{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:6J5HTB4DPJVVLIFY44UM3ATTDQ","short_pith_number":"pith:6J5HTB4D","canonical_record":{"source":{"id":"2306.00127","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-05-31T19:05:26Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"ee3b8855f49a4f1ac43ea2950366130946f1c3e08c9a72d339ad0f82ed7ebc87","abstract_canon_sha256":"898abcc8c32c1031b7c0e25245af8d1bbfb268f20167a9c3d51403e628520ced"},"schema_version":"1.0"},"canonical_sha256":"f27a7987837a6b55a0b8e728cd82731c1cfe95ab226d42081809dda84e282d2b","source":{"kind":"arxiv","id":"2306.00127","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.00127","created_at":"2026-07-05T06:16:21Z"},{"alias_kind":"arxiv_version","alias_value":"2306.00127v1","created_at":"2026-07-05T06:16:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.00127","created_at":"2026-07-05T06:16:21Z"},{"alias_kind":"pith_short_12","alias_value":"6J5HTB4DPJVV","created_at":"2026-07-05T06:16:21Z"},{"alias_kind":"pith_short_16","alias_value":"6J5HTB4DPJVVLIFY","created_at":"2026-07-05T06:16:21Z"},{"alias_kind":"pith_short_8","alias_value":"6J5HTB4D","created_at":"2026-07-05T06:16:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:6J5HTB4DPJVVLIFY44UM3ATTDQ","target":"record","payload":{"canonical_record":{"source":{"id":"2306.00127","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-05-31T19:05:26Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"ee3b8855f49a4f1ac43ea2950366130946f1c3e08c9a72d339ad0f82ed7ebc87","abstract_canon_sha256":"898abcc8c32c1031b7c0e25245af8d1bbfb268f20167a9c3d51403e628520ced"},"schema_version":"1.0"},"canonical_sha256":"f27a7987837a6b55a0b8e728cd82731c1cfe95ab226d42081809dda84e282d2b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:16:21.836660Z","signature_b64":"qiUwWkoXYog3F74Aomi31YL4umUpLckj4SuNl54CO/rhZBQUvtjGq7Gj4VjMfK4TgivzJKMeXGycMyasvRMqBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f27a7987837a6b55a0b8e728cd82731c1cfe95ab226d42081809dda84e282d2b","last_reissued_at":"2026-07-05T06:16:21.836141Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:16:21.836141Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.00127","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:16:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M8OWdBNv0953ehBx0lrCydM1mJEKYFkOZYFYckXudijaTe+Zeo1Hnkgi1FSRtmHSCWQ6ucEL7U9+1+R/deNGCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T05:32:14.810338Z"},"content_sha256":"b00de6457f5935ec82225a7985b16dcb62122d9777fea6d18524b1b95bda2245","schema_version":"1.0","event_id":"sha256:b00de6457f5935ec82225a7985b16dcb62122d9777fea6d18524b1b95bda2245"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:6J5HTB4DPJVVLIFY44UM3ATTDQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Surrogate Model Extension (SME): A Fast and Accurate Weight Update Attack on Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Junyi Zhu, Matthew B. Blaschko, Ruicong Yao","submitted_at":"2023-05-31T19:05:26Z","abstract_excerpt":"In Federated Learning (FL) and many other distributed training frameworks, collaborators can hold their private data locally and only share the network weights trained with the local data after multiple iterations. Gradient inversion is a family of privacy attacks that recovers data from its generated gradients. Seemingly, FL can provide a degree of protection against gradient inversion attacks on weight updates, since the gradient of a single step is concealed by the accumulation of gradients over multiple local iterations. In this work, we propose a principled way to extend gradient inversio"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.00127","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.00127/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:16:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2JlWMqzDnqXDtdhPaBhbEh5Ns4xMCA5OTG86fVHd7VHA4X+Fsj4WbI7g6YLi38lTun0W023uLNo7c9wKemgsAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T05:32:14.810932Z"},"content_sha256":"d5c902ba71aa1fcbf0f20a817784ff3787a77ff46a6c007cfcfa3191b3f54645","schema_version":"1.0","event_id":"sha256:d5c902ba71aa1fcbf0f20a817784ff3787a77ff46a6c007cfcfa3191b3f54645"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6J5HTB4DPJVVLIFY44UM3ATTDQ/bundle.json","state_url":"https://pith.science/pith/6J5HTB4DPJVVLIFY44UM3ATTDQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6J5HTB4DPJVVLIFY44UM3ATTDQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T05:32:14Z","links":{"resolver":"https://pith.science/pith/6J5HTB4DPJVVLIFY44UM3ATTDQ","bundle":"https://pith.science/pith/6J5HTB4DPJVVLIFY44UM3ATTDQ/bundle.json","state":"https://pith.science/pith/6J5HTB4DPJVVLIFY44UM3ATTDQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6J5HTB4DPJVVLIFY44UM3ATTDQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:6J5HTB4DPJVVLIFY44UM3ATTDQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"898abcc8c32c1031b7c0e25245af8d1bbfb268f20167a9c3d51403e628520ced","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-05-31T19:05:26Z","title_canon_sha256":"ee3b8855f49a4f1ac43ea2950366130946f1c3e08c9a72d339ad0f82ed7ebc87"},"schema_version":"1.0","source":{"id":"2306.00127","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.00127","created_at":"2026-07-05T06:16:21Z"},{"alias_kind":"arxiv_version","alias_value":"2306.00127v1","created_at":"2026-07-05T06:16:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.00127","created_at":"2026-07-05T06:16:21Z"},{"alias_kind":"pith_short_12","alias_value":"6J5HTB4DPJVV","created_at":"2026-07-05T06:16:21Z"},{"alias_kind":"pith_short_16","alias_value":"6J5HTB4DPJVVLIFY","created_at":"2026-07-05T06:16:21Z"},{"alias_kind":"pith_short_8","alias_value":"6J5HTB4D","created_at":"2026-07-05T06:16:21Z"}],"graph_snapshots":[{"event_id":"sha256:d5c902ba71aa1fcbf0f20a817784ff3787a77ff46a6c007cfcfa3191b3f54645","target":"graph","created_at":"2026-07-05T06:16:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.00127/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In Federated Learning (FL) and many other distributed training frameworks, collaborators can hold their private data locally and only share the network weights trained with the local data after multiple iterations. Gradient inversion is a family of privacy attacks that recovers data from its generated gradients. Seemingly, FL can provide a degree of protection against gradient inversion attacks on weight updates, since the gradient of a single step is concealed by the accumulation of gradients over multiple local iterations. In this work, we propose a principled way to extend gradient inversio","authors_text":"Junyi Zhu, Matthew B. Blaschko, Ruicong Yao","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-05-31T19:05:26Z","title":"Surrogate Model Extension (SME): A Fast and Accurate Weight Update Attack on Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.00127","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b00de6457f5935ec82225a7985b16dcb62122d9777fea6d18524b1b95bda2245","target":"record","created_at":"2026-07-05T06:16:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"898abcc8c32c1031b7c0e25245af8d1bbfb268f20167a9c3d51403e628520ced","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-05-31T19:05:26Z","title_canon_sha256":"ee3b8855f49a4f1ac43ea2950366130946f1c3e08c9a72d339ad0f82ed7ebc87"},"schema_version":"1.0","source":{"id":"2306.00127","kind":"arxiv","version":1}},"canonical_sha256":"f27a7987837a6b55a0b8e728cd82731c1cfe95ab226d42081809dda84e282d2b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f27a7987837a6b55a0b8e728cd82731c1cfe95ab226d42081809dda84e282d2b","first_computed_at":"2026-07-05T06:16:21.836141Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:16:21.836141Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"qiUwWkoXYog3F74Aomi31YL4umUpLckj4SuNl54CO/rhZBQUvtjGq7Gj4VjMfK4TgivzJKMeXGycMyasvRMqBA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:16:21.836660Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.00127","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b00de6457f5935ec82225a7985b16dcb62122d9777fea6d18524b1b95bda2245","sha256:d5c902ba71aa1fcbf0f20a817784ff3787a77ff46a6c007cfcfa3191b3f54645"],"state_sha256":"a3121b4dfac0c727491116fcc56617ae509d809a08bc02b8611e8d76f54edccd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9WmYc1Z3FD8ZtFUGWY2dyWeBKHNAyQ/7K5+Ou/zTrdSyiriXMh+g+VQuMmNzXe6Op9ZNmeyv25KsTjUP/NMhAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T05:32:14.815782Z","bundle_sha256":"24531ce49dc8b26bb2e0244ec7498eada362aad15650f405609ecb51bdbd0f11"}}