{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:4FVVXYQE3KJMSQ3TISM6EMYOIF","short_pith_number":"pith:4FVVXYQE","canonical_record":{"source":{"id":"2405.01207","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-02T11:48:30Z","cross_cats_sorted":["cs.CR","cs.SD","eess.AS"],"title_canon_sha256":"8dd15667a9f60bfb2a080ef26dc5bca6d8a7ad986d4359a0dbccfb26ad7d5b0f","abstract_canon_sha256":"486353a48f429c9fa4738363f5c31646b89a3de0f25412e3dcf057c2563a4904"},"schema_version":"1.0"},"canonical_sha256":"e16b5be204da92c943734499e2330e414fc0ffb6e9ec43275d2972cef2da0eff","source":{"kind":"arxiv","id":"2405.01207","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.01207","created_at":"2026-07-05T08:14:42Z"},{"alias_kind":"arxiv_version","alias_value":"2405.01207v1","created_at":"2026-07-05T08:14:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.01207","created_at":"2026-07-05T08:14:42Z"},{"alias_kind":"pith_short_12","alias_value":"4FVVXYQE3KJM","created_at":"2026-07-05T08:14:42Z"},{"alias_kind":"pith_short_16","alias_value":"4FVVXYQE3KJMSQ3T","created_at":"2026-07-05T08:14:42Z"},{"alias_kind":"pith_short_8","alias_value":"4FVVXYQE","created_at":"2026-07-05T08:14:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:4FVVXYQE3KJMSQ3TISM6EMYOIF","target":"record","payload":{"canonical_record":{"source":{"id":"2405.01207","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-02T11:48:30Z","cross_cats_sorted":["cs.CR","cs.SD","eess.AS"],"title_canon_sha256":"8dd15667a9f60bfb2a080ef26dc5bca6d8a7ad986d4359a0dbccfb26ad7d5b0f","abstract_canon_sha256":"486353a48f429c9fa4738363f5c31646b89a3de0f25412e3dcf057c2563a4904"},"schema_version":"1.0"},"canonical_sha256":"e16b5be204da92c943734499e2330e414fc0ffb6e9ec43275d2972cef2da0eff","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:14:42.064878Z","signature_b64":"BXZkjGMV0X8Esn1PyA9GYbY8/qR3njsk8YXp1u8lylewL7QzVdohI5/W1F21chQS6NcfWuJh604NMbp/6LzjAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e16b5be204da92c943734499e2330e414fc0ffb6e9ec43275d2972cef2da0eff","last_reissued_at":"2026-07-05T08:14:42.064409Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:14:42.064409Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.01207","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:14:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XaF5czVy3Sk2VKT/CetPK0t9VirKcCFuWE1mL65xP1rkCuLMxPpiYOoEI/Wg+xYFL0JB5WIFOmXxw4LceonTCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T16:40:05.857210Z"},"content_sha256":"89228ccd1336360a805fae664726bcf1a47ac48d6a06757b87387797fe17d407","schema_version":"1.0","event_id":"sha256:89228ccd1336360a805fae664726bcf1a47ac48d6a06757b87387797fe17d407"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:4FVVXYQE3KJMSQ3TISM6EMYOIF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Improving Membership Inference in ASR Model Auditing with Perturbed Loss Features","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.SD","eess.AS"],"primary_cat":"cs.LG","authors_text":"Alberto Abad, Bhiksha Raj, Francisco Teixeira, Isabel Trancoso, Karla Pizzi, Raphael Olivier","submitted_at":"2024-05-02T11:48:30Z","abstract_excerpt":"Membership Inference (MI) poses a substantial privacy threat to the training data of Automatic Speech Recognition (ASR) systems, while also offering an opportunity to audit these models with regard to user data. This paper explores the effectiveness of loss-based features in combination with Gaussian and adversarial perturbations to perform MI in ASR models. To the best of our knowledge, this approach has not yet been investigated. We compare our proposed features with commonly used error-based features and find that the proposed features greatly enhance performance for sample-level MI. For sp"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.01207","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.01207/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:14:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"c9eDq+96iqeid0ScWH+Q9A7RrK2ThvKGN72ipiWhXZlmVWPGlVCEykut8Wwa92HG0LaTJaTGNspr5H+UkC6LCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T16:40:05.857924Z"},"content_sha256":"0929a87a737aa8ad4ca5341117c0617e0246f977b2410b1c3dccd49e56c1ccdd","schema_version":"1.0","event_id":"sha256:0929a87a737aa8ad4ca5341117c0617e0246f977b2410b1c3dccd49e56c1ccdd"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4FVVXYQE3KJMSQ3TISM6EMYOIF/bundle.json","state_url":"https://pith.science/pith/4FVVXYQE3KJMSQ3TISM6EMYOIF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4FVVXYQE3KJMSQ3TISM6EMYOIF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T16:40:05Z","links":{"resolver":"https://pith.science/pith/4FVVXYQE3KJMSQ3TISM6EMYOIF","bundle":"https://pith.science/pith/4FVVXYQE3KJMSQ3TISM6EMYOIF/bundle.json","state":"https://pith.science/pith/4FVVXYQE3KJMSQ3TISM6EMYOIF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4FVVXYQE3KJMSQ3TISM6EMYOIF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:4FVVXYQE3KJMSQ3TISM6EMYOIF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"486353a48f429c9fa4738363f5c31646b89a3de0f25412e3dcf057c2563a4904","cross_cats_sorted":["cs.CR","cs.SD","eess.AS"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-02T11:48:30Z","title_canon_sha256":"8dd15667a9f60bfb2a080ef26dc5bca6d8a7ad986d4359a0dbccfb26ad7d5b0f"},"schema_version":"1.0","source":{"id":"2405.01207","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.01207","created_at":"2026-07-05T08:14:42Z"},{"alias_kind":"arxiv_version","alias_value":"2405.01207v1","created_at":"2026-07-05T08:14:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.01207","created_at":"2026-07-05T08:14:42Z"},{"alias_kind":"pith_short_12","alias_value":"4FVVXYQE3KJM","created_at":"2026-07-05T08:14:42Z"},{"alias_kind":"pith_short_16","alias_value":"4FVVXYQE3KJMSQ3T","created_at":"2026-07-05T08:14:42Z"},{"alias_kind":"pith_short_8","alias_value":"4FVVXYQE","created_at":"2026-07-05T08:14:42Z"}],"graph_snapshots":[{"event_id":"sha256:0929a87a737aa8ad4ca5341117c0617e0246f977b2410b1c3dccd49e56c1ccdd","target":"graph","created_at":"2026-07-05T08:14:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.01207/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Membership Inference (MI) poses a substantial privacy threat to the training data of Automatic Speech Recognition (ASR) systems, while also offering an opportunity to audit these models with regard to user data. This paper explores the effectiveness of loss-based features in combination with Gaussian and adversarial perturbations to perform MI in ASR models. To the best of our knowledge, this approach has not yet been investigated. We compare our proposed features with commonly used error-based features and find that the proposed features greatly enhance performance for sample-level MI. For sp","authors_text":"Alberto Abad, Bhiksha Raj, Francisco Teixeira, Isabel Trancoso, Karla Pizzi, Raphael Olivier","cross_cats":["cs.CR","cs.SD","eess.AS"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-02T11:48:30Z","title":"Improving Membership Inference in ASR Model Auditing with Perturbed Loss Features"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.01207","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:89228ccd1336360a805fae664726bcf1a47ac48d6a06757b87387797fe17d407","target":"record","created_at":"2026-07-05T08:14:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"486353a48f429c9fa4738363f5c31646b89a3de0f25412e3dcf057c2563a4904","cross_cats_sorted":["cs.CR","cs.SD","eess.AS"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-05-02T11:48:30Z","title_canon_sha256":"8dd15667a9f60bfb2a080ef26dc5bca6d8a7ad986d4359a0dbccfb26ad7d5b0f"},"schema_version":"1.0","source":{"id":"2405.01207","kind":"arxiv","version":1}},"canonical_sha256":"e16b5be204da92c943734499e2330e414fc0ffb6e9ec43275d2972cef2da0eff","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e16b5be204da92c943734499e2330e414fc0ffb6e9ec43275d2972cef2da0eff","first_computed_at":"2026-07-05T08:14:42.064409Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:14:42.064409Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"BXZkjGMV0X8Esn1PyA9GYbY8/qR3njsk8YXp1u8lylewL7QzVdohI5/W1F21chQS6NcfWuJh604NMbp/6LzjAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:14:42.064878Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.01207","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:89228ccd1336360a805fae664726bcf1a47ac48d6a06757b87387797fe17d407","sha256:0929a87a737aa8ad4ca5341117c0617e0246f977b2410b1c3dccd49e56c1ccdd"],"state_sha256":"32171ad323259d6c093b8be91a0c0c0406865bb91bc3b6c229d1ce7a671b1fdc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Sg0eAIIJM2wxlwmDTFL3XlWAAghqAvG7YYNl39hQABs/kWFFuoqrjpzwx3B5MhoWVpxu/JTw26Gs4llUhaN0BA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T16:40:05.864274Z","bundle_sha256":"1a037296a7cffa1f84f82248fe3456658550189911775a87a899441022d96deb"}}