{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:66UENQJR2IG3SYCAEWJ656EKSP","short_pith_number":"pith:66UENQJR","canonical_record":{"source":{"id":"2407.15098","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-21T09:11:08Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"dd295ddfa1a130aa32d9f6b63f97931dfcf733e360b87b2f5c9b8aa966e97ff0","abstract_canon_sha256":"e4bd59e51347bad1dd48a485005f145ab0de5a2488b022ddffe7daef86b926db"},"schema_version":"1.0"},"canonical_sha256":"f7a846c131d20db960402593eef88a93cd2d08087a90862d340e02e2dec76066","source":{"kind":"arxiv","id":"2407.15098","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.15098","created_at":"2026-07-05T08:46:38Z"},{"alias_kind":"arxiv_version","alias_value":"2407.15098v1","created_at":"2026-07-05T08:46:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.15098","created_at":"2026-07-05T08:46:38Z"},{"alias_kind":"pith_short_12","alias_value":"66UENQJR2IG3","created_at":"2026-07-05T08:46:38Z"},{"alias_kind":"pith_short_16","alias_value":"66UENQJR2IG3SYCA","created_at":"2026-07-05T08:46:38Z"},{"alias_kind":"pith_short_8","alias_value":"66UENQJR","created_at":"2026-07-05T08:46:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:66UENQJR2IG3SYCAEWJ656EKSP","target":"record","payload":{"canonical_record":{"source":{"id":"2407.15098","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-21T09:11:08Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"dd295ddfa1a130aa32d9f6b63f97931dfcf733e360b87b2f5c9b8aa966e97ff0","abstract_canon_sha256":"e4bd59e51347bad1dd48a485005f145ab0de5a2488b022ddffe7daef86b926db"},"schema_version":"1.0"},"canonical_sha256":"f7a846c131d20db960402593eef88a93cd2d08087a90862d340e02e2dec76066","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:46:38.852649Z","signature_b64":"buyRN07ub/PzqNKD909qZsppfJbuPuNPb04E12Ek8n5sVZXLjBqq5mPlmQoR21b9/qDBlsItQkZWMNhd/f69BQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f7a846c131d20db960402593eef88a93cd2d08087a90862d340e02e2dec76066","last_reissued_at":"2026-07-05T08:46:38.852198Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:46:38.852198Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.15098","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:46:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7GQBQn8A8xAXbyuHW0bS5hMixHMi42DQj4IIpo7ZyX9In2nrQSP5XUxdmMQCNxr7KbrtHeBL6oIsfnfGb7ZABw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T05:13:59.520563Z"},"content_sha256":"9b20dea6d39bb274317ddd786ea7a7985ef7f91488786168b1873cf9fe9f6eff","schema_version":"1.0","event_id":"sha256:9b20dea6d39bb274317ddd786ea7a7985ef7f91488786168b1873cf9fe9f6eff"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:66UENQJR2IG3SYCAEWJ656EKSP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Chengrui Hu, Dengguo Feng, Hao Li, Min Zhang, Siyuan Wu, Yang Zhang, Yutong Ye, Zheng Li","submitted_at":"2024-07-21T09:11:08Z","abstract_excerpt":"Most existing membership inference attacks (MIAs) utilize metrics (e.g., loss) calculated on the model's final state, while recent advanced attacks leverage metrics computed at various stages, including both intermediate and final stages, throughout the model training. Nevertheless, these attacks often process multiple intermediate states of the metric independently, ignoring their time-dependent patterns. Consequently, they struggle to effectively distinguish between members and non-members who exhibit similar metric values, particularly resulting in a high false-positive rate.\n  In this stud"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.15098","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.15098/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:46:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oF7SosazIhr3i9puoVIlxULpIhgTAf93nF/XiBpDhyqDo/GUe21I/aCa4e7o7Px1id1/RdJ8Yq4e6N6AKdbFDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T05:13:59.521080Z"},"content_sha256":"60e100b1e4a44b519dab96b4752217517c9f6587f7da7cf2a461c4a65fc8f15e","schema_version":"1.0","event_id":"sha256:60e100b1e4a44b519dab96b4752217517c9f6587f7da7cf2a461c4a65fc8f15e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/66UENQJR2IG3SYCAEWJ656EKSP/bundle.json","state_url":"https://pith.science/pith/66UENQJR2IG3SYCAEWJ656EKSP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/66UENQJR2IG3SYCAEWJ656EKSP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T05:13:59Z","links":{"resolver":"https://pith.science/pith/66UENQJR2IG3SYCAEWJ656EKSP","bundle":"https://pith.science/pith/66UENQJR2IG3SYCAEWJ656EKSP/bundle.json","state":"https://pith.science/pith/66UENQJR2IG3SYCAEWJ656EKSP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/66UENQJR2IG3SYCAEWJ656EKSP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:66UENQJR2IG3SYCAEWJ656EKSP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e4bd59e51347bad1dd48a485005f145ab0de5a2488b022ddffe7daef86b926db","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-21T09:11:08Z","title_canon_sha256":"dd295ddfa1a130aa32d9f6b63f97931dfcf733e360b87b2f5c9b8aa966e97ff0"},"schema_version":"1.0","source":{"id":"2407.15098","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.15098","created_at":"2026-07-05T08:46:38Z"},{"alias_kind":"arxiv_version","alias_value":"2407.15098v1","created_at":"2026-07-05T08:46:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.15098","created_at":"2026-07-05T08:46:38Z"},{"alias_kind":"pith_short_12","alias_value":"66UENQJR2IG3","created_at":"2026-07-05T08:46:38Z"},{"alias_kind":"pith_short_16","alias_value":"66UENQJR2IG3SYCA","created_at":"2026-07-05T08:46:38Z"},{"alias_kind":"pith_short_8","alias_value":"66UENQJR","created_at":"2026-07-05T08:46:38Z"}],"graph_snapshots":[{"event_id":"sha256:60e100b1e4a44b519dab96b4752217517c9f6587f7da7cf2a461c4a65fc8f15e","target":"graph","created_at":"2026-07-05T08:46:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.15098/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Most existing membership inference attacks (MIAs) utilize metrics (e.g., loss) calculated on the model's final state, while recent advanced attacks leverage metrics computed at various stages, including both intermediate and final stages, throughout the model training. Nevertheless, these attacks often process multiple intermediate states of the metric independently, ignoring their time-dependent patterns. Consequently, they struggle to effectively distinguish between members and non-members who exhibit similar metric values, particularly resulting in a high false-positive rate.\n  In this stud","authors_text":"Chengrui Hu, Dengguo Feng, Hao Li, Min Zhang, Siyuan Wu, Yang Zhang, Yutong Ye, Zheng Li","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-21T09:11:08Z","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.15098","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9b20dea6d39bb274317ddd786ea7a7985ef7f91488786168b1873cf9fe9f6eff","target":"record","created_at":"2026-07-05T08:46:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e4bd59e51347bad1dd48a485005f145ab0de5a2488b022ddffe7daef86b926db","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-21T09:11:08Z","title_canon_sha256":"dd295ddfa1a130aa32d9f6b63f97931dfcf733e360b87b2f5c9b8aa966e97ff0"},"schema_version":"1.0","source":{"id":"2407.15098","kind":"arxiv","version":1}},"canonical_sha256":"f7a846c131d20db960402593eef88a93cd2d08087a90862d340e02e2dec76066","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f7a846c131d20db960402593eef88a93cd2d08087a90862d340e02e2dec76066","first_computed_at":"2026-07-05T08:46:38.852198Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:46:38.852198Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"buyRN07ub/PzqNKD909qZsppfJbuPuNPb04E12Ek8n5sVZXLjBqq5mPlmQoR21b9/qDBlsItQkZWMNhd/f69BQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:46:38.852649Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.15098","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9b20dea6d39bb274317ddd786ea7a7985ef7f91488786168b1873cf9fe9f6eff","sha256:60e100b1e4a44b519dab96b4752217517c9f6587f7da7cf2a461c4a65fc8f15e"],"state_sha256":"cbf7e6a7677e21e834413da744e86e277074b152eaaf4dc8ec2201d5a54a1932"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZnbTV1RPLiNCQYAPHQbSiH9jUuO0/Xm5q0iE+0igesMDwCdtBoJBUhEvSe2jqzgS6XRo3xoQtbmuviIvLKTYDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T05:13:59.525590Z","bundle_sha256":"8e9a87370a54e2bd7c11383d1234368608561664cee6ccaefae8d28eaf0d590f"}}