{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:7EQGDF6BYQ76R4F4IZA763VTWB","short_pith_number":"pith:7EQGDF6B","canonical_record":{"source":{"id":"1806.01246","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-06-04T17:38:42Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"190ed574a47bf6818f6dafe111d53c85d531feb3e427d744b9d8aa22e2de0a1f","abstract_canon_sha256":"4f8c61886eb859c7126b44947b76c4d8a77b57acd774cf0e0224c5bb4c143868"},"schema_version":"1.0"},"canonical_sha256":"f9206197c1c43fe8f0bc4641ff6eb3b078a6862cb2329a523af0a6a22e393322","source":{"kind":"arxiv","id":"1806.01246","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1806.01246","created_at":"2026-05-17T23:58:14Z"},{"alias_kind":"arxiv_version","alias_value":"1806.01246v2","created_at":"2026-05-17T23:58:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1806.01246","created_at":"2026-05-17T23:58:14Z"},{"alias_kind":"pith_short_12","alias_value":"7EQGDF6BYQ76","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_16","alias_value":"7EQGDF6BYQ76R4F4","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_8","alias_value":"7EQGDF6B","created_at":"2026-05-18T12:32:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:7EQGDF6BYQ76R4F4IZA763VTWB","target":"record","payload":{"canonical_record":{"source":{"id":"1806.01246","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-06-04T17:38:42Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"190ed574a47bf6818f6dafe111d53c85d531feb3e427d744b9d8aa22e2de0a1f","abstract_canon_sha256":"4f8c61886eb859c7126b44947b76c4d8a77b57acd774cf0e0224c5bb4c143868"},"schema_version":"1.0"},"canonical_sha256":"f9206197c1c43fe8f0bc4641ff6eb3b078a6862cb2329a523af0a6a22e393322","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:58:14.233244Z","signature_b64":"4KdASlhJYZb3WVenaSvALSsfhtfp05hk+G6ONmrTIdfBYJQM+EMaAM7fb8wKiWhWx+dgbgfb/mmqbaIQd3izBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f9206197c1c43fe8f0bc4641ff6eb3b078a6862cb2329a523af0a6a22e393322","last_reissued_at":"2026-05-17T23:58:14.232738Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:58:14.232738Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1806.01246","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:58:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"n5eGk48LiThQWuXjna+eQ8CZBRJtYrj9aVC8990m2i7gFG7jhITvBU7MjGCqNpmSVlFlgFhRLe0dmqjnJ1qaDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T08:03:11.286974Z"},"content_sha256":"407e969dfea539fcd2a45c815679f76d6b6b71f662eed0734bb4c1a1e598ea47","schema_version":"1.0","event_id":"sha256:407e969dfea539fcd2a45c815679f76d6b6b71f662eed0734bb4c1a1e598ea47"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:7EQGDF6BYQ76R4F4IZA763VTWB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Ahmed Salem, Mario Fritz, Mathias Humbert, Michael Backes, Pascal Berrang, Yang Zhang","submitted_at":"2018-06-04T17:38:42Z","abstract_excerpt":"Machine learning (ML) has become a core component of many real-world applications and training data is a key factor that drives current progress. This huge success has led Internet companies to deploy machine learning as a service (MLaaS). Recently, the first membership inference attack has shown that extraction of information on the training set is possible in such MLaaS settings, which has severe security and privacy implications.\n  However, the early demonstrations of the feasibility of such attacks have many assumptions on the adversary, such as using multiple so-called shadow models, know"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1806.01246","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:58:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VyH2gnOwr0DDOH3RAej4fbPI4R+RgZW+1Cy829RsPUuwbqYaiFY8EoJ4FVog90FwWvE1UuxJxjUmlLx6ulLgCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T08:03:11.287447Z"},"content_sha256":"78631db0e7f671630c32abbdd9ca83233e7fa99caf48a6d11d5a91bafc820f99","schema_version":"1.0","event_id":"sha256:78631db0e7f671630c32abbdd9ca83233e7fa99caf48a6d11d5a91bafc820f99"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7EQGDF6BYQ76R4F4IZA763VTWB/bundle.json","state_url":"https://pith.science/pith/7EQGDF6BYQ76R4F4IZA763VTWB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7EQGDF6BYQ76R4F4IZA763VTWB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T08:03:11Z","links":{"resolver":"https://pith.science/pith/7EQGDF6BYQ76R4F4IZA763VTWB","bundle":"https://pith.science/pith/7EQGDF6BYQ76R4F4IZA763VTWB/bundle.json","state":"https://pith.science/pith/7EQGDF6BYQ76R4F4IZA763VTWB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7EQGDF6BYQ76R4F4IZA763VTWB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:7EQGDF6BYQ76R4F4IZA763VTWB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4f8c61886eb859c7126b44947b76c4d8a77b57acd774cf0e0224c5bb4c143868","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-06-04T17:38:42Z","title_canon_sha256":"190ed574a47bf6818f6dafe111d53c85d531feb3e427d744b9d8aa22e2de0a1f"},"schema_version":"1.0","source":{"id":"1806.01246","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1806.01246","created_at":"2026-05-17T23:58:14Z"},{"alias_kind":"arxiv_version","alias_value":"1806.01246v2","created_at":"2026-05-17T23:58:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1806.01246","created_at":"2026-05-17T23:58:14Z"},{"alias_kind":"pith_short_12","alias_value":"7EQGDF6BYQ76","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_16","alias_value":"7EQGDF6BYQ76R4F4","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_8","alias_value":"7EQGDF6B","created_at":"2026-05-18T12:32:11Z"}],"graph_snapshots":[{"event_id":"sha256:78631db0e7f671630c32abbdd9ca83233e7fa99caf48a6d11d5a91bafc820f99","target":"graph","created_at":"2026-05-17T23:58:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Machine learning (ML) has become a core component of many real-world applications and training data is a key factor that drives current progress. This huge success has led Internet companies to deploy machine learning as a service (MLaaS). Recently, the first membership inference attack has shown that extraction of information on the training set is possible in such MLaaS settings, which has severe security and privacy implications.\n  However, the early demonstrations of the feasibility of such attacks have many assumptions on the adversary, such as using multiple so-called shadow models, know","authors_text":"Ahmed Salem, Mario Fritz, Mathias Humbert, Michael Backes, Pascal Berrang, Yang Zhang","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-06-04T17:38:42Z","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1806.01246","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:407e969dfea539fcd2a45c815679f76d6b6b71f662eed0734bb4c1a1e598ea47","target":"record","created_at":"2026-05-17T23:58:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4f8c61886eb859c7126b44947b76c4d8a77b57acd774cf0e0224c5bb4c143868","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-06-04T17:38:42Z","title_canon_sha256":"190ed574a47bf6818f6dafe111d53c85d531feb3e427d744b9d8aa22e2de0a1f"},"schema_version":"1.0","source":{"id":"1806.01246","kind":"arxiv","version":2}},"canonical_sha256":"f9206197c1c43fe8f0bc4641ff6eb3b078a6862cb2329a523af0a6a22e393322","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f9206197c1c43fe8f0bc4641ff6eb3b078a6862cb2329a523af0a6a22e393322","first_computed_at":"2026-05-17T23:58:14.232738Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:58:14.232738Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4KdASlhJYZb3WVenaSvALSsfhtfp05hk+G6ONmrTIdfBYJQM+EMaAM7fb8wKiWhWx+dgbgfb/mmqbaIQd3izBg==","signature_status":"signed_v1","signed_at":"2026-05-17T23:58:14.233244Z","signed_message":"canonical_sha256_bytes"},"source_id":"1806.01246","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:407e969dfea539fcd2a45c815679f76d6b6b71f662eed0734bb4c1a1e598ea47","sha256:78631db0e7f671630c32abbdd9ca83233e7fa99caf48a6d11d5a91bafc820f99"],"state_sha256":"524c6ea590db1ec54b96f6a7fe890dac6b6437c862dd3e1902f1aae4c28b42e3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BL1SqEHMK03vrMEEhj9ClqhPSYRp2mHERNwJ3nOL+iq2In3TsjgvGI1nsmTYyG2Ll7DEZkiig0zmbzZBNyWbDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T08:03:11.290822Z","bundle_sha256":"0ce6e1d09169f86217517e984b99f5a149b2b70e80df80c4412de4581cdc1f5b"}}