{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:2EHXWCOZBLOVP55IABOQHGJOYF","short_pith_number":"pith:2EHXWCOZ","canonical_record":{"source":{"id":"2508.07066","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2025-08-09T18:14:50Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"34eb6ce75be36ccb10bb434a31ec6c6732f2d0a3a418590004fbf74b04d60069","abstract_canon_sha256":"edbd29a6fc0ea85ebfceda37b89f4e4b1819dbb7cdeeb3e53c88fb52ba2bcc90"},"schema_version":"1.0"},"canonical_sha256":"d10f7b09d90add57f7a8005d03992ec1624d46ce0345be2f2dc67474fcc096ab","source":{"kind":"arxiv","id":"2508.07066","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.07066","created_at":"2026-07-05T11:51:40Z"},{"alias_kind":"arxiv_version","alias_value":"2508.07066v1","created_at":"2026-07-05T11:51:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.07066","created_at":"2026-07-05T11:51:40Z"},{"alias_kind":"pith_short_12","alias_value":"2EHXWCOZBLOV","created_at":"2026-07-05T11:51:40Z"},{"alias_kind":"pith_short_16","alias_value":"2EHXWCOZBLOVP55I","created_at":"2026-07-05T11:51:40Z"},{"alias_kind":"pith_short_8","alias_value":"2EHXWCOZ","created_at":"2026-07-05T11:51:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:2EHXWCOZBLOVP55IABOQHGJOYF","target":"record","payload":{"canonical_record":{"source":{"id":"2508.07066","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2025-08-09T18:14:50Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"34eb6ce75be36ccb10bb434a31ec6c6732f2d0a3a418590004fbf74b04d60069","abstract_canon_sha256":"edbd29a6fc0ea85ebfceda37b89f4e4b1819dbb7cdeeb3e53c88fb52ba2bcc90"},"schema_version":"1.0"},"canonical_sha256":"d10f7b09d90add57f7a8005d03992ec1624d46ce0345be2f2dc67474fcc096ab","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:51:40.247099Z","signature_b64":"HNs4oK/hiP8wsbC0pN8ie+Y3dMQ2uBfrrx27MSHjUtWDpDF0b85f346ThmQlxFNqab8hzC0+cClGgE0sSjTqDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d10f7b09d90add57f7a8005d03992ec1624d46ce0345be2f2dc67474fcc096ab","last_reissued_at":"2026-07-05T11:51:40.246600Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:51:40.246600Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.07066","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:51:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3spo5Bwi2sTx/r4QebQEK89nwhaJ75+9LFJGRgazqqmy+tBzQ6yIyGbBZmr/dJVtNPPpLS78ni6ShIGX1lkVBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T07:22:58.442604Z"},"content_sha256":"69443f86e8de9ba746f6ac1b3ae44cbccf9dba8724b69bb006a113e06e3c5f55","schema_version":"1.0","event_id":"sha256:69443f86e8de9ba746f6ac1b3ae44cbccf9dba8724b69bb006a113e06e3c5f55"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:2EHXWCOZBLOVP55IABOQHGJOYF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Membership Inference Attacks with False Discovery Rate Control","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"stat.ML","authors_text":"Aobo Chen, Chenxu Zhao, Mengdi Huai, Wei Qian","submitted_at":"2025-08-09T18:14:50Z","abstract_excerpt":"Recent studies have shown that deep learning models are vulnerable to membership inference attacks (MIAs), which aim to infer whether a data record was used to train a target model or not. To analyze and study these vulnerabilities, various MIA methods have been proposed. Despite the significance and popularity of MIAs, existing works on MIAs are limited in providing guarantees on the false discovery rate (FDR), which refers to the expected proportion of false discoveries among the identified positive discoveries. However, it is very challenging to ensure the false discovery rate guarantees, b"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.07066","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.07066/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:51:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6uK6Gmts2P1MeG2mdsx3HMsr3YNnqJvekg/sm8axEiNkMfivbkH0pgiy6Wxq3C9qazYN7eVO6y3T87GitZ8BCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T07:22:58.443349Z"},"content_sha256":"d90fc8c20e0d8148da5e4f6ac4aad99e64d1108dc09c15a703c43d78838460ca","schema_version":"1.0","event_id":"sha256:d90fc8c20e0d8148da5e4f6ac4aad99e64d1108dc09c15a703c43d78838460ca"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2EHXWCOZBLOVP55IABOQHGJOYF/bundle.json","state_url":"https://pith.science/pith/2EHXWCOZBLOVP55IABOQHGJOYF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2EHXWCOZBLOVP55IABOQHGJOYF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T07:22:58Z","links":{"resolver":"https://pith.science/pith/2EHXWCOZBLOVP55IABOQHGJOYF","bundle":"https://pith.science/pith/2EHXWCOZBLOVP55IABOQHGJOYF/bundle.json","state":"https://pith.science/pith/2EHXWCOZBLOVP55IABOQHGJOYF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2EHXWCOZBLOVP55IABOQHGJOYF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:2EHXWCOZBLOVP55IABOQHGJOYF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"edbd29a6fc0ea85ebfceda37b89f4e4b1819dbb7cdeeb3e53c88fb52ba2bcc90","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2025-08-09T18:14:50Z","title_canon_sha256":"34eb6ce75be36ccb10bb434a31ec6c6732f2d0a3a418590004fbf74b04d60069"},"schema_version":"1.0","source":{"id":"2508.07066","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.07066","created_at":"2026-07-05T11:51:40Z"},{"alias_kind":"arxiv_version","alias_value":"2508.07066v1","created_at":"2026-07-05T11:51:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.07066","created_at":"2026-07-05T11:51:40Z"},{"alias_kind":"pith_short_12","alias_value":"2EHXWCOZBLOV","created_at":"2026-07-05T11:51:40Z"},{"alias_kind":"pith_short_16","alias_value":"2EHXWCOZBLOVP55I","created_at":"2026-07-05T11:51:40Z"},{"alias_kind":"pith_short_8","alias_value":"2EHXWCOZ","created_at":"2026-07-05T11:51:40Z"}],"graph_snapshots":[{"event_id":"sha256:d90fc8c20e0d8148da5e4f6ac4aad99e64d1108dc09c15a703c43d78838460ca","target":"graph","created_at":"2026-07-05T11:51:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.07066/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent studies have shown that deep learning models are vulnerable to membership inference attacks (MIAs), which aim to infer whether a data record was used to train a target model or not. To analyze and study these vulnerabilities, various MIA methods have been proposed. Despite the significance and popularity of MIAs, existing works on MIAs are limited in providing guarantees on the false discovery rate (FDR), which refers to the expected proportion of false discoveries among the identified positive discoveries. However, it is very challenging to ensure the false discovery rate guarantees, b","authors_text":"Aobo Chen, Chenxu Zhao, Mengdi Huai, Wei Qian","cross_cats":["cs.CV","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2025-08-09T18:14:50Z","title":"Membership Inference Attacks with False Discovery Rate Control"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.07066","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:69443f86e8de9ba746f6ac1b3ae44cbccf9dba8724b69bb006a113e06e3c5f55","target":"record","created_at":"2026-07-05T11:51:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"edbd29a6fc0ea85ebfceda37b89f4e4b1819dbb7cdeeb3e53c88fb52ba2bcc90","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2025-08-09T18:14:50Z","title_canon_sha256":"34eb6ce75be36ccb10bb434a31ec6c6732f2d0a3a418590004fbf74b04d60069"},"schema_version":"1.0","source":{"id":"2508.07066","kind":"arxiv","version":1}},"canonical_sha256":"d10f7b09d90add57f7a8005d03992ec1624d46ce0345be2f2dc67474fcc096ab","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d10f7b09d90add57f7a8005d03992ec1624d46ce0345be2f2dc67474fcc096ab","first_computed_at":"2026-07-05T11:51:40.246600Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:51:40.246600Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HNs4oK/hiP8wsbC0pN8ie+Y3dMQ2uBfrrx27MSHjUtWDpDF0b85f346ThmQlxFNqab8hzC0+cClGgE0sSjTqDg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:51:40.247099Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.07066","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:69443f86e8de9ba746f6ac1b3ae44cbccf9dba8724b69bb006a113e06e3c5f55","sha256:d90fc8c20e0d8148da5e4f6ac4aad99e64d1108dc09c15a703c43d78838460ca"],"state_sha256":"30ad8dba79ae3c2ab55587e8f8deb66dee0016fb30e80eb45330d1098a19d741"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Xs1f2DVXTO14UhjpW4G1eDZXBJTpUjbzWFHWe/JkzyGMyXFMSjjYRorvg/vM5apOCDcwQxCHWj3vqakJtYJhAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T07:22:58.448454Z","bundle_sha256":"ad6006d59f694ab49d55371a7e3920fea7c9115b927746d79fad5d58ce67177c"}}