{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:YUA4I7IPQ66NY4HWNOJ56KM74X","short_pith_number":"pith:YUA4I7IP","canonical_record":{"source":{"id":"2502.07011","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2025-02-10T20:15:43Z","cross_cats_sorted":["cs.CR","cs.DC"],"title_canon_sha256":"582d7f45bcd5a123ee24c1822a4e6489e7f15f9fb4dc83cf6e01f0d0a79138a0","abstract_canon_sha256":"ae6c14aeae541706017c57300ebabbb989ac8adf1d65712101f43b48a1635b61"},"schema_version":"1.0"},"canonical_sha256":"c501c47d0f87bcdc70f66b93df299fe5d41733fcaecef7ece94ee65dda3119a6","source":{"kind":"arxiv","id":"2502.07011","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.07011","created_at":"2026-07-05T10:54:43Z"},{"alias_kind":"arxiv_version","alias_value":"2502.07011v2","created_at":"2026-07-05T10:54:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.07011","created_at":"2026-07-05T10:54:43Z"},{"alias_kind":"pith_short_12","alias_value":"YUA4I7IPQ66N","created_at":"2026-07-05T10:54:43Z"},{"alias_kind":"pith_short_16","alias_value":"YUA4I7IPQ66NY4HW","created_at":"2026-07-05T10:54:43Z"},{"alias_kind":"pith_short_8","alias_value":"YUA4I7IP","created_at":"2026-07-05T10:54:43Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:YUA4I7IPQ66NY4HWNOJ56KM74X","target":"record","payload":{"canonical_record":{"source":{"id":"2502.07011","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2025-02-10T20:15:43Z","cross_cats_sorted":["cs.CR","cs.DC"],"title_canon_sha256":"582d7f45bcd5a123ee24c1822a4e6489e7f15f9fb4dc83cf6e01f0d0a79138a0","abstract_canon_sha256":"ae6c14aeae541706017c57300ebabbb989ac8adf1d65712101f43b48a1635b61"},"schema_version":"1.0"},"canonical_sha256":"c501c47d0f87bcdc70f66b93df299fe5d41733fcaecef7ece94ee65dda3119a6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:54:43.083366Z","signature_b64":"nGhI7l6I/3RjM3PuN9RuZ+leK04qIRg49NHFgUmRVzQNGxZRKwi4f7JTfoZmiDOJdK05AZV9J+pyn77Yy3FoDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c501c47d0f87bcdc70f66b93df299fe5d41733fcaecef7ece94ee65dda3119a6","last_reissued_at":"2026-07-05T10:54:43.082826Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:54:43.082826Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.07011","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:54:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YGkDGXttlsb65McVjTCG0c6L9Y2fEXu9xMuvdXS5Pg54BjxZJP0dtceiVJNNWr400o8syn4UU93DmGS0ZUgfCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T22:12:44.402501Z"},"content_sha256":"3b22b8c1fb4e485fbb9bf80da3fbcfc8ee0d7c9ea32043d92197967c6933f009","schema_version":"1.0","event_id":"sha256:3b22b8c1fb4e485fbb9bf80da3fbcfc8ee0d7c9ea32043d92197967c6933f009"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:YUA4I7IPQ66NY4HWNOJ56KM74X","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DROP: Poison Dilution via Knowledge Distillation for Federated Learning","license":"http://creativecommons.org/publicdomain/zero/1.0/","headline":"","cross_cats":["cs.CR","cs.DC"],"primary_cat":"cs.LG","authors_text":"Alina Oprea, Anshuman Suri, Cristina Nita-Rotaru, Farinaz Koushanfar, Georgios Syros","submitted_at":"2025-02-10T20:15:43Z","abstract_excerpt":"Federated Learning is vulnerable to adversarial manipulation, where malicious clients can inject poisoned updates to influence the global model's behavior. While existing defense mechanisms have made notable progress, they fail to protect against adversaries that aim to induce targeted backdoors under different learning and attack configurations. To address this limitation, we introduce DROP (Distillation-based Reduction Of Poisoning), a novel defense mechanism that combines clustering and activity-tracking techniques with extraction of benign behavior from clients via knowledge distillation t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.07011","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.07011/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:54:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dn6Cdemhj00K+IPVlIVE9wNsXhaZk4GaStCKttnq98hu1BViJNQabpiqb2sVh4kmp/4W50rrrvFwhuLFOmfXAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T22:12:44.403035Z"},"content_sha256":"bba25c204efe095fab4281bccbab42cd6ad4b8d3b1ec2bd69c6a4167813805e1","schema_version":"1.0","event_id":"sha256:bba25c204efe095fab4281bccbab42cd6ad4b8d3b1ec2bd69c6a4167813805e1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YUA4I7IPQ66NY4HWNOJ56KM74X/bundle.json","state_url":"https://pith.science/pith/YUA4I7IPQ66NY4HWNOJ56KM74X/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YUA4I7IPQ66NY4HWNOJ56KM74X/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T22:12:44Z","links":{"resolver":"https://pith.science/pith/YUA4I7IPQ66NY4HWNOJ56KM74X","bundle":"https://pith.science/pith/YUA4I7IPQ66NY4HWNOJ56KM74X/bundle.json","state":"https://pith.science/pith/YUA4I7IPQ66NY4HWNOJ56KM74X/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YUA4I7IPQ66NY4HWNOJ56KM74X/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:YUA4I7IPQ66NY4HWNOJ56KM74X","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ae6c14aeae541706017c57300ebabbb989ac8adf1d65712101f43b48a1635b61","cross_cats_sorted":["cs.CR","cs.DC"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2025-02-10T20:15:43Z","title_canon_sha256":"582d7f45bcd5a123ee24c1822a4e6489e7f15f9fb4dc83cf6e01f0d0a79138a0"},"schema_version":"1.0","source":{"id":"2502.07011","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.07011","created_at":"2026-07-05T10:54:43Z"},{"alias_kind":"arxiv_version","alias_value":"2502.07011v2","created_at":"2026-07-05T10:54:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.07011","created_at":"2026-07-05T10:54:43Z"},{"alias_kind":"pith_short_12","alias_value":"YUA4I7IPQ66N","created_at":"2026-07-05T10:54:43Z"},{"alias_kind":"pith_short_16","alias_value":"YUA4I7IPQ66NY4HW","created_at":"2026-07-05T10:54:43Z"},{"alias_kind":"pith_short_8","alias_value":"YUA4I7IP","created_at":"2026-07-05T10:54:43Z"}],"graph_snapshots":[{"event_id":"sha256:bba25c204efe095fab4281bccbab42cd6ad4b8d3b1ec2bd69c6a4167813805e1","target":"graph","created_at":"2026-07-05T10:54:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.07011/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated Learning is vulnerable to adversarial manipulation, where malicious clients can inject poisoned updates to influence the global model's behavior. While existing defense mechanisms have made notable progress, they fail to protect against adversaries that aim to induce targeted backdoors under different learning and attack configurations. To address this limitation, we introduce DROP (Distillation-based Reduction Of Poisoning), a novel defense mechanism that combines clustering and activity-tracking techniques with extraction of benign behavior from clients via knowledge distillation t","authors_text":"Alina Oprea, Anshuman Suri, Cristina Nita-Rotaru, Farinaz Koushanfar, Georgios Syros","cross_cats":["cs.CR","cs.DC"],"headline":"","license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2025-02-10T20:15:43Z","title":"DROP: Poison Dilution via Knowledge Distillation for Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.07011","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3b22b8c1fb4e485fbb9bf80da3fbcfc8ee0d7c9ea32043d92197967c6933f009","target":"record","created_at":"2026-07-05T10:54:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ae6c14aeae541706017c57300ebabbb989ac8adf1d65712101f43b48a1635b61","cross_cats_sorted":["cs.CR","cs.DC"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2025-02-10T20:15:43Z","title_canon_sha256":"582d7f45bcd5a123ee24c1822a4e6489e7f15f9fb4dc83cf6e01f0d0a79138a0"},"schema_version":"1.0","source":{"id":"2502.07011","kind":"arxiv","version":2}},"canonical_sha256":"c501c47d0f87bcdc70f66b93df299fe5d41733fcaecef7ece94ee65dda3119a6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c501c47d0f87bcdc70f66b93df299fe5d41733fcaecef7ece94ee65dda3119a6","first_computed_at":"2026-07-05T10:54:43.082826Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:54:43.082826Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"nGhI7l6I/3RjM3PuN9RuZ+leK04qIRg49NHFgUmRVzQNGxZRKwi4f7JTfoZmiDOJdK05AZV9J+pyn77Yy3FoDg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:54:43.083366Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.07011","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3b22b8c1fb4e485fbb9bf80da3fbcfc8ee0d7c9ea32043d92197967c6933f009","sha256:bba25c204efe095fab4281bccbab42cd6ad4b8d3b1ec2bd69c6a4167813805e1"],"state_sha256":"49033c2e22d31fed3f4252eaecb0eeb8346eecbf51ceffbd165d24568a3cc07c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"H4ddwxctdcU0aYC+9u3cORrIRfxrLfOnWfMQZc7sTijcwmQO3aeh51pDdrHh/RwegFPfhnQxgyBc9l5okU1YAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T22:12:44.408223Z","bundle_sha256":"82b4bb13e246a332f5b7764a315ec30a38cf25de397f91380920d338027d614c"}}