{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:ULWBV2HPTCDM3J57KWX47JIZYK","short_pith_number":"pith:ULWBV2HP","canonical_record":{"source":{"id":"2002.09843","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-23T06:50:20Z","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"title_canon_sha256":"f5d5eeef2bbd978bd35e6590bcdae261960681729a78cc597fec5a0eef725c9a","abstract_canon_sha256":"c6e44879743ba08b2855af2b3e308ebb68f0cdfe8c3a3e91f0a9d9a87cfcdfb5"},"schema_version":"1.0"},"canonical_sha256":"a2ec1ae8ef9886cda7bf55afcfa519c2827547ca4553ac387adac2387264c5a0","source":{"kind":"arxiv","id":"2002.09843","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.09843","created_at":"2026-07-05T03:05:42Z"},{"alias_kind":"arxiv_version","alias_value":"2002.09843v5","created_at":"2026-07-05T03:05:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.09843","created_at":"2026-07-05T03:05:42Z"},{"alias_kind":"pith_short_12","alias_value":"ULWBV2HPTCDM","created_at":"2026-07-05T03:05:42Z"},{"alias_kind":"pith_short_16","alias_value":"ULWBV2HPTCDM3J57","created_at":"2026-07-05T03:05:42Z"},{"alias_kind":"pith_short_8","alias_value":"ULWBV2HP","created_at":"2026-07-05T03:05:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:ULWBV2HPTCDM3J57KWX47JIZYK","target":"record","payload":{"canonical_record":{"source":{"id":"2002.09843","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-23T06:50:20Z","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"title_canon_sha256":"f5d5eeef2bbd978bd35e6590bcdae261960681729a78cc597fec5a0eef725c9a","abstract_canon_sha256":"c6e44879743ba08b2855af2b3e308ebb68f0cdfe8c3a3e91f0a9d9a87cfcdfb5"},"schema_version":"1.0"},"canonical_sha256":"a2ec1ae8ef9886cda7bf55afcfa519c2827547ca4553ac387adac2387264c5a0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:05:42.375027Z","signature_b64":"eEnAzZkOEKQpf5Zl3qwiX0BUHWZj52D+ToLSN2fkB0kwvr0mZMuvVXee6Yu70aIX7oaK2Eni6NYPhrO5UImpCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a2ec1ae8ef9886cda7bf55afcfa519c2827547ca4553ac387adac2387264c5a0","last_reissued_at":"2026-07-05T03:05:42.374598Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:05:42.374598Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2002.09843","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:05:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Sqfkglj628rXJPFY97oCMcBlUPr1ZZU1I2cQ5/sqIcRD0lj5UZI9SFHn7EdYtT6VcKCWGRMjQnD7R18/AnCOCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-31T20:45:18.686517Z"},"content_sha256":"a8042382b180aae1221ddf53678a59b4162732806fd6b3cbf611d5d9ea8f2527","schema_version":"1.0","event_id":"sha256:a8042382b180aae1221ddf53678a59b4162732806fd6b3cbf611d5d9ea8f2527"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:ULWBV2HPTCDM3J57KWX47JIZYK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"An Accuracy-Lossless Perturbation Method for Defending Privacy Attacks in Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV","stat.ML"],"primary_cat":"cs.LG","authors_text":"Jun Shao, Rongxing Lu, Shu-Tao Xia, Weijun Fang, Xiaohu Tang, Xue Yang, Yan Feng","submitted_at":"2020-02-23T06:50:20Z","abstract_excerpt":"Although federated learning improves privacy of training data by exchanging local gradients or parameters rather than raw data, the adversary still can leverage local gradients and parameters to obtain local training data by launching reconstruction and membership inference attacks. To defend such privacy attacks, many noises perturbation methods (like differential privacy or CountSketch matrix) have been widely designed. However, the strong defence ability and high learning accuracy of these schemes cannot be ensured at the same time, which will impede the wide application of FL in practice ("},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.09843","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2002.09843/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:05:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pouSNwnMUh0DHlJRdDWGViahvjQ+yVUdjt0TLALj6tMqRuaOsaXQDtEYqGcCJxxjA45wjMbSm3Nqe49fnIiWBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-31T20:45:18.687040Z"},"content_sha256":"68903fbc898f23bcc9cb1c4d3d7b9dac307395243308b773cbff402df8706aee","schema_version":"1.0","event_id":"sha256:68903fbc898f23bcc9cb1c4d3d7b9dac307395243308b773cbff402df8706aee"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ULWBV2HPTCDM3J57KWX47JIZYK/bundle.json","state_url":"https://pith.science/pith/ULWBV2HPTCDM3J57KWX47JIZYK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ULWBV2HPTCDM3J57KWX47JIZYK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-31T20:45:18Z","links":{"resolver":"https://pith.science/pith/ULWBV2HPTCDM3J57KWX47JIZYK","bundle":"https://pith.science/pith/ULWBV2HPTCDM3J57KWX47JIZYK/bundle.json","state":"https://pith.science/pith/ULWBV2HPTCDM3J57KWX47JIZYK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ULWBV2HPTCDM3J57KWX47JIZYK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:ULWBV2HPTCDM3J57KWX47JIZYK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c6e44879743ba08b2855af2b3e308ebb68f0cdfe8c3a3e91f0a9d9a87cfcdfb5","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-23T06:50:20Z","title_canon_sha256":"f5d5eeef2bbd978bd35e6590bcdae261960681729a78cc597fec5a0eef725c9a"},"schema_version":"1.0","source":{"id":"2002.09843","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.09843","created_at":"2026-07-05T03:05:42Z"},{"alias_kind":"arxiv_version","alias_value":"2002.09843v5","created_at":"2026-07-05T03:05:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.09843","created_at":"2026-07-05T03:05:42Z"},{"alias_kind":"pith_short_12","alias_value":"ULWBV2HPTCDM","created_at":"2026-07-05T03:05:42Z"},{"alias_kind":"pith_short_16","alias_value":"ULWBV2HPTCDM3J57","created_at":"2026-07-05T03:05:42Z"},{"alias_kind":"pith_short_8","alias_value":"ULWBV2HP","created_at":"2026-07-05T03:05:42Z"}],"graph_snapshots":[{"event_id":"sha256:68903fbc898f23bcc9cb1c4d3d7b9dac307395243308b773cbff402df8706aee","target":"graph","created_at":"2026-07-05T03:05:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2002.09843/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Although federated learning improves privacy of training data by exchanging local gradients or parameters rather than raw data, the adversary still can leverage local gradients and parameters to obtain local training data by launching reconstruction and membership inference attacks. To defend such privacy attacks, many noises perturbation methods (like differential privacy or CountSketch matrix) have been widely designed. However, the strong defence ability and high learning accuracy of these schemes cannot be ensured at the same time, which will impede the wide application of FL in practice (","authors_text":"Jun Shao, Rongxing Lu, Shu-Tao Xia, Weijun Fang, Xiaohu Tang, Xue Yang, Yan Feng","cross_cats":["cs.CR","cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-23T06:50:20Z","title":"An Accuracy-Lossless Perturbation Method for Defending Privacy Attacks in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.09843","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a8042382b180aae1221ddf53678a59b4162732806fd6b3cbf611d5d9ea8f2527","target":"record","created_at":"2026-07-05T03:05:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c6e44879743ba08b2855af2b3e308ebb68f0cdfe8c3a3e91f0a9d9a87cfcdfb5","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-23T06:50:20Z","title_canon_sha256":"f5d5eeef2bbd978bd35e6590bcdae261960681729a78cc597fec5a0eef725c9a"},"schema_version":"1.0","source":{"id":"2002.09843","kind":"arxiv","version":5}},"canonical_sha256":"a2ec1ae8ef9886cda7bf55afcfa519c2827547ca4553ac387adac2387264c5a0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a2ec1ae8ef9886cda7bf55afcfa519c2827547ca4553ac387adac2387264c5a0","first_computed_at":"2026-07-05T03:05:42.374598Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:05:42.374598Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"eEnAzZkOEKQpf5Zl3qwiX0BUHWZj52D+ToLSN2fkB0kwvr0mZMuvVXee6Yu70aIX7oaK2Eni6NYPhrO5UImpCw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:05:42.375027Z","signed_message":"canonical_sha256_bytes"},"source_id":"2002.09843","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a8042382b180aae1221ddf53678a59b4162732806fd6b3cbf611d5d9ea8f2527","sha256:68903fbc898f23bcc9cb1c4d3d7b9dac307395243308b773cbff402df8706aee"],"state_sha256":"c277ba072ba2ffbf05fec3d644e8d685dfa79c2c6547b87e57f8ecb8a56fa6a9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"82vakTe5diyhFlUeZluSTQF8FTcfbLYmDbJet9/3rGmew/vOCCWZ+nNpIQ8Ai0sHoJk/LKHF9iCvIy3sJAyuDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-31T20:45:18.691747Z","bundle_sha256":"f7b16e59840ac85d05f5ba4c1272fe32bfc727331bb452fee236e16f69139cae"}}