{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:USQCKLRRVWBO4FS727QUYIY77G","short_pith_number":"pith:USQCKLRR","canonical_record":{"source":{"id":"2505.07149","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-11T23:38:44Z","cross_cats_sorted":[],"title_canon_sha256":"2ba5c67f04567a19a7b989776d1848c3d17e3a49ccfab4eaa05648fdc710a4ab","abstract_canon_sha256":"2ad2475f320fa39aaa20490d4143d30084605fc379d8ad5d87110a585b71583a"},"schema_version":"1.0"},"canonical_sha256":"a4a0252e31ad82ee165fd7e14c231ff98f7750f9567146b9b26b6adc0aac9575","source":{"kind":"arxiv","id":"2505.07149","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.07149","created_at":"2026-07-05T11:01:43Z"},{"alias_kind":"arxiv_version","alias_value":"2505.07149v1","created_at":"2026-07-05T11:01:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.07149","created_at":"2026-07-05T11:01:43Z"},{"alias_kind":"pith_short_12","alias_value":"USQCKLRRVWBO","created_at":"2026-07-05T11:01:43Z"},{"alias_kind":"pith_short_16","alias_value":"USQCKLRRVWBO4FS7","created_at":"2026-07-05T11:01:43Z"},{"alias_kind":"pith_short_8","alias_value":"USQCKLRR","created_at":"2026-07-05T11:01:43Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:USQCKLRRVWBO4FS727QUYIY77G","target":"record","payload":{"canonical_record":{"source":{"id":"2505.07149","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-11T23:38:44Z","cross_cats_sorted":[],"title_canon_sha256":"2ba5c67f04567a19a7b989776d1848c3d17e3a49ccfab4eaa05648fdc710a4ab","abstract_canon_sha256":"2ad2475f320fa39aaa20490d4143d30084605fc379d8ad5d87110a585b71583a"},"schema_version":"1.0"},"canonical_sha256":"a4a0252e31ad82ee165fd7e14c231ff98f7750f9567146b9b26b6adc0aac9575","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:01:43.329864Z","signature_b64":"+SDi9YvvTh9fXP0918iZTYiq6/aGDLRxWvWpI+JnWx7KYhKjvdqY9gg0OKF+NmWyvQARMbJJoz3GaWQo5IYXDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a4a0252e31ad82ee165fd7e14c231ff98f7750f9567146b9b26b6adc0aac9575","last_reissued_at":"2026-07-05T11:01:43.329463Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:01:43.329463Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.07149","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:01:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ui/6xifTcZHI3bc/LlIOdavit+b1aqeFOX+qT7q/pyZR3Ua8Jh3T4tZO2ZfJhI4D9hBy/vtlX5deDmjS75qjBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T06:31:58.461373Z"},"content_sha256":"b6e0b786483e8fb4bb97512281f998ce2c170cd8ffd074397ac3e8f00329b563","schema_version":"1.0","event_id":"sha256:b6e0b786483e8fb4bb97512281f998ce2c170cd8ffd074397ac3e8f00329b563"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:USQCKLRRVWBO4FS727QUYIY77G","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"AugMixCloak: A Defense against Membership Inference Attacks via Image Transformation","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Alberto Huertas, Burkhard Stiller, Chao Feng, Heqing Ren","submitted_at":"2025-05-11T23:38:44Z","abstract_excerpt":"Traditional machine learning (ML) raises serious privacy concerns, while federated learning (FL) mitigates the risk of data leakage by keeping data on local devices. However, the training process of FL can still leak sensitive information, which adversaries may exploit to infer private data. One of the most prominent threats is the membership inference attack (MIA), where the adversary aims to determine whether a particular data record was part of the training set.\n  This paper addresses this problem through a two-stage defense called AugMixCloak. The core idea is to apply data augmentation an"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.07149","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.07149/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:01:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SHeXo4nAY7TKyeblLr4q+6xfqtwjCld4ez/h/38WbrixjJJtg+rmmJTyplShu7OsN7m1jVz9vV1nzgd2rZiPDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T06:31:58.461875Z"},"content_sha256":"d89da010f1ced3e4d0f2fa5fb382a474d9fe4b30440ce60b723a1c07f9413812","schema_version":"1.0","event_id":"sha256:d89da010f1ced3e4d0f2fa5fb382a474d9fe4b30440ce60b723a1c07f9413812"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/USQCKLRRVWBO4FS727QUYIY77G/bundle.json","state_url":"https://pith.science/pith/USQCKLRRVWBO4FS727QUYIY77G/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/USQCKLRRVWBO4FS727QUYIY77G/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T06:31:58Z","links":{"resolver":"https://pith.science/pith/USQCKLRRVWBO4FS727QUYIY77G","bundle":"https://pith.science/pith/USQCKLRRVWBO4FS727QUYIY77G/bundle.json","state":"https://pith.science/pith/USQCKLRRVWBO4FS727QUYIY77G/state.json","well_known_bundle":"https://pith.science/.well-known/pith/USQCKLRRVWBO4FS727QUYIY77G/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:USQCKLRRVWBO4FS727QUYIY77G","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2ad2475f320fa39aaa20490d4143d30084605fc379d8ad5d87110a585b71583a","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-11T23:38:44Z","title_canon_sha256":"2ba5c67f04567a19a7b989776d1848c3d17e3a49ccfab4eaa05648fdc710a4ab"},"schema_version":"1.0","source":{"id":"2505.07149","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.07149","created_at":"2026-07-05T11:01:43Z"},{"alias_kind":"arxiv_version","alias_value":"2505.07149v1","created_at":"2026-07-05T11:01:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.07149","created_at":"2026-07-05T11:01:43Z"},{"alias_kind":"pith_short_12","alias_value":"USQCKLRRVWBO","created_at":"2026-07-05T11:01:43Z"},{"alias_kind":"pith_short_16","alias_value":"USQCKLRRVWBO4FS7","created_at":"2026-07-05T11:01:43Z"},{"alias_kind":"pith_short_8","alias_value":"USQCKLRR","created_at":"2026-07-05T11:01:43Z"}],"graph_snapshots":[{"event_id":"sha256:d89da010f1ced3e4d0f2fa5fb382a474d9fe4b30440ce60b723a1c07f9413812","target":"graph","created_at":"2026-07-05T11:01:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.07149/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Traditional machine learning (ML) raises serious privacy concerns, while federated learning (FL) mitigates the risk of data leakage by keeping data on local devices. However, the training process of FL can still leak sensitive information, which adversaries may exploit to infer private data. One of the most prominent threats is the membership inference attack (MIA), where the adversary aims to determine whether a particular data record was part of the training set.\n  This paper addresses this problem through a two-stage defense called AugMixCloak. The core idea is to apply data augmentation an","authors_text":"Alberto Huertas, Burkhard Stiller, Chao Feng, Heqing Ren","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-11T23:38:44Z","title":"AugMixCloak: A Defense against Membership Inference Attacks via Image Transformation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.07149","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b6e0b786483e8fb4bb97512281f998ce2c170cd8ffd074397ac3e8f00329b563","target":"record","created_at":"2026-07-05T11:01:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2ad2475f320fa39aaa20490d4143d30084605fc379d8ad5d87110a585b71583a","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-11T23:38:44Z","title_canon_sha256":"2ba5c67f04567a19a7b989776d1848c3d17e3a49ccfab4eaa05648fdc710a4ab"},"schema_version":"1.0","source":{"id":"2505.07149","kind":"arxiv","version":1}},"canonical_sha256":"a4a0252e31ad82ee165fd7e14c231ff98f7750f9567146b9b26b6adc0aac9575","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a4a0252e31ad82ee165fd7e14c231ff98f7750f9567146b9b26b6adc0aac9575","first_computed_at":"2026-07-05T11:01:43.329463Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:01:43.329463Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+SDi9YvvTh9fXP0918iZTYiq6/aGDLRxWvWpI+JnWx7KYhKjvdqY9gg0OKF+NmWyvQARMbJJoz3GaWQo5IYXDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:01:43.329864Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.07149","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b6e0b786483e8fb4bb97512281f998ce2c170cd8ffd074397ac3e8f00329b563","sha256:d89da010f1ced3e4d0f2fa5fb382a474d9fe4b30440ce60b723a1c07f9413812"],"state_sha256":"98943721c824b0093f828a744843ee6e2a7ac7ec0cb61b7a9a52551f4f725032"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"C6wjxtbA9yDNpk4+7q1Mkd944pmYiI0EgQYihNrF31N09QaoG1CudVMN+OKRnC8J1TyeIc5GvPX/UN5vT1eMAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T06:31:58.467419Z","bundle_sha256":"070b71ef143b389eeaa4e656ef90214e9c5c60820c4a055240585e4175878e4a"}}