{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:7MFU4YXPO2A3M6P6VHO3HQQTOM","short_pith_number":"pith:7MFU4YXP","canonical_record":{"source":{"id":"2005.10881","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-21T20:17:42Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"b992e446e7e4d81a477187fe99e10038e7aed681c6e99ce40202dbbcb3a785b0","abstract_canon_sha256":"b8f3c9e5c00639da87e79a5da3cf784862d01f04e8415fa049bc768654285062"},"schema_version":"1.0"},"canonical_sha256":"fb0b4e62ef7681b679fea9ddb3c2137318b0fbb77a0d78b4a44011e4a0a4b5d9","source":{"kind":"arxiv","id":"2005.10881","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2005.10881","created_at":"2026-07-05T02:06:50Z"},{"alias_kind":"arxiv_version","alias_value":"2005.10881v5","created_at":"2026-07-05T02:06:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2005.10881","created_at":"2026-07-05T02:06:50Z"},{"alias_kind":"pith_short_12","alias_value":"7MFU4YXPO2A3","created_at":"2026-07-05T02:06:50Z"},{"alias_kind":"pith_short_16","alias_value":"7MFU4YXPO2A3M6P6","created_at":"2026-07-05T02:06:50Z"},{"alias_kind":"pith_short_8","alias_value":"7MFU4YXP","created_at":"2026-07-05T02:06:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:7MFU4YXPO2A3M6P6VHO3HQQTOM","target":"record","payload":{"canonical_record":{"source":{"id":"2005.10881","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-21T20:17:42Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"b992e446e7e4d81a477187fe99e10038e7aed681c6e99ce40202dbbcb3a785b0","abstract_canon_sha256":"b8f3c9e5c00639da87e79a5da3cf784862d01f04e8415fa049bc768654285062"},"schema_version":"1.0"},"canonical_sha256":"fb0b4e62ef7681b679fea9ddb3c2137318b0fbb77a0d78b4a44011e4a0a4b5d9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:06:50.111114Z","signature_b64":"VdORiOEOsFMQ9K/JU7okGLtXKalSVW6vaHqHdUPllXL3LPzlZy0mQbprhKFkDZT2jdbm1tXhGggGsiDJe+udDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fb0b4e62ef7681b679fea9ddb3c2137318b0fbb77a0d78b4a44011e4a0a4b5d9","last_reissued_at":"2026-07-05T02:06:50.110766Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:06:50.110766Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2005.10881","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:06:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"me0H4Jz4K3E7FxWdZxkmVdzHzkWfMhH6xrfEIbUjj3YR5fzXVut0gDolU3Ur5Xig5n6zXSZtsrNglEGizm4GDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T00:31:46.541086Z"},"content_sha256":"7ff9abed61c020c429d81805a6e20283a6ac348c5d88cb1338e44b84c124486e","schema_version":"1.0","event_id":"sha256:7ff9abed61c020c429d81805a6e20283a6ac348c5d88cb1338e44b84c124486e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:7MFU4YXPO2A3M6P6VHO3HQQTOM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Revisiting Membership Inference Under Realistic Assumptions","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","stat.ML"],"primary_cat":"cs.CR","authors_text":"Bargav Jayaraman, David Evans, Katherine Knipmeyer, Lingxiao Wang, Quanquan Gu","submitted_at":"2020-05-21T20:17:42Z","abstract_excerpt":"We study membership inference in settings where some of the assumptions typically used in previous research are relaxed. First, we consider skewed priors, to cover cases such as when only a small fraction of the candidate pool targeted by the adversary are actually members and develop a PPV-based metric suitable for this setting. This setting is more realistic than the balanced prior setting typically considered by researchers. Second, we consider adversaries that select inference thresholds according to their attack goals and develop a threshold selection procedure that improves inference att"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2005.10881","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2005.10881/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:06:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"N1wGrH6brD/Y5A8AAf9UHufmFD9/y0RQHjS0ZOgE2zu210f3AFDsHS/vycajD+cmYotEUjyNeO8kcNbFZXxVDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T00:31:46.541592Z"},"content_sha256":"f1c8bd77f637c3a5f115d074eb8ee93bed99f564a0cc6ca3c1d5aa3f0508ca5a","schema_version":"1.0","event_id":"sha256:f1c8bd77f637c3a5f115d074eb8ee93bed99f564a0cc6ca3c1d5aa3f0508ca5a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7MFU4YXPO2A3M6P6VHO3HQQTOM/bundle.json","state_url":"https://pith.science/pith/7MFU4YXPO2A3M6P6VHO3HQQTOM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7MFU4YXPO2A3M6P6VHO3HQQTOM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T00:31:46Z","links":{"resolver":"https://pith.science/pith/7MFU4YXPO2A3M6P6VHO3HQQTOM","bundle":"https://pith.science/pith/7MFU4YXPO2A3M6P6VHO3HQQTOM/bundle.json","state":"https://pith.science/pith/7MFU4YXPO2A3M6P6VHO3HQQTOM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7MFU4YXPO2A3M6P6VHO3HQQTOM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:7MFU4YXPO2A3M6P6VHO3HQQTOM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b8f3c9e5c00639da87e79a5da3cf784862d01f04e8415fa049bc768654285062","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-21T20:17:42Z","title_canon_sha256":"b992e446e7e4d81a477187fe99e10038e7aed681c6e99ce40202dbbcb3a785b0"},"schema_version":"1.0","source":{"id":"2005.10881","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2005.10881","created_at":"2026-07-05T02:06:50Z"},{"alias_kind":"arxiv_version","alias_value":"2005.10881v5","created_at":"2026-07-05T02:06:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2005.10881","created_at":"2026-07-05T02:06:50Z"},{"alias_kind":"pith_short_12","alias_value":"7MFU4YXPO2A3","created_at":"2026-07-05T02:06:50Z"},{"alias_kind":"pith_short_16","alias_value":"7MFU4YXPO2A3M6P6","created_at":"2026-07-05T02:06:50Z"},{"alias_kind":"pith_short_8","alias_value":"7MFU4YXP","created_at":"2026-07-05T02:06:50Z"}],"graph_snapshots":[{"event_id":"sha256:f1c8bd77f637c3a5f115d074eb8ee93bed99f564a0cc6ca3c1d5aa3f0508ca5a","target":"graph","created_at":"2026-07-05T02:06:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2005.10881/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We study membership inference in settings where some of the assumptions typically used in previous research are relaxed. First, we consider skewed priors, to cover cases such as when only a small fraction of the candidate pool targeted by the adversary are actually members and develop a PPV-based metric suitable for this setting. This setting is more realistic than the balanced prior setting typically considered by researchers. Second, we consider adversaries that select inference thresholds according to their attack goals and develop a threshold selection procedure that improves inference att","authors_text":"Bargav Jayaraman, David Evans, Katherine Knipmeyer, Lingxiao Wang, Quanquan Gu","cross_cats":["cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-21T20:17:42Z","title":"Revisiting Membership Inference Under Realistic Assumptions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2005.10881","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7ff9abed61c020c429d81805a6e20283a6ac348c5d88cb1338e44b84c124486e","target":"record","created_at":"2026-07-05T02:06:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b8f3c9e5c00639da87e79a5da3cf784862d01f04e8415fa049bc768654285062","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-21T20:17:42Z","title_canon_sha256":"b992e446e7e4d81a477187fe99e10038e7aed681c6e99ce40202dbbcb3a785b0"},"schema_version":"1.0","source":{"id":"2005.10881","kind":"arxiv","version":5}},"canonical_sha256":"fb0b4e62ef7681b679fea9ddb3c2137318b0fbb77a0d78b4a44011e4a0a4b5d9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fb0b4e62ef7681b679fea9ddb3c2137318b0fbb77a0d78b4a44011e4a0a4b5d9","first_computed_at":"2026-07-05T02:06:50.110766Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:06:50.110766Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"VdORiOEOsFMQ9K/JU7okGLtXKalSVW6vaHqHdUPllXL3LPzlZy0mQbprhKFkDZT2jdbm1tXhGggGsiDJe+udDg==","signature_status":"signed_v1","signed_at":"2026-07-05T02:06:50.111114Z","signed_message":"canonical_sha256_bytes"},"source_id":"2005.10881","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7ff9abed61c020c429d81805a6e20283a6ac348c5d88cb1338e44b84c124486e","sha256:f1c8bd77f637c3a5f115d074eb8ee93bed99f564a0cc6ca3c1d5aa3f0508ca5a"],"state_sha256":"e831c8c799f9367e4d17d341d3c03dd28445b6563d260eb2c5ae3ef086669785"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ixoIzvl0uWsZBCSxzw4NzhqXuZzixNVAJMF4R6fO9laFoiObXSwLrE5aUkp2zU7Wnxts8xbsSFYwJqXJJRGiDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T00:31:46.544876Z","bundle_sha256":"85b553dc148c185a42e352467a9153277dff7cb8a992378b9334566841d3d06a"}}