{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:6RPP4TXZZO4J6XOAUN4BEPPR5K","short_pith_number":"pith:6RPP4TXZ","canonical_record":{"source":{"id":"2309.00013","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-08-24T02:32:59Z","cross_cats_sorted":[],"title_canon_sha256":"a3656f56a0f3ffbbf281bb794a7e39cf216503f94e012a1783d6f78b9344713b","abstract_canon_sha256":"1445877c5d24f1b67e4cfd62442f5387999dbce49bffa85101d6fec32baac241"},"schema_version":"1.0"},"canonical_sha256":"f45efe4ef9cbb89f5dc0a378123df1ea8f7da7243fe105400154e28f2e48d2bd","source":{"kind":"arxiv","id":"2309.00013","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.00013","created_at":"2026-07-05T06:46:50Z"},{"alias_kind":"arxiv_version","alias_value":"2309.00013v1","created_at":"2026-07-05T06:46:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.00013","created_at":"2026-07-05T06:46:50Z"},{"alias_kind":"pith_short_12","alias_value":"6RPP4TXZZO4J","created_at":"2026-07-05T06:46:50Z"},{"alias_kind":"pith_short_16","alias_value":"6RPP4TXZZO4J6XOA","created_at":"2026-07-05T06:46:50Z"},{"alias_kind":"pith_short_8","alias_value":"6RPP4TXZ","created_at":"2026-07-05T06:46:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:6RPP4TXZZO4J6XOAUN4BEPPR5K","target":"record","payload":{"canonical_record":{"source":{"id":"2309.00013","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-08-24T02:32:59Z","cross_cats_sorted":[],"title_canon_sha256":"a3656f56a0f3ffbbf281bb794a7e39cf216503f94e012a1783d6f78b9344713b","abstract_canon_sha256":"1445877c5d24f1b67e4cfd62442f5387999dbce49bffa85101d6fec32baac241"},"schema_version":"1.0"},"canonical_sha256":"f45efe4ef9cbb89f5dc0a378123df1ea8f7da7243fe105400154e28f2e48d2bd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:46:50.725798Z","signature_b64":"USZZVtEhnc2XYuTuFeSRszdC0BHR7pWtDhlkoTmCa+Sg6wTMpotEJuZaq9KkNMM1pRvogczsl9Br0l/c6K0gAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f45efe4ef9cbb89f5dc0a378123df1ea8f7da7243fe105400154e28f2e48d2bd","last_reissued_at":"2026-07-05T06:46:50.725228Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:46:50.725228Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.00013","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:46:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wY03+S/W5x7iE7B6tvm2sHFhp8TxB6N9Q1Zgt6raLdphZjGiowDH5BWyja8zhRvvgBlIWFcUEJtiBt0YvRLLBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T08:04:14.930962Z"},"content_sha256":"0d1906e64d31c671589ffd0091e56753d7175c60d47bb42b927c6059eb7d9639","schema_version":"1.0","event_id":"sha256:0d1906e64d31c671589ffd0091e56753d7175c60d47bb42b927c6059eb7d9639"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:6RPP4TXZZO4J6XOAUN4BEPPR5K","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Model Inversion Attack via Dynamic Memory Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Binyuan Hui, Gege Qi, Hui Xue, Rong Zhang, Xiaodan Li, Xiaofeng Mao, Yuefeng Chen","submitted_at":"2023-08-24T02:32:59Z","abstract_excerpt":"Model Inversion (MI) attacks aim to recover the private training data from the target model, which has raised security concerns about the deployment of DNNs in practice. Recent advances in generative adversarial models have rendered them particularly effective in MI attacks, primarily due to their ability to generate high-fidelity and perceptually realistic images that closely resemble the target data. In this work, we propose a novel Dynamic Memory Model Inversion Attack (DMMIA) to leverage historically learned knowledge, which interacts with samples (during the training) to induce diverse ge"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.00013","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.00013/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:46:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"p6rE62RKvMQyQlfWsg3ip3/kU4Fm6wqpcBRZSXD6CHZ6upE8LGFBVWUKPyxRcla9on6Yp0MT9OOPrf1HrP5PBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T08:04:14.932404Z"},"content_sha256":"39b360cb7a8438031e7763e35f961f5109dc9e6d2cacd6f2129b2d174a3acd86","schema_version":"1.0","event_id":"sha256:39b360cb7a8438031e7763e35f961f5109dc9e6d2cacd6f2129b2d174a3acd86"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6RPP4TXZZO4J6XOAUN4BEPPR5K/bundle.json","state_url":"https://pith.science/pith/6RPP4TXZZO4J6XOAUN4BEPPR5K/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6RPP4TXZZO4J6XOAUN4BEPPR5K/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T08:04:14Z","links":{"resolver":"https://pith.science/pith/6RPP4TXZZO4J6XOAUN4BEPPR5K","bundle":"https://pith.science/pith/6RPP4TXZZO4J6XOAUN4BEPPR5K/bundle.json","state":"https://pith.science/pith/6RPP4TXZZO4J6XOAUN4BEPPR5K/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6RPP4TXZZO4J6XOAUN4BEPPR5K/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:6RPP4TXZZO4J6XOAUN4BEPPR5K","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1445877c5d24f1b67e4cfd62442f5387999dbce49bffa85101d6fec32baac241","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-08-24T02:32:59Z","title_canon_sha256":"a3656f56a0f3ffbbf281bb794a7e39cf216503f94e012a1783d6f78b9344713b"},"schema_version":"1.0","source":{"id":"2309.00013","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.00013","created_at":"2026-07-05T06:46:50Z"},{"alias_kind":"arxiv_version","alias_value":"2309.00013v1","created_at":"2026-07-05T06:46:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.00013","created_at":"2026-07-05T06:46:50Z"},{"alias_kind":"pith_short_12","alias_value":"6RPP4TXZZO4J","created_at":"2026-07-05T06:46:50Z"},{"alias_kind":"pith_short_16","alias_value":"6RPP4TXZZO4J6XOA","created_at":"2026-07-05T06:46:50Z"},{"alias_kind":"pith_short_8","alias_value":"6RPP4TXZ","created_at":"2026-07-05T06:46:50Z"}],"graph_snapshots":[{"event_id":"sha256:39b360cb7a8438031e7763e35f961f5109dc9e6d2cacd6f2129b2d174a3acd86","target":"graph","created_at":"2026-07-05T06:46:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.00013/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Model Inversion (MI) attacks aim to recover the private training data from the target model, which has raised security concerns about the deployment of DNNs in practice. Recent advances in generative adversarial models have rendered them particularly effective in MI attacks, primarily due to their ability to generate high-fidelity and perceptually realistic images that closely resemble the target data. In this work, we propose a novel Dynamic Memory Model Inversion Attack (DMMIA) to leverage historically learned knowledge, which interacts with samples (during the training) to induce diverse ge","authors_text":"Binyuan Hui, Gege Qi, Hui Xue, Rong Zhang, Xiaodan Li, Xiaofeng Mao, Yuefeng Chen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-08-24T02:32:59Z","title":"Model Inversion Attack via Dynamic Memory Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.00013","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0d1906e64d31c671589ffd0091e56753d7175c60d47bb42b927c6059eb7d9639","target":"record","created_at":"2026-07-05T06:46:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1445877c5d24f1b67e4cfd62442f5387999dbce49bffa85101d6fec32baac241","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-08-24T02:32:59Z","title_canon_sha256":"a3656f56a0f3ffbbf281bb794a7e39cf216503f94e012a1783d6f78b9344713b"},"schema_version":"1.0","source":{"id":"2309.00013","kind":"arxiv","version":1}},"canonical_sha256":"f45efe4ef9cbb89f5dc0a378123df1ea8f7da7243fe105400154e28f2e48d2bd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f45efe4ef9cbb89f5dc0a378123df1ea8f7da7243fe105400154e28f2e48d2bd","first_computed_at":"2026-07-05T06:46:50.725228Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:46:50.725228Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"USZZVtEhnc2XYuTuFeSRszdC0BHR7pWtDhlkoTmCa+Sg6wTMpotEJuZaq9KkNMM1pRvogczsl9Br0l/c6K0gAA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:46:50.725798Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.00013","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0d1906e64d31c671589ffd0091e56753d7175c60d47bb42b927c6059eb7d9639","sha256:39b360cb7a8438031e7763e35f961f5109dc9e6d2cacd6f2129b2d174a3acd86"],"state_sha256":"8df4709ec5170ee35faf599d04775dfd63e0bd237dda5229c007c68ba4d085ad"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1EKDkfE0FrP457DuwojaxuEex43P/DTb91FMdyZ+ye7kSgRbT+qagrymvWiBsT5pZwsj+dGQGEA/vClIQSAZAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T08:04:14.937186Z","bundle_sha256":"a484640bcc473352dd9f092e9021ece02758665439eebe8fa316b5933bca4596"}}