{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:QGVNVH67W4ACSLOBMEJSXLTFHS","short_pith_number":"pith:QGVNVH67","canonical_record":{"source":{"id":"2304.00160","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-03-31T22:49:01Z","cross_cats_sorted":["cs.DC"],"title_canon_sha256":"7953b6c89b9ef493cfb412d09934dcd61fe982391804dd4c199929ce6f71cb25","abstract_canon_sha256":"155c6202eee8655fa5311c81a64e910ed0416a915c7c2887a1c5f13311d01982"},"schema_version":"1.0"},"canonical_sha256":"81aada9fdfb700292dc161132bae653c9f3bf1fff3358d6801ce0a54a939b126","source":{"kind":"arxiv","id":"2304.00160","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.00160","created_at":"2026-07-05T05:59:07Z"},{"alias_kind":"arxiv_version","alias_value":"2304.00160v2","created_at":"2026-07-05T05:59:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.00160","created_at":"2026-07-05T05:59:07Z"},{"alias_kind":"pith_short_12","alias_value":"QGVNVH67W4AC","created_at":"2026-07-05T05:59:07Z"},{"alias_kind":"pith_short_16","alias_value":"QGVNVH67W4ACSLOB","created_at":"2026-07-05T05:59:07Z"},{"alias_kind":"pith_short_8","alias_value":"QGVNVH67","created_at":"2026-07-05T05:59:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:QGVNVH67W4ACSLOBMEJSXLTFHS","target":"record","payload":{"canonical_record":{"source":{"id":"2304.00160","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-03-31T22:49:01Z","cross_cats_sorted":["cs.DC"],"title_canon_sha256":"7953b6c89b9ef493cfb412d09934dcd61fe982391804dd4c199929ce6f71cb25","abstract_canon_sha256":"155c6202eee8655fa5311c81a64e910ed0416a915c7c2887a1c5f13311d01982"},"schema_version":"1.0"},"canonical_sha256":"81aada9fdfb700292dc161132bae653c9f3bf1fff3358d6801ce0a54a939b126","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:59:07.068127Z","signature_b64":"wnk7qKPcr8zD5kxTRuLLGLXXEfLkuDewBIdvLOi0GKyQVixrwEt7JewGCItFPdurPFw6+e6q0Y/unpmilbXGBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"81aada9fdfb700292dc161132bae653c9f3bf1fff3358d6801ce0a54a939b126","last_reissued_at":"2026-07-05T05:59:07.067749Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:59:07.067749Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2304.00160","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:59:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CuZXFpcXs4O0MEDs5GwS/rqwE8iUCvmTxzc2k1UBO8SlIOyrYk1MSmVQzcSdLWpXPBn7KFsy9/Ze/oolD0t9Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T03:04:26.813932Z"},"content_sha256":"f4a39dd350c344711dd458a535660fc8da09a4b0f823ba17f2ed39a3653ec6cf","schema_version":"1.0","event_id":"sha256:f4a39dd350c344711dd458a535660fc8da09a4b0f823ba17f2ed39a3653ec6cf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:QGVNVH67W4ACSLOBMEJSXLTFHS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Secure Federated Learning against Model Poisoning Attacks via Client Filtering","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.DC"],"primary_cat":"cs.CR","authors_text":"Duygu Nur Yaldiz, Salman Avestimehr, Tuo Zhang","submitted_at":"2023-03-31T22:49:01Z","abstract_excerpt":"Given the distributed nature, detecting and defending against the backdoor attack under federated learning (FL) systems is challenging. In this paper, we observe that the cosine similarity of the last layer's weight between the global model and each local update could be used effectively as an indicator of malicious model updates. Therefore, we propose CosDefense, a cosine-similarity-based attacker detection algorithm. Specifically, under CosDefense, the server calculates the cosine similarity score of the last layer's weight between the global model and each client update, labels malicious cl"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.00160","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2304.00160/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:59:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nbV5M7VFpqPXVWSy7Pe/UJpfiy4Ec1Tr87Q3TnEzokdMTMzRixG1n+Dy0Wl4z+sJ+kQWo3I/PdZ63HllKmwZDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T03:04:26.814499Z"},"content_sha256":"b1902b95cca519d9bab096c8293ce5db600770f86002e5cfd3b29a167a58c7fc","schema_version":"1.0","event_id":"sha256:b1902b95cca519d9bab096c8293ce5db600770f86002e5cfd3b29a167a58c7fc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QGVNVH67W4ACSLOBMEJSXLTFHS/bundle.json","state_url":"https://pith.science/pith/QGVNVH67W4ACSLOBMEJSXLTFHS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QGVNVH67W4ACSLOBMEJSXLTFHS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T03:04:26Z","links":{"resolver":"https://pith.science/pith/QGVNVH67W4ACSLOBMEJSXLTFHS","bundle":"https://pith.science/pith/QGVNVH67W4ACSLOBMEJSXLTFHS/bundle.json","state":"https://pith.science/pith/QGVNVH67W4ACSLOBMEJSXLTFHS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QGVNVH67W4ACSLOBMEJSXLTFHS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:QGVNVH67W4ACSLOBMEJSXLTFHS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"155c6202eee8655fa5311c81a64e910ed0416a915c7c2887a1c5f13311d01982","cross_cats_sorted":["cs.DC"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-03-31T22:49:01Z","title_canon_sha256":"7953b6c89b9ef493cfb412d09934dcd61fe982391804dd4c199929ce6f71cb25"},"schema_version":"1.0","source":{"id":"2304.00160","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.00160","created_at":"2026-07-05T05:59:07Z"},{"alias_kind":"arxiv_version","alias_value":"2304.00160v2","created_at":"2026-07-05T05:59:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.00160","created_at":"2026-07-05T05:59:07Z"},{"alias_kind":"pith_short_12","alias_value":"QGVNVH67W4AC","created_at":"2026-07-05T05:59:07Z"},{"alias_kind":"pith_short_16","alias_value":"QGVNVH67W4ACSLOB","created_at":"2026-07-05T05:59:07Z"},{"alias_kind":"pith_short_8","alias_value":"QGVNVH67","created_at":"2026-07-05T05:59:07Z"}],"graph_snapshots":[{"event_id":"sha256:b1902b95cca519d9bab096c8293ce5db600770f86002e5cfd3b29a167a58c7fc","target":"graph","created_at":"2026-07-05T05:59:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2304.00160/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Given the distributed nature, detecting and defending against the backdoor attack under federated learning (FL) systems is challenging. In this paper, we observe that the cosine similarity of the last layer's weight between the global model and each local update could be used effectively as an indicator of malicious model updates. Therefore, we propose CosDefense, a cosine-similarity-based attacker detection algorithm. Specifically, under CosDefense, the server calculates the cosine similarity score of the last layer's weight between the global model and each client update, labels malicious cl","authors_text":"Duygu Nur Yaldiz, Salman Avestimehr, Tuo Zhang","cross_cats":["cs.DC"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-03-31T22:49:01Z","title":"Secure Federated Learning against Model Poisoning Attacks via Client Filtering"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.00160","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f4a39dd350c344711dd458a535660fc8da09a4b0f823ba17f2ed39a3653ec6cf","target":"record","created_at":"2026-07-05T05:59:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"155c6202eee8655fa5311c81a64e910ed0416a915c7c2887a1c5f13311d01982","cross_cats_sorted":["cs.DC"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-03-31T22:49:01Z","title_canon_sha256":"7953b6c89b9ef493cfb412d09934dcd61fe982391804dd4c199929ce6f71cb25"},"schema_version":"1.0","source":{"id":"2304.00160","kind":"arxiv","version":2}},"canonical_sha256":"81aada9fdfb700292dc161132bae653c9f3bf1fff3358d6801ce0a54a939b126","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"81aada9fdfb700292dc161132bae653c9f3bf1fff3358d6801ce0a54a939b126","first_computed_at":"2026-07-05T05:59:07.067749Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:59:07.067749Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"wnk7qKPcr8zD5kxTRuLLGLXXEfLkuDewBIdvLOi0GKyQVixrwEt7JewGCItFPdurPFw6+e6q0Y/unpmilbXGBw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:59:07.068127Z","signed_message":"canonical_sha256_bytes"},"source_id":"2304.00160","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f4a39dd350c344711dd458a535660fc8da09a4b0f823ba17f2ed39a3653ec6cf","sha256:b1902b95cca519d9bab096c8293ce5db600770f86002e5cfd3b29a167a58c7fc"],"state_sha256":"b3b1a0e89398908c79921374c59af0675b05baff98638961ce8d14cfc719c375"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6bpM2UqwhRaBgohppQtIUml1u6f9gJPSke9QZthLidG+rOApKrqX/RZnWQQRfEnExMymrPls1Yvwnm47OdzvCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T03:04:26.820028Z","bundle_sha256":"50aa99dc9ebea3b650e632df40c9cbad4fd0520db2776df017ae826fec330488"}}