{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:5DBMTSZA4NRUWTCGZXPJ72EH2S","short_pith_number":"pith:5DBMTSZA","canonical_record":{"source":{"id":"2408.12119","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-22T04:20:48Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c9c7f69a0c33100412a2aa7238b5460b58b565c866362cc9454d7337f52402f8","abstract_canon_sha256":"ea4386f7c9adac0e4a0cad963188cec3e68d960b4d3cc0654e7ad63b40709f81"},"schema_version":"1.0"},"canonical_sha256":"e8c2c9cb20e3634b4c46cdde9fe887d4836837d5128e7fa7166ff28a90a40187","source":{"kind":"arxiv","id":"2408.12119","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.12119","created_at":"2026-07-05T08:58:04Z"},{"alias_kind":"arxiv_version","alias_value":"2408.12119v1","created_at":"2026-07-05T08:58:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.12119","created_at":"2026-07-05T08:58:04Z"},{"alias_kind":"pith_short_12","alias_value":"5DBMTSZA4NRU","created_at":"2026-07-05T08:58:04Z"},{"alias_kind":"pith_short_16","alias_value":"5DBMTSZA4NRUWTCG","created_at":"2026-07-05T08:58:04Z"},{"alias_kind":"pith_short_8","alias_value":"5DBMTSZA","created_at":"2026-07-05T08:58:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:5DBMTSZA4NRUWTCGZXPJ72EH2S","target":"record","payload":{"canonical_record":{"source":{"id":"2408.12119","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-22T04:20:48Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c9c7f69a0c33100412a2aa7238b5460b58b565c866362cc9454d7337f52402f8","abstract_canon_sha256":"ea4386f7c9adac0e4a0cad963188cec3e68d960b4d3cc0654e7ad63b40709f81"},"schema_version":"1.0"},"canonical_sha256":"e8c2c9cb20e3634b4c46cdde9fe887d4836837d5128e7fa7166ff28a90a40187","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:58:04.361621Z","signature_b64":"LTpZpauw/KZSkEBBXqEd4BFfkbPAnLF1xXC1qvb4qVITN2YsBV5c3t2WmRqVSPmwnZP5eJugMlSVgV/1Xc6BCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e8c2c9cb20e3634b4c46cdde9fe887d4836837d5128e7fa7166ff28a90a40187","last_reissued_at":"2026-07-05T08:58:04.361195Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:58:04.361195Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.12119","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:58:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4+hNeiCzNrLkCjcCjys3uxON7nEYPAd5CPFXFwwEwnneyH1Y+OKzo5b+EHxDhygB7aRNJLMfRaCmmde/3X6eAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T22:47:05.715735Z"},"content_sha256":"3b6107a8bf23ed061cec93d4343191fc04a4f5ec3d81cb8f555e0d23954f46f5","schema_version":"1.0","event_id":"sha256:3b6107a8bf23ed061cec93d4343191fc04a4f5ec3d81cb8f555e0d23954f46f5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:5DBMTSZA4NRUWTCGZXPJ72EH2S","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Understanding Data Reconstruction Leakage in Federated Learning from a Theoretical Perspective","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Binghui Wang, Binghui Zhang, Meng Pang, Yuan Hong, Zifan Wang","submitted_at":"2024-08-22T04:20:48Z","abstract_excerpt":"Federated learning (FL) is an emerging collaborative learning paradigm that aims to protect data privacy. Unfortunately, recent works show FL algorithms are vulnerable to the serious data reconstruction attacks. However, existing works lack a theoretical foundation on to what extent the devices' data can be reconstructed and the effectiveness of these attacks cannot be compared fairly due to their unstable performance. To address this deficiency, we propose a theoretical framework to understand data reconstruction attacks to FL. Our framework involves bounding the data reconstruction error and"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.12119","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.12119/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:58:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fA9i3xb6Y4Y8Zb9licxAjvSQHyRHLWaEmBv+nHoORDMIuDZ5Ohyx2Cq4FU6qR4Kq01I07QiB5ruFrhWgfw4uAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T22:47:05.717216Z"},"content_sha256":"736f6c953251ee4aa2839bb3a6ab43ee4b63b8fc92e888474ec728553138c94f","schema_version":"1.0","event_id":"sha256:736f6c953251ee4aa2839bb3a6ab43ee4b63b8fc92e888474ec728553138c94f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5DBMTSZA4NRUWTCGZXPJ72EH2S/bundle.json","state_url":"https://pith.science/pith/5DBMTSZA4NRUWTCGZXPJ72EH2S/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5DBMTSZA4NRUWTCGZXPJ72EH2S/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T22:47:05Z","links":{"resolver":"https://pith.science/pith/5DBMTSZA4NRUWTCGZXPJ72EH2S","bundle":"https://pith.science/pith/5DBMTSZA4NRUWTCGZXPJ72EH2S/bundle.json","state":"https://pith.science/pith/5DBMTSZA4NRUWTCGZXPJ72EH2S/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5DBMTSZA4NRUWTCGZXPJ72EH2S/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:5DBMTSZA4NRUWTCGZXPJ72EH2S","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ea4386f7c9adac0e4a0cad963188cec3e68d960b4d3cc0654e7ad63b40709f81","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-22T04:20:48Z","title_canon_sha256":"c9c7f69a0c33100412a2aa7238b5460b58b565c866362cc9454d7337f52402f8"},"schema_version":"1.0","source":{"id":"2408.12119","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.12119","created_at":"2026-07-05T08:58:04Z"},{"alias_kind":"arxiv_version","alias_value":"2408.12119v1","created_at":"2026-07-05T08:58:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.12119","created_at":"2026-07-05T08:58:04Z"},{"alias_kind":"pith_short_12","alias_value":"5DBMTSZA4NRU","created_at":"2026-07-05T08:58:04Z"},{"alias_kind":"pith_short_16","alias_value":"5DBMTSZA4NRUWTCG","created_at":"2026-07-05T08:58:04Z"},{"alias_kind":"pith_short_8","alias_value":"5DBMTSZA","created_at":"2026-07-05T08:58:04Z"}],"graph_snapshots":[{"event_id":"sha256:736f6c953251ee4aa2839bb3a6ab43ee4b63b8fc92e888474ec728553138c94f","target":"graph","created_at":"2026-07-05T08:58:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.12119/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning (FL) is an emerging collaborative learning paradigm that aims to protect data privacy. Unfortunately, recent works show FL algorithms are vulnerable to the serious data reconstruction attacks. However, existing works lack a theoretical foundation on to what extent the devices' data can be reconstructed and the effectiveness of these attacks cannot be compared fairly due to their unstable performance. To address this deficiency, we propose a theoretical framework to understand data reconstruction attacks to FL. Our framework involves bounding the data reconstruction error and","authors_text":"Binghui Wang, Binghui Zhang, Meng Pang, Yuan Hong, Zifan Wang","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-22T04:20:48Z","title":"Understanding Data Reconstruction Leakage in Federated Learning from a Theoretical Perspective"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.12119","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3b6107a8bf23ed061cec93d4343191fc04a4f5ec3d81cb8f555e0d23954f46f5","target":"record","created_at":"2026-07-05T08:58:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ea4386f7c9adac0e4a0cad963188cec3e68d960b4d3cc0654e7ad63b40709f81","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-22T04:20:48Z","title_canon_sha256":"c9c7f69a0c33100412a2aa7238b5460b58b565c866362cc9454d7337f52402f8"},"schema_version":"1.0","source":{"id":"2408.12119","kind":"arxiv","version":1}},"canonical_sha256":"e8c2c9cb20e3634b4c46cdde9fe887d4836837d5128e7fa7166ff28a90a40187","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e8c2c9cb20e3634b4c46cdde9fe887d4836837d5128e7fa7166ff28a90a40187","first_computed_at":"2026-07-05T08:58:04.361195Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:58:04.361195Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LTpZpauw/KZSkEBBXqEd4BFfkbPAnLF1xXC1qvb4qVITN2YsBV5c3t2WmRqVSPmwnZP5eJugMlSVgV/1Xc6BCA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:58:04.361621Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.12119","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3b6107a8bf23ed061cec93d4343191fc04a4f5ec3d81cb8f555e0d23954f46f5","sha256:736f6c953251ee4aa2839bb3a6ab43ee4b63b8fc92e888474ec728553138c94f"],"state_sha256":"46bd09423e77d8b2a8df50d271b4f7f0331da4395307ac83337116d9d2ad4f8b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XaqkXd6xzr3/bPZqs23/ONPFl2Q4xC/dXaZN3KPzl0DFcsbRZSTpO8SJsPvqUUl56rH6usGXaY67lWDiV81pCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T22:47:05.724676Z","bundle_sha256":"62d3d20adc3013d5351be8932eb6c9e6b35f309761ef4444500e0be6a61cde9a"}}