{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:OPXNGU3BVADL64PSX5SR63RHMC","short_pith_number":"pith:OPXNGU3B","canonical_record":{"source":{"id":"2210.09305","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-10-17T17:59:38Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"87dd27798f34c178a958a053f5a06867b09b97d9d5aecf5f1ad09310c6681140","abstract_canon_sha256":"ed5e680344e3e675ef85632b3f9829054825b75e07f89a09a8d4f34f7aa42675"},"schema_version":"1.0"},"canonical_sha256":"73eed35361a806bf71f2bf651f6e2760beb34182c12f016e04939e3df49ea0de","source":{"kind":"arxiv","id":"2210.09305","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.09305","created_at":"2026-07-05T05:07:21Z"},{"alias_kind":"arxiv_version","alias_value":"2210.09305v1","created_at":"2026-07-05T05:07:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.09305","created_at":"2026-07-05T05:07:21Z"},{"alias_kind":"pith_short_12","alias_value":"OPXNGU3BVADL","created_at":"2026-07-05T05:07:21Z"},{"alias_kind":"pith_short_16","alias_value":"OPXNGU3BVADL64PS","created_at":"2026-07-05T05:07:21Z"},{"alias_kind":"pith_short_8","alias_value":"OPXNGU3B","created_at":"2026-07-05T05:07:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:OPXNGU3BVADL64PSX5SR63RHMC","target":"record","payload":{"canonical_record":{"source":{"id":"2210.09305","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-10-17T17:59:38Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"87dd27798f34c178a958a053f5a06867b09b97d9d5aecf5f1ad09310c6681140","abstract_canon_sha256":"ed5e680344e3e675ef85632b3f9829054825b75e07f89a09a8d4f34f7aa42675"},"schema_version":"1.0"},"canonical_sha256":"73eed35361a806bf71f2bf651f6e2760beb34182c12f016e04939e3df49ea0de","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:07:21.214201Z","signature_b64":"F80lPbxS/LN2FfMtNCKP4+ZyzejCr7BDCTdFBiqzm0NsfMXhWwyN58KQw57AXOAbFy5C9kKv3H8HJySJ79RhCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"73eed35361a806bf71f2bf651f6e2760beb34182c12f016e04939e3df49ea0de","last_reissued_at":"2026-07-05T05:07:21.213749Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:07:21.213749Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2210.09305","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:07:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"f3lFFxjDN8046ZmqPBq5z6QMkojwjRFGEJiAueegIDLOfruSwkxj8XNCHb9iw6irHGLBhImP02qZ3BeeFuL3Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T18:28:11.600905Z"},"content_sha256":"bccfea4e4cba3a42c091962889d344e5435f45f318bf316a9e4aac55558eb785","schema_version":"1.0","event_id":"sha256:bccfea4e4cba3a42c091962889d344e5435f45f318bf316a9e4aac55558eb785"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:OPXNGU3BVADL64PSX5SR63RHMC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Thinking Two Moves Ahead: Anticipating Other Users Improves Backdoor Attacks in Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Hossein Souri, Jonas Geiping, Liam Fowl, Micah Goldblum, Rama Chellappa, Tom Goldstein, Yuxin Wen","submitted_at":"2022-10-17T17:59:38Z","abstract_excerpt":"Federated learning is particularly susceptible to model poisoning and backdoor attacks because individual users have direct control over the training data and model updates. At the same time, the attack power of an individual user is limited because their updates are quickly drowned out by those of many other users. Existing attacks do not account for future behaviors of other users, and thus require many sequential updates and their effects are quickly erased. We propose an attack that anticipates and accounts for the entire federated learning pipeline, including behaviors of other clients, a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.09305","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2210.09305/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:07:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ChOcbg/Z72hXsCAGxtgINhTmzzyrJqS2Nf5BBjA0sFGB9/dMjmnbYImCSIJ1vSZn5cSDJMD9ukW4Quy2/GGzDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T18:28:11.601605Z"},"content_sha256":"1947c566520b182293b5d16dead652c471d84bbd2457bbad714403fc730519cf","schema_version":"1.0","event_id":"sha256:1947c566520b182293b5d16dead652c471d84bbd2457bbad714403fc730519cf"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OPXNGU3BVADL64PSX5SR63RHMC/bundle.json","state_url":"https://pith.science/pith/OPXNGU3BVADL64PSX5SR63RHMC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OPXNGU3BVADL64PSX5SR63RHMC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T18:28:11Z","links":{"resolver":"https://pith.science/pith/OPXNGU3BVADL64PSX5SR63RHMC","bundle":"https://pith.science/pith/OPXNGU3BVADL64PSX5SR63RHMC/bundle.json","state":"https://pith.science/pith/OPXNGU3BVADL64PSX5SR63RHMC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OPXNGU3BVADL64PSX5SR63RHMC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:OPXNGU3BVADL64PSX5SR63RHMC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ed5e680344e3e675ef85632b3f9829054825b75e07f89a09a8d4f34f7aa42675","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-10-17T17:59:38Z","title_canon_sha256":"87dd27798f34c178a958a053f5a06867b09b97d9d5aecf5f1ad09310c6681140"},"schema_version":"1.0","source":{"id":"2210.09305","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.09305","created_at":"2026-07-05T05:07:21Z"},{"alias_kind":"arxiv_version","alias_value":"2210.09305v1","created_at":"2026-07-05T05:07:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.09305","created_at":"2026-07-05T05:07:21Z"},{"alias_kind":"pith_short_12","alias_value":"OPXNGU3BVADL","created_at":"2026-07-05T05:07:21Z"},{"alias_kind":"pith_short_16","alias_value":"OPXNGU3BVADL64PS","created_at":"2026-07-05T05:07:21Z"},{"alias_kind":"pith_short_8","alias_value":"OPXNGU3B","created_at":"2026-07-05T05:07:21Z"}],"graph_snapshots":[{"event_id":"sha256:1947c566520b182293b5d16dead652c471d84bbd2457bbad714403fc730519cf","target":"graph","created_at":"2026-07-05T05:07:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.09305/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning is particularly susceptible to model poisoning and backdoor attacks because individual users have direct control over the training data and model updates. At the same time, the attack power of an individual user is limited because their updates are quickly drowned out by those of many other users. Existing attacks do not account for future behaviors of other users, and thus require many sequential updates and their effects are quickly erased. We propose an attack that anticipates and accounts for the entire federated learning pipeline, including behaviors of other clients, a","authors_text":"Hossein Souri, Jonas Geiping, Liam Fowl, Micah Goldblum, Rama Chellappa, Tom Goldstein, Yuxin Wen","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-10-17T17:59:38Z","title":"Thinking Two Moves Ahead: Anticipating Other Users Improves Backdoor Attacks in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.09305","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bccfea4e4cba3a42c091962889d344e5435f45f318bf316a9e4aac55558eb785","target":"record","created_at":"2026-07-05T05:07:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ed5e680344e3e675ef85632b3f9829054825b75e07f89a09a8d4f34f7aa42675","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-10-17T17:59:38Z","title_canon_sha256":"87dd27798f34c178a958a053f5a06867b09b97d9d5aecf5f1ad09310c6681140"},"schema_version":"1.0","source":{"id":"2210.09305","kind":"arxiv","version":1}},"canonical_sha256":"73eed35361a806bf71f2bf651f6e2760beb34182c12f016e04939e3df49ea0de","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"73eed35361a806bf71f2bf651f6e2760beb34182c12f016e04939e3df49ea0de","first_computed_at":"2026-07-05T05:07:21.213749Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:07:21.213749Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"F80lPbxS/LN2FfMtNCKP4+ZyzejCr7BDCTdFBiqzm0NsfMXhWwyN58KQw57AXOAbFy5C9kKv3H8HJySJ79RhCw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:07:21.214201Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.09305","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bccfea4e4cba3a42c091962889d344e5435f45f318bf316a9e4aac55558eb785","sha256:1947c566520b182293b5d16dead652c471d84bbd2457bbad714403fc730519cf"],"state_sha256":"ff91f28141f6147804d87b52045bdcfc9b1c8fc22f7468da93d0b5babcf0265c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qAvsTmKSY1UJcTrE57KVgurHmdQxJV5TVNwDA1DB8y3SNHLdWkmmQQkbjnMJl/CF2X3wEAAwnGoxls5t2N8wAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T18:28:11.610312Z","bundle_sha256":"e8de87b0753eb98e244fe37b759c89c471bacbd4d5021fcb785e83a1623ae4a2"}}