{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:I4FIJMQRMNJ3HO65M6526KY4VD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7db040dd44daaf0cfc02ece60ea1ce6b9fc766787838939d4aa2347b7f2762a3","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-17T02:48:05Z","title_canon_sha256":"073ed38576f7a8dafdc03d22d5de75af6d3dbf8968baed7413ec9ab80eb87a09"},"schema_version":"1.0","source":{"id":"1911.07135","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.07135","created_at":"2026-07-05T00:56:00Z"},{"alias_kind":"arxiv_version","alias_value":"1911.07135v2","created_at":"2026-07-05T00:56:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.07135","created_at":"2026-07-05T00:56:00Z"},{"alias_kind":"pith_short_12","alias_value":"I4FIJMQRMNJ3","created_at":"2026-07-05T00:56:00Z"},{"alias_kind":"pith_short_16","alias_value":"I4FIJMQRMNJ3HO65","created_at":"2026-07-05T00:56:00Z"},{"alias_kind":"pith_short_8","alias_value":"I4FIJMQR","created_at":"2026-07-05T00:56:00Z"}],"graph_snapshots":[{"event_id":"sha256:1221bdec76130ea1d7486e5514ec5893cf48d861fcd176ff70d6208318d2a0cf","target":"graph","created_at":"2026-07-05T00:56:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1911.07135/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This paper studies model-inversion attacks, in which the access to a model is abused to infer information about the training data. Since its first introduction, such attacks have raised serious concerns given that training data usually contain privacy-sensitive information. Thus far, successful model-inversion attacks have only been demonstrated on simple models, such as linear regression and logistic regression. Previous attempts to invert neural networks, even the ones with simple architectures, have failed to produce convincing results. We present a novel attack method, termed the generativ","authors_text":"Bo Li, Dawn Song, Hengzhi Pei, Ruoxi Jia, Wenxiao Wang, Yuheng Zhang","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-17T02:48:05Z","title":"The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.07135","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8c8d2aed4ca5511a3b3c5b859b8e319e3de865f9fb654a14880c2a9074bdd998","target":"record","created_at":"2026-07-05T00:56:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7db040dd44daaf0cfc02ece60ea1ce6b9fc766787838939d4aa2347b7f2762a3","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-17T02:48:05Z","title_canon_sha256":"073ed38576f7a8dafdc03d22d5de75af6d3dbf8968baed7413ec9ab80eb87a09"},"schema_version":"1.0","source":{"id":"1911.07135","kind":"arxiv","version":2}},"canonical_sha256":"470a84b2116353b3bbdd67bbaf2b1ca8f6b12517df668dd41131afbabf7e7054","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"470a84b2116353b3bbdd67bbaf2b1ca8f6b12517df668dd41131afbabf7e7054","first_computed_at":"2026-07-05T00:56:00.553408Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:56:00.553408Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NAVPCUSl5h2PcWIJvOu832BPV+veWhFxT3hMjFNzZIoUzKb4C3rRhs+oAHsS3J1zuKQ8Ak8yb5XIObWHKyVJDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T00:56:00.553859Z","signed_message":"canonical_sha256_bytes"},"source_id":"1911.07135","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8c8d2aed4ca5511a3b3c5b859b8e319e3de865f9fb654a14880c2a9074bdd998","sha256:1221bdec76130ea1d7486e5514ec5893cf48d861fcd176ff70d6208318d2a0cf"],"state_sha256":"89d3e7f48fdf845e1413bf8f02e5e5908f100d3b422a0d668d3a8bf798e7068e"}