{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:VT2QSAAPEOY3OXIHGPULM4HJL3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"612086df4d36c355d4a7706ffb3daa150ff1e9244ac17b2437e23e1aea910083","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-24T20:20:52Z","title_canon_sha256":"a4c4c7c1cab08013fa6e254a95051525b0d206d0a21179bb60ed14e0bbbe1d03"},"schema_version":"1.0","source":{"id":"2006.14026","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2006.14026","created_at":"2026-07-05T02:39:41Z"},{"alias_kind":"arxiv_version","alias_value":"2006.14026v3","created_at":"2026-07-05T02:39:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2006.14026","created_at":"2026-07-05T02:39:41Z"},{"alias_kind":"pith_short_12","alias_value":"VT2QSAAPEOY3","created_at":"2026-07-05T02:39:41Z"},{"alias_kind":"pith_short_16","alias_value":"VT2QSAAPEOY3OXIH","created_at":"2026-07-05T02:39:41Z"},{"alias_kind":"pith_short_8","alias_value":"VT2QSAAP","created_at":"2026-07-05T02:39:41Z"}],"graph_snapshots":[{"event_id":"sha256:887a9ce5ad3496765196e184e3a7c2b1f058e8a149b8d6f5f37e70d8990feeda","target":"graph","created_at":"2026-07-05T02:39:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2006.14026/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning systems are deployed in critical settings, but they might fail in unexpected ways, impacting the accuracy of their predictions. Poisoning attacks against machine learning induce adversarial modification of data used by a machine learning algorithm to selectively change its output when it is deployed. In this work, we introduce a novel data poisoning attack called a \\emph{subpopulation attack}, which is particularly relevant when datasets are large and diverse. We design a modular framework for subpopulation attacks, instantiate it with different building blocks, and show that ","authors_text":"Alina Oprea, Giorgio Severi, Matthew Jagielski, Niklas Pousette Harger","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-24T20:20:52Z","title":"Subpopulation Data Poisoning Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2006.14026","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f5ff1664a2e2a9eb0e75dea4630b3c46d6d67cd9889344ee690a83644f53b338","target":"record","created_at":"2026-07-05T02:39:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"612086df4d36c355d4a7706ffb3daa150ff1e9244ac17b2437e23e1aea910083","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-24T20:20:52Z","title_canon_sha256":"a4c4c7c1cab08013fa6e254a95051525b0d206d0a21179bb60ed14e0bbbe1d03"},"schema_version":"1.0","source":{"id":"2006.14026","kind":"arxiv","version":3}},"canonical_sha256":"acf509000f23b1b75d0733e8b670e95ecea50e6e04b6d853e31c20fe41970839","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"acf509000f23b1b75d0733e8b670e95ecea50e6e04b6d853e31c20fe41970839","first_computed_at":"2026-07-05T02:39:41.495773Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:39:41.495773Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"A7/ENLHhx62HJXAVVrbDZGBaV/4oW6Rv7NSef7/mx/FdkGcz3rh9QGTgJd322uz5NPuzJnfA7et+mxX2YbagAA==","signature_status":"signed_v1","signed_at":"2026-07-05T02:39:41.496242Z","signed_message":"canonical_sha256_bytes"},"source_id":"2006.14026","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f5ff1664a2e2a9eb0e75dea4630b3c46d6d67cd9889344ee690a83644f53b338","sha256:887a9ce5ad3496765196e184e3a7c2b1f058e8a149b8d6f5f37e70d8990feeda"],"state_sha256":"fc1aa8621cf4db9f0b2e376aa2b446470d9b54bda1d62905039945788cd8958b"}