{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:YMCXJX6EXVYVEJ53X4PMKST4XW","short_pith_number":"pith:YMCXJX6E","canonical_record":{"source":{"id":"2110.04571","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-10-09T13:53:57Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"178717cc297d784018fd75c64038a5d742a586fe763786f6b45134827432b5a4","abstract_canon_sha256":"13f64f68ff486fc5e8d971b7e5c1c2fb7f39b6181263844c23162cf04823ce23"},"schema_version":"1.0"},"canonical_sha256":"c30574dfc4bd715227bbbf1ec54a7cbdb14f1454fd496fe776106932ee6e94b5","source":{"kind":"arxiv","id":"2110.04571","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.04571","created_at":"2026-07-05T03:21:18Z"},{"alias_kind":"arxiv_version","alias_value":"2110.04571v1","created_at":"2026-07-05T03:21:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.04571","created_at":"2026-07-05T03:21:18Z"},{"alias_kind":"pith_short_12","alias_value":"YMCXJX6EXVYV","created_at":"2026-07-05T03:21:18Z"},{"alias_kind":"pith_short_16","alias_value":"YMCXJX6EXVYVEJ53","created_at":"2026-07-05T03:21:18Z"},{"alias_kind":"pith_short_8","alias_value":"YMCXJX6E","created_at":"2026-07-05T03:21:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:YMCXJX6EXVYVEJ53X4PMKST4XW","target":"record","payload":{"canonical_record":{"source":{"id":"2110.04571","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-10-09T13:53:57Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"178717cc297d784018fd75c64038a5d742a586fe763786f6b45134827432b5a4","abstract_canon_sha256":"13f64f68ff486fc5e8d971b7e5c1c2fb7f39b6181263844c23162cf04823ce23"},"schema_version":"1.0"},"canonical_sha256":"c30574dfc4bd715227bbbf1ec54a7cbdb14f1454fd496fe776106932ee6e94b5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:21:18.532066Z","signature_b64":"9SEbWowCChOawfSWwNWFMYcH7H3QZuRQ8RpeIpARq0ZR7P6IrdPWcmpUjjehTYqjZc/Wl77pGKuMpjWt/bxUDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c30574dfc4bd715227bbbf1ec54a7cbdb14f1454fd496fe776106932ee6e94b5","last_reissued_at":"2026-07-05T03:21:18.531541Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:21:18.531541Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2110.04571","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:21:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/k2fK/K+jfnkKBroJKJZBBs0FDcxSn+vA4fQpwuLvPKx8gsPn2cPpSXpofKpzW/rr682guwrdZ9BZM0FrEb7DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T06:15:18.313881Z"},"content_sha256":"3f08d4881a888089773aa098fc4bf23efe0e18c797c284861503b18bc9780562","schema_version":"1.0","event_id":"sha256:3f08d4881a888089773aa098fc4bf23efe0e18c797c284861503b18bc9780562"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:YMCXJX6EXVYVEJ53X4PMKST4XW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Widen The Backdoor To Let More Attackers In","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Giulio Lovisotto, Ivan Martinovic, Nigel Shadbolt, Siddhartha Datta","submitted_at":"2021-10-09T13:53:57Z","abstract_excerpt":"As collaborative learning and the outsourcing of data collection become more common, malicious actors (or agents) which attempt to manipulate the learning process face an additional obstacle as they compete with each other. In backdoor attacks, where an adversary attempts to poison a model by introducing malicious samples into the training data, adversaries have to consider that the presence of additional backdoor attackers may hamper the success of their own backdoor. In this paper, we investigate the scenario of a multi-agent backdoor attack, where multiple non-colluding attackers craft and "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.04571","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2110.04571/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:21:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RarfBKER1PQpzxPXizMwyckOVAXJg+czsJXdyfTEcDtCblMG1rJrcVXaokgc/d8m3H0sFOJsOKRiKvurffF4Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T06:15:18.314256Z"},"content_sha256":"810b52b0576a2f271916930483ba6cf580391caf7108b4936d6760b0a73e715f","schema_version":"1.0","event_id":"sha256:810b52b0576a2f271916930483ba6cf580391caf7108b4936d6760b0a73e715f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YMCXJX6EXVYVEJ53X4PMKST4XW/bundle.json","state_url":"https://pith.science/pith/YMCXJX6EXVYVEJ53X4PMKST4XW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YMCXJX6EXVYVEJ53X4PMKST4XW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T06:15:18Z","links":{"resolver":"https://pith.science/pith/YMCXJX6EXVYVEJ53X4PMKST4XW","bundle":"https://pith.science/pith/YMCXJX6EXVYVEJ53X4PMKST4XW/bundle.json","state":"https://pith.science/pith/YMCXJX6EXVYVEJ53X4PMKST4XW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YMCXJX6EXVYVEJ53X4PMKST4XW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:YMCXJX6EXVYVEJ53X4PMKST4XW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"13f64f68ff486fc5e8d971b7e5c1c2fb7f39b6181263844c23162cf04823ce23","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-10-09T13:53:57Z","title_canon_sha256":"178717cc297d784018fd75c64038a5d742a586fe763786f6b45134827432b5a4"},"schema_version":"1.0","source":{"id":"2110.04571","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.04571","created_at":"2026-07-05T03:21:18Z"},{"alias_kind":"arxiv_version","alias_value":"2110.04571v1","created_at":"2026-07-05T03:21:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.04571","created_at":"2026-07-05T03:21:18Z"},{"alias_kind":"pith_short_12","alias_value":"YMCXJX6EXVYV","created_at":"2026-07-05T03:21:18Z"},{"alias_kind":"pith_short_16","alias_value":"YMCXJX6EXVYVEJ53","created_at":"2026-07-05T03:21:18Z"},{"alias_kind":"pith_short_8","alias_value":"YMCXJX6E","created_at":"2026-07-05T03:21:18Z"}],"graph_snapshots":[{"event_id":"sha256:810b52b0576a2f271916930483ba6cf580391caf7108b4936d6760b0a73e715f","target":"graph","created_at":"2026-07-05T03:21:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2110.04571/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As collaborative learning and the outsourcing of data collection become more common, malicious actors (or agents) which attempt to manipulate the learning process face an additional obstacle as they compete with each other. In backdoor attacks, where an adversary attempts to poison a model by introducing malicious samples into the training data, adversaries have to consider that the presence of additional backdoor attackers may hamper the success of their own backdoor. In this paper, we investigate the scenario of a multi-agent backdoor attack, where multiple non-colluding attackers craft and ","authors_text":"Giulio Lovisotto, Ivan Martinovic, Nigel Shadbolt, Siddhartha Datta","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-10-09T13:53:57Z","title":"Widen The Backdoor To Let More Attackers In"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.04571","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3f08d4881a888089773aa098fc4bf23efe0e18c797c284861503b18bc9780562","target":"record","created_at":"2026-07-05T03:21:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"13f64f68ff486fc5e8d971b7e5c1c2fb7f39b6181263844c23162cf04823ce23","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-10-09T13:53:57Z","title_canon_sha256":"178717cc297d784018fd75c64038a5d742a586fe763786f6b45134827432b5a4"},"schema_version":"1.0","source":{"id":"2110.04571","kind":"arxiv","version":1}},"canonical_sha256":"c30574dfc4bd715227bbbf1ec54a7cbdb14f1454fd496fe776106932ee6e94b5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c30574dfc4bd715227bbbf1ec54a7cbdb14f1454fd496fe776106932ee6e94b5","first_computed_at":"2026-07-05T03:21:18.531541Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:21:18.531541Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"9SEbWowCChOawfSWwNWFMYcH7H3QZuRQ8RpeIpARq0ZR7P6IrdPWcmpUjjehTYqjZc/Wl77pGKuMpjWt/bxUDg==","signature_status":"signed_v1","signed_at":"2026-07-05T03:21:18.532066Z","signed_message":"canonical_sha256_bytes"},"source_id":"2110.04571","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3f08d4881a888089773aa098fc4bf23efe0e18c797c284861503b18bc9780562","sha256:810b52b0576a2f271916930483ba6cf580391caf7108b4936d6760b0a73e715f"],"state_sha256":"2b4dd509c88867890da1d3ed5bea7a6cc122bd65ab1eb7cd021892d0ba2b53e5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9/3l8p0jksIQeVk3lqd5qgIajdVJdUv0wDZ7mN32hr5maxitpaf+dZAW/9YHszTeZcZ2XPSpceN4ZKDaRaVDCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T06:15:18.316232Z","bundle_sha256":"c13f86c35ea19994eb6e2292cbcf4f3321f15674f5b2e6c1e8c6a6a94b06a6db"}}