{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:4DZXMNG7EQRGK4JMD45MEEVDYP","short_pith_number":"pith:4DZXMNG7","canonical_record":{"source":{"id":"2406.16565","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-24T12:02:20Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"4d863d7fb6b9063d128f9b7385e15ed0cd5a2a24070ecf11d65db0c613206ed3","abstract_canon_sha256":"d37e0f54c3d066058f31e48460cba0387552ea26cca52fd9439d290fe59bedae"},"schema_version":"1.0"},"canonical_sha256":"e0f37634df242265712c1f3ac212a3c3f2ff62c5ce66729a806a28bef10d7ba4","source":{"kind":"arxiv","id":"2406.16565","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.16565","created_at":"2026-07-05T08:36:00Z"},{"alias_kind":"arxiv_version","alias_value":"2406.16565v1","created_at":"2026-07-05T08:36:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.16565","created_at":"2026-07-05T08:36:00Z"},{"alias_kind":"pith_short_12","alias_value":"4DZXMNG7EQRG","created_at":"2026-07-05T08:36:00Z"},{"alias_kind":"pith_short_16","alias_value":"4DZXMNG7EQRGK4JM","created_at":"2026-07-05T08:36:00Z"},{"alias_kind":"pith_short_8","alias_value":"4DZXMNG7","created_at":"2026-07-05T08:36:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:4DZXMNG7EQRGK4JMD45MEEVDYP","target":"record","payload":{"canonical_record":{"source":{"id":"2406.16565","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-24T12:02:20Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"4d863d7fb6b9063d128f9b7385e15ed0cd5a2a24070ecf11d65db0c613206ed3","abstract_canon_sha256":"d37e0f54c3d066058f31e48460cba0387552ea26cca52fd9439d290fe59bedae"},"schema_version":"1.0"},"canonical_sha256":"e0f37634df242265712c1f3ac212a3c3f2ff62c5ce66729a806a28bef10d7ba4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:36:00.654735Z","signature_b64":"w8pmUr/w32YM/4Pir05eybF99SWjcARk9wuFWP6y6tXxuH+W22WGORT/6bv7VIOejhuLN1QUTuKckG4cp/cnCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e0f37634df242265712c1f3ac212a3c3f2ff62c5ce66729a806a28bef10d7ba4","last_reissued_at":"2026-07-05T08:36:00.654183Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:36:00.654183Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.16565","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:36:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hg4kSPZMkqwZCTrZDXMJ4lv6Pg4pW+Pw38uMj83Sk9JzOg/KwJYbKHWIqVzy2qhLrAJsrrMHDn4zsbtvxnQsDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T15:42:14.975134Z"},"content_sha256":"6873b38fc54d5ced673b2a2239afdf723c1dcdecced3ef05ccac444eed240b42","schema_version":"1.0","event_id":"sha256:6873b38fc54d5ced673b2a2239afdf723c1dcdecced3ef05ccac444eed240b42"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:4DZXMNG7EQRGK4JMD45MEEVDYP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Noisy Neighbors: Efficient membership inference attacks against LLMs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Filippo Galli, Luca Melis, Tommaso Cucinotta","submitted_at":"2024-06-24T12:02:20Z","abstract_excerpt":"The potential of transformer-based LLMs risks being hindered by privacy concerns due to their reliance on extensive datasets, possibly including sensitive information. Regulatory measures like GDPR and CCPA call for using robust auditing tools to address potential privacy issues, with Membership Inference Attacks (MIA) being the primary method for assessing LLMs' privacy risks. Differently from traditional MIA approaches, often requiring computationally intensive training of additional models, this paper introduces an efficient methodology that generates \\textit{noisy neighbors} for a target s"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.16565","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.16565/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:36:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"P545/raMew59/VX6OydaGDrr7a/ByOUgwMLz/yhtYe+V0Z100kzBVfkNmwJHvtYi1kWI4/1AFVrjzJwnh6tLCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T15:42:14.975684Z"},"content_sha256":"096477bde5ecbb6d7c9a772267914c2516c0e5e06663a2dd7f5502aba0016563","schema_version":"1.0","event_id":"sha256:096477bde5ecbb6d7c9a772267914c2516c0e5e06663a2dd7f5502aba0016563"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4DZXMNG7EQRGK4JMD45MEEVDYP/bundle.json","state_url":"https://pith.science/pith/4DZXMNG7EQRGK4JMD45MEEVDYP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4DZXMNG7EQRGK4JMD45MEEVDYP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T15:42:14Z","links":{"resolver":"https://pith.science/pith/4DZXMNG7EQRGK4JMD45MEEVDYP","bundle":"https://pith.science/pith/4DZXMNG7EQRGK4JMD45MEEVDYP/bundle.json","state":"https://pith.science/pith/4DZXMNG7EQRGK4JMD45MEEVDYP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4DZXMNG7EQRGK4JMD45MEEVDYP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:4DZXMNG7EQRGK4JMD45MEEVDYP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d37e0f54c3d066058f31e48460cba0387552ea26cca52fd9439d290fe59bedae","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-24T12:02:20Z","title_canon_sha256":"4d863d7fb6b9063d128f9b7385e15ed0cd5a2a24070ecf11d65db0c613206ed3"},"schema_version":"1.0","source":{"id":"2406.16565","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.16565","created_at":"2026-07-05T08:36:00Z"},{"alias_kind":"arxiv_version","alias_value":"2406.16565v1","created_at":"2026-07-05T08:36:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.16565","created_at":"2026-07-05T08:36:00Z"},{"alias_kind":"pith_short_12","alias_value":"4DZXMNG7EQRG","created_at":"2026-07-05T08:36:00Z"},{"alias_kind":"pith_short_16","alias_value":"4DZXMNG7EQRGK4JM","created_at":"2026-07-05T08:36:00Z"},{"alias_kind":"pith_short_8","alias_value":"4DZXMNG7","created_at":"2026-07-05T08:36:00Z"}],"graph_snapshots":[{"event_id":"sha256:096477bde5ecbb6d7c9a772267914c2516c0e5e06663a2dd7f5502aba0016563","target":"graph","created_at":"2026-07-05T08:36:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.16565/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The potential of transformer-based LLMs risks being hindered by privacy concerns due to their reliance on extensive datasets, possibly including sensitive information. Regulatory measures like GDPR and CCPA call for using robust auditing tools to address potential privacy issues, with Membership Inference Attacks (MIA) being the primary method for assessing LLMs' privacy risks. Differently from traditional MIA approaches, often requiring computationally intensive training of additional models, this paper introduces an efficient methodology that generates \\textit{noisy neighbors} for a target s","authors_text":"Filippo Galli, Luca Melis, Tommaso Cucinotta","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-24T12:02:20Z","title":"Noisy Neighbors: Efficient membership inference attacks against LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.16565","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6873b38fc54d5ced673b2a2239afdf723c1dcdecced3ef05ccac444eed240b42","target":"record","created_at":"2026-07-05T08:36:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d37e0f54c3d066058f31e48460cba0387552ea26cca52fd9439d290fe59bedae","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-24T12:02:20Z","title_canon_sha256":"4d863d7fb6b9063d128f9b7385e15ed0cd5a2a24070ecf11d65db0c613206ed3"},"schema_version":"1.0","source":{"id":"2406.16565","kind":"arxiv","version":1}},"canonical_sha256":"e0f37634df242265712c1f3ac212a3c3f2ff62c5ce66729a806a28bef10d7ba4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e0f37634df242265712c1f3ac212a3c3f2ff62c5ce66729a806a28bef10d7ba4","first_computed_at":"2026-07-05T08:36:00.654183Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:36:00.654183Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"w8pmUr/w32YM/4Pir05eybF99SWjcARk9wuFWP6y6tXxuH+W22WGORT/6bv7VIOejhuLN1QUTuKckG4cp/cnCA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:36:00.654735Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.16565","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6873b38fc54d5ced673b2a2239afdf723c1dcdecced3ef05ccac444eed240b42","sha256:096477bde5ecbb6d7c9a772267914c2516c0e5e06663a2dd7f5502aba0016563"],"state_sha256":"211d28638912b820de75c351cc65da68693d9091394f249d41ed22de8f86d24e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nx3qfvUIzIatF9rdlh0fPFGhQpd9JAF7ScoMYCRYyODB36FA3vyI3dQrYl/6Ingj6k+chOlTug/3LlzPTuD2BQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T15:42:14.979470Z","bundle_sha256":"d04506d0d75056fd5bb667a3e418345ae887e804b67f8c54c2e1137293d1d314"}}