{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:ZUGUBW4IHQEYGAEKAHMQ6U6AJ7","short_pith_number":"pith:ZUGUBW4I","canonical_record":{"source":{"id":"2102.05867","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2021-02-11T06:55:40Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"7b73f45fbc40fa3ca991725432b2cb4f501bcb7cd62b8e6b2418053c14f68c19","abstract_canon_sha256":"d2b3f16733efd935baa72200c7a0166ac80cc63f4bf49ddc535b179db8ede800"},"schema_version":"1.0"},"canonical_sha256":"cd0d40db883c0983008a01d90f53c04fc481c7e53b038d9708dbacec2f74d3da","source":{"kind":"arxiv","id":"2102.05867","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2102.05867","created_at":"2026-07-05T02:14:35Z"},{"alias_kind":"arxiv_version","alias_value":"2102.05867v1","created_at":"2026-07-05T02:14:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2102.05867","created_at":"2026-07-05T02:14:35Z"},{"alias_kind":"pith_short_12","alias_value":"ZUGUBW4IHQEY","created_at":"2026-07-05T02:14:35Z"},{"alias_kind":"pith_short_16","alias_value":"ZUGUBW4IHQEYGAEK","created_at":"2026-07-05T02:14:35Z"},{"alias_kind":"pith_short_8","alias_value":"ZUGUBW4I","created_at":"2026-07-05T02:14:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:ZUGUBW4IHQEYGAEKAHMQ6U6AJ7","target":"record","payload":{"canonical_record":{"source":{"id":"2102.05867","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2021-02-11T06:55:40Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"7b73f45fbc40fa3ca991725432b2cb4f501bcb7cd62b8e6b2418053c14f68c19","abstract_canon_sha256":"d2b3f16733efd935baa72200c7a0166ac80cc63f4bf49ddc535b179db8ede800"},"schema_version":"1.0"},"canonical_sha256":"cd0d40db883c0983008a01d90f53c04fc481c7e53b038d9708dbacec2f74d3da","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:14:35.214519Z","signature_b64":"MVeJvHqa2oWF5oUJsvQZ84zvbAGmPNV+OYJLO/qr608SuJ/4+HI5D7HysLjSV2+MDfGVvef5/B5DyM+vXSKIBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cd0d40db883c0983008a01d90f53c04fc481c7e53b038d9708dbacec2f74d3da","last_reissued_at":"2026-07-05T02:14:35.214076Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:14:35.214076Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2102.05867","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:14:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Y71axEStfvpuUiKQp4UPUkHxPnd09nCuvvzSCn6E5RXDIZhR2SSLEDfkENbdtJkrxUUDZXl4dqhBctYu4w6LAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T00:28:46.286857Z"},"content_sha256":"c22568125a4b4a1b2a58025f3c230cc2915d9824c99f6a79d21cec81ca03950e","schema_version":"1.0","event_id":"sha256:c22568125a4b4a1b2a58025f3c230cc2915d9824c99f6a79d21cec81ca03950e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:ZUGUBW4IHQEYGAEKAHMQ6U6AJ7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Poisoning Attacks and Defense for General Multi-Class Models Based On Synthetic Reduced Nearest Neighbors","license":"http://creativecommons.org/publicdomain/zero/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Mukesh Singhal, Peyman Tavallali, Pooya Tavallali, Vahid Behzadan","submitted_at":"2021-02-11T06:55:40Z","abstract_excerpt":"State-of-the-art machine learning models are vulnerable to data poisoning attacks whose purpose is to undermine the integrity of the model. However, the current literature on data poisoning attacks is mainly focused on ad hoc techniques that are only applicable to specific machine learning models. Additionally, the existing data poisoning attacks in the literature are limited to either binary classifiers or to gradient-based algorithms. To address these limitations, this paper first proposes a novel model-free label-flipping attack based on the multi-modality of the data, in which the adversar"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2102.05867","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2102.05867/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:14:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oWOm+8CpLw9K5JZklFyL18EG2oMeswLE7MNtFYCAJ5OhMJVu7kqaPRM3X4UITQkJ7ECtrn7guqVOb7/RbviPCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T00:28:46.287374Z"},"content_sha256":"27e94c32da209aa715b6f4191a192c09cb55f80d23dda5e637698f37f5e9d15f","schema_version":"1.0","event_id":"sha256:27e94c32da209aa715b6f4191a192c09cb55f80d23dda5e637698f37f5e9d15f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZUGUBW4IHQEYGAEKAHMQ6U6AJ7/bundle.json","state_url":"https://pith.science/pith/ZUGUBW4IHQEYGAEKAHMQ6U6AJ7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZUGUBW4IHQEYGAEKAHMQ6U6AJ7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T00:28:46Z","links":{"resolver":"https://pith.science/pith/ZUGUBW4IHQEYGAEKAHMQ6U6AJ7","bundle":"https://pith.science/pith/ZUGUBW4IHQEYGAEKAHMQ6U6AJ7/bundle.json","state":"https://pith.science/pith/ZUGUBW4IHQEYGAEKAHMQ6U6AJ7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZUGUBW4IHQEYGAEKAHMQ6U6AJ7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:ZUGUBW4IHQEYGAEKAHMQ6U6AJ7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d2b3f16733efd935baa72200c7a0166ac80cc63f4bf49ddc535b179db8ede800","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2021-02-11T06:55:40Z","title_canon_sha256":"7b73f45fbc40fa3ca991725432b2cb4f501bcb7cd62b8e6b2418053c14f68c19"},"schema_version":"1.0","source":{"id":"2102.05867","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2102.05867","created_at":"2026-07-05T02:14:35Z"},{"alias_kind":"arxiv_version","alias_value":"2102.05867v1","created_at":"2026-07-05T02:14:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2102.05867","created_at":"2026-07-05T02:14:35Z"},{"alias_kind":"pith_short_12","alias_value":"ZUGUBW4IHQEY","created_at":"2026-07-05T02:14:35Z"},{"alias_kind":"pith_short_16","alias_value":"ZUGUBW4IHQEYGAEK","created_at":"2026-07-05T02:14:35Z"},{"alias_kind":"pith_short_8","alias_value":"ZUGUBW4I","created_at":"2026-07-05T02:14:35Z"}],"graph_snapshots":[{"event_id":"sha256:27e94c32da209aa715b6f4191a192c09cb55f80d23dda5e637698f37f5e9d15f","target":"graph","created_at":"2026-07-05T02:14:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2102.05867/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"State-of-the-art machine learning models are vulnerable to data poisoning attacks whose purpose is to undermine the integrity of the model. However, the current literature on data poisoning attacks is mainly focused on ad hoc techniques that are only applicable to specific machine learning models. Additionally, the existing data poisoning attacks in the literature are limited to either binary classifiers or to gradient-based algorithms. To address these limitations, this paper first proposes a novel model-free label-flipping attack based on the multi-modality of the data, in which the adversar","authors_text":"Mukesh Singhal, Peyman Tavallali, Pooya Tavallali, Vahid Behzadan","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2021-02-11T06:55:40Z","title":"Adversarial Poisoning Attacks and Defense for General Multi-Class Models Based On Synthetic Reduced Nearest Neighbors"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2102.05867","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c22568125a4b4a1b2a58025f3c230cc2915d9824c99f6a79d21cec81ca03950e","target":"record","created_at":"2026-07-05T02:14:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d2b3f16733efd935baa72200c7a0166ac80cc63f4bf49ddc535b179db8ede800","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2021-02-11T06:55:40Z","title_canon_sha256":"7b73f45fbc40fa3ca991725432b2cb4f501bcb7cd62b8e6b2418053c14f68c19"},"schema_version":"1.0","source":{"id":"2102.05867","kind":"arxiv","version":1}},"canonical_sha256":"cd0d40db883c0983008a01d90f53c04fc481c7e53b038d9708dbacec2f74d3da","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cd0d40db883c0983008a01d90f53c04fc481c7e53b038d9708dbacec2f74d3da","first_computed_at":"2026-07-05T02:14:35.214076Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:14:35.214076Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MVeJvHqa2oWF5oUJsvQZ84zvbAGmPNV+OYJLO/qr608SuJ/4+HI5D7HysLjSV2+MDfGVvef5/B5DyM+vXSKIBw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:14:35.214519Z","signed_message":"canonical_sha256_bytes"},"source_id":"2102.05867","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c22568125a4b4a1b2a58025f3c230cc2915d9824c99f6a79d21cec81ca03950e","sha256:27e94c32da209aa715b6f4191a192c09cb55f80d23dda5e637698f37f5e9d15f"],"state_sha256":"c2cb658cdf628f7ee67e9088e061c81fd871a78fe2e7435532bd4bcbefcb5c14"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LZQQ1ck5XW1sD45vPksrBR5xFNNQPcGOZp6DvFq267BKsS/H47wf7UH9MMYsqxPfoDYjlkQc9QDkZFKOxxqODw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T00:28:46.291256Z","bundle_sha256":"b2084562b9136e182a15d8065788b025209771ff3a513289c881a04f7377e4c5"}}