{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:633F5YUTP3AXDIHFGXONFJNOZI","short_pith_number":"pith:633F5YUT","canonical_record":{"source":{"id":"1812.00910","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2018-12-03T17:11:21Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"b0e54d67b83b2aa9d8e47f0c47c33838581c0a64286156893e1f68e525ce8c2d","abstract_canon_sha256":"abbf596b8ace59a96f1ac6944213ebd78fc5206a6a3e0c9dafd2c2870af3e1c2"},"schema_version":"1.0"},"canonical_sha256":"f6f65ee2937ec171a0e535dcd2a5aeca1a739a0229ba37225f3e8847f6f8f524","source":{"kind":"arxiv","id":"1812.00910","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1812.00910","created_at":"2026-07-05T01:08:22Z"},{"alias_kind":"arxiv_version","alias_value":"1812.00910v2","created_at":"2026-07-05T01:08:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1812.00910","created_at":"2026-07-05T01:08:22Z"},{"alias_kind":"pith_short_12","alias_value":"633F5YUTP3AX","created_at":"2026-07-05T01:08:22Z"},{"alias_kind":"pith_short_16","alias_value":"633F5YUTP3AXDIHF","created_at":"2026-07-05T01:08:22Z"},{"alias_kind":"pith_short_8","alias_value":"633F5YUT","created_at":"2026-07-05T01:08:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:633F5YUTP3AXDIHFGXONFJNOZI","target":"record","payload":{"canonical_record":{"source":{"id":"1812.00910","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2018-12-03T17:11:21Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"b0e54d67b83b2aa9d8e47f0c47c33838581c0a64286156893e1f68e525ce8c2d","abstract_canon_sha256":"abbf596b8ace59a96f1ac6944213ebd78fc5206a6a3e0c9dafd2c2870af3e1c2"},"schema_version":"1.0"},"canonical_sha256":"f6f65ee2937ec171a0e535dcd2a5aeca1a739a0229ba37225f3e8847f6f8f524","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:08:22.324506Z","signature_b64":"wCs2cGY8wvwiE2RobnhaHV9UAh1hQCzHrGlDq2LPgphJBi68YzTvQJwJ85CYZfL3PFsCXhuYtBUYVUqcuqFAAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f6f65ee2937ec171a0e535dcd2a5aeca1a739a0229ba37225f3e8847f6f8f524","last_reissued_at":"2026-07-05T01:08:22.324094Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:08:22.324094Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1812.00910","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:08:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"o08eh0JpILOoOiilYaGaHMwgGIVxWEBAAbto75VMhxAUdR4+9Dfs+GWag2TBBN9dHfJ+e729tnvfH2VrWywhCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T07:13:41.830602Z"},"content_sha256":"84b4092cfbdcd51a815ce0453aa489e72183f63deb71c53187e1372041a8d85d","schema_version":"1.0","event_id":"sha256:84b4092cfbdcd51a815ce0453aa489e72183f63deb71c53187e1372041a8d85d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:633F5YUTP3AXDIHFGXONFJNOZI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Comprehensive Privacy Analysis of Deep Learning: Passive and Active White-box Inference Attacks against Centralized and Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"stat.ML","authors_text":"Amir Houmansadr, Milad Nasr, Reza Shokri","submitted_at":"2018-12-03T17:11:21Z","abstract_excerpt":"Deep neural networks are susceptible to various inference attacks as they remember information about their training data. We design white-box inference attacks to perform a comprehensive privacy analysis of deep learning models. We measure the privacy leakage through parameters of fully trained models as well as the parameter updates of models during training. We design inference algorithms for both centralized and federated learning, with respect to passive and active inference attackers, and assuming different adversary prior knowledge.\n  We evaluate our novel white-box membership inference "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1812.00910","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1812.00910/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:08:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wWLS9YjcWP7dRxRCSuE4JKHbUk56qKPx8EiECincBkflAY1ImSp4dYi5vmjEQr6T98t9ayI/D1X91KtxFi+zAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T07:13:41.831230Z"},"content_sha256":"c326d58ed42bbc54476484bd9cb707d44e31056344fe7e71fd68873fc93eabcb","schema_version":"1.0","event_id":"sha256:c326d58ed42bbc54476484bd9cb707d44e31056344fe7e71fd68873fc93eabcb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/633F5YUTP3AXDIHFGXONFJNOZI/bundle.json","state_url":"https://pith.science/pith/633F5YUTP3AXDIHFGXONFJNOZI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/633F5YUTP3AXDIHFGXONFJNOZI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T07:13:41Z","links":{"resolver":"https://pith.science/pith/633F5YUTP3AXDIHFGXONFJNOZI","bundle":"https://pith.science/pith/633F5YUTP3AXDIHFGXONFJNOZI/bundle.json","state":"https://pith.science/pith/633F5YUTP3AXDIHFGXONFJNOZI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/633F5YUTP3AXDIHFGXONFJNOZI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:633F5YUTP3AXDIHFGXONFJNOZI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"abbf596b8ace59a96f1ac6944213ebd78fc5206a6a3e0c9dafd2c2870af3e1c2","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2018-12-03T17:11:21Z","title_canon_sha256":"b0e54d67b83b2aa9d8e47f0c47c33838581c0a64286156893e1f68e525ce8c2d"},"schema_version":"1.0","source":{"id":"1812.00910","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1812.00910","created_at":"2026-07-05T01:08:22Z"},{"alias_kind":"arxiv_version","alias_value":"1812.00910v2","created_at":"2026-07-05T01:08:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1812.00910","created_at":"2026-07-05T01:08:22Z"},{"alias_kind":"pith_short_12","alias_value":"633F5YUTP3AX","created_at":"2026-07-05T01:08:22Z"},{"alias_kind":"pith_short_16","alias_value":"633F5YUTP3AXDIHF","created_at":"2026-07-05T01:08:22Z"},{"alias_kind":"pith_short_8","alias_value":"633F5YUT","created_at":"2026-07-05T01:08:22Z"}],"graph_snapshots":[{"event_id":"sha256:c326d58ed42bbc54476484bd9cb707d44e31056344fe7e71fd68873fc93eabcb","target":"graph","created_at":"2026-07-05T01:08:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1812.00910/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks are susceptible to various inference attacks as they remember information about their training data. We design white-box inference attacks to perform a comprehensive privacy analysis of deep learning models. We measure the privacy leakage through parameters of fully trained models as well as the parameter updates of models during training. We design inference algorithms for both centralized and federated learning, with respect to passive and active inference attackers, and assuming different adversary prior knowledge.\n  We evaluate our novel white-box membership inference ","authors_text":"Amir Houmansadr, Milad Nasr, Reza Shokri","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2018-12-03T17:11:21Z","title":"Comprehensive Privacy Analysis of Deep Learning: Passive and Active White-box Inference Attacks against Centralized and Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1812.00910","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:84b4092cfbdcd51a815ce0453aa489e72183f63deb71c53187e1372041a8d85d","target":"record","created_at":"2026-07-05T01:08:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"abbf596b8ace59a96f1ac6944213ebd78fc5206a6a3e0c9dafd2c2870af3e1c2","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2018-12-03T17:11:21Z","title_canon_sha256":"b0e54d67b83b2aa9d8e47f0c47c33838581c0a64286156893e1f68e525ce8c2d"},"schema_version":"1.0","source":{"id":"1812.00910","kind":"arxiv","version":2}},"canonical_sha256":"f6f65ee2937ec171a0e535dcd2a5aeca1a739a0229ba37225f3e8847f6f8f524","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f6f65ee2937ec171a0e535dcd2a5aeca1a739a0229ba37225f3e8847f6f8f524","first_computed_at":"2026-07-05T01:08:22.324094Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:08:22.324094Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"wCs2cGY8wvwiE2RobnhaHV9UAh1hQCzHrGlDq2LPgphJBi68YzTvQJwJ85CYZfL3PFsCXhuYtBUYVUqcuqFAAA==","signature_status":"signed_v1","signed_at":"2026-07-05T01:08:22.324506Z","signed_message":"canonical_sha256_bytes"},"source_id":"1812.00910","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:84b4092cfbdcd51a815ce0453aa489e72183f63deb71c53187e1372041a8d85d","sha256:c326d58ed42bbc54476484bd9cb707d44e31056344fe7e71fd68873fc93eabcb"],"state_sha256":"3f976fff5508d5c6973117892b91ba6b000c6cb9c3350c3c69a36c502891609b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"I72oxut0lJMSht/PxWKKHzhylipHgtI4Pv31GyqR3H01XcMtOC0/IrODfD+Lx0VAouvJu4yKHZLUIYQDJazJCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T07:13:41.834901Z","bundle_sha256":"10dc11a9e8909d0099b18944b95840fee6dba3730831a86dd6d955352f4db32c"}}