{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:T3DIYW4Z7ZBOVY4YBY4IM2GRKM","short_pith_number":"pith:T3DIYW4Z","canonical_record":{"source":{"id":"2310.13893","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-10-21T02:21:39Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"5eafb9721b1dc0d01fc8a071282647f70e896cc1c0c32d0e2faa11ab92830a07","abstract_canon_sha256":"cbca1297c63dc47dfa00fe71917e1bafdc2f2891c2fadecded819e369ddc1fda"},"schema_version":"1.0"},"canonical_sha256":"9ec68c5b99fe42eae3980e388668d153363e674cd19e4eb690e1c5ad969ba306","source":{"kind":"arxiv","id":"2310.13893","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.13893","created_at":"2026-07-05T07:03:36Z"},{"alias_kind":"arxiv_version","alias_value":"2310.13893v1","created_at":"2026-07-05T07:03:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.13893","created_at":"2026-07-05T07:03:36Z"},{"alias_kind":"pith_short_12","alias_value":"T3DIYW4Z7ZBO","created_at":"2026-07-05T07:03:36Z"},{"alias_kind":"pith_short_16","alias_value":"T3DIYW4Z7ZBOVY4Y","created_at":"2026-07-05T07:03:36Z"},{"alias_kind":"pith_short_8","alias_value":"T3DIYW4Z","created_at":"2026-07-05T07:03:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:T3DIYW4Z7ZBOVY4YBY4IM2GRKM","target":"record","payload":{"canonical_record":{"source":{"id":"2310.13893","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-10-21T02:21:39Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"5eafb9721b1dc0d01fc8a071282647f70e896cc1c0c32d0e2faa11ab92830a07","abstract_canon_sha256":"cbca1297c63dc47dfa00fe71917e1bafdc2f2891c2fadecded819e369ddc1fda"},"schema_version":"1.0"},"canonical_sha256":"9ec68c5b99fe42eae3980e388668d153363e674cd19e4eb690e1c5ad969ba306","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:03:36.569346Z","signature_b64":"iWnkigsREOb+n8ielHOqeMb0TOb+73ACp5aIoNDSubY3yUVRh7COUc6DjMRDqWlfVjHcd6/ng5hzp7XY0Lf6DQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9ec68c5b99fe42eae3980e388668d153363e674cd19e4eb690e1c5ad969ba306","last_reissued_at":"2026-07-05T07:03:36.568797Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:03:36.568797Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.13893","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:03:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DmkBKaNP/MSuz0xcSFzEs9xzBdfwv2fv49KOGK7xlc0ga+6hPx91UnW5yseyZhO+N36+/++Xojl11HBfWu1JAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T04:36:40.011084Z"},"content_sha256":"0c050c79bc4ece23a12cd6dc2eb7de632cef24bcb2f1c6132296494f2cb2e17b","schema_version":"1.0","event_id":"sha256:0c050c79bc4ece23a12cd6dc2eb7de632cef24bcb2f1c6132296494f2cb2e17b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:T3DIYW4Z7ZBOVY4YBY4IM2GRKM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Hidden Adversarial Vulnerabilities of Medical Federated Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Erfan Darzi, Florian Dubost, Nanna. M. Sijtsema, P.M.A van Ooijen","submitted_at":"2023-10-21T02:21:39Z","abstract_excerpt":"In this paper, we delve into the susceptibility of federated medical image analysis systems to adversarial attacks. Our analysis uncovers a novel exploitation avenue: using gradient information from prior global model updates, adversaries can enhance the efficiency and transferability of their attacks. Specifically, we demonstrate that single-step attacks (e.g. FGSM), when aptly initialized, can outperform the efficiency of their iterative counterparts but with reduced computational demand. Our findings underscore the need to revisit our understanding of AI security in federated healthcare set"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.13893","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.13893/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:03:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JlZDBn/BpG6IKTHWWyfEGqcVZX/T0sCaygN3V3aJt+4awTR0Eo3Ga72RbUer+wH1TeOE6CSX4UlOoRREOwDjCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T04:36:40.011476Z"},"content_sha256":"a023f8ebde760e560c7bae39bcc980608b8509cf287563bb5d4108ee58b5dd76","schema_version":"1.0","event_id":"sha256:a023f8ebde760e560c7bae39bcc980608b8509cf287563bb5d4108ee58b5dd76"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/T3DIYW4Z7ZBOVY4YBY4IM2GRKM/bundle.json","state_url":"https://pith.science/pith/T3DIYW4Z7ZBOVY4YBY4IM2GRKM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/T3DIYW4Z7ZBOVY4YBY4IM2GRKM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T04:36:40Z","links":{"resolver":"https://pith.science/pith/T3DIYW4Z7ZBOVY4YBY4IM2GRKM","bundle":"https://pith.science/pith/T3DIYW4Z7ZBOVY4YBY4IM2GRKM/bundle.json","state":"https://pith.science/pith/T3DIYW4Z7ZBOVY4YBY4IM2GRKM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/T3DIYW4Z7ZBOVY4YBY4IM2GRKM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:T3DIYW4Z7ZBOVY4YBY4IM2GRKM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cbca1297c63dc47dfa00fe71917e1bafdc2f2891c2fadecded819e369ddc1fda","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-10-21T02:21:39Z","title_canon_sha256":"5eafb9721b1dc0d01fc8a071282647f70e896cc1c0c32d0e2faa11ab92830a07"},"schema_version":"1.0","source":{"id":"2310.13893","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.13893","created_at":"2026-07-05T07:03:36Z"},{"alias_kind":"arxiv_version","alias_value":"2310.13893v1","created_at":"2026-07-05T07:03:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.13893","created_at":"2026-07-05T07:03:36Z"},{"alias_kind":"pith_short_12","alias_value":"T3DIYW4Z7ZBO","created_at":"2026-07-05T07:03:36Z"},{"alias_kind":"pith_short_16","alias_value":"T3DIYW4Z7ZBOVY4Y","created_at":"2026-07-05T07:03:36Z"},{"alias_kind":"pith_short_8","alias_value":"T3DIYW4Z","created_at":"2026-07-05T07:03:36Z"}],"graph_snapshots":[{"event_id":"sha256:a023f8ebde760e560c7bae39bcc980608b8509cf287563bb5d4108ee58b5dd76","target":"graph","created_at":"2026-07-05T07:03:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.13893/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this paper, we delve into the susceptibility of federated medical image analysis systems to adversarial attacks. Our analysis uncovers a novel exploitation avenue: using gradient information from prior global model updates, adversaries can enhance the efficiency and transferability of their attacks. Specifically, we demonstrate that single-step attacks (e.g. FGSM), when aptly initialized, can outperform the efficiency of their iterative counterparts but with reduced computational demand. Our findings underscore the need to revisit our understanding of AI security in federated healthcare set","authors_text":"Erfan Darzi, Florian Dubost, Nanna. M. Sijtsema, P.M.A van Ooijen","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-10-21T02:21:39Z","title":"The Hidden Adversarial Vulnerabilities of Medical Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.13893","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0c050c79bc4ece23a12cd6dc2eb7de632cef24bcb2f1c6132296494f2cb2e17b","target":"record","created_at":"2026-07-05T07:03:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cbca1297c63dc47dfa00fe71917e1bafdc2f2891c2fadecded819e369ddc1fda","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-10-21T02:21:39Z","title_canon_sha256":"5eafb9721b1dc0d01fc8a071282647f70e896cc1c0c32d0e2faa11ab92830a07"},"schema_version":"1.0","source":{"id":"2310.13893","kind":"arxiv","version":1}},"canonical_sha256":"9ec68c5b99fe42eae3980e388668d153363e674cd19e4eb690e1c5ad969ba306","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9ec68c5b99fe42eae3980e388668d153363e674cd19e4eb690e1c5ad969ba306","first_computed_at":"2026-07-05T07:03:36.568797Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:03:36.568797Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"iWnkigsREOb+n8ielHOqeMb0TOb+73ACp5aIoNDSubY3yUVRh7COUc6DjMRDqWlfVjHcd6/ng5hzp7XY0Lf6DQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:03:36.569346Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.13893","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0c050c79bc4ece23a12cd6dc2eb7de632cef24bcb2f1c6132296494f2cb2e17b","sha256:a023f8ebde760e560c7bae39bcc980608b8509cf287563bb5d4108ee58b5dd76"],"state_sha256":"5733f1ce0343536342a7267ecac75d4bcb9f50da5ed5093b7f0ae0b049207679"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"82Evljv3N6a5FlVGMphT8uODVsQQYs0MAP2a3rG2Q/EXFrQh6A3l5LH2jc11oJhX7Jysb5ICRxWPu4TgeLcbCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T04:36:40.013611Z","bundle_sha256":"20f8901f5691d0cac0264d890d6cf04806178cda53e8364d46705b082c12817d"}}