{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:UGMA3OZ2QS4YPAJ3O7LJQSH7CW","short_pith_number":"pith:UGMA3OZ2","canonical_record":{"source":{"id":"2302.09479","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2023-02-19T04:54:25Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"bcfe6187368bfd037aea6b65fca8fcb5b27f16513dd1f9a6fcb8430adc0d797b","abstract_canon_sha256":"772351816d12d4a8b50836a00e76059d05f28b3220f29a8adac37f4f08eeafe0"},"schema_version":"1.0"},"canonical_sha256":"a1980dbb3a84b987813b77d69848ff15a565517c19f95eb0847fa7595eee2d14","source":{"kind":"arxiv","id":"2302.09479","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.09479","created_at":"2026-07-05T05:43:26Z"},{"alias_kind":"arxiv_version","alias_value":"2302.09479v1","created_at":"2026-07-05T05:43:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.09479","created_at":"2026-07-05T05:43:26Z"},{"alias_kind":"pith_short_12","alias_value":"UGMA3OZ2QS4Y","created_at":"2026-07-05T05:43:26Z"},{"alias_kind":"pith_short_16","alias_value":"UGMA3OZ2QS4YPAJ3","created_at":"2026-07-05T05:43:26Z"},{"alias_kind":"pith_short_8","alias_value":"UGMA3OZ2","created_at":"2026-07-05T05:43:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:UGMA3OZ2QS4YPAJ3O7LJQSH7CW","target":"record","payload":{"canonical_record":{"source":{"id":"2302.09479","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2023-02-19T04:54:25Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"bcfe6187368bfd037aea6b65fca8fcb5b27f16513dd1f9a6fcb8430adc0d797b","abstract_canon_sha256":"772351816d12d4a8b50836a00e76059d05f28b3220f29a8adac37f4f08eeafe0"},"schema_version":"1.0"},"canonical_sha256":"a1980dbb3a84b987813b77d69848ff15a565517c19f95eb0847fa7595eee2d14","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:43:26.154824Z","signature_b64":"KdMEnEBZMI6UsRQRpPCrs8LZQh6NFv5oZJO5V4ZVfyYpzPFq2pReUQDrwmuPQ/yvf4I6RHnLCqp7EDcMs3oqDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a1980dbb3a84b987813b77d69848ff15a565517c19f95eb0847fa7595eee2d14","last_reissued_at":"2026-07-05T05:43:26.154473Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:43:26.154473Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2302.09479","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:43:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zeNVUQFu9nnBG+wDPalawaKzmnQLYEF4sov0NKekwxZQgBpESie1oAPVGaAh/UA3C8qmckKwHOTAZRFr3EMmCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T16:48:50.383382Z"},"content_sha256":"e672799d2aa7095239af679f7f8d5a235873b56a87c8bb997c532e134e1b38ef","schema_version":"1.0","event_id":"sha256:e672799d2aa7095239af679f7f8d5a235873b56a87c8bb997c532e134e1b38ef"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:UGMA3OZ2QS4YPAJ3O7LJQSH7CW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Delving into the Adversarial Robustness of Federated Learning","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Bo Li, Chao Wu, Chen Chen, Jie Zhang, Lingjuan Lyu, Shouhong Ding, Shuang Wu","submitted_at":"2023-02-19T04:54:25Z","abstract_excerpt":"In Federated Learning (FL), models are as fragile as centrally trained models against adversarial examples. However, the adversarial robustness of federated learning remains largely unexplored. This paper casts light on the challenge of adversarial robustness of federated learning. To facilitate a better understanding of the adversarial vulnerability of the existing FL methods, we conduct comprehensive robustness evaluations on various attacks and adversarial training methods. Moreover, we reveal the negative impacts induced by directly adopting adversarial training in FL, which seriously hurt"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.09479","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2302.09479/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:43:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"r6YE4KjbzLngnTaxQDgvF2Oc9fBnZyJcnlRr/QTtCeal9B18Cyh8cdFvYdZDh6DlH/vt5VchPlDv7ZwUHcpuDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T16:48:50.384370Z"},"content_sha256":"a484199ce065cc6fcc7c14a188f144223fc552111464810485a6dfa8e8f0f3be","schema_version":"1.0","event_id":"sha256:a484199ce065cc6fcc7c14a188f144223fc552111464810485a6dfa8e8f0f3be"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UGMA3OZ2QS4YPAJ3O7LJQSH7CW/bundle.json","state_url":"https://pith.science/pith/UGMA3OZ2QS4YPAJ3O7LJQSH7CW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UGMA3OZ2QS4YPAJ3O7LJQSH7CW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T16:48:50Z","links":{"resolver":"https://pith.science/pith/UGMA3OZ2QS4YPAJ3O7LJQSH7CW","bundle":"https://pith.science/pith/UGMA3OZ2QS4YPAJ3O7LJQSH7CW/bundle.json","state":"https://pith.science/pith/UGMA3OZ2QS4YPAJ3O7LJQSH7CW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UGMA3OZ2QS4YPAJ3O7LJQSH7CW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:UGMA3OZ2QS4YPAJ3O7LJQSH7CW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"772351816d12d4a8b50836a00e76059d05f28b3220f29a8adac37f4f08eeafe0","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2023-02-19T04:54:25Z","title_canon_sha256":"bcfe6187368bfd037aea6b65fca8fcb5b27f16513dd1f9a6fcb8430adc0d797b"},"schema_version":"1.0","source":{"id":"2302.09479","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.09479","created_at":"2026-07-05T05:43:26Z"},{"alias_kind":"arxiv_version","alias_value":"2302.09479v1","created_at":"2026-07-05T05:43:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.09479","created_at":"2026-07-05T05:43:26Z"},{"alias_kind":"pith_short_12","alias_value":"UGMA3OZ2QS4Y","created_at":"2026-07-05T05:43:26Z"},{"alias_kind":"pith_short_16","alias_value":"UGMA3OZ2QS4YPAJ3","created_at":"2026-07-05T05:43:26Z"},{"alias_kind":"pith_short_8","alias_value":"UGMA3OZ2","created_at":"2026-07-05T05:43:26Z"}],"graph_snapshots":[{"event_id":"sha256:a484199ce065cc6fcc7c14a188f144223fc552111464810485a6dfa8e8f0f3be","target":"graph","created_at":"2026-07-05T05:43:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2302.09479/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In Federated Learning (FL), models are as fragile as centrally trained models against adversarial examples. However, the adversarial robustness of federated learning remains largely unexplored. This paper casts light on the challenge of adversarial robustness of federated learning. To facilitate a better understanding of the adversarial vulnerability of the existing FL methods, we conduct comprehensive robustness evaluations on various attacks and adversarial training methods. Moreover, we reveal the negative impacts induced by directly adopting adversarial training in FL, which seriously hurt","authors_text":"Bo Li, Chao Wu, Chen Chen, Jie Zhang, Lingjuan Lyu, Shouhong Ding, Shuang Wu","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2023-02-19T04:54:25Z","title":"Delving into the Adversarial Robustness of Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.09479","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e672799d2aa7095239af679f7f8d5a235873b56a87c8bb997c532e134e1b38ef","target":"record","created_at":"2026-07-05T05:43:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"772351816d12d4a8b50836a00e76059d05f28b3220f29a8adac37f4f08eeafe0","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2023-02-19T04:54:25Z","title_canon_sha256":"bcfe6187368bfd037aea6b65fca8fcb5b27f16513dd1f9a6fcb8430adc0d797b"},"schema_version":"1.0","source":{"id":"2302.09479","kind":"arxiv","version":1}},"canonical_sha256":"a1980dbb3a84b987813b77d69848ff15a565517c19f95eb0847fa7595eee2d14","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a1980dbb3a84b987813b77d69848ff15a565517c19f95eb0847fa7595eee2d14","first_computed_at":"2026-07-05T05:43:26.154473Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:43:26.154473Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KdMEnEBZMI6UsRQRpPCrs8LZQh6NFv5oZJO5V4ZVfyYpzPFq2pReUQDrwmuPQ/yvf4I6RHnLCqp7EDcMs3oqDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T05:43:26.154824Z","signed_message":"canonical_sha256_bytes"},"source_id":"2302.09479","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e672799d2aa7095239af679f7f8d5a235873b56a87c8bb997c532e134e1b38ef","sha256:a484199ce065cc6fcc7c14a188f144223fc552111464810485a6dfa8e8f0f3be"],"state_sha256":"f238d69082961c75f54c7c044a16bef4b08c420e128c6ec3f4318c674f409448"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+uuNPpPefmzscrdGOGKt7ccJMuG2DOtGQZI7qwxI3ifM88F3h1lm6ZbZjro9QmhtMRT4qG0030yjcawlUkvbAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T16:48:50.389247Z","bundle_sha256":"46326b835d43983f8f646d04648459ea652ba12a084ed4d9dadb613fee02dcdc"}}