{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:SR2SWUIRZHM4TNIMSTDC4MAKYQ","short_pith_number":"pith:SR2SWUIR","canonical_record":{"source":{"id":"2204.05472","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-04-12T01:44:50Z","cross_cats_sorted":["cs.CR","cs.CY"],"title_canon_sha256":"b275ccbde31f4e2fe723c4076a28d803dbdcf8a64aba44f8e3108d83faa01945","abstract_canon_sha256":"bf32cfe8ff81a1c320554791d86d88cf995cb3a00bba22d98029dc76c8c8c9a2"},"schema_version":"1.0"},"canonical_sha256":"94752b5111c9d9c9b50c94c62e300ac401380ddec76ad130841c5971a4c36999","source":{"kind":"arxiv","id":"2204.05472","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2204.05472","created_at":"2026-07-05T04:21:12Z"},{"alias_kind":"arxiv_version","alias_value":"2204.05472v2","created_at":"2026-07-05T04:21:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.05472","created_at":"2026-07-05T04:21:12Z"},{"alias_kind":"pith_short_12","alias_value":"SR2SWUIRZHM4","created_at":"2026-07-05T04:21:12Z"},{"alias_kind":"pith_short_16","alias_value":"SR2SWUIRZHM4TNIM","created_at":"2026-07-05T04:21:12Z"},{"alias_kind":"pith_short_8","alias_value":"SR2SWUIR","created_at":"2026-07-05T04:21:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:SR2SWUIRZHM4TNIMSTDC4MAKYQ","target":"record","payload":{"canonical_record":{"source":{"id":"2204.05472","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-04-12T01:44:50Z","cross_cats_sorted":["cs.CR","cs.CY"],"title_canon_sha256":"b275ccbde31f4e2fe723c4076a28d803dbdcf8a64aba44f8e3108d83faa01945","abstract_canon_sha256":"bf32cfe8ff81a1c320554791d86d88cf995cb3a00bba22d98029dc76c8c8c9a2"},"schema_version":"1.0"},"canonical_sha256":"94752b5111c9d9c9b50c94c62e300ac401380ddec76ad130841c5971a4c36999","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:21:12.307419Z","signature_b64":"LihHzyD8G2XcNflr6gt7c/uG1aGqcEZzr6NcgL8AdPVBTsTsIZGB3YH3laA/HL4O187l9QcIHKFgnfDN/z3VAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"94752b5111c9d9c9b50c94c62e300ac401380ddec76ad130841c5971a4c36999","last_reissued_at":"2026-07-05T04:21:12.306991Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:21:12.306991Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2204.05472","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:21:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FQV6ZaN3CiHIiDjQct2EG2ZkXfVzZz2uETNIiPfR46KceNHa9Q429lL00XQKYFE11B9UVeVzqHeGbQ5bPg3LBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-15T08:43:32.551911Z"},"content_sha256":"7d5565bdb54b72b201b6b2dee1375ecd8d90547187a475ca6d34d9daaf66451a","schema_version":"1.0","event_id":"sha256:7d5565bdb54b72b201b6b2dee1375ecd8d90547187a475ca6d34d9daaf66451a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:SR2SWUIRZHM4TNIMSTDC4MAKYQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Breaking Fair Binary Classification with Optimal Flipping Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CY"],"primary_cat":"cs.LG","authors_text":"Changhun Jo, Jy-yong Sohn, Kangwook Lee","submitted_at":"2022-04-12T01:44:50Z","abstract_excerpt":"Minimizing risk with fairness constraints is one of the popular approaches to learning a fair classifier. Recent works showed that this approach yields an unfair classifier if the training set is corrupted. In this work, we study the minimum amount of data corruption required for a successful flipping attack. First, we find lower/upper bounds on this quantity and show that these bounds are tight when the target model is the unique unconstrained risk minimizer. Second, we propose a computationally efficient data poisoning attack algorithm that can compromise the performance of fair learning alg"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.05472","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2204.05472/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:21:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fFeUp+pSynt2d+gJpL+FXhlQCyICh1zEq1oUIgiZbPwjQW3bo9fEvpBENqLF+jjHimfbHyrUEH/GN2/JHU32CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-15T08:43:32.552293Z"},"content_sha256":"6d0b1784d5a230f3ba6f7103389e9451938c4806cb1bf203e6482e0035112eb7","schema_version":"1.0","event_id":"sha256:6d0b1784d5a230f3ba6f7103389e9451938c4806cb1bf203e6482e0035112eb7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SR2SWUIRZHM4TNIMSTDC4MAKYQ/bundle.json","state_url":"https://pith.science/pith/SR2SWUIRZHM4TNIMSTDC4MAKYQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SR2SWUIRZHM4TNIMSTDC4MAKYQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-15T08:43:32Z","links":{"resolver":"https://pith.science/pith/SR2SWUIRZHM4TNIMSTDC4MAKYQ","bundle":"https://pith.science/pith/SR2SWUIRZHM4TNIMSTDC4MAKYQ/bundle.json","state":"https://pith.science/pith/SR2SWUIRZHM4TNIMSTDC4MAKYQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SR2SWUIRZHM4TNIMSTDC4MAKYQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:SR2SWUIRZHM4TNIMSTDC4MAKYQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bf32cfe8ff81a1c320554791d86d88cf995cb3a00bba22d98029dc76c8c8c9a2","cross_cats_sorted":["cs.CR","cs.CY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-04-12T01:44:50Z","title_canon_sha256":"b275ccbde31f4e2fe723c4076a28d803dbdcf8a64aba44f8e3108d83faa01945"},"schema_version":"1.0","source":{"id":"2204.05472","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2204.05472","created_at":"2026-07-05T04:21:12Z"},{"alias_kind":"arxiv_version","alias_value":"2204.05472v2","created_at":"2026-07-05T04:21:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.05472","created_at":"2026-07-05T04:21:12Z"},{"alias_kind":"pith_short_12","alias_value":"SR2SWUIRZHM4","created_at":"2026-07-05T04:21:12Z"},{"alias_kind":"pith_short_16","alias_value":"SR2SWUIRZHM4TNIM","created_at":"2026-07-05T04:21:12Z"},{"alias_kind":"pith_short_8","alias_value":"SR2SWUIR","created_at":"2026-07-05T04:21:12Z"}],"graph_snapshots":[{"event_id":"sha256:6d0b1784d5a230f3ba6f7103389e9451938c4806cb1bf203e6482e0035112eb7","target":"graph","created_at":"2026-07-05T04:21:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2204.05472/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Minimizing risk with fairness constraints is one of the popular approaches to learning a fair classifier. Recent works showed that this approach yields an unfair classifier if the training set is corrupted. In this work, we study the minimum amount of data corruption required for a successful flipping attack. First, we find lower/upper bounds on this quantity and show that these bounds are tight when the target model is the unique unconstrained risk minimizer. Second, we propose a computationally efficient data poisoning attack algorithm that can compromise the performance of fair learning alg","authors_text":"Changhun Jo, Jy-yong Sohn, Kangwook Lee","cross_cats":["cs.CR","cs.CY"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-04-12T01:44:50Z","title":"Breaking Fair Binary Classification with Optimal Flipping Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.05472","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7d5565bdb54b72b201b6b2dee1375ecd8d90547187a475ca6d34d9daaf66451a","target":"record","created_at":"2026-07-05T04:21:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bf32cfe8ff81a1c320554791d86d88cf995cb3a00bba22d98029dc76c8c8c9a2","cross_cats_sorted":["cs.CR","cs.CY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-04-12T01:44:50Z","title_canon_sha256":"b275ccbde31f4e2fe723c4076a28d803dbdcf8a64aba44f8e3108d83faa01945"},"schema_version":"1.0","source":{"id":"2204.05472","kind":"arxiv","version":2}},"canonical_sha256":"94752b5111c9d9c9b50c94c62e300ac401380ddec76ad130841c5971a4c36999","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"94752b5111c9d9c9b50c94c62e300ac401380ddec76ad130841c5971a4c36999","first_computed_at":"2026-07-05T04:21:12.306991Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:21:12.306991Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LihHzyD8G2XcNflr6gt7c/uG1aGqcEZzr6NcgL8AdPVBTsTsIZGB3YH3laA/HL4O187l9QcIHKFgnfDN/z3VAA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:21:12.307419Z","signed_message":"canonical_sha256_bytes"},"source_id":"2204.05472","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7d5565bdb54b72b201b6b2dee1375ecd8d90547187a475ca6d34d9daaf66451a","sha256:6d0b1784d5a230f3ba6f7103389e9451938c4806cb1bf203e6482e0035112eb7"],"state_sha256":"2581b9a175acb7b367677d1dad990b470553853569f5d7d2cb877baa4ad4dcf0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"s3IBmpGPDMWt2SnC4833KNP4MWEzeorfhGPQTZe5cW/q3qumNs8d+MdzX4w3ZxilIdXXLizuRsUymbCcojFGCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-15T08:43:32.554817Z","bundle_sha256":"107649f52fa1274a7e72f4b201963523f56cb9acff908381fa9e70b305c9f857"}}