{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:6YXG7LDVGRNZEV6B2DVK7TPFI2","short_pith_number":"pith:6YXG7LDV","canonical_record":{"source":{"id":"2412.11689","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-12-16T12:02:12Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"ca1e7ad8015ba13aadbd99337989d772fedf1d7cb3c24c32a5419bfb94269cab","abstract_canon_sha256":"f8a14b7a2a9849ffa38deff801975238a5b878064261d48a2283f14cb4856c7c"},"schema_version":"1.0"},"canonical_sha256":"f62e6fac75345b9257c1d0eaafcde546b5d44deb757d78c902c30d6ba53fcbad","source":{"kind":"arxiv","id":"2412.11689","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.11689","created_at":"2026-07-05T09:49:50Z"},{"alias_kind":"arxiv_version","alias_value":"2412.11689v1","created_at":"2026-07-05T09:49:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.11689","created_at":"2026-07-05T09:49:50Z"},{"alias_kind":"pith_short_12","alias_value":"6YXG7LDVGRNZ","created_at":"2026-07-05T09:49:50Z"},{"alias_kind":"pith_short_16","alias_value":"6YXG7LDVGRNZEV6B","created_at":"2026-07-05T09:49:50Z"},{"alias_kind":"pith_short_8","alias_value":"6YXG7LDV","created_at":"2026-07-05T09:49:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:6YXG7LDVGRNZEV6B2DVK7TPFI2","target":"record","payload":{"canonical_record":{"source":{"id":"2412.11689","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-12-16T12:02:12Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"ca1e7ad8015ba13aadbd99337989d772fedf1d7cb3c24c32a5419bfb94269cab","abstract_canon_sha256":"f8a14b7a2a9849ffa38deff801975238a5b878064261d48a2283f14cb4856c7c"},"schema_version":"1.0"},"canonical_sha256":"f62e6fac75345b9257c1d0eaafcde546b5d44deb757d78c902c30d6ba53fcbad","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:49:50.195684Z","signature_b64":"5mcFv395IVr9yq2eNrAwhemxV9vJ+wRoPD6LRCs2jDmLAgd6FWBm8Jg1u05quNQHiu6EN2Lv7Y60IWbliQlvAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f62e6fac75345b9257c1d0eaafcde546b5d44deb757d78c902c30d6ba53fcbad","last_reissued_at":"2026-07-05T09:49:50.195191Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:49:50.195191Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.11689","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:49:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LFtrXmbAJMMV0MPjvhIojaFEn2sXXDXFsD+Sl0ma099BD9ukt7XqiJLQdtiWJvBMmRp4vB7ZKN+tQG5v+Q/FCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T00:47:22.480772Z"},"content_sha256":"c1f1411f394a6861a428b0d5a8c5e8f5bbcf507e81e62ce0285eff4d54aec5b3","schema_version":"1.0","event_id":"sha256:c1f1411f394a6861a428b0d5a8c5e8f5bbcf507e81e62ce0285eff4d54aec5b3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:6YXG7LDVGRNZEV6B2DVK7TPFI2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Just a Simple Transformation is Enough for Data Protection in Vertical Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Aleksandr Beznosikov, Alexander Pichugin, Andrei Semenov, Philip Zmushko","submitted_at":"2024-12-16T12:02:12Z","abstract_excerpt":"Vertical Federated Learning (VFL) aims to enable collaborative training of deep learning models while maintaining privacy protection. However, the VFL procedure still has components that are vulnerable to attacks by malicious parties. In our work, we consider feature reconstruction attacks, a common risk targeting input data compromise. We theoretically claim that feature reconstruction attacks cannot succeed without knowledge of the prior distribution on data. Consequently, we demonstrate that even simple model architecture transformations can significantly impact the protection of input data"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.11689","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.11689/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:49:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M3JojhL4Nz82opcPb+URfxoQ4MPk9hLnKh2JULbrL21461Kk6mQmxNMDlQQLN2T9EsqdgZqPx0o5AWShA86IBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T00:47:22.481174Z"},"content_sha256":"30105f306254218daa9508a85201f9f11c023bbec63907400cebb8a3befc220d","schema_version":"1.0","event_id":"sha256:30105f306254218daa9508a85201f9f11c023bbec63907400cebb8a3befc220d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6YXG7LDVGRNZEV6B2DVK7TPFI2/bundle.json","state_url":"https://pith.science/pith/6YXG7LDVGRNZEV6B2DVK7TPFI2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6YXG7LDVGRNZEV6B2DVK7TPFI2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T00:47:22Z","links":{"resolver":"https://pith.science/pith/6YXG7LDVGRNZEV6B2DVK7TPFI2","bundle":"https://pith.science/pith/6YXG7LDVGRNZEV6B2DVK7TPFI2/bundle.json","state":"https://pith.science/pith/6YXG7LDVGRNZEV6B2DVK7TPFI2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6YXG7LDVGRNZEV6B2DVK7TPFI2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:6YXG7LDVGRNZEV6B2DVK7TPFI2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f8a14b7a2a9849ffa38deff801975238a5b878064261d48a2283f14cb4856c7c","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-12-16T12:02:12Z","title_canon_sha256":"ca1e7ad8015ba13aadbd99337989d772fedf1d7cb3c24c32a5419bfb94269cab"},"schema_version":"1.0","source":{"id":"2412.11689","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.11689","created_at":"2026-07-05T09:49:50Z"},{"alias_kind":"arxiv_version","alias_value":"2412.11689v1","created_at":"2026-07-05T09:49:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.11689","created_at":"2026-07-05T09:49:50Z"},{"alias_kind":"pith_short_12","alias_value":"6YXG7LDVGRNZ","created_at":"2026-07-05T09:49:50Z"},{"alias_kind":"pith_short_16","alias_value":"6YXG7LDVGRNZEV6B","created_at":"2026-07-05T09:49:50Z"},{"alias_kind":"pith_short_8","alias_value":"6YXG7LDV","created_at":"2026-07-05T09:49:50Z"}],"graph_snapshots":[{"event_id":"sha256:30105f306254218daa9508a85201f9f11c023bbec63907400cebb8a3befc220d","target":"graph","created_at":"2026-07-05T09:49:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.11689/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vertical Federated Learning (VFL) aims to enable collaborative training of deep learning models while maintaining privacy protection. However, the VFL procedure still has components that are vulnerable to attacks by malicious parties. In our work, we consider feature reconstruction attacks, a common risk targeting input data compromise. We theoretically claim that feature reconstruction attacks cannot succeed without knowledge of the prior distribution on data. Consequently, we demonstrate that even simple model architecture transformations can significantly impact the protection of input data","authors_text":"Aleksandr Beznosikov, Alexander Pichugin, Andrei Semenov, Philip Zmushko","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-12-16T12:02:12Z","title":"Just a Simple Transformation is Enough for Data Protection in Vertical Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.11689","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c1f1411f394a6861a428b0d5a8c5e8f5bbcf507e81e62ce0285eff4d54aec5b3","target":"record","created_at":"2026-07-05T09:49:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f8a14b7a2a9849ffa38deff801975238a5b878064261d48a2283f14cb4856c7c","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-12-16T12:02:12Z","title_canon_sha256":"ca1e7ad8015ba13aadbd99337989d772fedf1d7cb3c24c32a5419bfb94269cab"},"schema_version":"1.0","source":{"id":"2412.11689","kind":"arxiv","version":1}},"canonical_sha256":"f62e6fac75345b9257c1d0eaafcde546b5d44deb757d78c902c30d6ba53fcbad","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f62e6fac75345b9257c1d0eaafcde546b5d44deb757d78c902c30d6ba53fcbad","first_computed_at":"2026-07-05T09:49:50.195191Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:49:50.195191Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5mcFv395IVr9yq2eNrAwhemxV9vJ+wRoPD6LRCs2jDmLAgd6FWBm8Jg1u05quNQHiu6EN2Lv7Y60IWbliQlvAg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:49:50.195684Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.11689","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c1f1411f394a6861a428b0d5a8c5e8f5bbcf507e81e62ce0285eff4d54aec5b3","sha256:30105f306254218daa9508a85201f9f11c023bbec63907400cebb8a3befc220d"],"state_sha256":"370815db9eeb38bbaf8f5e322077bd85fdbe585d9b1ffa913a3224e387189782"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IRo50hkkiC39ZmSSeD6UqaXwZ9U6ZcQdyPZEAAxZZspKyjYchYeq479PBk4NsvUxIvvodEhrTL1Fuypl9tl/Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T00:47:22.483710Z","bundle_sha256":"ce7646247509fef0b9d7fcdebc875d93d506a9a6934cded3fd533c622c32ff4d"}}