{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:ACJCTXPU2ND7QTXCRL3FLCWCYB","short_pith_number":"pith:ACJCTXPU","canonical_record":{"source":{"id":"2402.18027","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-02-28T03:47:17Z","cross_cats_sorted":[],"title_canon_sha256":"a13b7e123bb1c2a0e1f5e23083adbc186c75c816d342eb1089f2ea87dc661b42","abstract_canon_sha256":"1d062e2e28a3105f61018cfcb91c231ac88659853b830202a2ef1ccac7b6e7d2"},"schema_version":"1.0"},"canonical_sha256":"009229ddf4d347f84ee28af6558ac2c06e4a7464468aa6968bc66e4ca135eb0d","source":{"kind":"arxiv","id":"2402.18027","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.18027","created_at":"2026-07-05T07:50:10Z"},{"alias_kind":"arxiv_version","alias_value":"2402.18027v1","created_at":"2026-07-05T07:50:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.18027","created_at":"2026-07-05T07:50:10Z"},{"alias_kind":"pith_short_12","alias_value":"ACJCTXPU2ND7","created_at":"2026-07-05T07:50:10Z"},{"alias_kind":"pith_short_16","alias_value":"ACJCTXPU2ND7QTXC","created_at":"2026-07-05T07:50:10Z"},{"alias_kind":"pith_short_8","alias_value":"ACJCTXPU","created_at":"2026-07-05T07:50:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:ACJCTXPU2ND7QTXCRL3FLCWCYB","target":"record","payload":{"canonical_record":{"source":{"id":"2402.18027","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-02-28T03:47:17Z","cross_cats_sorted":[],"title_canon_sha256":"a13b7e123bb1c2a0e1f5e23083adbc186c75c816d342eb1089f2ea87dc661b42","abstract_canon_sha256":"1d062e2e28a3105f61018cfcb91c231ac88659853b830202a2ef1ccac7b6e7d2"},"schema_version":"1.0"},"canonical_sha256":"009229ddf4d347f84ee28af6558ac2c06e4a7464468aa6968bc66e4ca135eb0d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:50:10.978704Z","signature_b64":"p0KE02jmrlAQSVUodb2QVTXbhajwMfGk3dd9G0fBvHoam3lL+Hvj728xAI6xadylHgkqiZx420zR3sfkhoOCCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"009229ddf4d347f84ee28af6558ac2c06e4a7464468aa6968bc66e4ca135eb0d","last_reissued_at":"2026-07-05T07:50:10.978311Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:50:10.978311Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.18027","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:50:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"l0SQ6Y+Dv8ScAsCTr1ZcPLiwMZ+5DF5UB0liMf1CLF1ozhcDkS9N1B/LfIoRGKlaVm69DJdChW4/nsCCXuJODA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T20:32:47.528669Z"},"content_sha256":"46a218745c40efbe32007000b69b2a963290f40638715a4cff241abd0a574175","schema_version":"1.0","event_id":"sha256:46a218745c40efbe32007000b69b2a963290f40638715a4cff241abd0a574175"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:ACJCTXPU2ND7QTXCRL3FLCWCYB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Breaking the Black-Box: Confidence-Guided Model Inversion Attack for Distribution Shift","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Xinhao Liu, YingZhao Jiang, Zetao Lin","submitted_at":"2024-02-28T03:47:17Z","abstract_excerpt":"Model inversion attacks (MIAs) seek to infer the private training data of a target classifier by generating synthetic images that reflect the characteristics of the target class through querying the model. However, prior studies have relied on full access to the target model, which is not practical in real-world scenarios. Additionally, existing black-box MIAs assume that the image prior and target model follow the same distribution. However, when confronted with diverse data distribution settings, these methods may result in suboptimal performance in conducting attacks. To address these limit"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.18027","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.18027/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:50:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iTksmqpeN91Dhdo2fJDnnpe9n0A9bwMFQwx/IXypTx9OP10VyLJNNo0YprCHzyPNBkbx4ZHxujMOdBH72p3kCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T20:32:47.529037Z"},"content_sha256":"357b664cf6e2b821f5929df56e8aa43ca55346e4de8dd662b732d9220f048941","schema_version":"1.0","event_id":"sha256:357b664cf6e2b821f5929df56e8aa43ca55346e4de8dd662b732d9220f048941"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ACJCTXPU2ND7QTXCRL3FLCWCYB/bundle.json","state_url":"https://pith.science/pith/ACJCTXPU2ND7QTXCRL3FLCWCYB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ACJCTXPU2ND7QTXCRL3FLCWCYB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T20:32:47Z","links":{"resolver":"https://pith.science/pith/ACJCTXPU2ND7QTXCRL3FLCWCYB","bundle":"https://pith.science/pith/ACJCTXPU2ND7QTXCRL3FLCWCYB/bundle.json","state":"https://pith.science/pith/ACJCTXPU2ND7QTXCRL3FLCWCYB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ACJCTXPU2ND7QTXCRL3FLCWCYB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:ACJCTXPU2ND7QTXCRL3FLCWCYB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1d062e2e28a3105f61018cfcb91c231ac88659853b830202a2ef1ccac7b6e7d2","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-02-28T03:47:17Z","title_canon_sha256":"a13b7e123bb1c2a0e1f5e23083adbc186c75c816d342eb1089f2ea87dc661b42"},"schema_version":"1.0","source":{"id":"2402.18027","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.18027","created_at":"2026-07-05T07:50:10Z"},{"alias_kind":"arxiv_version","alias_value":"2402.18027v1","created_at":"2026-07-05T07:50:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.18027","created_at":"2026-07-05T07:50:10Z"},{"alias_kind":"pith_short_12","alias_value":"ACJCTXPU2ND7","created_at":"2026-07-05T07:50:10Z"},{"alias_kind":"pith_short_16","alias_value":"ACJCTXPU2ND7QTXC","created_at":"2026-07-05T07:50:10Z"},{"alias_kind":"pith_short_8","alias_value":"ACJCTXPU","created_at":"2026-07-05T07:50:10Z"}],"graph_snapshots":[{"event_id":"sha256:357b664cf6e2b821f5929df56e8aa43ca55346e4de8dd662b732d9220f048941","target":"graph","created_at":"2026-07-05T07:50:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.18027/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Model inversion attacks (MIAs) seek to infer the private training data of a target classifier by generating synthetic images that reflect the characteristics of the target class through querying the model. However, prior studies have relied on full access to the target model, which is not practical in real-world scenarios. Additionally, existing black-box MIAs assume that the image prior and target model follow the same distribution. However, when confronted with diverse data distribution settings, these methods may result in suboptimal performance in conducting attacks. To address these limit","authors_text":"Xinhao Liu, YingZhao Jiang, Zetao Lin","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-02-28T03:47:17Z","title":"Breaking the Black-Box: Confidence-Guided Model Inversion Attack for Distribution Shift"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.18027","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:46a218745c40efbe32007000b69b2a963290f40638715a4cff241abd0a574175","target":"record","created_at":"2026-07-05T07:50:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1d062e2e28a3105f61018cfcb91c231ac88659853b830202a2ef1ccac7b6e7d2","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-02-28T03:47:17Z","title_canon_sha256":"a13b7e123bb1c2a0e1f5e23083adbc186c75c816d342eb1089f2ea87dc661b42"},"schema_version":"1.0","source":{"id":"2402.18027","kind":"arxiv","version":1}},"canonical_sha256":"009229ddf4d347f84ee28af6558ac2c06e4a7464468aa6968bc66e4ca135eb0d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"009229ddf4d347f84ee28af6558ac2c06e4a7464468aa6968bc66e4ca135eb0d","first_computed_at":"2026-07-05T07:50:10.978311Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:50:10.978311Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"p0KE02jmrlAQSVUodb2QVTXbhajwMfGk3dd9G0fBvHoam3lL+Hvj728xAI6xadylHgkqiZx420zR3sfkhoOCCA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:50:10.978704Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.18027","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:46a218745c40efbe32007000b69b2a963290f40638715a4cff241abd0a574175","sha256:357b664cf6e2b821f5929df56e8aa43ca55346e4de8dd662b732d9220f048941"],"state_sha256":"c42a75f0d1ea652035e0a10a4f5bbe309527041ab3564548ea2b12fb5ba090fe"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EJqWyA1HHIUzKNVhuY3v5PQgAnXEdjgbNzXmrCLw4tI6h51KYD8Q4xwpF5tnbhHwJlRviFZDh62zKEta+mmqDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T20:32:47.531630Z","bundle_sha256":"c4812a9a7e8ed868c50961149cb67b965df6c46cd1b21278ef65fdbebda3c97c"}}