{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:MQF4I6Z4GWXXSGL5ZWIZG7L7GP","short_pith_number":"pith:MQF4I6Z4","canonical_record":{"source":{"id":"2409.01380","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-02T17:23:23Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"2ef3ad067dd6dc374186d3b4277ec97a85f019f26605909101e21488f97ca2d2","abstract_canon_sha256":"c101d8939e0865e58c07795be50a911749ca45a6f2b5bbfaa7183e34bd83d4fe"},"schema_version":"1.0"},"canonical_sha256":"640bc47b3c35af79197dcd91937d7f33d4f739441637992d8ec243f7629c40a4","source":{"kind":"arxiv","id":"2409.01380","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.01380","created_at":"2026-07-05T09:02:28Z"},{"alias_kind":"arxiv_version","alias_value":"2409.01380v1","created_at":"2026-07-05T09:02:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.01380","created_at":"2026-07-05T09:02:28Z"},{"alias_kind":"pith_short_12","alias_value":"MQF4I6Z4GWXX","created_at":"2026-07-05T09:02:28Z"},{"alias_kind":"pith_short_16","alias_value":"MQF4I6Z4GWXXSGL5","created_at":"2026-07-05T09:02:28Z"},{"alias_kind":"pith_short_8","alias_value":"MQF4I6Z4","created_at":"2026-07-05T09:02:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:MQF4I6Z4GWXXSGL5ZWIZG7L7GP","target":"record","payload":{"canonical_record":{"source":{"id":"2409.01380","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-02T17:23:23Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"2ef3ad067dd6dc374186d3b4277ec97a85f019f26605909101e21488f97ca2d2","abstract_canon_sha256":"c101d8939e0865e58c07795be50a911749ca45a6f2b5bbfaa7183e34bd83d4fe"},"schema_version":"1.0"},"canonical_sha256":"640bc47b3c35af79197dcd91937d7f33d4f739441637992d8ec243f7629c40a4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:02:28.411022Z","signature_b64":"E2q1v8t9shwe6CsyiAdG4NHSYdKFwNes6D9SSgZsKojaTn63oyz3OhXSge1bIMA2XOINOyf5gONk1DSulfhQBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"640bc47b3c35af79197dcd91937d7f33d4f739441637992d8ec243f7629c40a4","last_reissued_at":"2026-07-05T09:02:28.410600Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:02:28.410600Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.01380","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:02:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bGCbT7q/g/Zq1ZoQRNkGD04PkCf+rgZQYqK75kqwCotqaL/rtm0XFl/SPHwrDznMvLg5CRuyLyYSNgcuoNGMDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T02:19:30.314151Z"},"content_sha256":"6dd208d5c2a50e2a78ac615da5bf809bbe93fa5e2a22b1512e691482f6e4fde4","schema_version":"1.0","event_id":"sha256:6dd208d5c2a50e2a78ac615da5bf809bbe93fa5e2a22b1512e691482f6e4fde4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:MQF4I6Z4GWXXSGL5ZWIZG7L7GP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Membership Inference Attacks Against In-Context Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL"],"primary_cat":"cs.CR","authors_text":"Michael Backes, Rui Wen, Yang Zhang, Zheng Li","submitted_at":"2024-09-02T17:23:23Z","abstract_excerpt":"Adapting Large Language Models (LLMs) to specific tasks introduces concerns about computational efficiency, prompting an exploration of efficient methods such as In-Context Learning (ICL). However, the vulnerability of ICL to privacy attacks under realistic assumptions remains largely unexplored. In this work, we present the first membership inference attack tailored for ICL, relying solely on generated texts without their associated probabilities. We propose four attack strategies tailored to various constrained scenarios and conduct extensive experiments on four popular large language models"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.01380","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.01380/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:02:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uZftLFa28W9LZ2IfvcrGJHTEWXq2uh5tfaStK7OdHmurau+Ngqh95Hs4cyR33CZSWSZBNfOy4DkdP9MAu5YxCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T02:19:30.314552Z"},"content_sha256":"df391a16ed264885a72ba89f902fcef1f1f70b16946449f70dc4b767b3a0bfe7","schema_version":"1.0","event_id":"sha256:df391a16ed264885a72ba89f902fcef1f1f70b16946449f70dc4b767b3a0bfe7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MQF4I6Z4GWXXSGL5ZWIZG7L7GP/bundle.json","state_url":"https://pith.science/pith/MQF4I6Z4GWXXSGL5ZWIZG7L7GP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MQF4I6Z4GWXXSGL5ZWIZG7L7GP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-08T02:19:30Z","links":{"resolver":"https://pith.science/pith/MQF4I6Z4GWXXSGL5ZWIZG7L7GP","bundle":"https://pith.science/pith/MQF4I6Z4GWXXSGL5ZWIZG7L7GP/bundle.json","state":"https://pith.science/pith/MQF4I6Z4GWXXSGL5ZWIZG7L7GP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MQF4I6Z4GWXXSGL5ZWIZG7L7GP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:MQF4I6Z4GWXXSGL5ZWIZG7L7GP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c101d8939e0865e58c07795be50a911749ca45a6f2b5bbfaa7183e34bd83d4fe","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-02T17:23:23Z","title_canon_sha256":"2ef3ad067dd6dc374186d3b4277ec97a85f019f26605909101e21488f97ca2d2"},"schema_version":"1.0","source":{"id":"2409.01380","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.01380","created_at":"2026-07-05T09:02:28Z"},{"alias_kind":"arxiv_version","alias_value":"2409.01380v1","created_at":"2026-07-05T09:02:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.01380","created_at":"2026-07-05T09:02:28Z"},{"alias_kind":"pith_short_12","alias_value":"MQF4I6Z4GWXX","created_at":"2026-07-05T09:02:28Z"},{"alias_kind":"pith_short_16","alias_value":"MQF4I6Z4GWXXSGL5","created_at":"2026-07-05T09:02:28Z"},{"alias_kind":"pith_short_8","alias_value":"MQF4I6Z4","created_at":"2026-07-05T09:02:28Z"}],"graph_snapshots":[{"event_id":"sha256:df391a16ed264885a72ba89f902fcef1f1f70b16946449f70dc4b767b3a0bfe7","target":"graph","created_at":"2026-07-05T09:02:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.01380/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adapting Large Language Models (LLMs) to specific tasks introduces concerns about computational efficiency, prompting an exploration of efficient methods such as In-Context Learning (ICL). However, the vulnerability of ICL to privacy attacks under realistic assumptions remains largely unexplored. In this work, we present the first membership inference attack tailored for ICL, relying solely on generated texts without their associated probabilities. We propose four attack strategies tailored to various constrained scenarios and conduct extensive experiments on four popular large language models","authors_text":"Michael Backes, Rui Wen, Yang Zhang, Zheng Li","cross_cats":["cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-02T17:23:23Z","title":"Membership Inference Attacks Against In-Context Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.01380","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6dd208d5c2a50e2a78ac615da5bf809bbe93fa5e2a22b1512e691482f6e4fde4","target":"record","created_at":"2026-07-05T09:02:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c101d8939e0865e58c07795be50a911749ca45a6f2b5bbfaa7183e34bd83d4fe","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-02T17:23:23Z","title_canon_sha256":"2ef3ad067dd6dc374186d3b4277ec97a85f019f26605909101e21488f97ca2d2"},"schema_version":"1.0","source":{"id":"2409.01380","kind":"arxiv","version":1}},"canonical_sha256":"640bc47b3c35af79197dcd91937d7f33d4f739441637992d8ec243f7629c40a4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"640bc47b3c35af79197dcd91937d7f33d4f739441637992d8ec243f7629c40a4","first_computed_at":"2026-07-05T09:02:28.410600Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:02:28.410600Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"E2q1v8t9shwe6CsyiAdG4NHSYdKFwNes6D9SSgZsKojaTn63oyz3OhXSge1bIMA2XOINOyf5gONk1DSulfhQBA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:02:28.411022Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.01380","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6dd208d5c2a50e2a78ac615da5bf809bbe93fa5e2a22b1512e691482f6e4fde4","sha256:df391a16ed264885a72ba89f902fcef1f1f70b16946449f70dc4b767b3a0bfe7"],"state_sha256":"439bbe3ca74cbc9348b1523324941ea98408c43b6db13fc9987bc04c46275559"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TZuCSXENDcHeVc9Os8uRzi4H4E5u1hvlffuRRP6GB5LXyzTfO3hAGv+1uP2VJyyqy54HJ+R97FVGkgoifBXeAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-08T02:19:30.319452Z","bundle_sha256":"1ffdc6c9bbdbcb56efa10b16e0e9c88596e865f40b8d91faaceaec05a58918e1"}}