{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:7N43JMXKMZMCG7VPCRRJVZ5RAW","short_pith_number":"pith:7N43JMXK","canonical_record":{"source":{"id":"2410.16657","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-22T03:02:29Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"d5684730d25319cd8f1f2c2c11bdc6d0745ac7e2b11b088e7557698fb96804e3","abstract_canon_sha256":"637ab82eeb8f2168862a85c23ef42ac46181a7e9972262d718acd8e015d0dedc"},"schema_version":"1.0"},"canonical_sha256":"fb79b4b2ea6658237eaf14629ae7b105927a8b1dbac14e38bf944d5050b86201","source":{"kind":"arxiv","id":"2410.16657","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.16657","created_at":"2026-07-05T09:24:04Z"},{"alias_kind":"arxiv_version","alias_value":"2410.16657v1","created_at":"2026-07-05T09:24:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.16657","created_at":"2026-07-05T09:24:04Z"},{"alias_kind":"pith_short_12","alias_value":"7N43JMXKMZMC","created_at":"2026-07-05T09:24:04Z"},{"alias_kind":"pith_short_16","alias_value":"7N43JMXKMZMCG7VP","created_at":"2026-07-05T09:24:04Z"},{"alias_kind":"pith_short_8","alias_value":"7N43JMXK","created_at":"2026-07-05T09:24:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:7N43JMXKMZMCG7VPCRRJVZ5RAW","target":"record","payload":{"canonical_record":{"source":{"id":"2410.16657","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-22T03:02:29Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"d5684730d25319cd8f1f2c2c11bdc6d0745ac7e2b11b088e7557698fb96804e3","abstract_canon_sha256":"637ab82eeb8f2168862a85c23ef42ac46181a7e9972262d718acd8e015d0dedc"},"schema_version":"1.0"},"canonical_sha256":"fb79b4b2ea6658237eaf14629ae7b105927a8b1dbac14e38bf944d5050b86201","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:24:04.708446Z","signature_b64":"XwJCDIq3Kwm2ImlGrdGmOi3QwtBfByZ3Q7Ee6FTMVLAtCyEmelC2Sa2oocPKeVDL+vGqH8EUsAnQlsBo4joCCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fb79b4b2ea6658237eaf14629ae7b105927a8b1dbac14e38bf944d5050b86201","last_reissued_at":"2026-07-05T09:24:04.708060Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:24:04.708060Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.16657","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:24:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9THYuscj0MhXkDuqz5JBMlVWo0P3u2gps7EuNaqv7/SPtrPn6PE0Xi3mZvERA18GsGInfDY0LIbLw9MCGuSxAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T21:33:27.220621Z"},"content_sha256":"c50abc4e7154ae643fa2e9bd1ceec5473b5c7ca6ab4e8438ad202e395fd038d6","schema_version":"1.0","event_id":"sha256:c50abc4e7154ae643fa2e9bd1ceec5473b5c7ca6ab4e8438ad202e395fd038d6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:7N43JMXKMZMCG7VPCRRJVZ5RAW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Dual-Model Defense: Safeguarding Diffusion Models from Membership Inference Attacks through Disjoint Data Splitting","license":"http://creativecommons.org/publicdomain/zero/1.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.LG","authors_text":"Anh Tran, Bao Q. Tran, Toan Tran, Viet Nguyen","submitted_at":"2024-10-22T03:02:29Z","abstract_excerpt":"Diffusion models have demonstrated remarkable capabilities in image synthesis, but their recently proven vulnerability to Membership Inference Attacks (MIAs) poses a critical privacy concern. This paper introduces two novel and efficient approaches (DualMD and DistillMD) to protect diffusion models against MIAs while maintaining high utility. Both methods are based on training two separate diffusion models on disjoint subsets of the original dataset. DualMD then employs a private inference pipeline that utilizes both models. This strategy significantly reduces the risk of black-box MIAs by lim"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.16657","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.16657/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:24:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jtl53HmYJYvRdxGhL5LgWY5gGjDQfZwpWp09C30TtQwMqXlleWwqCxAsk52K27GgNsmvy3aVhFGFgabpQyzAAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T21:33:27.221368Z"},"content_sha256":"3134406d2100534ede88f504c2bb351df00d51fb4539c46569f0f21a3f78225f","schema_version":"1.0","event_id":"sha256:3134406d2100534ede88f504c2bb351df00d51fb4539c46569f0f21a3f78225f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7N43JMXKMZMCG7VPCRRJVZ5RAW/bundle.json","state_url":"https://pith.science/pith/7N43JMXKMZMCG7VPCRRJVZ5RAW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7N43JMXKMZMCG7VPCRRJVZ5RAW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T21:33:27Z","links":{"resolver":"https://pith.science/pith/7N43JMXKMZMCG7VPCRRJVZ5RAW","bundle":"https://pith.science/pith/7N43JMXKMZMCG7VPCRRJVZ5RAW/bundle.json","state":"https://pith.science/pith/7N43JMXKMZMCG7VPCRRJVZ5RAW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7N43JMXKMZMCG7VPCRRJVZ5RAW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:7N43JMXKMZMCG7VPCRRJVZ5RAW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"637ab82eeb8f2168862a85c23ef42ac46181a7e9972262d718acd8e015d0dedc","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-22T03:02:29Z","title_canon_sha256":"d5684730d25319cd8f1f2c2c11bdc6d0745ac7e2b11b088e7557698fb96804e3"},"schema_version":"1.0","source":{"id":"2410.16657","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.16657","created_at":"2026-07-05T09:24:04Z"},{"alias_kind":"arxiv_version","alias_value":"2410.16657v1","created_at":"2026-07-05T09:24:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.16657","created_at":"2026-07-05T09:24:04Z"},{"alias_kind":"pith_short_12","alias_value":"7N43JMXKMZMC","created_at":"2026-07-05T09:24:04Z"},{"alias_kind":"pith_short_16","alias_value":"7N43JMXKMZMCG7VP","created_at":"2026-07-05T09:24:04Z"},{"alias_kind":"pith_short_8","alias_value":"7N43JMXK","created_at":"2026-07-05T09:24:04Z"}],"graph_snapshots":[{"event_id":"sha256:3134406d2100534ede88f504c2bb351df00d51fb4539c46569f0f21a3f78225f","target":"graph","created_at":"2026-07-05T09:24:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.16657/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Diffusion models have demonstrated remarkable capabilities in image synthesis, but their recently proven vulnerability to Membership Inference Attacks (MIAs) poses a critical privacy concern. This paper introduces two novel and efficient approaches (DualMD and DistillMD) to protect diffusion models against MIAs while maintaining high utility. Both methods are based on training two separate diffusion models on disjoint subsets of the original dataset. DualMD then employs a private inference pipeline that utilizes both models. This strategy significantly reduces the risk of black-box MIAs by lim","authors_text":"Anh Tran, Bao Q. Tran, Toan Tran, Viet Nguyen","cross_cats":["cs.CV"],"headline":"","license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-22T03:02:29Z","title":"Dual-Model Defense: Safeguarding Diffusion Models from Membership Inference Attacks through Disjoint Data Splitting"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.16657","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c50abc4e7154ae643fa2e9bd1ceec5473b5c7ca6ab4e8438ad202e395fd038d6","target":"record","created_at":"2026-07-05T09:24:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"637ab82eeb8f2168862a85c23ef42ac46181a7e9972262d718acd8e015d0dedc","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-22T03:02:29Z","title_canon_sha256":"d5684730d25319cd8f1f2c2c11bdc6d0745ac7e2b11b088e7557698fb96804e3"},"schema_version":"1.0","source":{"id":"2410.16657","kind":"arxiv","version":1}},"canonical_sha256":"fb79b4b2ea6658237eaf14629ae7b105927a8b1dbac14e38bf944d5050b86201","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fb79b4b2ea6658237eaf14629ae7b105927a8b1dbac14e38bf944d5050b86201","first_computed_at":"2026-07-05T09:24:04.708060Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:24:04.708060Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"XwJCDIq3Kwm2ImlGrdGmOi3QwtBfByZ3Q7Ee6FTMVLAtCyEmelC2Sa2oocPKeVDL+vGqH8EUsAnQlsBo4joCCA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:24:04.708446Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.16657","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c50abc4e7154ae643fa2e9bd1ceec5473b5c7ca6ab4e8438ad202e395fd038d6","sha256:3134406d2100534ede88f504c2bb351df00d51fb4539c46569f0f21a3f78225f"],"state_sha256":"cfa590ff9ec1964d080f9ecc3f9db7f2d67a6a45f1ea1df6888a642f4758976c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7tBz4+U4nmG5uGJHRWc1O4HenfkCuwW7XzExCpcN9q67UPm6YlLPtlOKuTT9xQde+BlM1WIsKcWQV0I5XhN3CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T21:33:27.226712Z","bundle_sha256":"82ef8c7a296dc7719329fd369da13864049f43d0dfa99cd118b9969b8cc6186c"}}