{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:OCIP54POLYOOUXJLQJ3LPUGRDH","short_pith_number":"pith:OCIP54PO","canonical_record":{"source":{"id":"2203.05222","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-10T08:02:03Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"d369a05fb9c80d9212c5e8b6e1ce39b91150161528335485fe647fcb6dc8e5cd","abstract_canon_sha256":"5328261dd398f2e1ba37cbd77fc16a54eaf85ddbd8576c9c02ea9869e387dad7"},"schema_version":"1.0"},"canonical_sha256":"7090fef1ee5e1cea5d2b8276b7d0d119d3b65956a060adf33b35ea8ef2924ad6","source":{"kind":"arxiv","id":"2203.05222","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.05222","created_at":"2026-07-05T07:59:12Z"},{"alias_kind":"arxiv_version","alias_value":"2203.05222v2","created_at":"2026-07-05T07:59:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.05222","created_at":"2026-07-05T07:59:12Z"},{"alias_kind":"pith_short_12","alias_value":"OCIP54POLYOO","created_at":"2026-07-05T07:59:12Z"},{"alias_kind":"pith_short_16","alias_value":"OCIP54POLYOOUXJL","created_at":"2026-07-05T07:59:12Z"},{"alias_kind":"pith_short_8","alias_value":"OCIP54PO","created_at":"2026-07-05T07:59:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:OCIP54POLYOOUXJLQJ3LPUGRDH","target":"record","payload":{"canonical_record":{"source":{"id":"2203.05222","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-10T08:02:03Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"d369a05fb9c80d9212c5e8b6e1ce39b91150161528335485fe647fcb6dc8e5cd","abstract_canon_sha256":"5328261dd398f2e1ba37cbd77fc16a54eaf85ddbd8576c9c02ea9869e387dad7"},"schema_version":"1.0"},"canonical_sha256":"7090fef1ee5e1cea5d2b8276b7d0d119d3b65956a060adf33b35ea8ef2924ad6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:59:12.741486Z","signature_b64":"ANc3s8D67ZPAGO1voHOWwDdg4CWB/uvr7g6GFewSrtoPKLnDW5vlVmO8T2Bxkmq6PWtm8LpzqvzhE8WEnvemAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7090fef1ee5e1cea5d2b8276b7d0d119d3b65956a060adf33b35ea8ef2924ad6","last_reissued_at":"2026-07-05T07:59:12.741080Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:59:12.741080Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2203.05222","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:59:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FmETiYnnFApglNI2YiISFAdOlsJl7+xSDU3pzwOot+wRlgijB1HExgJ5utrM6FuBoSrkcVKt/qy5iRlLP3J+DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T05:01:13.087623Z"},"content_sha256":"14c6a566f88e7c0409e062247a51931307d6286cb19d78f080981dbc07b36bca","schema_version":"1.0","event_id":"sha256:14c6a566f88e7c0409e062247a51931307d6286cb19d78f080981dbc07b36bca"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:OCIP54POLYOOUXJLQJ3LPUGRDH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Similarity-based Label Inference Attack against Training and Inference of Split Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Junlin Liu, Qimei Cui, Xiaofeng Tao, Xinchen Lyu","submitted_at":"2022-03-10T08:02:03Z","abstract_excerpt":"Split learning is a promising paradigm for privacy-preserving distributed learning. The learning model can be cut into multiple portions to be collaboratively trained at the participants by exchanging only the intermediate results at the cut layer. Understanding the security performance of split learning is critical for many privacy-sensitive applications. This paper shows that the exchanged intermediate results, including the smashed data (i.e., extracted features from the raw data) and gradients during training and inference of split learning, can already reveal the private labels. We mathem"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.05222","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2203.05222/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:59:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Kj9Ce6APjXSD59CZHfmLGIrMHhFWLyvXIkPjLTxmqgzmwIGCHzw61Kw5iWxRSwM4QQx3KzjtMYZM7bvgr31tBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T05:01:13.088860Z"},"content_sha256":"8443a9a031da2de7a45ad7c681f07939ef5b4d3c0d4d87780955e694ade1cd43","schema_version":"1.0","event_id":"sha256:8443a9a031da2de7a45ad7c681f07939ef5b4d3c0d4d87780955e694ade1cd43"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OCIP54POLYOOUXJLQJ3LPUGRDH/bundle.json","state_url":"https://pith.science/pith/OCIP54POLYOOUXJLQJ3LPUGRDH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OCIP54POLYOOUXJLQJ3LPUGRDH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T05:01:13Z","links":{"resolver":"https://pith.science/pith/OCIP54POLYOOUXJLQJ3LPUGRDH","bundle":"https://pith.science/pith/OCIP54POLYOOUXJLQJ3LPUGRDH/bundle.json","state":"https://pith.science/pith/OCIP54POLYOOUXJLQJ3LPUGRDH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OCIP54POLYOOUXJLQJ3LPUGRDH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:OCIP54POLYOOUXJLQJ3LPUGRDH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5328261dd398f2e1ba37cbd77fc16a54eaf85ddbd8576c9c02ea9869e387dad7","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-10T08:02:03Z","title_canon_sha256":"d369a05fb9c80d9212c5e8b6e1ce39b91150161528335485fe647fcb6dc8e5cd"},"schema_version":"1.0","source":{"id":"2203.05222","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.05222","created_at":"2026-07-05T07:59:12Z"},{"alias_kind":"arxiv_version","alias_value":"2203.05222v2","created_at":"2026-07-05T07:59:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.05222","created_at":"2026-07-05T07:59:12Z"},{"alias_kind":"pith_short_12","alias_value":"OCIP54POLYOO","created_at":"2026-07-05T07:59:12Z"},{"alias_kind":"pith_short_16","alias_value":"OCIP54POLYOOUXJL","created_at":"2026-07-05T07:59:12Z"},{"alias_kind":"pith_short_8","alias_value":"OCIP54PO","created_at":"2026-07-05T07:59:12Z"}],"graph_snapshots":[{"event_id":"sha256:8443a9a031da2de7a45ad7c681f07939ef5b4d3c0d4d87780955e694ade1cd43","target":"graph","created_at":"2026-07-05T07:59:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2203.05222/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Split learning is a promising paradigm for privacy-preserving distributed learning. The learning model can be cut into multiple portions to be collaboratively trained at the participants by exchanging only the intermediate results at the cut layer. Understanding the security performance of split learning is critical for many privacy-sensitive applications. This paper shows that the exchanged intermediate results, including the smashed data (i.e., extracted features from the raw data) and gradients during training and inference of split learning, can already reveal the private labels. We mathem","authors_text":"Junlin Liu, Qimei Cui, Xiaofeng Tao, Xinchen Lyu","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-10T08:02:03Z","title":"Similarity-based Label Inference Attack against Training and Inference of Split Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.05222","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:14c6a566f88e7c0409e062247a51931307d6286cb19d78f080981dbc07b36bca","target":"record","created_at":"2026-07-05T07:59:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5328261dd398f2e1ba37cbd77fc16a54eaf85ddbd8576c9c02ea9869e387dad7","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-10T08:02:03Z","title_canon_sha256":"d369a05fb9c80d9212c5e8b6e1ce39b91150161528335485fe647fcb6dc8e5cd"},"schema_version":"1.0","source":{"id":"2203.05222","kind":"arxiv","version":2}},"canonical_sha256":"7090fef1ee5e1cea5d2b8276b7d0d119d3b65956a060adf33b35ea8ef2924ad6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7090fef1ee5e1cea5d2b8276b7d0d119d3b65956a060adf33b35ea8ef2924ad6","first_computed_at":"2026-07-05T07:59:12.741080Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:59:12.741080Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ANc3s8D67ZPAGO1voHOWwDdg4CWB/uvr7g6GFewSrtoPKLnDW5vlVmO8T2Bxkmq6PWtm8LpzqvzhE8WEnvemAg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:59:12.741486Z","signed_message":"canonical_sha256_bytes"},"source_id":"2203.05222","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:14c6a566f88e7c0409e062247a51931307d6286cb19d78f080981dbc07b36bca","sha256:8443a9a031da2de7a45ad7c681f07939ef5b4d3c0d4d87780955e694ade1cd43"],"state_sha256":"654983395d9a6ccbf61de0508685e579772642d625799cf305c61adff9656e93"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"D5egk0uXEJGARS4tUFAKj7YRVwsp2yC/zsCtAPWBKk7nz7jVouih2e4AEHWYJra16BFNRv4OadDl05Dm1IiMCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T05:01:13.096322Z","bundle_sha256":"925f9962b6dd3790f1c3a12bff0fec9d4b00ca369aeb6baeb184613b11add15a"}}