{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:TZ7W6VUMOAFUZDZVT3ZLVINAQM","short_pith_number":"pith:TZ7W6VUM","canonical_record":{"source":{"id":"2509.05265","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-05T17:23:03Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"ad5166a19c404cf1f3df33eacf827db70b2b2ff50028eba24369ffb6ccf072a4","abstract_canon_sha256":"ae7b606b37faa215d6ea87d065ab269ecdf091f0ad3f2f9eedec6c02fc2d1b28"},"schema_version":"1.0"},"canonical_sha256":"9e7f6f568c700b4c8f359ef2baa1a08310a186e200d9f844125d888dbd3ccebe","source":{"kind":"arxiv","id":"2509.05265","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.05265","created_at":"2026-07-05T12:05:38Z"},{"alias_kind":"arxiv_version","alias_value":"2509.05265v1","created_at":"2026-07-05T12:05:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.05265","created_at":"2026-07-05T12:05:38Z"},{"alias_kind":"pith_short_12","alias_value":"TZ7W6VUMOAFU","created_at":"2026-07-05T12:05:38Z"},{"alias_kind":"pith_short_16","alias_value":"TZ7W6VUMOAFUZDZV","created_at":"2026-07-05T12:05:38Z"},{"alias_kind":"pith_short_8","alias_value":"TZ7W6VUM","created_at":"2026-07-05T12:05:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:TZ7W6VUMOAFUZDZVT3ZLVINAQM","target":"record","payload":{"canonical_record":{"source":{"id":"2509.05265","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-05T17:23:03Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"ad5166a19c404cf1f3df33eacf827db70b2b2ff50028eba24369ffb6ccf072a4","abstract_canon_sha256":"ae7b606b37faa215d6ea87d065ab269ecdf091f0ad3f2f9eedec6c02fc2d1b28"},"schema_version":"1.0"},"canonical_sha256":"9e7f6f568c700b4c8f359ef2baa1a08310a186e200d9f844125d888dbd3ccebe","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:05:38.517004Z","signature_b64":"1sJwNep1w09yvLcoffCmiRKwWWidCBehf10hMK4MACBxpr0GCOqHVwEdAALETMrZSLsQlFEJh14ReT5753j4DQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9e7f6f568c700b4c8f359ef2baa1a08310a186e200d9f844125d888dbd3ccebe","last_reissued_at":"2026-07-05T12:05:38.516539Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:05:38.516539Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.05265","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:05:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"D7wR34209RqmPHWaSVVWYuXl5FW0qH0u2CKeau5UJaQcW3TyXeikTcCgHivQzX7MH5nt16GPSqHrUgU3UFriCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T23:31:25.931919Z"},"content_sha256":"26d360d4cf27f625c112b1cc16ebc0caae2249e913a521ad12857dab002fb8cd","schema_version":"1.0","event_id":"sha256:26d360d4cf27f625c112b1cc16ebc0caae2249e913a521ad12857dab002fb8cd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:TZ7W6VUMOAFUZDZVT3ZLVINAQM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Haoyu Chen, Sheng Zhong, Tianling Zhang, Tingxuan Han, Wei Tong, Yunlong Mao, Zijian Wang","submitted_at":"2025-09-05T17:23:03Z","abstract_excerpt":"Federated learning (FL) combined with local differential privacy (LDP) enables privacy-preserving model training across decentralized data sources. However, the decentralized data-management paradigm leaves LDPFL vulnerable to participants with malicious intent. The robustness of LDPFL protocols, particularly against model poisoning attacks (MPA), where adversaries inject malicious updates to disrupt global model convergence, remains insufficiently studied. In this paper, we propose a novel and extensible model poisoning attack framework tailored for LDPFL settings. Our approach is driven by t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.05265","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.05265/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:05:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"j8D4NRTYUHK5sml0VCcwgsw8JFVhao3m9PaZfHibiNyNcjMaUMQ5rovI+ik54XLyZFNhcDozSkeZEpToWURyAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T23:31:25.932746Z"},"content_sha256":"1b1b47e398d6c8f1ee8e195700d0d480903082a5f4953c7ad7400e04597d71de","schema_version":"1.0","event_id":"sha256:1b1b47e398d6c8f1ee8e195700d0d480903082a5f4953c7ad7400e04597d71de"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TZ7W6VUMOAFUZDZVT3ZLVINAQM/bundle.json","state_url":"https://pith.science/pith/TZ7W6VUMOAFUZDZVT3ZLVINAQM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TZ7W6VUMOAFUZDZVT3ZLVINAQM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T23:31:25Z","links":{"resolver":"https://pith.science/pith/TZ7W6VUMOAFUZDZVT3ZLVINAQM","bundle":"https://pith.science/pith/TZ7W6VUMOAFUZDZVT3ZLVINAQM/bundle.json","state":"https://pith.science/pith/TZ7W6VUMOAFUZDZVT3ZLVINAQM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TZ7W6VUMOAFUZDZVT3ZLVINAQM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:TZ7W6VUMOAFUZDZVT3ZLVINAQM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ae7b606b37faa215d6ea87d065ab269ecdf091f0ad3f2f9eedec6c02fc2d1b28","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-05T17:23:03Z","title_canon_sha256":"ad5166a19c404cf1f3df33eacf827db70b2b2ff50028eba24369ffb6ccf072a4"},"schema_version":"1.0","source":{"id":"2509.05265","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.05265","created_at":"2026-07-05T12:05:38Z"},{"alias_kind":"arxiv_version","alias_value":"2509.05265v1","created_at":"2026-07-05T12:05:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.05265","created_at":"2026-07-05T12:05:38Z"},{"alias_kind":"pith_short_12","alias_value":"TZ7W6VUMOAFU","created_at":"2026-07-05T12:05:38Z"},{"alias_kind":"pith_short_16","alias_value":"TZ7W6VUMOAFUZDZV","created_at":"2026-07-05T12:05:38Z"},{"alias_kind":"pith_short_8","alias_value":"TZ7W6VUM","created_at":"2026-07-05T12:05:38Z"}],"graph_snapshots":[{"event_id":"sha256:1b1b47e398d6c8f1ee8e195700d0d480903082a5f4953c7ad7400e04597d71de","target":"graph","created_at":"2026-07-05T12:05:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.05265/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning (FL) combined with local differential privacy (LDP) enables privacy-preserving model training across decentralized data sources. However, the decentralized data-management paradigm leaves LDPFL vulnerable to participants with malicious intent. The robustness of LDPFL protocols, particularly against model poisoning attacks (MPA), where adversaries inject malicious updates to disrupt global model convergence, remains insufficiently studied. In this paper, we propose a novel and extensible model poisoning attack framework tailored for LDPFL settings. Our approach is driven by t","authors_text":"Haoyu Chen, Sheng Zhong, Tianling Zhang, Tingxuan Han, Wei Tong, Yunlong Mao, Zijian Wang","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.05265","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:26d360d4cf27f625c112b1cc16ebc0caae2249e913a521ad12857dab002fb8cd","target":"record","created_at":"2026-07-05T12:05:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ae7b606b37faa215d6ea87d065ab269ecdf091f0ad3f2f9eedec6c02fc2d1b28","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-05T17:23:03Z","title_canon_sha256":"ad5166a19c404cf1f3df33eacf827db70b2b2ff50028eba24369ffb6ccf072a4"},"schema_version":"1.0","source":{"id":"2509.05265","kind":"arxiv","version":1}},"canonical_sha256":"9e7f6f568c700b4c8f359ef2baa1a08310a186e200d9f844125d888dbd3ccebe","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9e7f6f568c700b4c8f359ef2baa1a08310a186e200d9f844125d888dbd3ccebe","first_computed_at":"2026-07-05T12:05:38.516539Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:05:38.516539Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1sJwNep1w09yvLcoffCmiRKwWWidCBehf10hMK4MACBxpr0GCOqHVwEdAALETMrZSLsQlFEJh14ReT5753j4DQ==","signature_status":"signed_v1","signed_at":"2026-07-05T12:05:38.517004Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.05265","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:26d360d4cf27f625c112b1cc16ebc0caae2249e913a521ad12857dab002fb8cd","sha256:1b1b47e398d6c8f1ee8e195700d0d480903082a5f4953c7ad7400e04597d71de"],"state_sha256":"f2b49740b165489d410eb9e2a4455209887f08fc165dfaabc7083f1ab6310165"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pDh2gT3vL5arYvsgs3bnOMf3Bp26de1O5RDmsTbhcx/UXEW7ZFQ0oKAi8vBtwPZBPuU0bRwLYuzwoepjVHUVAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T23:31:25.938046Z","bundle_sha256":"537ab28d0c52e517a650ae1b49c8fddebe00dcb24cc9baecc8a9f1b60b1c113a"}}