{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:XWMM4QYPETJEPC4LCWHNEVVTLY","short_pith_number":"pith:XWMM4QYP","canonical_record":{"source":{"id":"2502.04890","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-07T12:56:39Z","cross_cats_sorted":[],"title_canon_sha256":"ab9752fe8b108dbbbcb5d67dd9800d81a020db49e3deff369d683a8e3086c90c","abstract_canon_sha256":"c713624767d8503e494b12505ded0ff64db79f52c887ec040d2736696128a1ed"},"schema_version":"1.0"},"canonical_sha256":"bd98ce430f24d2478b8b158ed256b35e25539d734140d9c031917e47e780b25d","source":{"kind":"arxiv","id":"2502.04890","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.04890","created_at":"2026-07-05T10:14:26Z"},{"alias_kind":"arxiv_version","alias_value":"2502.04890v2","created_at":"2026-07-05T10:14:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.04890","created_at":"2026-07-05T10:14:26Z"},{"alias_kind":"pith_short_12","alias_value":"XWMM4QYPETJE","created_at":"2026-07-05T10:14:26Z"},{"alias_kind":"pith_short_16","alias_value":"XWMM4QYPETJEPC4L","created_at":"2026-07-05T10:14:26Z"},{"alias_kind":"pith_short_8","alias_value":"XWMM4QYP","created_at":"2026-07-05T10:14:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:XWMM4QYPETJEPC4LCWHNEVVTLY","target":"record","payload":{"canonical_record":{"source":{"id":"2502.04890","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-07T12:56:39Z","cross_cats_sorted":[],"title_canon_sha256":"ab9752fe8b108dbbbcb5d67dd9800d81a020db49e3deff369d683a8e3086c90c","abstract_canon_sha256":"c713624767d8503e494b12505ded0ff64db79f52c887ec040d2736696128a1ed"},"schema_version":"1.0"},"canonical_sha256":"bd98ce430f24d2478b8b158ed256b35e25539d734140d9c031917e47e780b25d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:14:26.094463Z","signature_b64":"ugeNbjeFNGNEYMZHnP5LUWhdXl2DrKhagZ8cxgNFKnRX2GztSiqktH5qOTqG0vySLclET9AHzLkgdRnwJlq6Dw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bd98ce430f24d2478b8b158ed256b35e25539d734140d9c031917e47e780b25d","last_reissued_at":"2026-07-05T10:14:26.093988Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:14:26.093988Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.04890","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:14:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"P4KV4WZo94MJPdTO3qlIFtc/8uW+txvjmjm0uf75PryRhJr4ibSWN/gt6ECzV23M3zP/vJw2tgc+qgANqZ91Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T21:30:45.999325Z"},"content_sha256":"e0f6fd5655c36a1ce06500ef53639aef52866afcf97ca078a5792b6ecba5690e","schema_version":"1.0","event_id":"sha256:e0f6fd5655c36a1ce06500ef53639aef52866afcf97ca078a5792b6ecba5690e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:XWMM4QYPETJEPC4LCWHNEVVTLY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Exploit Gradient Skewness to Circumvent Byzantine Defenses for Federated Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Chen Chen, Gang Chen, Lingjuan Lyu, Yaochu Jin, Yuchen Liu","submitted_at":"2025-02-07T12:56:39Z","abstract_excerpt":"Federated Learning (FL) is notorious for its vulnerability to Byzantine attacks. Most current Byzantine defenses share a common inductive bias: among all the gradients, the densely distributed ones are more likely to be honest. However, such a bias is a poison to Byzantine robustness due to a newly discovered phenomenon in this paper - gradient skew. We discover that a group of densely distributed honest gradients skew away from the optimal gradient (the average of honest gradients) due to heterogeneous data. This gradient skew phenomenon allows Byzantine gradients to hide within the densely d"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.04890","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.04890/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:14:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/1N9ohV3pTFPaRieKqmHJzn+T4j5D5M6QU2aiu4NuMPSR0Yom2AdB3L2mRxCRR7qjn0NJdnpXqVwWK90yZ/eDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T21:30:45.999900Z"},"content_sha256":"ae80d877f7dc6e78ae375461b5cc0018bdb35eec2418ace38fa273d8d91046ab","schema_version":"1.0","event_id":"sha256:ae80d877f7dc6e78ae375461b5cc0018bdb35eec2418ace38fa273d8d91046ab"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XWMM4QYPETJEPC4LCWHNEVVTLY/bundle.json","state_url":"https://pith.science/pith/XWMM4QYPETJEPC4LCWHNEVVTLY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XWMM4QYPETJEPC4LCWHNEVVTLY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T21:30:46Z","links":{"resolver":"https://pith.science/pith/XWMM4QYPETJEPC4LCWHNEVVTLY","bundle":"https://pith.science/pith/XWMM4QYPETJEPC4LCWHNEVVTLY/bundle.json","state":"https://pith.science/pith/XWMM4QYPETJEPC4LCWHNEVVTLY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XWMM4QYPETJEPC4LCWHNEVVTLY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:XWMM4QYPETJEPC4LCWHNEVVTLY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c713624767d8503e494b12505ded0ff64db79f52c887ec040d2736696128a1ed","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-07T12:56:39Z","title_canon_sha256":"ab9752fe8b108dbbbcb5d67dd9800d81a020db49e3deff369d683a8e3086c90c"},"schema_version":"1.0","source":{"id":"2502.04890","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.04890","created_at":"2026-07-05T10:14:26Z"},{"alias_kind":"arxiv_version","alias_value":"2502.04890v2","created_at":"2026-07-05T10:14:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.04890","created_at":"2026-07-05T10:14:26Z"},{"alias_kind":"pith_short_12","alias_value":"XWMM4QYPETJE","created_at":"2026-07-05T10:14:26Z"},{"alias_kind":"pith_short_16","alias_value":"XWMM4QYPETJEPC4L","created_at":"2026-07-05T10:14:26Z"},{"alias_kind":"pith_short_8","alias_value":"XWMM4QYP","created_at":"2026-07-05T10:14:26Z"}],"graph_snapshots":[{"event_id":"sha256:ae80d877f7dc6e78ae375461b5cc0018bdb35eec2418ace38fa273d8d91046ab","target":"graph","created_at":"2026-07-05T10:14:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.04890/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated Learning (FL) is notorious for its vulnerability to Byzantine attacks. Most current Byzantine defenses share a common inductive bias: among all the gradients, the densely distributed ones are more likely to be honest. However, such a bias is a poison to Byzantine robustness due to a newly discovered phenomenon in this paper - gradient skew. We discover that a group of densely distributed honest gradients skew away from the optimal gradient (the average of honest gradients) due to heterogeneous data. This gradient skew phenomenon allows Byzantine gradients to hide within the densely d","authors_text":"Chen Chen, Gang Chen, Lingjuan Lyu, Yaochu Jin, Yuchen Liu","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-07T12:56:39Z","title":"Exploit Gradient Skewness to Circumvent Byzantine Defenses for Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.04890","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e0f6fd5655c36a1ce06500ef53639aef52866afcf97ca078a5792b6ecba5690e","target":"record","created_at":"2026-07-05T10:14:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c713624767d8503e494b12505ded0ff64db79f52c887ec040d2736696128a1ed","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-07T12:56:39Z","title_canon_sha256":"ab9752fe8b108dbbbcb5d67dd9800d81a020db49e3deff369d683a8e3086c90c"},"schema_version":"1.0","source":{"id":"2502.04890","kind":"arxiv","version":2}},"canonical_sha256":"bd98ce430f24d2478b8b158ed256b35e25539d734140d9c031917e47e780b25d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bd98ce430f24d2478b8b158ed256b35e25539d734140d9c031917e47e780b25d","first_computed_at":"2026-07-05T10:14:26.093988Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:14:26.093988Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ugeNbjeFNGNEYMZHnP5LUWhdXl2DrKhagZ8cxgNFKnRX2GztSiqktH5qOTqG0vySLclET9AHzLkgdRnwJlq6Dw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:14:26.094463Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.04890","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e0f6fd5655c36a1ce06500ef53639aef52866afcf97ca078a5792b6ecba5690e","sha256:ae80d877f7dc6e78ae375461b5cc0018bdb35eec2418ace38fa273d8d91046ab"],"state_sha256":"eff0f3bcbd1da56052e33cd8f5a5a327f920b1f897283d9d0bf65ea12e77081d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"J9XpS+9pCbW1q40W4O01HUJrMYJBq29al+1V38T8hoNnMY3t22RHraL+JfGhycUIrAbQf702UvLa+daCO2WKBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T21:30:46.006640Z","bundle_sha256":"bb256f595b24bc9bcce6130e47954118c2816471b2ed3f81043988408b6f628b"}}