{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:7MFU4YXPO2A3M6P6VHO3HQQTOM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b8f3c9e5c00639da87e79a5da3cf784862d01f04e8415fa049bc768654285062","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-21T20:17:42Z","title_canon_sha256":"b992e446e7e4d81a477187fe99e10038e7aed681c6e99ce40202dbbcb3a785b0"},"schema_version":"1.0","source":{"id":"2005.10881","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2005.10881","created_at":"2026-07-05T02:06:50Z"},{"alias_kind":"arxiv_version","alias_value":"2005.10881v5","created_at":"2026-07-05T02:06:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2005.10881","created_at":"2026-07-05T02:06:50Z"},{"alias_kind":"pith_short_12","alias_value":"7MFU4YXPO2A3","created_at":"2026-07-05T02:06:50Z"},{"alias_kind":"pith_short_16","alias_value":"7MFU4YXPO2A3M6P6","created_at":"2026-07-05T02:06:50Z"},{"alias_kind":"pith_short_8","alias_value":"7MFU4YXP","created_at":"2026-07-05T02:06:50Z"}],"graph_snapshots":[{"event_id":"sha256:f1c8bd77f637c3a5f115d074eb8ee93bed99f564a0cc6ca3c1d5aa3f0508ca5a","target":"graph","created_at":"2026-07-05T02:06:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2005.10881/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We study membership inference in settings where some of the assumptions typically used in previous research are relaxed. First, we consider skewed priors, to cover cases such as when only a small fraction of the candidate pool targeted by the adversary are actually members and develop a PPV-based metric suitable for this setting. This setting is more realistic than the balanced prior setting typically considered by researchers. Second, we consider adversaries that select inference thresholds according to their attack goals and develop a threshold selection procedure that improves inference att","authors_text":"Bargav Jayaraman, David Evans, Katherine Knipmeyer, Lingxiao Wang, Quanquan Gu","cross_cats":["cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-21T20:17:42Z","title":"Revisiting Membership Inference Under Realistic Assumptions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2005.10881","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7ff9abed61c020c429d81805a6e20283a6ac348c5d88cb1338e44b84c124486e","target":"record","created_at":"2026-07-05T02:06:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b8f3c9e5c00639da87e79a5da3cf784862d01f04e8415fa049bc768654285062","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-21T20:17:42Z","title_canon_sha256":"b992e446e7e4d81a477187fe99e10038e7aed681c6e99ce40202dbbcb3a785b0"},"schema_version":"1.0","source":{"id":"2005.10881","kind":"arxiv","version":5}},"canonical_sha256":"fb0b4e62ef7681b679fea9ddb3c2137318b0fbb77a0d78b4a44011e4a0a4b5d9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fb0b4e62ef7681b679fea9ddb3c2137318b0fbb77a0d78b4a44011e4a0a4b5d9","first_computed_at":"2026-07-05T02:06:50.110766Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:06:50.110766Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"VdORiOEOsFMQ9K/JU7okGLtXKalSVW6vaHqHdUPllXL3LPzlZy0mQbprhKFkDZT2jdbm1tXhGggGsiDJe+udDg==","signature_status":"signed_v1","signed_at":"2026-07-05T02:06:50.111114Z","signed_message":"canonical_sha256_bytes"},"source_id":"2005.10881","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7ff9abed61c020c429d81805a6e20283a6ac348c5d88cb1338e44b84c124486e","sha256:f1c8bd77f637c3a5f115d074eb8ee93bed99f564a0cc6ca3c1d5aa3f0508ca5a"],"state_sha256":"e831c8c799f9367e4d17d341d3c03dd28445b6563d260eb2c5ae3ef086669785"}