{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:FU2DXHRUL2NJLHKKP2PLKYJKXV","short_pith_number":"pith:FU2DXHRU","canonical_record":{"source":{"id":"2402.09478","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-13T05:06:34Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"65486a8dd448811bfe51e44746fee7fc5b74ddaa0f918ad0eba62edf2abe3790","abstract_canon_sha256":"a027a3efe5efd2fa87f1bcdb1632165839789500ad389ee5ab34a981729b914d"},"schema_version":"1.0"},"canonical_sha256":"2d343b9e345e9a959d4a7e9eb5612abd77aa6681b82a1d68d849d805d76f2695","source":{"kind":"arxiv","id":"2402.09478","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.09478","created_at":"2026-07-05T10:37:24Z"},{"alias_kind":"arxiv_version","alias_value":"2402.09478v3","created_at":"2026-07-05T10:37:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.09478","created_at":"2026-07-05T10:37:24Z"},{"alias_kind":"pith_short_12","alias_value":"FU2DXHRUL2NJ","created_at":"2026-07-05T10:37:24Z"},{"alias_kind":"pith_short_16","alias_value":"FU2DXHRUL2NJLHKK","created_at":"2026-07-05T10:37:24Z"},{"alias_kind":"pith_short_8","alias_value":"FU2DXHRU","created_at":"2026-07-05T10:37:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:FU2DXHRUL2NJLHKKP2PLKYJKXV","target":"record","payload":{"canonical_record":{"source":{"id":"2402.09478","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-13T05:06:34Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"65486a8dd448811bfe51e44746fee7fc5b74ddaa0f918ad0eba62edf2abe3790","abstract_canon_sha256":"a027a3efe5efd2fa87f1bcdb1632165839789500ad389ee5ab34a981729b914d"},"schema_version":"1.0"},"canonical_sha256":"2d343b9e345e9a959d4a7e9eb5612abd77aa6681b82a1d68d849d805d76f2695","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:37:24.251950Z","signature_b64":"izyiQuzxD1zK50SFvU0gI+AxK50ph9jMTBw2eqwKKL9NDah1vDpc71dJU88plqwQLkcuDqultSFdew0jxhsoCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2d343b9e345e9a959d4a7e9eb5612abd77aa6681b82a1d68d849d805d76f2695","last_reissued_at":"2026-07-05T10:37:24.251333Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:37:24.251333Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.09478","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:37:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GYbVQHOWEcH42U/Ok0Ulp496CNLy0sxX9St8F1i1Q6viE7OcoqGqM2i6mkop8iSTdrAHrDPyQZPPZAFrRQjCCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T12:57:29.173627Z"},"content_sha256":"8501b96473ac2105e743b4d8fa4b4a2851401015d2ac1f95f0a4e469d0d1b271","schema_version":"1.0","event_id":"sha256:8501b96473ac2105e743b4d8fa4b4a2851401015d2ac1f95f0a4e469d0d1b271"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:FU2DXHRUL2NJLHKKP2PLKYJKXV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Data Reconstruction Attacks and Defenses: A Systematic Evaluation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Qi Lei, Sheng Liu, Yuxiao Chen, Zihan Wang","submitted_at":"2024-02-13T05:06:34Z","abstract_excerpt":"Reconstruction attacks and defenses are essential in understanding the data leakage problem in machine learning. However, prior work has centered around empirical observations of gradient inversion attacks, lacks theoretical grounding, and cannot disentangle the usefulness of defending methods from the computational limitation of attacking methods. In this work, we propose to view the problem as an inverse problem, enabling us to theoretically and systematically evaluate the data reconstruction attack. On various defense methods, we derived the algorithmic upper bound and the matching (in feat"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.09478","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.09478/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:37:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kbt7c31vRYnYa1B5J8SXEaG4kUfNcftIRB0bXJRhqw+ZMgOBNe3mmxnsCVvm2ELVB7K99btW5AAV5kcmCf81DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T12:57:29.174138Z"},"content_sha256":"b0e43007d239574293e6bf5b5e3b3e9c48e50895a519fcef7eba812e67e9b8db","schema_version":"1.0","event_id":"sha256:b0e43007d239574293e6bf5b5e3b3e9c48e50895a519fcef7eba812e67e9b8db"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FU2DXHRUL2NJLHKKP2PLKYJKXV/bundle.json","state_url":"https://pith.science/pith/FU2DXHRUL2NJLHKKP2PLKYJKXV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FU2DXHRUL2NJLHKKP2PLKYJKXV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T12:57:29Z","links":{"resolver":"https://pith.science/pith/FU2DXHRUL2NJLHKKP2PLKYJKXV","bundle":"https://pith.science/pith/FU2DXHRUL2NJLHKKP2PLKYJKXV/bundle.json","state":"https://pith.science/pith/FU2DXHRUL2NJLHKKP2PLKYJKXV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FU2DXHRUL2NJLHKKP2PLKYJKXV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:FU2DXHRUL2NJLHKKP2PLKYJKXV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a027a3efe5efd2fa87f1bcdb1632165839789500ad389ee5ab34a981729b914d","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-13T05:06:34Z","title_canon_sha256":"65486a8dd448811bfe51e44746fee7fc5b74ddaa0f918ad0eba62edf2abe3790"},"schema_version":"1.0","source":{"id":"2402.09478","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.09478","created_at":"2026-07-05T10:37:24Z"},{"alias_kind":"arxiv_version","alias_value":"2402.09478v3","created_at":"2026-07-05T10:37:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.09478","created_at":"2026-07-05T10:37:24Z"},{"alias_kind":"pith_short_12","alias_value":"FU2DXHRUL2NJ","created_at":"2026-07-05T10:37:24Z"},{"alias_kind":"pith_short_16","alias_value":"FU2DXHRUL2NJLHKK","created_at":"2026-07-05T10:37:24Z"},{"alias_kind":"pith_short_8","alias_value":"FU2DXHRU","created_at":"2026-07-05T10:37:24Z"}],"graph_snapshots":[{"event_id":"sha256:b0e43007d239574293e6bf5b5e3b3e9c48e50895a519fcef7eba812e67e9b8db","target":"graph","created_at":"2026-07-05T10:37:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.09478/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Reconstruction attacks and defenses are essential in understanding the data leakage problem in machine learning. However, prior work has centered around empirical observations of gradient inversion attacks, lacks theoretical grounding, and cannot disentangle the usefulness of defending methods from the computational limitation of attacking methods. In this work, we propose to view the problem as an inverse problem, enabling us to theoretically and systematically evaluate the data reconstruction attack. On various defense methods, we derived the algorithmic upper bound and the matching (in feat","authors_text":"Qi Lei, Sheng Liu, Yuxiao Chen, Zihan Wang","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-13T05:06:34Z","title":"Data Reconstruction Attacks and Defenses: A Systematic Evaluation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.09478","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8501b96473ac2105e743b4d8fa4b4a2851401015d2ac1f95f0a4e469d0d1b271","target":"record","created_at":"2026-07-05T10:37:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a027a3efe5efd2fa87f1bcdb1632165839789500ad389ee5ab34a981729b914d","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-13T05:06:34Z","title_canon_sha256":"65486a8dd448811bfe51e44746fee7fc5b74ddaa0f918ad0eba62edf2abe3790"},"schema_version":"1.0","source":{"id":"2402.09478","kind":"arxiv","version":3}},"canonical_sha256":"2d343b9e345e9a959d4a7e9eb5612abd77aa6681b82a1d68d849d805d76f2695","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2d343b9e345e9a959d4a7e9eb5612abd77aa6681b82a1d68d849d805d76f2695","first_computed_at":"2026-07-05T10:37:24.251333Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:37:24.251333Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"izyiQuzxD1zK50SFvU0gI+AxK50ph9jMTBw2eqwKKL9NDah1vDpc71dJU88plqwQLkcuDqultSFdew0jxhsoCg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:37:24.251950Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.09478","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8501b96473ac2105e743b4d8fa4b4a2851401015d2ac1f95f0a4e469d0d1b271","sha256:b0e43007d239574293e6bf5b5e3b3e9c48e50895a519fcef7eba812e67e9b8db"],"state_sha256":"629955d816a58f87d5727020945315e3f154851e2165c7843b1877c7aacd2f2f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8ErDG8VslEzZ+QqUh6fBXNw6DsgKboTx7Mgnt0w6o4viITR1t9+pQCN/M5A/SnE0FD0uEuWzL23PUER3JjaTAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T12:57:29.178272Z","bundle_sha256":"b710d7aff8f53759042bec67c0f9290a87ccee997ea4a831c9b11cff76a8db10"}}