{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:KSAOLEBHYRL7YMHUXCKE7UQSMJ","short_pith_number":"pith:KSAOLEBH","canonical_record":{"source":{"id":"2306.03013","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-05T16:29:54Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"e8efa5850fac02d765d32d4e8118335376e242ee85f61423bd66b3455f61f36b","abstract_canon_sha256":"90d2565b49236ff26c468d9ad85cadfac0ca1be60a510cc57747942f1da26e6f"},"schema_version":"1.0"},"canonical_sha256":"5480e59027c457fc30f4b8944fd212627a9891510e20669826c07b063bf9b5bb","source":{"kind":"arxiv","id":"2306.03013","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.03013","created_at":"2026-07-05T08:07:56Z"},{"alias_kind":"arxiv_version","alias_value":"2306.03013v5","created_at":"2026-07-05T08:07:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.03013","created_at":"2026-07-05T08:07:56Z"},{"alias_kind":"pith_short_12","alias_value":"KSAOLEBHYRL7","created_at":"2026-07-05T08:07:56Z"},{"alias_kind":"pith_short_16","alias_value":"KSAOLEBHYRL7YMHU","created_at":"2026-07-05T08:07:56Z"},{"alias_kind":"pith_short_8","alias_value":"KSAOLEBH","created_at":"2026-07-05T08:07:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:KSAOLEBHYRL7YMHUXCKE7UQSMJ","target":"record","payload":{"canonical_record":{"source":{"id":"2306.03013","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-05T16:29:54Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"e8efa5850fac02d765d32d4e8118335376e242ee85f61423bd66b3455f61f36b","abstract_canon_sha256":"90d2565b49236ff26c468d9ad85cadfac0ca1be60a510cc57747942f1da26e6f"},"schema_version":"1.0"},"canonical_sha256":"5480e59027c457fc30f4b8944fd212627a9891510e20669826c07b063bf9b5bb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:07:56.607618Z","signature_b64":"gqf/66KoTCfKX8KVSS2Ac3P3Y/JBsN19U02gyzfte0rrj+TBOjtKbMOnJYcY2HG/Qps1MefF+GizwcFnwszOAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5480e59027c457fc30f4b8944fd212627a9891510e20669826c07b063bf9b5bb","last_reissued_at":"2026-07-05T08:07:56.607186Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:07:56.607186Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.03013","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:07:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ex4Rwg3HQNZqh/EyFdJvaaUVFewDAfIlPzkRNMegzKwlUz8tsafggO8Sm5oDO07botV/M1IYkBAGvizM26yyCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T09:41:56.129523Z"},"content_sha256":"8cb15829f6c16bad82cde6bb5d528fe846ea727582d26f32c1fa9f5d02121035","schema_version":"1.0","event_id":"sha256:8cb15829f6c16bad82cde6bb5d528fe846ea727582d26f32c1fa9f5d02121035"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:KSAOLEBHYRL7YMHUXCKE7UQSMJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Hiding in Plain Sight: Disguising Data Stealing Attacks in Federated Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Dimitar I. Dimitrov, Kostadin Garov, Martin Vechev, Nikola Jovanovi\\'c","submitted_at":"2023-06-05T16:29:54Z","abstract_excerpt":"Malicious server (MS) attacks have enabled the scaling of data stealing in federated learning to large batch sizes and secure aggregation, settings previously considered private. However, many concerns regarding the client-side detectability of MS attacks were raised, questioning their practicality. In this work, for the first time, we thoroughly study client-side detectability. We first demonstrate that all prior MS attacks are detectable by principled checks, and formulate a necessary set of requirements that a practical MS attack must satisfy. Next, we propose SEER, a novel attack framework"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.03013","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.03013/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:07:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0uYajb1jOuswpgtB7Dnp9gn+jzCCLVUBumflCAFIfhGgkMFNndPXZGhI20z64SGGRvpN5Y/jKvIkBw2v4h8EBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T09:41:56.130061Z"},"content_sha256":"9c6ae35b6fd3d75d38b1fc3c4fa600d8c07c6ff6c0c31221367cd140df03139a","schema_version":"1.0","event_id":"sha256:9c6ae35b6fd3d75d38b1fc3c4fa600d8c07c6ff6c0c31221367cd140df03139a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KSAOLEBHYRL7YMHUXCKE7UQSMJ/bundle.json","state_url":"https://pith.science/pith/KSAOLEBHYRL7YMHUXCKE7UQSMJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KSAOLEBHYRL7YMHUXCKE7UQSMJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T09:41:56Z","links":{"resolver":"https://pith.science/pith/KSAOLEBHYRL7YMHUXCKE7UQSMJ","bundle":"https://pith.science/pith/KSAOLEBHYRL7YMHUXCKE7UQSMJ/bundle.json","state":"https://pith.science/pith/KSAOLEBHYRL7YMHUXCKE7UQSMJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KSAOLEBHYRL7YMHUXCKE7UQSMJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:KSAOLEBHYRL7YMHUXCKE7UQSMJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"90d2565b49236ff26c468d9ad85cadfac0ca1be60a510cc57747942f1da26e6f","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-05T16:29:54Z","title_canon_sha256":"e8efa5850fac02d765d32d4e8118335376e242ee85f61423bd66b3455f61f36b"},"schema_version":"1.0","source":{"id":"2306.03013","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.03013","created_at":"2026-07-05T08:07:56Z"},{"alias_kind":"arxiv_version","alias_value":"2306.03013v5","created_at":"2026-07-05T08:07:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.03013","created_at":"2026-07-05T08:07:56Z"},{"alias_kind":"pith_short_12","alias_value":"KSAOLEBHYRL7","created_at":"2026-07-05T08:07:56Z"},{"alias_kind":"pith_short_16","alias_value":"KSAOLEBHYRL7YMHU","created_at":"2026-07-05T08:07:56Z"},{"alias_kind":"pith_short_8","alias_value":"KSAOLEBH","created_at":"2026-07-05T08:07:56Z"}],"graph_snapshots":[{"event_id":"sha256:9c6ae35b6fd3d75d38b1fc3c4fa600d8c07c6ff6c0c31221367cd140df03139a","target":"graph","created_at":"2026-07-05T08:07:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.03013/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Malicious server (MS) attacks have enabled the scaling of data stealing in federated learning to large batch sizes and secure aggregation, settings previously considered private. However, many concerns regarding the client-side detectability of MS attacks were raised, questioning their practicality. In this work, for the first time, we thoroughly study client-side detectability. We first demonstrate that all prior MS attacks are detectable by principled checks, and formulate a necessary set of requirements that a practical MS attack must satisfy. Next, we propose SEER, a novel attack framework","authors_text":"Dimitar I. Dimitrov, Kostadin Garov, Martin Vechev, Nikola Jovanovi\\'c","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-05T16:29:54Z","title":"Hiding in Plain Sight: Disguising Data Stealing Attacks in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.03013","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8cb15829f6c16bad82cde6bb5d528fe846ea727582d26f32c1fa9f5d02121035","target":"record","created_at":"2026-07-05T08:07:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"90d2565b49236ff26c468d9ad85cadfac0ca1be60a510cc57747942f1da26e6f","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-05T16:29:54Z","title_canon_sha256":"e8efa5850fac02d765d32d4e8118335376e242ee85f61423bd66b3455f61f36b"},"schema_version":"1.0","source":{"id":"2306.03013","kind":"arxiv","version":5}},"canonical_sha256":"5480e59027c457fc30f4b8944fd212627a9891510e20669826c07b063bf9b5bb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5480e59027c457fc30f4b8944fd212627a9891510e20669826c07b063bf9b5bb","first_computed_at":"2026-07-05T08:07:56.607186Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:07:56.607186Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gqf/66KoTCfKX8KVSS2Ac3P3Y/JBsN19U02gyzfte0rrj+TBOjtKbMOnJYcY2HG/Qps1MefF+GizwcFnwszOAg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:07:56.607618Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.03013","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8cb15829f6c16bad82cde6bb5d528fe846ea727582d26f32c1fa9f5d02121035","sha256:9c6ae35b6fd3d75d38b1fc3c4fa600d8c07c6ff6c0c31221367cd140df03139a"],"state_sha256":"7d735f617471cc54c91569ee282676e85811c578a4cf11e0d60a7a27ca5a2c9b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"snXxwv9b43oytwhL6oxNf+jQZwa2LIldA5cN5iEbGbx40zcAW0J7nO9PPqyNersXT2fqqqQI7a9FQEQiv9emAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T09:41:56.134478Z","bundle_sha256":"66d81ec3d1d7935f8f3563b9d5419fbad255459f6a2cbac1a8cc6922c74bc04e"}}