{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:4VTHKSEIUOVZDL6VMP6Z27ILOP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7613a9fbbfd58ae0f0134715d3d51669f680fa4d534becaa95e2cc58b2dfcc9f","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-11-08T18:35:40Z","title_canon_sha256":"1ac6e17f58352f596c4cdfe5b9f4398f4d8c86539294bfc16e67a13a6eac204a"},"schema_version":"1.0","source":{"id":"2111.04706","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.04706","created_at":"2026-07-05T04:06:00Z"},{"alias_kind":"arxiv_version","alias_value":"2111.04706v2","created_at":"2026-07-05T04:06:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.04706","created_at":"2026-07-05T04:06:00Z"},{"alias_kind":"pith_short_12","alias_value":"4VTHKSEIUOVZ","created_at":"2026-07-05T04:06:00Z"},{"alias_kind":"pith_short_16","alias_value":"4VTHKSEIUOVZDL6V","created_at":"2026-07-05T04:06:00Z"},{"alias_kind":"pith_short_8","alias_value":"4VTHKSEI","created_at":"2026-07-05T04:06:00Z"}],"graph_snapshots":[{"event_id":"sha256:d99e2538cdfc5aa915146cd61a060f176cad1e492a02d8e9256de799e3962186","target":"graph","created_at":"2026-07-05T04:06:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2111.04706/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning is an established method for training machine learning models without sharing training data. However, recent work has shown that it cannot guarantee data privacy as shared gradients can still leak sensitive information. To formalize the problem of gradient leakage, we propose a theoretical framework that enables, for the first time, analysis of the Bayes optimal adversary phrased as an optimization problem. We demonstrate that existing leakage attacks can be seen as approximations of this optimal adversary with different assumptions on the probability distributions of the in","authors_text":"Dimitar I. Dimitrov, Martin Vechev, Mislav Balunovi\\'c, Robin Staab","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-11-08T18:35:40Z","title":"Bayesian Framework for Gradient Leakage"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.04706","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:35136edfdfa236bad8d66795501f4c709ee409f36d4c39d48b79e4433cb86cbe","target":"record","created_at":"2026-07-05T04:06:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7613a9fbbfd58ae0f0134715d3d51669f680fa4d534becaa95e2cc58b2dfcc9f","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-11-08T18:35:40Z","title_canon_sha256":"1ac6e17f58352f596c4cdfe5b9f4398f4d8c86539294bfc16e67a13a6eac204a"},"schema_version":"1.0","source":{"id":"2111.04706","kind":"arxiv","version":2}},"canonical_sha256":"e566754888a3ab91afd563fd9d7d0b73fb946fd82c143e82538cc9300d7f9e2f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e566754888a3ab91afd563fd9d7d0b73fb946fd82c143e82538cc9300d7f9e2f","first_computed_at":"2026-07-05T04:06:00.913070Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:06:00.913070Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"0oVaEDq6dH9Ltf7NT/jmBN7HpnomrIEiHjZmh81iuSlp7TLrbtSMNNIjpra0McCn7ryJembs1D1eiLEp56XmBA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:06:00.913601Z","signed_message":"canonical_sha256_bytes"},"source_id":"2111.04706","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:35136edfdfa236bad8d66795501f4c709ee409f36d4c39d48b79e4433cb86cbe","sha256:d99e2538cdfc5aa915146cd61a060f176cad1e492a02d8e9256de799e3962186"],"state_sha256":"6b4ca5d8dadbdef717208fa1639c748c8c36863fdc2c25ab6da6396c4173d5f0"}