{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2020:7MFU4YXPO2A3M6P6VHO3HQQTOM","short_pith_number":"pith:7MFU4YXP","schema_version":"1.0","canonical_sha256":"fb0b4e62ef7681b679fea9ddb3c2137318b0fbb77a0d78b4a44011e4a0a4b5d9","source":{"kind":"arxiv","id":"2005.10881","version":5},"attestation_state":"computed","paper":{"title":"Revisiting Membership Inference Under Realistic Assumptions","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","stat.ML"],"primary_cat":"cs.CR","authors_text":"Bargav Jayaraman, David Evans, Katherine Knipmeyer, Lingxiao Wang, Quanquan Gu","submitted_at":"2020-05-21T20:17:42Z","abstract_excerpt":"We study membership inference in settings where some of the assumptions typically used in previous research are relaxed. First, we consider skewed priors, to cover cases such as when only a small fraction of the candidate pool targeted by the adversary are actually members and develop a PPV-based metric suitable for this setting. This setting is more realistic than the balanced prior setting typically considered by researchers. Second, we consider adversaries that select inference thresholds according to their attack goals and develop a threshold selection procedure that improves inference att"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2005.10881","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-21T20:17:42Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"b992e446e7e4d81a477187fe99e10038e7aed681c6e99ce40202dbbcb3a785b0","abstract_canon_sha256":"b8f3c9e5c00639da87e79a5da3cf784862d01f04e8415fa049bc768654285062"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:06:50.111114Z","signature_b64":"VdORiOEOsFMQ9K/JU7okGLtXKalSVW6vaHqHdUPllXL3LPzlZy0mQbprhKFkDZT2jdbm1tXhGggGsiDJe+udDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fb0b4e62ef7681b679fea9ddb3c2137318b0fbb77a0d78b4a44011e4a0a4b5d9","last_reissued_at":"2026-07-05T02:06:50.110766Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:06:50.110766Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Revisiting Membership Inference Under Realistic Assumptions","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","stat.ML"],"primary_cat":"cs.CR","authors_text":"Bargav Jayaraman, David Evans, Katherine Knipmeyer, Lingxiao Wang, Quanquan Gu","submitted_at":"2020-05-21T20:17:42Z","abstract_excerpt":"We study membership inference in settings where some of the assumptions typically used in previous research are relaxed. First, we consider skewed priors, to cover cases such as when only a small fraction of the candidate pool targeted by the adversary are actually members and develop a PPV-based metric suitable for this setting. This setting is more realistic than the balanced prior setting typically considered by researchers. Second, we consider adversaries that select inference thresholds according to their attack goals and develop a threshold selection procedure that improves inference att"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2005.10881","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2005.10881/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2005.10881","created_at":"2026-07-05T02:06:50.110822+00:00"},{"alias_kind":"arxiv_version","alias_value":"2005.10881v5","created_at":"2026-07-05T02:06:50.110822+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2005.10881","created_at":"2026-07-05T02:06:50.110822+00:00"},{"alias_kind":"pith_short_12","alias_value":"7MFU4YXPO2A3","created_at":"2026-07-05T02:06:50.110822+00:00"},{"alias_kind":"pith_short_16","alias_value":"7MFU4YXPO2A3M6P6","created_at":"2026-07-05T02:06:50.110822+00:00"},{"alias_kind":"pith_short_8","alias_value":"7MFU4YXP","created_at":"2026-07-05T02:06:50.110822+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":3,"internal_anchor_count":0,"sample":[{"citing_arxiv_id":"2606.17464","citing_title":"CheckMIABench: Firm Foundations For Membership Inference Attacks on Language Models","ref_index":13,"is_internal_anchor":false},{"citing_arxiv_id":"2606.09401","citing_title":"Benchmarking Empirical Privacy Protection for Adaptations of Large Language Models","ref_index":274,"is_internal_anchor":false},{"citing_arxiv_id":"2605.29454","citing_title":"A Full-Pipeline Framework for Evaluating Membership Inference Attacks in Machine Learning","ref_index":12,"is_internal_anchor":false}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/7MFU4YXPO2A3M6P6VHO3HQQTOM","json":"https://pith.science/pith/7MFU4YXPO2A3M6P6VHO3HQQTOM.json","graph_json":"https://pith.science/api/pith-number/7MFU4YXPO2A3M6P6VHO3HQQTOM/graph.json","events_json":"https://pith.science/api/pith-number/7MFU4YXPO2A3M6P6VHO3HQQTOM/events.json","paper":"https://pith.science/paper/7MFU4YXP"},"agent_actions":{"view_html":"https://pith.science/pith/7MFU4YXPO2A3M6P6VHO3HQQTOM","download_json":"https://pith.science/pith/7MFU4YXPO2A3M6P6VHO3HQQTOM.json","view_paper":"https://pith.science/paper/7MFU4YXP","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2005.10881&json=true","fetch_graph":"https://pith.science/api/pith-number/7MFU4YXPO2A3M6P6VHO3HQQTOM/graph.json","fetch_events":"https://pith.science/api/pith-number/7MFU4YXPO2A3M6P6VHO3HQQTOM/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/7MFU4YXPO2A3M6P6VHO3HQQTOM/action/timestamp_anchor","attest_storage":"https://pith.science/pith/7MFU4YXPO2A3M6P6VHO3HQQTOM/action/storage_attestation","attest_author":"https://pith.science/pith/7MFU4YXPO2A3M6P6VHO3HQQTOM/action/author_attestation","sign_citation":"https://pith.science/pith/7MFU4YXPO2A3M6P6VHO3HQQTOM/action/citation_signature","submit_replication":"https://pith.science/pith/7MFU4YXPO2A3M6P6VHO3HQQTOM/action/replication_record"}},"created_at":"2026-07-05T02:06:50.110822+00:00","updated_at":"2026-07-05T02:06:50.110822+00:00"}