{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:WEDZ2A76HVJAZKRY2ABXNWHNR4","short_pith_number":"pith:WEDZ2A76","canonical_record":{"source":{"id":"2308.04466","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-08-08T05:46:47Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"c4740bc113638b06628751b5167a9d2eee9733240474554a1db02ac0ead64e69","abstract_canon_sha256":"a6ca7879ae5879c29c953cf46b3acfbec0b513ada39a417c5406abbcef5f8eea"},"schema_version":"1.0"},"canonical_sha256":"b1079d03fe3d520caa38d00376d8ed8f05b441f5806a43455261ad912f0f15c1","source":{"kind":"arxiv","id":"2308.04466","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.04466","created_at":"2026-07-05T08:07:57Z"},{"alias_kind":"arxiv_version","alias_value":"2308.04466v3","created_at":"2026-07-05T08:07:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.04466","created_at":"2026-07-05T08:07:57Z"},{"alias_kind":"pith_short_12","alias_value":"WEDZ2A76HVJA","created_at":"2026-07-05T08:07:57Z"},{"alias_kind":"pith_short_16","alias_value":"WEDZ2A76HVJAZKRY","created_at":"2026-07-05T08:07:57Z"},{"alias_kind":"pith_short_8","alias_value":"WEDZ2A76","created_at":"2026-07-05T08:07:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:WEDZ2A76HVJAZKRY2ABXNWHNR4","target":"record","payload":{"canonical_record":{"source":{"id":"2308.04466","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-08-08T05:46:47Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"c4740bc113638b06628751b5167a9d2eee9733240474554a1db02ac0ead64e69","abstract_canon_sha256":"a6ca7879ae5879c29c953cf46b3acfbec0b513ada39a417c5406abbcef5f8eea"},"schema_version":"1.0"},"canonical_sha256":"b1079d03fe3d520caa38d00376d8ed8f05b441f5806a43455261ad912f0f15c1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:07:57.499502Z","signature_b64":"pvTTaeTRwe7DiABaJQ9fBXaK6UVHq4lNvHzVFkC1LHcDF8Z4e0NZcSh9Qr7gNSoSNC9PeU0PSzlmBAzt1KCeAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b1079d03fe3d520caa38d00376d8ed8f05b441f5806a43455261ad912f0f15c1","last_reissued_at":"2026-07-05T08:07:57.499024Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:07:57.499024Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2308.04466","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:07:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KsW77Evz3EF+8qldU+GX7393eUWWH7/+mc0WwQSpxakXVYNGtMSvN4aKVBL43UOpGTQgGHMb97QLSA60v3xYBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T19:38:30.964774Z"},"content_sha256":"b9de81f2da6378e42864995f51e56ae2500e429f130f5625b859e4e8450596d1","schema_version":"1.0","event_id":"sha256:b9de81f2da6378e42864995f51e56ae2500e429f130f5625b859e4e8450596d1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:WEDZ2A76HVJAZKRY2ABXNWHNR4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Backdoor Federated Learning by Poisoning Backdoor-Critical Layers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Haomin Zhuang, Hao Wang, Jian Li, Mingxian Yu, Xu Yuan, Yang Hua","submitted_at":"2023-08-08T05:46:47Z","abstract_excerpt":"Federated learning (FL) has been widely deployed to enable machine learning training on sensitive data across distributed devices. However, the decentralized learning paradigm and heterogeneity of FL further extend the attack surface for backdoor attacks. Existing FL attack and defense methodologies typically focus on the whole model. None of them recognizes the existence of backdoor-critical (BC) layers-a small subset of layers that dominate the model vulnerabilities. Attacking the BC layers achieves equivalent effects as attacking the whole model but at a far smaller chance of being detected"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.04466","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2308.04466/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:07:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"08Ftk29KyQPdRuXGZedXNfouN2e9yd3ZB8XD/yd8xbjHQ9vMV0BGdGiIzVz9th4M3//GZsro6+1aRupsCMu7Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T19:38:30.966100Z"},"content_sha256":"6873ffcd7e86e116e7c1bf73bc577174e531dc8c55b465971acdeea93ad5c263","schema_version":"1.0","event_id":"sha256:6873ffcd7e86e116e7c1bf73bc577174e531dc8c55b465971acdeea93ad5c263"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WEDZ2A76HVJAZKRY2ABXNWHNR4/bundle.json","state_url":"https://pith.science/pith/WEDZ2A76HVJAZKRY2ABXNWHNR4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WEDZ2A76HVJAZKRY2ABXNWHNR4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T19:38:30Z","links":{"resolver":"https://pith.science/pith/WEDZ2A76HVJAZKRY2ABXNWHNR4","bundle":"https://pith.science/pith/WEDZ2A76HVJAZKRY2ABXNWHNR4/bundle.json","state":"https://pith.science/pith/WEDZ2A76HVJAZKRY2ABXNWHNR4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WEDZ2A76HVJAZKRY2ABXNWHNR4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:WEDZ2A76HVJAZKRY2ABXNWHNR4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a6ca7879ae5879c29c953cf46b3acfbec0b513ada39a417c5406abbcef5f8eea","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-08-08T05:46:47Z","title_canon_sha256":"c4740bc113638b06628751b5167a9d2eee9733240474554a1db02ac0ead64e69"},"schema_version":"1.0","source":{"id":"2308.04466","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.04466","created_at":"2026-07-05T08:07:57Z"},{"alias_kind":"arxiv_version","alias_value":"2308.04466v3","created_at":"2026-07-05T08:07:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.04466","created_at":"2026-07-05T08:07:57Z"},{"alias_kind":"pith_short_12","alias_value":"WEDZ2A76HVJA","created_at":"2026-07-05T08:07:57Z"},{"alias_kind":"pith_short_16","alias_value":"WEDZ2A76HVJAZKRY","created_at":"2026-07-05T08:07:57Z"},{"alias_kind":"pith_short_8","alias_value":"WEDZ2A76","created_at":"2026-07-05T08:07:57Z"}],"graph_snapshots":[{"event_id":"sha256:6873ffcd7e86e116e7c1bf73bc577174e531dc8c55b465971acdeea93ad5c263","target":"graph","created_at":"2026-07-05T08:07:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2308.04466/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning (FL) has been widely deployed to enable machine learning training on sensitive data across distributed devices. However, the decentralized learning paradigm and heterogeneity of FL further extend the attack surface for backdoor attacks. Existing FL attack and defense methodologies typically focus on the whole model. None of them recognizes the existence of backdoor-critical (BC) layers-a small subset of layers that dominate the model vulnerabilities. Attacking the BC layers achieves equivalent effects as attacking the whole model but at a far smaller chance of being detected","authors_text":"Haomin Zhuang, Hao Wang, Jian Li, Mingxian Yu, Xu Yuan, Yang Hua","cross_cats":["cs.CV","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-08-08T05:46:47Z","title":"Backdoor Federated Learning by Poisoning Backdoor-Critical Layers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.04466","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b9de81f2da6378e42864995f51e56ae2500e429f130f5625b859e4e8450596d1","target":"record","created_at":"2026-07-05T08:07:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a6ca7879ae5879c29c953cf46b3acfbec0b513ada39a417c5406abbcef5f8eea","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-08-08T05:46:47Z","title_canon_sha256":"c4740bc113638b06628751b5167a9d2eee9733240474554a1db02ac0ead64e69"},"schema_version":"1.0","source":{"id":"2308.04466","kind":"arxiv","version":3}},"canonical_sha256":"b1079d03fe3d520caa38d00376d8ed8f05b441f5806a43455261ad912f0f15c1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b1079d03fe3d520caa38d00376d8ed8f05b441f5806a43455261ad912f0f15c1","first_computed_at":"2026-07-05T08:07:57.499024Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:07:57.499024Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"pvTTaeTRwe7DiABaJQ9fBXaK6UVHq4lNvHzVFkC1LHcDF8Z4e0NZcSh9Qr7gNSoSNC9PeU0PSzlmBAzt1KCeAA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:07:57.499502Z","signed_message":"canonical_sha256_bytes"},"source_id":"2308.04466","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b9de81f2da6378e42864995f51e56ae2500e429f130f5625b859e4e8450596d1","sha256:6873ffcd7e86e116e7c1bf73bc577174e531dc8c55b465971acdeea93ad5c263"],"state_sha256":"39ff90061d379e9548c33802947bfc129efa0789443e871e2769bf6b3b8a8dd8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gRq/9qIW4Un59tdcLERTgwiHTsG3rMnf8vpgGw5pxPJgKViZ+d6AIn1UdSZL2nCvElQv9sWpZPf1D0sl8PP2Ag==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T19:38:30.972817Z","bundle_sha256":"47860fa96f684c79989642f32f7b3e4365d1f00dae456a2a207ec77be05fd0a5"}}