{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:W6NRQN64QE5XOVTQCTZ6W35LFV","short_pith_number":"pith:W6NRQN64","canonical_record":{"source":{"id":"2410.17573","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-23T05:54:41Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"4917f56bfdcf3ce018da56de2d37f7b4469a65281a395369298997c5abce35ec","abstract_canon_sha256":"f2609e9726df9ba276425985aa0771684fe2b3cf4714704f1b28dc796b2c5f3e"},"schema_version":"1.0"},"canonical_sha256":"b79b1837dc813b77567014f3eb6fab2d570bdd08e751f24156bce7c7f0e30fa6","source":{"kind":"arxiv","id":"2410.17573","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.17573","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"arxiv_version","alias_value":"2410.17573v3","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.17573","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"pith_short_12","alias_value":"W6NRQN64QE5X","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"pith_short_16","alias_value":"W6NRQN64QE5XOVTQ","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"pith_short_8","alias_value":"W6NRQN64","created_at":"2026-07-05T11:10:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:W6NRQN64QE5XOVTQCTZ6W35LFV","target":"record","payload":{"canonical_record":{"source":{"id":"2410.17573","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-23T05:54:41Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"4917f56bfdcf3ce018da56de2d37f7b4469a65281a395369298997c5abce35ec","abstract_canon_sha256":"f2609e9726df9ba276425985aa0771684fe2b3cf4714704f1b28dc796b2c5f3e"},"schema_version":"1.0"},"canonical_sha256":"b79b1837dc813b77567014f3eb6fab2d570bdd08e751f24156bce7c7f0e30fa6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:10:32.892656Z","signature_b64":"mB8SbCMZskrGUSAPx01+GDatMLmi7DGv/NrNcHz5fiUgU2WEmBPSvM3ExDolo/aMd5qHCv0RQ9GdyQ/BR0i5BQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b79b1837dc813b77567014f3eb6fab2d570bdd08e751f24156bce7c7f0e30fa6","last_reissued_at":"2026-07-05T11:10:32.892189Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:10:32.892189Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.17573","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:10:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"f4onp+1VvlCqZSgXPWrVdxp165U6ZxAed1NDT6x4uVfHeu5tAdT2jyyqyavDz4cs6S7GQbcEHBCepNyQM709Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T05:24:08.283828Z"},"content_sha256":"51fda8a05359108bfdc5715234668666f2f1d928781b432298cf01146fb4d82e","schema_version":"1.0","event_id":"sha256:51fda8a05359108bfdc5715234668666f2f1d928781b432298cf01146fb4d82e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:W6NRQN64QE5XOVTQCTZ6W35LFV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Securing Federated Learning against Backdoor Threats with Foundation Model Integration","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Xiaohuan Bi, Xi Li","submitted_at":"2024-10-23T05:54:41Z","abstract_excerpt":"Federated Learning (FL) enables decentralized model training while preserving privacy. Recently, the integration of Foundation Models (FMs) into FL has enhanced performance but introduced a novel backdoor attack mechanism. Attackers can exploit FM vulnerabilities to embed backdoors into synthetic data generated by FMs. During global model fusion, these backdoors are transferred to the global model through compromised synthetic data, subsequently infecting all client models. Existing FL backdoor defenses are ineffective against this novel attack due to its fundamentally different mechanism comp"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.17573","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.17573/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:10:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oYLeDJ1J01DsKDTP8yb1uPzaX9zCavkURvAX3+vUSgCQkxEheeD2x3a3u1tsCrl1vZvlGwzBmD/rZkWly7oVCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T05:24:08.284205Z"},"content_sha256":"c6f46dd8f9d58da36e38d4f657663d12ce17c8cd181b1b2390bf77747f86ad24","schema_version":"1.0","event_id":"sha256:c6f46dd8f9d58da36e38d4f657663d12ce17c8cd181b1b2390bf77747f86ad24"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/W6NRQN64QE5XOVTQCTZ6W35LFV/bundle.json","state_url":"https://pith.science/pith/W6NRQN64QE5XOVTQCTZ6W35LFV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/W6NRQN64QE5XOVTQCTZ6W35LFV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T05:24:08Z","links":{"resolver":"https://pith.science/pith/W6NRQN64QE5XOVTQCTZ6W35LFV","bundle":"https://pith.science/pith/W6NRQN64QE5XOVTQCTZ6W35LFV/bundle.json","state":"https://pith.science/pith/W6NRQN64QE5XOVTQCTZ6W35LFV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/W6NRQN64QE5XOVTQCTZ6W35LFV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:W6NRQN64QE5XOVTQCTZ6W35LFV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f2609e9726df9ba276425985aa0771684fe2b3cf4714704f1b28dc796b2c5f3e","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-23T05:54:41Z","title_canon_sha256":"4917f56bfdcf3ce018da56de2d37f7b4469a65281a395369298997c5abce35ec"},"schema_version":"1.0","source":{"id":"2410.17573","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.17573","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"arxiv_version","alias_value":"2410.17573v3","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.17573","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"pith_short_12","alias_value":"W6NRQN64QE5X","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"pith_short_16","alias_value":"W6NRQN64QE5XOVTQ","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"pith_short_8","alias_value":"W6NRQN64","created_at":"2026-07-05T11:10:32Z"}],"graph_snapshots":[{"event_id":"sha256:c6f46dd8f9d58da36e38d4f657663d12ce17c8cd181b1b2390bf77747f86ad24","target":"graph","created_at":"2026-07-05T11:10:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.17573/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated Learning (FL) enables decentralized model training while preserving privacy. Recently, the integration of Foundation Models (FMs) into FL has enhanced performance but introduced a novel backdoor attack mechanism. Attackers can exploit FM vulnerabilities to embed backdoors into synthetic data generated by FMs. During global model fusion, these backdoors are transferred to the global model through compromised synthetic data, subsequently infecting all client models. Existing FL backdoor defenses are ineffective against this novel attack due to its fundamentally different mechanism comp","authors_text":"Xiaohuan Bi, Xi Li","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-23T05:54:41Z","title":"Securing Federated Learning against Backdoor Threats with Foundation Model Integration"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.17573","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:51fda8a05359108bfdc5715234668666f2f1d928781b432298cf01146fb4d82e","target":"record","created_at":"2026-07-05T11:10:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f2609e9726df9ba276425985aa0771684fe2b3cf4714704f1b28dc796b2c5f3e","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-23T05:54:41Z","title_canon_sha256":"4917f56bfdcf3ce018da56de2d37f7b4469a65281a395369298997c5abce35ec"},"schema_version":"1.0","source":{"id":"2410.17573","kind":"arxiv","version":3}},"canonical_sha256":"b79b1837dc813b77567014f3eb6fab2d570bdd08e751f24156bce7c7f0e30fa6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b79b1837dc813b77567014f3eb6fab2d570bdd08e751f24156bce7c7f0e30fa6","first_computed_at":"2026-07-05T11:10:32.892189Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:10:32.892189Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"mB8SbCMZskrGUSAPx01+GDatMLmi7DGv/NrNcHz5fiUgU2WEmBPSvM3ExDolo/aMd5qHCv0RQ9GdyQ/BR0i5BQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:10:32.892656Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.17573","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:51fda8a05359108bfdc5715234668666f2f1d928781b432298cf01146fb4d82e","sha256:c6f46dd8f9d58da36e38d4f657663d12ce17c8cd181b1b2390bf77747f86ad24"],"state_sha256":"890ed197273709d66c4318c683931d0a98e39f27caab93e6f096510df71278bd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MMZwd7nfcPRH9zoPbXY7zYZktuz/k+DiJ97Gd2uJbqNOCm1LUOtmgNgR4rB/k9aHigbCiBEtkR/mr3fcvny3Cw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T05:24:08.286588Z","bundle_sha256":"fe7336930ed1b4aa5607fc3fd78fbff0c5efa2378a2ab781e5cab9e6bf2e25be"}}