{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:QYKF5P2Q3XD5Z33UGWCZ6R6NB6","short_pith_number":"pith:QYKF5P2Q","canonical_record":{"source":{"id":"2403.19510","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-28T15:43:38Z","cross_cats_sorted":[],"title_canon_sha256":"f769d796205c4928ee2e55d48d24400fadb093cd8a81365bd4a50f2f49190332","abstract_canon_sha256":"03580858a26b8c1b57afb6faf16270119e938013803d781f8077a84decffaf52"},"schema_version":"1.0"},"canonical_sha256":"86145ebf50ddc7dcef7435859f47cd0f9d22f6e7d9c32ce5b1d72e210126f495","source":{"kind":"arxiv","id":"2403.19510","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.19510","created_at":"2026-07-05T10:05:09Z"},{"alias_kind":"arxiv_version","alias_value":"2403.19510v5","created_at":"2026-07-05T10:05:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.19510","created_at":"2026-07-05T10:05:09Z"},{"alias_kind":"pith_short_12","alias_value":"QYKF5P2Q3XD5","created_at":"2026-07-05T10:05:09Z"},{"alias_kind":"pith_short_16","alias_value":"QYKF5P2Q3XD5Z33U","created_at":"2026-07-05T10:05:09Z"},{"alias_kind":"pith_short_8","alias_value":"QYKF5P2Q","created_at":"2026-07-05T10:05:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:QYKF5P2Q3XD5Z33UGWCZ6R6NB6","target":"record","payload":{"canonical_record":{"source":{"id":"2403.19510","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-28T15:43:38Z","cross_cats_sorted":[],"title_canon_sha256":"f769d796205c4928ee2e55d48d24400fadb093cd8a81365bd4a50f2f49190332","abstract_canon_sha256":"03580858a26b8c1b57afb6faf16270119e938013803d781f8077a84decffaf52"},"schema_version":"1.0"},"canonical_sha256":"86145ebf50ddc7dcef7435859f47cd0f9d22f6e7d9c32ce5b1d72e210126f495","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:05:09.805097Z","signature_b64":"4cHHOdhjyakruyqJNWxpu6WfhYuRRYTJ1Utg6pwdPmBqGpO+C/H+CTGb/S5uDQ9phjYPO4R/x9SbXlHNccKxAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"86145ebf50ddc7dcef7435859f47cd0f9d22f6e7d9c32ce5b1d72e210126f495","last_reissued_at":"2026-07-05T10:05:09.804681Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:05:09.804681Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.19510","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:05:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"y8KQmQFF/F1iQ1n0Gedjj4cHfm9ehbiSQvZZGapKp2yTgxFPtn/i3vB7DKM+jeFMqbvvre8aqUp3fj8TEjBhCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T02:59:25.044941Z"},"content_sha256":"6d9441b8291a47aeef5bde515adfb4ea30ad46c2187eaec2532e86f042e904ae","schema_version":"1.0","event_id":"sha256:6d9441b8291a47aeef5bde515adfb4ea30ad46c2187eaec2532e86f042e904ae"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:QYKF5P2Q3XD5Z33UGWCZ6R6NB6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Robustness of LDP Protocols for Numerical Attributes under Data Poisoning Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ninghui Li, Wenhai Sun, Xiaoguang Li, Zitao Li","submitted_at":"2024-03-28T15:43:38Z","abstract_excerpt":"Recent studies reveal that local differential privacy (LDP) protocols are vulnerable to data poisoning attacks where an attacker can manipulate the final estimate on the server by leveraging the characteristics of LDP and sending carefully crafted data from a small fraction of controlled local clients. This vulnerability raises concerns regarding the robustness and reliability of LDP in hostile environments.\n  In this paper, we conduct a systematic investigation of the robustness of state-of-the-art LDP protocols for numerical attributes, i.e., categorical frequency oracles (CFOs) with binning"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.19510","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.19510/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:05:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"81IQ/ac819EX3Gk+r6YneWbQYczpFL+nhnGdmNFGYVmkovKoqScR/X938EEwkASSlZa8Dj6UOmE4Ze49Uot5DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T02:59:25.045467Z"},"content_sha256":"0c8815f736ba58adb4f917af7ad67c0fe8fb4af2a720996900605068895fef79","schema_version":"1.0","event_id":"sha256:0c8815f736ba58adb4f917af7ad67c0fe8fb4af2a720996900605068895fef79"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QYKF5P2Q3XD5Z33UGWCZ6R6NB6/bundle.json","state_url":"https://pith.science/pith/QYKF5P2Q3XD5Z33UGWCZ6R6NB6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QYKF5P2Q3XD5Z33UGWCZ6R6NB6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T02:59:25Z","links":{"resolver":"https://pith.science/pith/QYKF5P2Q3XD5Z33UGWCZ6R6NB6","bundle":"https://pith.science/pith/QYKF5P2Q3XD5Z33UGWCZ6R6NB6/bundle.json","state":"https://pith.science/pith/QYKF5P2Q3XD5Z33UGWCZ6R6NB6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QYKF5P2Q3XD5Z33UGWCZ6R6NB6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:QYKF5P2Q3XD5Z33UGWCZ6R6NB6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"03580858a26b8c1b57afb6faf16270119e938013803d781f8077a84decffaf52","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-28T15:43:38Z","title_canon_sha256":"f769d796205c4928ee2e55d48d24400fadb093cd8a81365bd4a50f2f49190332"},"schema_version":"1.0","source":{"id":"2403.19510","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.19510","created_at":"2026-07-05T10:05:09Z"},{"alias_kind":"arxiv_version","alias_value":"2403.19510v5","created_at":"2026-07-05T10:05:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.19510","created_at":"2026-07-05T10:05:09Z"},{"alias_kind":"pith_short_12","alias_value":"QYKF5P2Q3XD5","created_at":"2026-07-05T10:05:09Z"},{"alias_kind":"pith_short_16","alias_value":"QYKF5P2Q3XD5Z33U","created_at":"2026-07-05T10:05:09Z"},{"alias_kind":"pith_short_8","alias_value":"QYKF5P2Q","created_at":"2026-07-05T10:05:09Z"}],"graph_snapshots":[{"event_id":"sha256:0c8815f736ba58adb4f917af7ad67c0fe8fb4af2a720996900605068895fef79","target":"graph","created_at":"2026-07-05T10:05:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.19510/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent studies reveal that local differential privacy (LDP) protocols are vulnerable to data poisoning attacks where an attacker can manipulate the final estimate on the server by leveraging the characteristics of LDP and sending carefully crafted data from a small fraction of controlled local clients. This vulnerability raises concerns regarding the robustness and reliability of LDP in hostile environments.\n  In this paper, we conduct a systematic investigation of the robustness of state-of-the-art LDP protocols for numerical attributes, i.e., categorical frequency oracles (CFOs) with binning","authors_text":"Ninghui Li, Wenhai Sun, Xiaoguang Li, Zitao Li","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-28T15:43:38Z","title":"On the Robustness of LDP Protocols for Numerical Attributes under Data Poisoning Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.19510","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6d9441b8291a47aeef5bde515adfb4ea30ad46c2187eaec2532e86f042e904ae","target":"record","created_at":"2026-07-05T10:05:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"03580858a26b8c1b57afb6faf16270119e938013803d781f8077a84decffaf52","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-28T15:43:38Z","title_canon_sha256":"f769d796205c4928ee2e55d48d24400fadb093cd8a81365bd4a50f2f49190332"},"schema_version":"1.0","source":{"id":"2403.19510","kind":"arxiv","version":5}},"canonical_sha256":"86145ebf50ddc7dcef7435859f47cd0f9d22f6e7d9c32ce5b1d72e210126f495","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"86145ebf50ddc7dcef7435859f47cd0f9d22f6e7d9c32ce5b1d72e210126f495","first_computed_at":"2026-07-05T10:05:09.804681Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:05:09.804681Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4cHHOdhjyakruyqJNWxpu6WfhYuRRYTJ1Utg6pwdPmBqGpO+C/H+CTGb/S5uDQ9phjYPO4R/x9SbXlHNccKxAg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:05:09.805097Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.19510","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6d9441b8291a47aeef5bde515adfb4ea30ad46c2187eaec2532e86f042e904ae","sha256:0c8815f736ba58adb4f917af7ad67c0fe8fb4af2a720996900605068895fef79"],"state_sha256":"695203bbcc6df56e16088aeecc25276f4d19a4395cb7aab0b78e57c1aa12a7b6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"S1QSXcw8LJj0fm2kobAd1YGtUWAE9UMh+bPqNNygS7h17E3hVozEWag/YrgG0abmu83LnHw4k/d7PeKz0IenDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T02:59:25.049530Z","bundle_sha256":"84b05c094f1023cef87c20d4ad9f93cc23e3df1e5d927cdd6172887d281e15b7"}}