{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:UM3GFLDZHHTV6ONWGZK7ZX4EXH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0f9abc10b22e246b2cb57f6356502f87f1a5b1d05e73512cf45db56c090550f6","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-02T23:07:31Z","title_canon_sha256":"5f7b99ab3556d5bceda3847421d67cdfdff0b0a641b46e54f8c2def3bbc05363"},"schema_version":"1.0","source":{"id":"2103.02079","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.02079","created_at":"2026-07-05T02:30:15Z"},{"alias_kind":"arxiv_version","alias_value":"2103.02079v2","created_at":"2026-07-05T02:30:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.02079","created_at":"2026-07-05T02:30:15Z"},{"alias_kind":"pith_short_12","alias_value":"UM3GFLDZHHTV","created_at":"2026-07-05T02:30:15Z"},{"alias_kind":"pith_short_16","alias_value":"UM3GFLDZHHTV6ONW","created_at":"2026-07-05T02:30:15Z"},{"alias_kind":"pith_short_8","alias_value":"UM3GFLDZ","created_at":"2026-07-05T02:30:15Z"}],"graph_snapshots":[{"event_id":"sha256:08b99f270045998868890d0a4471d5f8d3e742b7f2619c4ded87ce1ba1be5df3","target":"graph","created_at":"2026-07-05T02:30:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2103.02079/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Data poisoning and backdoor attacks manipulate training data to induce security breaches in a victim model. These attacks can be provably deflected using differentially private (DP) training methods, although this comes with a sharp decrease in model performance. The InstaHide method has recently been proposed as an alternative to DP training that leverages supposed privacy properties of the mixup augmentation, although without rigorous guarantees. In this work, we show that strong data augmentations, such as mixup and random additive noise, nullify poison attacks while enduring only a small a","authors_text":"Amin Ghiasi, Arjun Gupta, Eitan Borgnia, Furong Huang, Jonas Geiping, Liam Fowl, Micah Goldblum, Tom Goldstein, Valeriia Cherepanova","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-02T23:07:31Z","title":"DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.02079","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e062d67ef20d6dad806e05084e25c9424ae959a4bca64b425d928bcee4fe45a7","target":"record","created_at":"2026-07-05T02:30:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0f9abc10b22e246b2cb57f6356502f87f1a5b1d05e73512cf45db56c090550f6","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-02T23:07:31Z","title_canon_sha256":"5f7b99ab3556d5bceda3847421d67cdfdff0b0a641b46e54f8c2def3bbc05363"},"schema_version":"1.0","source":{"id":"2103.02079","kind":"arxiv","version":2}},"canonical_sha256":"a33662ac7939e75f39b63655fcdf84b9cf79ad896dd6aca956ebbc00c5155163","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a33662ac7939e75f39b63655fcdf84b9cf79ad896dd6aca956ebbc00c5155163","first_computed_at":"2026-07-05T02:30:15.194173Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:30:15.194173Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KAJZh24qp4aE7i+qMbZ7LL2a4LQ8VsAlYIInSdpl8tNwlZ938OpvBvd3df90J/QYCQmyZtLC93tumr1XuGGiAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T02:30:15.194684Z","signed_message":"canonical_sha256_bytes"},"source_id":"2103.02079","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e062d67ef20d6dad806e05084e25c9424ae959a4bca64b425d928bcee4fe45a7","sha256:08b99f270045998868890d0a4471d5f8d3e742b7f2619c4ded87ce1ba1be5df3"],"state_sha256":"2fc64f2b79caa2b1515d5defc845726678cf6860de9b8d21493c6efd1fabe579"}