{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:SONWDTDA2IG5WCOPSHUL74J6JR","short_pith_number":"pith:SONWDTDA","canonical_record":{"source":{"id":"2312.05140","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-12-08T16:21:24Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"3f7ce183e34260a83e17d7c9b69090c254ac410b92a03520d4b6c024d74fbad6","abstract_canon_sha256":"984748857ad56e993dc38891deea3e336d106c111853716f204a4dcec198d86a"},"schema_version":"1.0"},"canonical_sha256":"939b61cc60d20ddb09cf91e8bff13e4c5382f6a22a04f4898f6b30177d4f7e50","source":{"kind":"arxiv","id":"2312.05140","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.05140","created_at":"2026-07-05T07:21:57Z"},{"alias_kind":"arxiv_version","alias_value":"2312.05140v1","created_at":"2026-07-05T07:21:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.05140","created_at":"2026-07-05T07:21:57Z"},{"alias_kind":"pith_short_12","alias_value":"SONWDTDA2IG5","created_at":"2026-07-05T07:21:57Z"},{"alias_kind":"pith_short_16","alias_value":"SONWDTDA2IG5WCOP","created_at":"2026-07-05T07:21:57Z"},{"alias_kind":"pith_short_8","alias_value":"SONWDTDA","created_at":"2026-07-05T07:21:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:SONWDTDA2IG5WCOPSHUL74J6JR","target":"record","payload":{"canonical_record":{"source":{"id":"2312.05140","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-12-08T16:21:24Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"3f7ce183e34260a83e17d7c9b69090c254ac410b92a03520d4b6c024d74fbad6","abstract_canon_sha256":"984748857ad56e993dc38891deea3e336d106c111853716f204a4dcec198d86a"},"schema_version":"1.0"},"canonical_sha256":"939b61cc60d20ddb09cf91e8bff13e4c5382f6a22a04f4898f6b30177d4f7e50","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:21:57.329746Z","signature_b64":"DYiwzBuC2Saoh7vMOg3Ze4/Ek0DIaXVbPVWLXv9cCvzbDlPjb5YI/fElvzjtphxRFq+Kza28rRRUsu8+BgC8Aw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"939b61cc60d20ddb09cf91e8bff13e4c5382f6a22a04f4898f6b30177d4f7e50","last_reissued_at":"2026-07-05T07:21:57.329350Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:21:57.329350Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.05140","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:21:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Z5oCiHo3rG+pAknb0pT5vU5jlY3wS08yy/d2fEmfr7NywsXdH04zmLttufBBqOeUsf8wUmwIz9/hCA5qwe8wBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T17:52:47.053521Z"},"content_sha256":"1a780cc2fa3fe4344c78377ac5c01cd389125b133e818c063840bb0d13c9be9f","schema_version":"1.0","event_id":"sha256:1a780cc2fa3fe4344c78377ac5c01cd389125b133e818c063840bb0d13c9be9f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:SONWDTDA2IG5WCOPSHUL74J6JR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Membership Inference Attacks on Diffusion Models via Quantile Regression","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Aaron Roth, Michael Kearns, Sergul Aydore, Shuai Tang, Zhiwei Steven Wu","submitted_at":"2023-12-08T16:21:24Z","abstract_excerpt":"Recently, diffusion models have become popular tools for image synthesis because of their high-quality outputs. However, like other large-scale models, they may leak private information about their training data. Here, we demonstrate a privacy vulnerability of diffusion models through a \\emph{membership inference (MI) attack}, which aims to identify whether a target example belongs to the training set when given the trained diffusion model. Our proposed MI attack learns quantile regression models that predict (a quantile of) the distribution of reconstruction loss on examples not used in train"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.05140","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.05140/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:21:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RiXcsP/ZcMOrdzWlDlHLEJvpa4kSccrmV0ENGUe6UnWgzH9dHmiU7BFTGNKKwbpvfSwbOHYKJuncNakpYHDcDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T17:52:47.054031Z"},"content_sha256":"a20244ea42b2ee2c58ba52577e7ac7870e4d16933db6315166d1e68137144b97","schema_version":"1.0","event_id":"sha256:a20244ea42b2ee2c58ba52577e7ac7870e4d16933db6315166d1e68137144b97"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SONWDTDA2IG5WCOPSHUL74J6JR/bundle.json","state_url":"https://pith.science/pith/SONWDTDA2IG5WCOPSHUL74J6JR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SONWDTDA2IG5WCOPSHUL74J6JR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T17:52:47Z","links":{"resolver":"https://pith.science/pith/SONWDTDA2IG5WCOPSHUL74J6JR","bundle":"https://pith.science/pith/SONWDTDA2IG5WCOPSHUL74J6JR/bundle.json","state":"https://pith.science/pith/SONWDTDA2IG5WCOPSHUL74J6JR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SONWDTDA2IG5WCOPSHUL74J6JR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:SONWDTDA2IG5WCOPSHUL74J6JR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"984748857ad56e993dc38891deea3e336d106c111853716f204a4dcec198d86a","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-12-08T16:21:24Z","title_canon_sha256":"3f7ce183e34260a83e17d7c9b69090c254ac410b92a03520d4b6c024d74fbad6"},"schema_version":"1.0","source":{"id":"2312.05140","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.05140","created_at":"2026-07-05T07:21:57Z"},{"alias_kind":"arxiv_version","alias_value":"2312.05140v1","created_at":"2026-07-05T07:21:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.05140","created_at":"2026-07-05T07:21:57Z"},{"alias_kind":"pith_short_12","alias_value":"SONWDTDA2IG5","created_at":"2026-07-05T07:21:57Z"},{"alias_kind":"pith_short_16","alias_value":"SONWDTDA2IG5WCOP","created_at":"2026-07-05T07:21:57Z"},{"alias_kind":"pith_short_8","alias_value":"SONWDTDA","created_at":"2026-07-05T07:21:57Z"}],"graph_snapshots":[{"event_id":"sha256:a20244ea42b2ee2c58ba52577e7ac7870e4d16933db6315166d1e68137144b97","target":"graph","created_at":"2026-07-05T07:21:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.05140/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recently, diffusion models have become popular tools for image synthesis because of their high-quality outputs. However, like other large-scale models, they may leak private information about their training data. Here, we demonstrate a privacy vulnerability of diffusion models through a \\emph{membership inference (MI) attack}, which aims to identify whether a target example belongs to the training set when given the trained diffusion model. Our proposed MI attack learns quantile regression models that predict (a quantile of) the distribution of reconstruction loss on examples not used in train","authors_text":"Aaron Roth, Michael Kearns, Sergul Aydore, Shuai Tang, Zhiwei Steven Wu","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-12-08T16:21:24Z","title":"Membership Inference Attacks on Diffusion Models via Quantile Regression"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.05140","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1a780cc2fa3fe4344c78377ac5c01cd389125b133e818c063840bb0d13c9be9f","target":"record","created_at":"2026-07-05T07:21:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"984748857ad56e993dc38891deea3e336d106c111853716f204a4dcec198d86a","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-12-08T16:21:24Z","title_canon_sha256":"3f7ce183e34260a83e17d7c9b69090c254ac410b92a03520d4b6c024d74fbad6"},"schema_version":"1.0","source":{"id":"2312.05140","kind":"arxiv","version":1}},"canonical_sha256":"939b61cc60d20ddb09cf91e8bff13e4c5382f6a22a04f4898f6b30177d4f7e50","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"939b61cc60d20ddb09cf91e8bff13e4c5382f6a22a04f4898f6b30177d4f7e50","first_computed_at":"2026-07-05T07:21:57.329350Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:21:57.329350Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"DYiwzBuC2Saoh7vMOg3Ze4/Ek0DIaXVbPVWLXv9cCvzbDlPjb5YI/fElvzjtphxRFq+Kza28rRRUsu8+BgC8Aw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:21:57.329746Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.05140","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1a780cc2fa3fe4344c78377ac5c01cd389125b133e818c063840bb0d13c9be9f","sha256:a20244ea42b2ee2c58ba52577e7ac7870e4d16933db6315166d1e68137144b97"],"state_sha256":"18c11a3b767ea5b17af4a41638435c0fb4832eea83a627e866b184f09ef7822f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"i5b5fvhB6J6RLfZQz50TFCVJsOS0HfUSpSTIpklbXMqUQHDRX+B+ZPSCntfUG/JaxJeMqeGpzpFr+cxk1rjnCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T17:52:47.057776Z","bundle_sha256":"05bd3968c40ad8e093861e86a306ac0dbe9727ead0e131f07107dd89115e82eb"}}