{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:3E5JJKHTG2T4AOGHAQSZ4YYYLE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cc8a9d30c3e4df3d6038cc0b61543b7d786a5f5a1e0679d932f7e0fa3442d794","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-14T06:10:47Z","title_canon_sha256":"d7446bf959d66a6ef0d1535289113785e2be8e882e704923ce9175ecc5ceeeab"},"schema_version":"1.0","source":{"id":"2103.07853","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.07853","created_at":"2026-07-05T03:53:47Z"},{"alias_kind":"arxiv_version","alias_value":"2103.07853v4","created_at":"2026-07-05T03:53:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.07853","created_at":"2026-07-05T03:53:47Z"},{"alias_kind":"pith_short_12","alias_value":"3E5JJKHTG2T4","created_at":"2026-07-05T03:53:47Z"},{"alias_kind":"pith_short_16","alias_value":"3E5JJKHTG2T4AOGH","created_at":"2026-07-05T03:53:47Z"},{"alias_kind":"pith_short_8","alias_value":"3E5JJKHT","created_at":"2026-07-05T03:53:47Z"}],"graph_snapshots":[{"event_id":"sha256:0f2d137922ed1e6a912e48b76c65647bee07ffaf6c52ad278782cdd45b3e0232","target":"graph","created_at":"2026-07-05T03:53:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2103.07853/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning (ML) models have been widely applied to various applications, including image classification, text generation, audio recognition, and graph data analysis. However, recent studies have shown that ML models are vulnerable to membership inference attacks (MIAs), which aim to infer whether a data record was used to train a target model or not. MIAs on ML models can directly lead to a privacy breach. For example, via identifying the fact that a clinical record that has been used to train a model associated with a certain disease, an attacker can infer that the owner of the clinical","authors_text":"Gillian Dobbie, Hongsheng Hu, Lichao Sun, Philip S. Yu, Xuyun Zhang, Zoran Salcic","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-14T06:10:47Z","title":"Membership Inference Attacks on Machine Learning: A Survey"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.07853","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bee42dda5643cdbf36f1e67a30435a894472d5dff54e95f9859299cd5d482810","target":"record","created_at":"2026-07-05T03:53:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cc8a9d30c3e4df3d6038cc0b61543b7d786a5f5a1e0679d932f7e0fa3442d794","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-14T06:10:47Z","title_canon_sha256":"d7446bf959d66a6ef0d1535289113785e2be8e882e704923ce9175ecc5ceeeab"},"schema_version":"1.0","source":{"id":"2103.07853","kind":"arxiv","version":4}},"canonical_sha256":"d93a94a8f336a7c038c704259e6318591341a46cf95b22c09d6e76915837103e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d93a94a8f336a7c038c704259e6318591341a46cf95b22c09d6e76915837103e","first_computed_at":"2026-07-05T03:53:47.159012Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:53:47.159012Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Tduq4t9PLu+zLzI6mKy3902HkFzJFYeFytp1bJNRmI3xVyuCqDWH8YqL1C7NPEtnXEJIM035wMPjkMPvmXWzAg==","signature_status":"signed_v1","signed_at":"2026-07-05T03:53:47.159526Z","signed_message":"canonical_sha256_bytes"},"source_id":"2103.07853","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bee42dda5643cdbf36f1e67a30435a894472d5dff54e95f9859299cd5d482810","sha256:0f2d137922ed1e6a912e48b76c65647bee07ffaf6c52ad278782cdd45b3e0232"],"state_sha256":"07297074e5d04136260a1d0897acdf45de6e31fdf6b853d9e3494cfe1c4d07d0"}