{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:KOK45XJVO7PYKHEGRL44Y6DAWT","short_pith_number":"pith:KOK45XJV","canonical_record":{"source":{"id":"2111.04550","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-11-08T15:00:44Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"15ade04d8cbebbd88b006025598e624d166b8482f4edec86766c2788184895e7","abstract_canon_sha256":"f2278996d180caaf4aa65f8c0c5384b33aab5647702c6ededbf181c09459da02"},"schema_version":"1.0"},"canonical_sha256":"5395cedd3577df851c868af9cc7860b4e23ed045f7d5c82141cd490411fa37aa","source":{"kind":"arxiv","id":"2111.04550","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.04550","created_at":"2026-07-05T06:21:11Z"},{"alias_kind":"arxiv_version","alias_value":"2111.04550v2","created_at":"2026-07-05T06:21:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.04550","created_at":"2026-07-05T06:21:11Z"},{"alias_kind":"pith_short_12","alias_value":"KOK45XJVO7PY","created_at":"2026-07-05T06:21:11Z"},{"alias_kind":"pith_short_16","alias_value":"KOK45XJVO7PYKHEG","created_at":"2026-07-05T06:21:11Z"},{"alias_kind":"pith_short_8","alias_value":"KOK45XJV","created_at":"2026-07-05T06:21:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:KOK45XJVO7PYKHEGRL44Y6DAWT","target":"record","payload":{"canonical_record":{"source":{"id":"2111.04550","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-11-08T15:00:44Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"15ade04d8cbebbd88b006025598e624d166b8482f4edec86766c2788184895e7","abstract_canon_sha256":"f2278996d180caaf4aa65f8c0c5384b33aab5647702c6ededbf181c09459da02"},"schema_version":"1.0"},"canonical_sha256":"5395cedd3577df851c868af9cc7860b4e23ed045f7d5c82141cd490411fa37aa","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:21:11.953938Z","signature_b64":"vXqBJZGoh7L//112kPtPV7pWCIXMJxUu+teZWR7HNujqj7AY1kfij6XAVGlzKUBle28P3L98z/+8VAEBPt90Dg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5395cedd3577df851c868af9cc7860b4e23ed045f7d5c82141cd490411fa37aa","last_reissued_at":"2026-07-05T06:21:11.953586Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:21:11.953586Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2111.04550","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:21:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WSJKMDS1RtlU7mJJvyQaUR17wturiLprYMLetIMJJw/sPd+MMbIH9lpcvgbK70OZUOj8duuW7gQSHxJnXZh5DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-24T03:29:18.549154Z"},"content_sha256":"22208f815d2629ab2ccbf6a75b44933c735d0d76b99f91e817aa1e4a8eabcbf5","schema_version":"1.0","event_id":"sha256:22208f815d2629ab2ccbf6a75b44933c735d0d76b99f91e817aa1e4a8eabcbf5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:KOK45XJVO7PYKHEGRL44Y6DAWT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ARFED: Attack-Resistant Federated averaging based on outlier elimination","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Altan Kocyigit, Ece Isik-Polat, Gorkem Polat","submitted_at":"2021-11-08T15:00:44Z","abstract_excerpt":"In federated learning, each participant trains its local model with its own data and a global model is formed at a trusted server by aggregating model updates coming from these participants. Since the server has no effect and visibility on the training procedure of the participants to ensure privacy, the global model becomes vulnerable to attacks such as data poisoning and model poisoning. Although many defense algorithms have recently been proposed to address these attacks, they often make strong assumptions that do not agree with the nature of federated learning, such as assuming Non-IID dat"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.04550","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2111.04550/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:21:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1fzWYPKoKKGV68My9CdoJbOOdfjLzSADfIKXm7c2ljiiVZSjiDbgjlZNaj8nGs8GafitYl+KTIugDlVUxA7NAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-24T03:29:18.549682Z"},"content_sha256":"146617afecf33a490a7409d708288be3cc34bb41ee46344948e7d6ccd0c79a61","schema_version":"1.0","event_id":"sha256:146617afecf33a490a7409d708288be3cc34bb41ee46344948e7d6ccd0c79a61"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KOK45XJVO7PYKHEGRL44Y6DAWT/bundle.json","state_url":"https://pith.science/pith/KOK45XJVO7PYKHEGRL44Y6DAWT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KOK45XJVO7PYKHEGRL44Y6DAWT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-24T03:29:18Z","links":{"resolver":"https://pith.science/pith/KOK45XJVO7PYKHEGRL44Y6DAWT","bundle":"https://pith.science/pith/KOK45XJVO7PYKHEGRL44Y6DAWT/bundle.json","state":"https://pith.science/pith/KOK45XJVO7PYKHEGRL44Y6DAWT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KOK45XJVO7PYKHEGRL44Y6DAWT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:KOK45XJVO7PYKHEGRL44Y6DAWT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f2278996d180caaf4aa65f8c0c5384b33aab5647702c6ededbf181c09459da02","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-11-08T15:00:44Z","title_canon_sha256":"15ade04d8cbebbd88b006025598e624d166b8482f4edec86766c2788184895e7"},"schema_version":"1.0","source":{"id":"2111.04550","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.04550","created_at":"2026-07-05T06:21:11Z"},{"alias_kind":"arxiv_version","alias_value":"2111.04550v2","created_at":"2026-07-05T06:21:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.04550","created_at":"2026-07-05T06:21:11Z"},{"alias_kind":"pith_short_12","alias_value":"KOK45XJVO7PY","created_at":"2026-07-05T06:21:11Z"},{"alias_kind":"pith_short_16","alias_value":"KOK45XJVO7PYKHEG","created_at":"2026-07-05T06:21:11Z"},{"alias_kind":"pith_short_8","alias_value":"KOK45XJV","created_at":"2026-07-05T06:21:11Z"}],"graph_snapshots":[{"event_id":"sha256:146617afecf33a490a7409d708288be3cc34bb41ee46344948e7d6ccd0c79a61","target":"graph","created_at":"2026-07-05T06:21:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2111.04550/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In federated learning, each participant trains its local model with its own data and a global model is formed at a trusted server by aggregating model updates coming from these participants. Since the server has no effect and visibility on the training procedure of the participants to ensure privacy, the global model becomes vulnerable to attacks such as data poisoning and model poisoning. Although many defense algorithms have recently been proposed to address these attacks, they often make strong assumptions that do not agree with the nature of federated learning, such as assuming Non-IID dat","authors_text":"Altan Kocyigit, Ece Isik-Polat, Gorkem Polat","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-11-08T15:00:44Z","title":"ARFED: Attack-Resistant Federated averaging based on outlier elimination"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.04550","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:22208f815d2629ab2ccbf6a75b44933c735d0d76b99f91e817aa1e4a8eabcbf5","target":"record","created_at":"2026-07-05T06:21:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f2278996d180caaf4aa65f8c0c5384b33aab5647702c6ededbf181c09459da02","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-11-08T15:00:44Z","title_canon_sha256":"15ade04d8cbebbd88b006025598e624d166b8482f4edec86766c2788184895e7"},"schema_version":"1.0","source":{"id":"2111.04550","kind":"arxiv","version":2}},"canonical_sha256":"5395cedd3577df851c868af9cc7860b4e23ed045f7d5c82141cd490411fa37aa","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5395cedd3577df851c868af9cc7860b4e23ed045f7d5c82141cd490411fa37aa","first_computed_at":"2026-07-05T06:21:11.953586Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:21:11.953586Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vXqBJZGoh7L//112kPtPV7pWCIXMJxUu+teZWR7HNujqj7AY1kfij6XAVGlzKUBle28P3L98z/+8VAEBPt90Dg==","signature_status":"signed_v1","signed_at":"2026-07-05T06:21:11.953938Z","signed_message":"canonical_sha256_bytes"},"source_id":"2111.04550","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:22208f815d2629ab2ccbf6a75b44933c735d0d76b99f91e817aa1e4a8eabcbf5","sha256:146617afecf33a490a7409d708288be3cc34bb41ee46344948e7d6ccd0c79a61"],"state_sha256":"ed7fc31af995f76c05f1fb03497a87e8a981f57c55efceeecfb946bdd0c358a1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1RcDDXo7Zl+jMTwPZUSzFoUwtjmda9iRlz8jpvwdO927AGk0EMWa+RMZtxZK1ZtfStZZurkrZoHzqmBOUVsKAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-24T03:29:18.553313Z","bundle_sha256":"78a63e81b37dd2e2eb6638e7bc29b2278bcc09cd24a304751766e37d3e918478"}}