{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:J2IW7EA3Z7X3X2WUMUTO2RBHV6","short_pith_number":"pith:J2IW7EA3","canonical_record":{"source":{"id":"2212.10628","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-12-15T08:14:18Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"8739494a3cc4256f02f7eae6d2c1402429b888b3d4f7d68738b67666abf3098c","abstract_canon_sha256":"968d7cfb087aa27a2445187c1acac7f9ff32187f03af063a81c6d3faa096e344"},"schema_version":"1.0"},"canonical_sha256":"4e916f901bcfefbbead46526ed4427af886192017e9d6f8b105f9458d3957ceb","source":{"kind":"arxiv","id":"2212.10628","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.10628","created_at":"2026-07-05T05:27:10Z"},{"alias_kind":"arxiv_version","alias_value":"2212.10628v1","created_at":"2026-07-05T05:27:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.10628","created_at":"2026-07-05T05:27:10Z"},{"alias_kind":"pith_short_12","alias_value":"J2IW7EA3Z7X3","created_at":"2026-07-05T05:27:10Z"},{"alias_kind":"pith_short_16","alias_value":"J2IW7EA3Z7X3X2WU","created_at":"2026-07-05T05:27:10Z"},{"alias_kind":"pith_short_8","alias_value":"J2IW7EA3","created_at":"2026-07-05T05:27:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:J2IW7EA3Z7X3X2WUMUTO2RBHV6","target":"record","payload":{"canonical_record":{"source":{"id":"2212.10628","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-12-15T08:14:18Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"8739494a3cc4256f02f7eae6d2c1402429b888b3d4f7d68738b67666abf3098c","abstract_canon_sha256":"968d7cfb087aa27a2445187c1acac7f9ff32187f03af063a81c6d3faa096e344"},"schema_version":"1.0"},"canonical_sha256":"4e916f901bcfefbbead46526ed4427af886192017e9d6f8b105f9458d3957ceb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:27:10.191340Z","signature_b64":"aY2LtZd+EQekJLynHliA2f1nJmYjmjyTOhMl8o/5BOr12jXPcaO9Gvg2hihvmakKWfekaJnOllrOhWjsDMKqAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4e916f901bcfefbbead46526ed4427af886192017e9d6f8b105f9458d3957ceb","last_reissued_at":"2026-07-05T05:27:10.190935Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:27:10.190935Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2212.10628","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:27:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"r1TI0Q1eP5B7zPEK64MFcI3JUUeY5PqkW7KNulC9VnaSw+2tdDrjF2uRPXq5I8dPF+1xbfw3vBPL87+N5L5uDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T17:50:58.556623Z"},"content_sha256":"10a69b22ad39127dbb9d50730049d9ce3ac29f9b94a4d69693399f11729e47a4","schema_version":"1.0","event_id":"sha256:10a69b22ad39127dbb9d50730049d9ce3ac29f9b94a4d69693399f11729e47a4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:J2IW7EA3Z7X3X2WUMUTO2RBHV6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Holistic risk assessment of inference attacks in machine learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Yang Yang","submitted_at":"2022-12-15T08:14:18Z","abstract_excerpt":"As machine learning expanding application, there are more and more unignorable privacy and safety issues. Especially inference attacks against Machine Learning models allow adversaries to infer sensitive information about the target model, such as training data, model parameters, etc. Inference attacks can lead to serious consequences, including violating individuals privacy, compromising the intellectual property of the owner of the machine learning model. As far as concerned, researchers have studied and analyzed in depth several types of inference attacks, albeit in isolation, but there is "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.10628","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2212.10628/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:27:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2rpAxp1G8VTwHUeWC3sTjjIK+AF9QkIUp891hLcQTqp2znkL7NrcvX5DHI17EFccNqKrJTU96l3oY5vWnL3fBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T17:50:58.556957Z"},"content_sha256":"6f65bc8c9b1a1cdcf3af094f69817409859b73e61811315897fa26cafe333989","schema_version":"1.0","event_id":"sha256:6f65bc8c9b1a1cdcf3af094f69817409859b73e61811315897fa26cafe333989"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/J2IW7EA3Z7X3X2WUMUTO2RBHV6/bundle.json","state_url":"https://pith.science/pith/J2IW7EA3Z7X3X2WUMUTO2RBHV6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/J2IW7EA3Z7X3X2WUMUTO2RBHV6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T17:50:58Z","links":{"resolver":"https://pith.science/pith/J2IW7EA3Z7X3X2WUMUTO2RBHV6","bundle":"https://pith.science/pith/J2IW7EA3Z7X3X2WUMUTO2RBHV6/bundle.json","state":"https://pith.science/pith/J2IW7EA3Z7X3X2WUMUTO2RBHV6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/J2IW7EA3Z7X3X2WUMUTO2RBHV6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:J2IW7EA3Z7X3X2WUMUTO2RBHV6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"968d7cfb087aa27a2445187c1acac7f9ff32187f03af063a81c6d3faa096e344","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-12-15T08:14:18Z","title_canon_sha256":"8739494a3cc4256f02f7eae6d2c1402429b888b3d4f7d68738b67666abf3098c"},"schema_version":"1.0","source":{"id":"2212.10628","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.10628","created_at":"2026-07-05T05:27:10Z"},{"alias_kind":"arxiv_version","alias_value":"2212.10628v1","created_at":"2026-07-05T05:27:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.10628","created_at":"2026-07-05T05:27:10Z"},{"alias_kind":"pith_short_12","alias_value":"J2IW7EA3Z7X3","created_at":"2026-07-05T05:27:10Z"},{"alias_kind":"pith_short_16","alias_value":"J2IW7EA3Z7X3X2WU","created_at":"2026-07-05T05:27:10Z"},{"alias_kind":"pith_short_8","alias_value":"J2IW7EA3","created_at":"2026-07-05T05:27:10Z"}],"graph_snapshots":[{"event_id":"sha256:6f65bc8c9b1a1cdcf3af094f69817409859b73e61811315897fa26cafe333989","target":"graph","created_at":"2026-07-05T05:27:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2212.10628/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As machine learning expanding application, there are more and more unignorable privacy and safety issues. Especially inference attacks against Machine Learning models allow adversaries to infer sensitive information about the target model, such as training data, model parameters, etc. Inference attacks can lead to serious consequences, including violating individuals privacy, compromising the intellectual property of the owner of the machine learning model. As far as concerned, researchers have studied and analyzed in depth several types of inference attacks, albeit in isolation, but there is ","authors_text":"Yang Yang","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-12-15T08:14:18Z","title":"Holistic risk assessment of inference attacks in machine learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.10628","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:10a69b22ad39127dbb9d50730049d9ce3ac29f9b94a4d69693399f11729e47a4","target":"record","created_at":"2026-07-05T05:27:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"968d7cfb087aa27a2445187c1acac7f9ff32187f03af063a81c6d3faa096e344","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-12-15T08:14:18Z","title_canon_sha256":"8739494a3cc4256f02f7eae6d2c1402429b888b3d4f7d68738b67666abf3098c"},"schema_version":"1.0","source":{"id":"2212.10628","kind":"arxiv","version":1}},"canonical_sha256":"4e916f901bcfefbbead46526ed4427af886192017e9d6f8b105f9458d3957ceb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4e916f901bcfefbbead46526ed4427af886192017e9d6f8b105f9458d3957ceb","first_computed_at":"2026-07-05T05:27:10.190935Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:27:10.190935Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"aY2LtZd+EQekJLynHliA2f1nJmYjmjyTOhMl8o/5BOr12jXPcaO9Gvg2hihvmakKWfekaJnOllrOhWjsDMKqAg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:27:10.191340Z","signed_message":"canonical_sha256_bytes"},"source_id":"2212.10628","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:10a69b22ad39127dbb9d50730049d9ce3ac29f9b94a4d69693399f11729e47a4","sha256:6f65bc8c9b1a1cdcf3af094f69817409859b73e61811315897fa26cafe333989"],"state_sha256":"3b5a63126c7f19624bf5ed79179db8b0c10b0dfea2284fb6205fa0395420a6fa"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SuXKnRw5tzVNQhwWoWNxJhZQErB/aCI440/ftU9WdfF3TARPZjzWQ6dI2KdIof/9mQtwe3kDrJs6EQO3w7W7Cw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T17:50:58.560127Z","bundle_sha256":"975f99a39415159e28be5298feb7137a70b85f8b75514f11b879f110b673b6a7"}}