{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:TQTLZIARNYGRYY7SMEGQDC3LOW","short_pith_number":"pith:TQTLZIAR","canonical_record":{"source":{"id":"2505.12019","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-17T14:16:47Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"4b6235f425b3a3fc95d9cb9847f91dc812aa4aa178ccf8fb20e8cb2cf005897c","abstract_canon_sha256":"bd8826b62b1a6aa1d2a4d4c9e05f2777b55bb90015b6913e8de58c38a2c5ed91"},"schema_version":"1.0"},"canonical_sha256":"9c26bca0116e0d1c63f2610d018b6b75bfe1f9e1df56a1e07093cac795bc4697","source":{"kind":"arxiv","id":"2505.12019","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.12019","created_at":"2026-07-05T11:04:56Z"},{"alias_kind":"arxiv_version","alias_value":"2505.12019v1","created_at":"2026-07-05T11:04:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.12019","created_at":"2026-07-05T11:04:56Z"},{"alias_kind":"pith_short_12","alias_value":"TQTLZIARNYGR","created_at":"2026-07-05T11:04:56Z"},{"alias_kind":"pith_short_16","alias_value":"TQTLZIARNYGRYY7S","created_at":"2026-07-05T11:04:56Z"},{"alias_kind":"pith_short_8","alias_value":"TQTLZIAR","created_at":"2026-07-05T11:04:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:TQTLZIARNYGRYY7SMEGQDC3LOW","target":"record","payload":{"canonical_record":{"source":{"id":"2505.12019","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-17T14:16:47Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"4b6235f425b3a3fc95d9cb9847f91dc812aa4aa178ccf8fb20e8cb2cf005897c","abstract_canon_sha256":"bd8826b62b1a6aa1d2a4d4c9e05f2777b55bb90015b6913e8de58c38a2c5ed91"},"schema_version":"1.0"},"canonical_sha256":"9c26bca0116e0d1c63f2610d018b6b75bfe1f9e1df56a1e07093cac795bc4697","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:04:56.399490Z","signature_b64":"A33slKxwNowU+gkPo6YnMFvrHe+0fpQD352PDc0fPrzW05iAK72OuzxILZ1d+MZhmHNGLNT4HDDN5lR5HAK2Cg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9c26bca0116e0d1c63f2610d018b6b75bfe1f9e1df56a1e07093cac795bc4697","last_reissued_at":"2026-07-05T11:04:56.398947Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:04:56.398947Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.12019","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:04:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"J+HauzuRpvSl2CtGWuqIJPf0U5IJHCvYu3xevbPgo3oVGf38ed+PtmHKFe25JrI0nPT3hvGCD0vTIClvdQ0eBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T02:53:03.706913Z"},"content_sha256":"757de36397b792d0dba16468592ed595652bb33b231583c8ef0bbf8dae56201d","schema_version":"1.0","event_id":"sha256:757de36397b792d0dba16468592ed595652bb33b231583c8ef0bbf8dae56201d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:TQTLZIARNYGRYY7SMEGQDC3LOW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"FL-PLAS: Federated Learning with Partial Layer Aggregation for Backdoor Defense Against High-Ratio Malicious Clients","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Jianyi Zhang, Qichao Jin, Yilong Li, Ziyin Zhou","submitted_at":"2025-05-17T14:16:47Z","abstract_excerpt":"Federated learning (FL) is gaining increasing attention as an emerging collaborative machine learning approach, particularly in the context of large-scale computing and data systems. However, the fundamental algorithm of FL, Federated Averaging (FedAvg), is susceptible to backdoor attacks. Although researchers have proposed numerous defense algorithms, two significant challenges remain. The attack is becoming more stealthy and harder to detect, and current defense methods are unable to handle 50\\% or more malicious users or assume an auxiliary server dataset.\n  To address these challenges, we "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.12019","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.12019/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:04:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"i+8yud9Sl0HihHnMoCp1OXM1PNE0QBfhldPQnHErPucgFTSvVUpRODhxI0BbSB7mwxjU1AzvTyVAdcGux1j2CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T02:53:03.707446Z"},"content_sha256":"1b9ea3f830ba010dad20e16fb84e9adaa8c5c70883b1b7e3de55c963c402c95c","schema_version":"1.0","event_id":"sha256:1b9ea3f830ba010dad20e16fb84e9adaa8c5c70883b1b7e3de55c963c402c95c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TQTLZIARNYGRYY7SMEGQDC3LOW/bundle.json","state_url":"https://pith.science/pith/TQTLZIARNYGRYY7SMEGQDC3LOW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TQTLZIARNYGRYY7SMEGQDC3LOW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T02:53:03Z","links":{"resolver":"https://pith.science/pith/TQTLZIARNYGRYY7SMEGQDC3LOW","bundle":"https://pith.science/pith/TQTLZIARNYGRYY7SMEGQDC3LOW/bundle.json","state":"https://pith.science/pith/TQTLZIARNYGRYY7SMEGQDC3LOW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TQTLZIARNYGRYY7SMEGQDC3LOW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:TQTLZIARNYGRYY7SMEGQDC3LOW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bd8826b62b1a6aa1d2a4d4c9e05f2777b55bb90015b6913e8de58c38a2c5ed91","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-17T14:16:47Z","title_canon_sha256":"4b6235f425b3a3fc95d9cb9847f91dc812aa4aa178ccf8fb20e8cb2cf005897c"},"schema_version":"1.0","source":{"id":"2505.12019","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.12019","created_at":"2026-07-05T11:04:56Z"},{"alias_kind":"arxiv_version","alias_value":"2505.12019v1","created_at":"2026-07-05T11:04:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.12019","created_at":"2026-07-05T11:04:56Z"},{"alias_kind":"pith_short_12","alias_value":"TQTLZIARNYGR","created_at":"2026-07-05T11:04:56Z"},{"alias_kind":"pith_short_16","alias_value":"TQTLZIARNYGRYY7S","created_at":"2026-07-05T11:04:56Z"},{"alias_kind":"pith_short_8","alias_value":"TQTLZIAR","created_at":"2026-07-05T11:04:56Z"}],"graph_snapshots":[{"event_id":"sha256:1b9ea3f830ba010dad20e16fb84e9adaa8c5c70883b1b7e3de55c963c402c95c","target":"graph","created_at":"2026-07-05T11:04:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.12019/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning (FL) is gaining increasing attention as an emerging collaborative machine learning approach, particularly in the context of large-scale computing and data systems. However, the fundamental algorithm of FL, Federated Averaging (FedAvg), is susceptible to backdoor attacks. Although researchers have proposed numerous defense algorithms, two significant challenges remain. The attack is becoming more stealthy and harder to detect, and current defense methods are unable to handle 50\\% or more malicious users or assume an auxiliary server dataset.\n  To address these challenges, we ","authors_text":"Jianyi Zhang, Qichao Jin, Yilong Li, Ziyin Zhou","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-17T14:16:47Z","title":"FL-PLAS: Federated Learning with Partial Layer Aggregation for Backdoor Defense Against High-Ratio Malicious Clients"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.12019","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:757de36397b792d0dba16468592ed595652bb33b231583c8ef0bbf8dae56201d","target":"record","created_at":"2026-07-05T11:04:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bd8826b62b1a6aa1d2a4d4c9e05f2777b55bb90015b6913e8de58c38a2c5ed91","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-17T14:16:47Z","title_canon_sha256":"4b6235f425b3a3fc95d9cb9847f91dc812aa4aa178ccf8fb20e8cb2cf005897c"},"schema_version":"1.0","source":{"id":"2505.12019","kind":"arxiv","version":1}},"canonical_sha256":"9c26bca0116e0d1c63f2610d018b6b75bfe1f9e1df56a1e07093cac795bc4697","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9c26bca0116e0d1c63f2610d018b6b75bfe1f9e1df56a1e07093cac795bc4697","first_computed_at":"2026-07-05T11:04:56.398947Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:04:56.398947Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"A33slKxwNowU+gkPo6YnMFvrHe+0fpQD352PDc0fPrzW05iAK72OuzxILZ1d+MZhmHNGLNT4HDDN5lR5HAK2Cg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:04:56.399490Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.12019","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:757de36397b792d0dba16468592ed595652bb33b231583c8ef0bbf8dae56201d","sha256:1b9ea3f830ba010dad20e16fb84e9adaa8c5c70883b1b7e3de55c963c402c95c"],"state_sha256":"a1ca0786ba1eb59412a8bce80ac1aa7dca12fe9a61dd274ff4e0d7246153516f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qPgT2BZJjb6cppesWpPJoIwB3PxjlLOon0aKNba1XrwNStIFImHSy9rVTL200aCWn6lNWPXRjMVQRnLx0x+TAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T02:53:03.710639Z","bundle_sha256":"172dd26271eacc4f46bca559c965b34011dbaac15f6aa0db0be2e4cf4ed891f2"}}