{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:QMAFCPPSCWDJ35U3XDBUEP77HG","short_pith_number":"pith:QMAFCPPS","canonical_record":{"source":{"id":"2410.17431","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-22T21:08:28Z","cross_cats_sorted":["cs.CR","cs.GT"],"title_canon_sha256":"e874f5b83badcb3a817c842ba2d789c516f6ce7c37c74dd7b4041782a7f06884","abstract_canon_sha256":"5424f77004e4b951009b8244ffeceef0349a994eeeef279521a75ae65e655c75"},"schema_version":"1.0"},"canonical_sha256":"8300513df215869df69bb8c3423fff39b55b849755f950bda9b681aee6af54f7","source":{"kind":"arxiv","id":"2410.17431","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.17431","created_at":"2026-07-05T09:24:22Z"},{"alias_kind":"arxiv_version","alias_value":"2410.17431v1","created_at":"2026-07-05T09:24:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.17431","created_at":"2026-07-05T09:24:22Z"},{"alias_kind":"pith_short_12","alias_value":"QMAFCPPSCWDJ","created_at":"2026-07-05T09:24:22Z"},{"alias_kind":"pith_short_16","alias_value":"QMAFCPPSCWDJ35U3","created_at":"2026-07-05T09:24:22Z"},{"alias_kind":"pith_short_8","alias_value":"QMAFCPPS","created_at":"2026-07-05T09:24:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:QMAFCPPSCWDJ35U3XDBUEP77HG","target":"record","payload":{"canonical_record":{"source":{"id":"2410.17431","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-22T21:08:28Z","cross_cats_sorted":["cs.CR","cs.GT"],"title_canon_sha256":"e874f5b83badcb3a817c842ba2d789c516f6ce7c37c74dd7b4041782a7f06884","abstract_canon_sha256":"5424f77004e4b951009b8244ffeceef0349a994eeeef279521a75ae65e655c75"},"schema_version":"1.0"},"canonical_sha256":"8300513df215869df69bb8c3423fff39b55b849755f950bda9b681aee6af54f7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:24:22.454983Z","signature_b64":"K1+1pKcb5pS32Dac7R6t987nvLRNQqEOYsUE43zZ6d8JiXjs59QL5KK9GfqE34IPthsAvGLUrw5SQJsZNGf0Aw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8300513df215869df69bb8c3423fff39b55b849755f950bda9b681aee6af54f7","last_reissued_at":"2026-07-05T09:24:22.454508Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:24:22.454508Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.17431","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:24:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sZ+b620Gja08TFj54GQUHvLvxnw42hjvmSSjR7Lx5dyZ/DFuwtF+RU67Dw92ILapA8CF5TZX/lQdnfijcX6KBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T16:23:14.587074Z"},"content_sha256":"1ac73f33d8db2f250ad11377d54ac37beb60bf2d242a58bc057c5dc070c64822","schema_version":"1.0","event_id":"sha256:1ac73f33d8db2f250ad11377d54ac37beb60bf2d242a58bc057c5dc070c64822"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:QMAFCPPSCWDJ35U3XDBUEP77HG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Meta Stackelberg Game: Robust Federated Learning against Adaptive and Mixed Poisoning Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.GT"],"primary_cat":"cs.LG","authors_text":"Henger Li, Quanyan Zhu, Tao Li, Tianyi Xu, Yunian Pan, Zizhan Zheng","submitted_at":"2024-10-22T21:08:28Z","abstract_excerpt":"Federated learning (FL) is susceptible to a range of security threats. Although various defense mechanisms have been proposed, they are typically non-adaptive and tailored to specific types of attacks, leaving them insufficient in the face of multiple uncertain, unknown, and adaptive attacks employing diverse strategies. This work formulates adversarial federated learning under a mixture of various attacks as a Bayesian Stackelberg Markov game, based on which we propose the meta-Stackelberg defense composed of pre-training and online adaptation. {The gist is to simulate strong attack behavior "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.17431","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.17431/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:24:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"STEJAZVKtF4Ex93ngeV2E4Z/X+IzF6jd1XRDPt8dwMy5Bc6+Dyba2p3VNhJH82UdnFkUmLbhXok7s8ShM0tZAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T16:23:14.587476Z"},"content_sha256":"c23b19bf096ae0adc9bb914fc5198bce6a25f5c406ac992cea4c5dddf01d21c3","schema_version":"1.0","event_id":"sha256:c23b19bf096ae0adc9bb914fc5198bce6a25f5c406ac992cea4c5dddf01d21c3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QMAFCPPSCWDJ35U3XDBUEP77HG/bundle.json","state_url":"https://pith.science/pith/QMAFCPPSCWDJ35U3XDBUEP77HG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QMAFCPPSCWDJ35U3XDBUEP77HG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-08T16:23:14Z","links":{"resolver":"https://pith.science/pith/QMAFCPPSCWDJ35U3XDBUEP77HG","bundle":"https://pith.science/pith/QMAFCPPSCWDJ35U3XDBUEP77HG/bundle.json","state":"https://pith.science/pith/QMAFCPPSCWDJ35U3XDBUEP77HG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QMAFCPPSCWDJ35U3XDBUEP77HG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:QMAFCPPSCWDJ35U3XDBUEP77HG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5424f77004e4b951009b8244ffeceef0349a994eeeef279521a75ae65e655c75","cross_cats_sorted":["cs.CR","cs.GT"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-22T21:08:28Z","title_canon_sha256":"e874f5b83badcb3a817c842ba2d789c516f6ce7c37c74dd7b4041782a7f06884"},"schema_version":"1.0","source":{"id":"2410.17431","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.17431","created_at":"2026-07-05T09:24:22Z"},{"alias_kind":"arxiv_version","alias_value":"2410.17431v1","created_at":"2026-07-05T09:24:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.17431","created_at":"2026-07-05T09:24:22Z"},{"alias_kind":"pith_short_12","alias_value":"QMAFCPPSCWDJ","created_at":"2026-07-05T09:24:22Z"},{"alias_kind":"pith_short_16","alias_value":"QMAFCPPSCWDJ35U3","created_at":"2026-07-05T09:24:22Z"},{"alias_kind":"pith_short_8","alias_value":"QMAFCPPS","created_at":"2026-07-05T09:24:22Z"}],"graph_snapshots":[{"event_id":"sha256:c23b19bf096ae0adc9bb914fc5198bce6a25f5c406ac992cea4c5dddf01d21c3","target":"graph","created_at":"2026-07-05T09:24:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.17431/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning (FL) is susceptible to a range of security threats. Although various defense mechanisms have been proposed, they are typically non-adaptive and tailored to specific types of attacks, leaving them insufficient in the face of multiple uncertain, unknown, and adaptive attacks employing diverse strategies. This work formulates adversarial federated learning under a mixture of various attacks as a Bayesian Stackelberg Markov game, based on which we propose the meta-Stackelberg defense composed of pre-training and online adaptation. {The gist is to simulate strong attack behavior ","authors_text":"Henger Li, Quanyan Zhu, Tao Li, Tianyi Xu, Yunian Pan, Zizhan Zheng","cross_cats":["cs.CR","cs.GT"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-22T21:08:28Z","title":"Meta Stackelberg Game: Robust Federated Learning against Adaptive and Mixed Poisoning Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.17431","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1ac73f33d8db2f250ad11377d54ac37beb60bf2d242a58bc057c5dc070c64822","target":"record","created_at":"2026-07-05T09:24:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5424f77004e4b951009b8244ffeceef0349a994eeeef279521a75ae65e655c75","cross_cats_sorted":["cs.CR","cs.GT"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-22T21:08:28Z","title_canon_sha256":"e874f5b83badcb3a817c842ba2d789c516f6ce7c37c74dd7b4041782a7f06884"},"schema_version":"1.0","source":{"id":"2410.17431","kind":"arxiv","version":1}},"canonical_sha256":"8300513df215869df69bb8c3423fff39b55b849755f950bda9b681aee6af54f7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8300513df215869df69bb8c3423fff39b55b849755f950bda9b681aee6af54f7","first_computed_at":"2026-07-05T09:24:22.454508Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:24:22.454508Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"K1+1pKcb5pS32Dac7R6t987nvLRNQqEOYsUE43zZ6d8JiXjs59QL5KK9GfqE34IPthsAvGLUrw5SQJsZNGf0Aw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:24:22.454983Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.17431","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1ac73f33d8db2f250ad11377d54ac37beb60bf2d242a58bc057c5dc070c64822","sha256:c23b19bf096ae0adc9bb914fc5198bce6a25f5c406ac992cea4c5dddf01d21c3"],"state_sha256":"b4bbadf6d9699b438ed13a10dd7694a5a8c049315029033f0faabaf21eccafbc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rVqaQBrHWQgv9awuRpWE3kYsjmA4I/6g2PDV7BbH0VDX7w3cyrFiqiUlRPpmubF5PNzN/VdSh7rNtiLmSH41Bw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-08T16:23:14.589742Z","bundle_sha256":"24b86d234676a93659ddef76aea4ebaef204775a8dca4c5d0b1f825a091b428d"}}