{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:75I6BIIEOU5T2PPUR7UZYFANC4","short_pith_number":"pith:75I6BIIE","canonical_record":{"source":{"id":"2310.13291","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-10-20T05:44:39Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"cae172670004c5b9e610aa0161b3821e2c163db99288b8c8ff24012ce13c95cb","abstract_canon_sha256":"d47ae5548ee50ac69424ea14dd70c944b96c8d03a0dd376d581323e895760b32"},"schema_version":"1.0"},"canonical_sha256":"ff51e0a104753b3d3df48fe99c140d1706be0d3ff58063b8116c19bab1cfd386","source":{"kind":"arxiv","id":"2310.13291","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.13291","created_at":"2026-07-05T07:03:00Z"},{"alias_kind":"arxiv_version","alias_value":"2310.13291v1","created_at":"2026-07-05T07:03:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.13291","created_at":"2026-07-05T07:03:00Z"},{"alias_kind":"pith_short_12","alias_value":"75I6BIIEOU5T","created_at":"2026-07-05T07:03:00Z"},{"alias_kind":"pith_short_16","alias_value":"75I6BIIEOU5T2PPU","created_at":"2026-07-05T07:03:00Z"},{"alias_kind":"pith_short_8","alias_value":"75I6BIIE","created_at":"2026-07-05T07:03:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:75I6BIIEOU5T2PPUR7UZYFANC4","target":"record","payload":{"canonical_record":{"source":{"id":"2310.13291","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-10-20T05:44:39Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"cae172670004c5b9e610aa0161b3821e2c163db99288b8c8ff24012ce13c95cb","abstract_canon_sha256":"d47ae5548ee50ac69424ea14dd70c944b96c8d03a0dd376d581323e895760b32"},"schema_version":"1.0"},"canonical_sha256":"ff51e0a104753b3d3df48fe99c140d1706be0d3ff58063b8116c19bab1cfd386","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:03:00.745483Z","signature_b64":"CKupMmHNaZOlcaVOtTGnX9pGwujek5t7poB6wFaEBHylfk7zwp7kkNF/ihHuhkww5cxU2P0DcwBqbynPU6u2Dg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ff51e0a104753b3d3df48fe99c140d1706be0d3ff58063b8116c19bab1cfd386","last_reissued_at":"2026-07-05T07:03:00.744899Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:03:00.744899Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.13291","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:03:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"e47fTsBQQ8sWLFWiHifhbE3uJLAXbdZtzvceXB9xim55fDUdui7HNhOgU8/Bz/poI3FSkx560+VWLt7gs8V3AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T13:11:44.654433Z"},"content_sha256":"52bb825ede9603b4f1864f447127dc136b53f530b07e23880ef4d8294e598da1","schema_version":"1.0","event_id":"sha256:52bb825ede9603b4f1864f447127dc136b53f530b07e23880ef4d8294e598da1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:75I6BIIEOU5T2PPUR7UZYFANC4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Assessing Privacy Risks in Language Models: A Case Study on Summarization Tasks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CL","authors_text":"Gord Lueck, Huseyin A Inan, Janardhan Kulkarni, Rodolfo Quispe, Ruixiang Tang, Xia Hu","submitted_at":"2023-10-20T05:44:39Z","abstract_excerpt":"Large language models have revolutionized the field of NLP by achieving state-of-the-art performance on various tasks. However, there is a concern that these models may disclose information in the training data. In this study, we focus on the summarization task and investigate the membership inference (MI) attack: given a sample and black-box access to a model's API, it is possible to determine if the sample was part of the training data. We exploit text similarity and the model's resistance to document modifications as potential MI signals and evaluate their effectiveness on widely used datas"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.13291","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.13291/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:03:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"a0IfRg0MwZ0BKaANv1R+zWZ9eKyyEO3kHrTb2DeU0u1t1v1STW+AHk/jicpI44UoD0AlAIq5QrogDbDg/7PYBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T13:11:44.655084Z"},"content_sha256":"5db4ea7a26dc7a02d1049ec63b71d717ff1e333b569159568e3af4b40f5c9496","schema_version":"1.0","event_id":"sha256:5db4ea7a26dc7a02d1049ec63b71d717ff1e333b569159568e3af4b40f5c9496"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/75I6BIIEOU5T2PPUR7UZYFANC4/bundle.json","state_url":"https://pith.science/pith/75I6BIIEOU5T2PPUR7UZYFANC4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/75I6BIIEOU5T2PPUR7UZYFANC4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T13:11:44Z","links":{"resolver":"https://pith.science/pith/75I6BIIEOU5T2PPUR7UZYFANC4","bundle":"https://pith.science/pith/75I6BIIEOU5T2PPUR7UZYFANC4/bundle.json","state":"https://pith.science/pith/75I6BIIEOU5T2PPUR7UZYFANC4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/75I6BIIEOU5T2PPUR7UZYFANC4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:75I6BIIEOU5T2PPUR7UZYFANC4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d47ae5548ee50ac69424ea14dd70c944b96c8d03a0dd376d581323e895760b32","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-10-20T05:44:39Z","title_canon_sha256":"cae172670004c5b9e610aa0161b3821e2c163db99288b8c8ff24012ce13c95cb"},"schema_version":"1.0","source":{"id":"2310.13291","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.13291","created_at":"2026-07-05T07:03:00Z"},{"alias_kind":"arxiv_version","alias_value":"2310.13291v1","created_at":"2026-07-05T07:03:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.13291","created_at":"2026-07-05T07:03:00Z"},{"alias_kind":"pith_short_12","alias_value":"75I6BIIEOU5T","created_at":"2026-07-05T07:03:00Z"},{"alias_kind":"pith_short_16","alias_value":"75I6BIIEOU5T2PPU","created_at":"2026-07-05T07:03:00Z"},{"alias_kind":"pith_short_8","alias_value":"75I6BIIE","created_at":"2026-07-05T07:03:00Z"}],"graph_snapshots":[{"event_id":"sha256:5db4ea7a26dc7a02d1049ec63b71d717ff1e333b569159568e3af4b40f5c9496","target":"graph","created_at":"2026-07-05T07:03:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.13291/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models have revolutionized the field of NLP by achieving state-of-the-art performance on various tasks. However, there is a concern that these models may disclose information in the training data. In this study, we focus on the summarization task and investigate the membership inference (MI) attack: given a sample and black-box access to a model's API, it is possible to determine if the sample was part of the training data. We exploit text similarity and the model's resistance to document modifications as potential MI signals and evaluate their effectiveness on widely used datas","authors_text":"Gord Lueck, Huseyin A Inan, Janardhan Kulkarni, Rodolfo Quispe, Ruixiang Tang, Xia Hu","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-10-20T05:44:39Z","title":"Assessing Privacy Risks in Language Models: A Case Study on Summarization Tasks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.13291","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:52bb825ede9603b4f1864f447127dc136b53f530b07e23880ef4d8294e598da1","target":"record","created_at":"2026-07-05T07:03:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d47ae5548ee50ac69424ea14dd70c944b96c8d03a0dd376d581323e895760b32","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-10-20T05:44:39Z","title_canon_sha256":"cae172670004c5b9e610aa0161b3821e2c163db99288b8c8ff24012ce13c95cb"},"schema_version":"1.0","source":{"id":"2310.13291","kind":"arxiv","version":1}},"canonical_sha256":"ff51e0a104753b3d3df48fe99c140d1706be0d3ff58063b8116c19bab1cfd386","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ff51e0a104753b3d3df48fe99c140d1706be0d3ff58063b8116c19bab1cfd386","first_computed_at":"2026-07-05T07:03:00.744899Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:03:00.744899Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"CKupMmHNaZOlcaVOtTGnX9pGwujek5t7poB6wFaEBHylfk7zwp7kkNF/ihHuhkww5cxU2P0DcwBqbynPU6u2Dg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:03:00.745483Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.13291","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:52bb825ede9603b4f1864f447127dc136b53f530b07e23880ef4d8294e598da1","sha256:5db4ea7a26dc7a02d1049ec63b71d717ff1e333b569159568e3af4b40f5c9496"],"state_sha256":"a7ba78e8f380c81c139ac9348bb2ddaa6ffb99c15ab5d61621bcc57dc7b04558"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/758txlUZqnhTJkkCoWHdfS1NWlRNJpkZ/m2tuTMlEO8Vx/Wd3F0MaRxeXmnAoCxp7IItV7jl8RKOz8KRl3UBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T13:11:44.657841Z","bundle_sha256":"b57a0fea1f4e923a16a2b8078d5769b6c20d49f1ceac786885ae44d2a6d8de0f"}}