value":"2304.10638v1","created_at":"2026-07-05T06:03:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.10638","created_at":"2026-07-05T06:03:13Z"},{"alias_kind":"pith_short_12","alias_value":"PMYE6V6ZK5S6","created_at":"2026-07-05T06:03:13Z"},{"alias_kind":"pith_short_16","alias_value":"PMYE6V6ZK5S6XN5X","created_at":"2026-07-05T06:03:13Z"},{"alias_kind":"pith_short_8","alias_value":"PMYE6V6Z","created_at":"2026-07-05T06:03:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:PMYE6V6ZK5S6XN5XVNNIPLHI6P","target":"record","payload":{"canonical_record":{"source":{"id":"2304.10638","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-04-20T20:32:40Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"4ecb736fb7cf4f3ab4900114ea405466bfcb9bf958acb54776d681e735a0303d","abstract_canon_sha256":"ac2c88e203b056331631fee7e869f6ba0fc77d48d18990662a67190af947da15"},"schema_version":"1.0"},"canonical_sha256":"7b304f57d95765ebb7b7ab5a87ace8f3c7cb05d458b351226f1d984ecac20205","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:03:13.519934Z","signature_b64":"j65xvQCRLIHIEw//YEeUvHtF9oEO4TK5qUL3xelKhgTA9lR/oNOX/ft3FL1IzG+bPy+R6hUzsfRC7926d7FzDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7b304f57d95765ebb7b7ab5a87ace8f3c7cb05d458b351226f1d984ecac20205","last_reissued_at":"2026-07-05T06:03:13.519590Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:03:13.519590Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2304.10638","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:03:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UTdP2VaElUajf+B+jQ9vQIU6QzdgtgypG65LNn/uMs3CwAhMnnEBo+vFTimlQbaXpMASwovd//VTTiMAs5idBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T06:35:02.718119Z"},"content_sha256":"5a5d05fe1ed3f6b22bc04178def9ba256f8caabf6d2ed31b5a34004c619c609c","schema_version":"1.0","event_id":"sha256:5a5d05fe1ed3f6b22bc04178def9ba256f8caabf6d2ed31b5a34004c619c609c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:PMYE6V6ZK5S6XN5XVNNIPLHI6P","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Get Rid Of Your Trail: Remotely Erasing Backdoors in Federated Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Hithem Lamri, Manaar Alam, Michail Maniatakos","submitted_at":"2023-04-20T20:32:40Z","abstract_excerpt":"Federated Learning (FL) enables collaborative deep learning training across multiple participants without exposing sensitive personal data. However, the distributed nature of FL and the unvetted participants' data makes it vulnerable to backdoor attacks. In these attacks, adversaries inject malicious functionality into the centralized model during training, leading to intentional misclassifications for specific adversary-chosen inputs. While previous research has demonstrated successful injections of persistent backdoors in FL, the persistence also poses a challenge, as their existence in the "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.10638","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2304.10638/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:03:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VicikE4orj7phXU9DZLc3CK1tLankNYW3huVBudbQXbK9cDRVp6h9z6FBwQZydgdXduZaicGT+DrVqaHeA/vBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T06:35:02.718521Z"},"content_sha256":"4a9f2d0d86ab9ccb8634aee5e7ccca896e788047eb3db723983c64be684b0f67","schema_version":"1.0","event_id":"sha256:4a9f2d0d86ab9ccb8634aee5e7ccca896e788047eb3db723983c64be684b0f67"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PMYE6V6ZK5S6XN5XVNNIPLHI6P/bundle.json","state_url":"https://pith.science/pith/PMYE6V6ZK5S6XN5XVNNIPLHI6P/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PMYE6V6ZK5S6XN5XVNNIPLHI6P/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T06:35:02Z","links":{"resolver":"https://pith.science/pith/PMYE6V6ZK5S6XN5XVNNIPLHI6P","bundle":"https://pith.science/pith/PMYE6V6ZK5S6XN5XVNNIPLHI6P/bundle.json","state":"https://pith.science/pith/PMYE6V6ZK5S6XN5XVNNIPLHI6P/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PMYE6V6ZK5S6XN5XVNNIPLHI6P/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:PMYE6V6ZK5S6XN5XVNNIPLHI6P","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ac2c88e203b056331631fee7e869f6ba0fc77d48d18990662a67190af947da15","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-04-20T20:32:40Z","title_canon_sha256":"4ecb736fb7cf4f3ab4900114ea405466bfcb9bf958acb54776d681e735a0303d"},"schema_version":"1.0","source":{"id":"2304.10638","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.10638","created_at":"2026-07-05T06:03:13Z"},{"alias_kind":"arxiv_version","alias_value":"2304.10638v1","created_at":"2026-07-05T06:03:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.10638","created_at":"2026-07-05T06:03:13Z"},{"alias_kind":"pith_short_12","alias_value":"PMYE6V6ZK5S6","created_at":"2026-07-05T06:03:13Z"},{"alias_kind":"pith_short_16","alias_value":"PMYE6V6ZK5S6XN5X","created_at":"2026-07-05T06:03:13Z"},{"alias_kind":"pith_short_8","alias_value":"PMYE6V6Z","created_at":"2026-07-05T06:03:13Z"}],"graph_snapshots":[{"event_id":"sha256:4a9f2d0d86ab9ccb8634aee5e7ccca896e788047eb3db723983c64be684b0f67","target":"graph","created_at":"2026-07-05T06:03:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2304.10638/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated Learning (FL) enables collaborative deep learning training across multiple participants without exposing sensitive personal data. However, the distributed nature of FL and the unvetted participants' data makes it vulnerable to backdoor attacks. In these attacks, adversaries inject malicious functionality into the centralized model during training, leading to intentional misclassifications for specific adversary-chosen inputs. While previous research has demonstrated successful injections of persistent backdoors in FL, the persistence also poses a challenge, as their existence in the ","authors_text":"Hithem Lamri, Manaar Alam, Michail Maniatakos","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-04-20T20:32:40Z","title":"Get Rid Of Your Trail: Remotely Erasing Backdoors in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.10638","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5a5d05fe1ed3f6b22bc04178def9ba256f8caabf6d2ed31b5a34004c619c609c","target":"record","created_at":"2026-07-05T06:03:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ac2c88e203b056331631fee7e869f6ba0fc77d48d18990662a67190af947da15","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-04-20T20:32:40Z","title_canon_sha256":"4ecb736fb7cf4f3ab4900114ea405466bfcb9bf958acb54776d681e735a0303d"},"schema_version":"1.0","source":{"id":"2304.10638","kind":"arxiv","version":1}},"canonical_sha256":"7b304f57d95765ebb7b7ab5a87ace8f3c7cb05d458b351226f1d984ecac20205","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7b304f57d95765ebb7b7ab5a87ace8f3c7cb05d458b351226f1d984ecac20205","first_computed_at":"2026-07-05T06:03:13.519590Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:03:13.519590Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"j65xvQCRLIHIEw//YEeUvHtF9oEO4TK5qUL3xelKhgTA9lR/oNOX/ft3FL1IzG+bPy+R6hUzsfRC7926d7FzDA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:03:13.519934Z","signed_message":"canonical_sha256_bytes"},"source_id":"2304.10638","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5a5d05fe1ed3f6b22bc04178def9ba256f8caabf6d2ed31b5a34004c619c609c","sha256:4a9f2d0d86ab9ccb8634aee5e7ccca896e788047eb3db723983c64be684b0f67"],"state_sha256":"8ca71eafb96d4e4bf504d8b859b32b3748d90a8a97e784302d4fe1440e9c7830"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ex4/+DzJ7nCc++t69A8gn7V8JT1Z0k2Z5jd6A2XeE1y0EzlqE5dgHbkizTbgm8X6dQpyPc4MNbXMpfoQy4/pBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T06:35:02.722421Z","bundle_sha256":"8b540b84fe0c363ba4724a5b3f8839668ab1c0f717134511f521bb8d5a680817"}}