{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:ADTYY6VKZKNU7THYSG7IZFRXJ3","short_pith_number":"pith:ADTYY6VK","canonical_record":{"source":{"id":"2303.03908","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-03-07T14:11:01Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"b511e230775a0932b91ead78dd6690d8e838c9aaf9df2750dbdb0fe15123176d","abstract_canon_sha256":"878a91303b363a355479f0bbe85bc5763d5a8c22b68852c47315655da128629f"},"schema_version":"1.0"},"canonical_sha256":"00e78c7aaaca9b4fccf891be8c96374ec4d1440d4d234e250ac5d7458ea734fc","source":{"kind":"arxiv","id":"2303.03908","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.03908","created_at":"2026-07-05T07:06:02Z"},{"alias_kind":"arxiv_version","alias_value":"2303.03908v2","created_at":"2026-07-05T07:06:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.03908","created_at":"2026-07-05T07:06:02Z"},{"alias_kind":"pith_short_12","alias_value":"ADTYY6VKZKNU","created_at":"2026-07-05T07:06:02Z"},{"alias_kind":"pith_short_16","alias_value":"ADTYY6VKZKNU7THY","created_at":"2026-07-05T07:06:02Z"},{"alias_kind":"pith_short_8","alias_value":"ADTYY6VK","created_at":"2026-07-05T07:06:02Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:ADTYY6VKZKNU7THYSG7IZFRXJ3","target":"record","payload":{"canonical_record":{"source":{"id":"2303.03908","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-03-07T14:11:01Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"b511e230775a0932b91ead78dd6690d8e838c9aaf9df2750dbdb0fe15123176d","abstract_canon_sha256":"878a91303b363a355479f0bbe85bc5763d5a8c22b68852c47315655da128629f"},"schema_version":"1.0"},"canonical_sha256":"00e78c7aaaca9b4fccf891be8c96374ec4d1440d4d234e250ac5d7458ea734fc","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:06:02.090735Z","signature_b64":"Rk0H0LCJYvaQPbtpikBN0uGSO8Y70zSGdPUAj1fl83Lh12Vu8QpHeNXR41BCEg/RRy0UHntCpFsFWpVzll3ABA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"00e78c7aaaca9b4fccf891be8c96374ec4d1440d4d234e250ac5d7458ea734fc","last_reissued_at":"2026-07-05T07:06:02.090302Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:06:02.090302Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2303.03908","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:06:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ARpHrALsbmf2uWEHbF6e53Iz5fVvL9Dwi4ziE7HmDWf603CgyONpg/AXF+Fc08huNviESXx5dLte9iFvQNBFDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T17:09:51.480346Z"},"content_sha256":"7170eee37255da65a3db319bb73fefaa683db9abfed647c1f900a40f7dc512c3","schema_version":"1.0","event_id":"sha256:7170eee37255da65a3db319bb73fefaa683db9abfed647c1f900a40f7dc512c3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:ADTYY6VKZKNU7THYSG7IZFRXJ3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Client-specific Property Inference against Secure Aggregation in Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Gergely \\'Acs, Mario Fritz, Raouf Kerkouche","submitted_at":"2023-03-07T14:11:01Z","abstract_excerpt":"Federated learning has become a widely used paradigm for collaboratively training a common model among different participants with the help of a central server that coordinates the training. Although only the model parameters or other model updates are exchanged during the federated training instead of the participant's data, many attacks have shown that it is still possible to infer sensitive information such as membership, property, or outright reconstruction of participant data. Although differential privacy is considered an effective solution to protect against privacy attacks, it is also "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.03908","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2303.03908/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:06:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SAL1qUCKBlw8Fs2toIVYzvqUAP0nVKiHgWCcFwjm6g7PjEjtK/5JBqDthT/gyvV/09QUTwSLQdv6NSFXIEh2Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T17:09:51.481083Z"},"content_sha256":"f7a0d2ef334edc2f264e3ac033ba819442f54462d363bed107a4943c77dec714","schema_version":"1.0","event_id":"sha256:f7a0d2ef334edc2f264e3ac033ba819442f54462d363bed107a4943c77dec714"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ADTYY6VKZKNU7THYSG7IZFRXJ3/bundle.json","state_url":"https://pith.science/pith/ADTYY6VKZKNU7THYSG7IZFRXJ3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ADTYY6VKZKNU7THYSG7IZFRXJ3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T17:09:51Z","links":{"resolver":"https://pith.science/pith/ADTYY6VKZKNU7THYSG7IZFRXJ3","bundle":"https://pith.science/pith/ADTYY6VKZKNU7THYSG7IZFRXJ3/bundle.json","state":"https://pith.science/pith/ADTYY6VKZKNU7THYSG7IZFRXJ3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ADTYY6VKZKNU7THYSG7IZFRXJ3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:ADTYY6VKZKNU7THYSG7IZFRXJ3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"878a91303b363a355479f0bbe85bc5763d5a8c22b68852c47315655da128629f","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-03-07T14:11:01Z","title_canon_sha256":"b511e230775a0932b91ead78dd6690d8e838c9aaf9df2750dbdb0fe15123176d"},"schema_version":"1.0","source":{"id":"2303.03908","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.03908","created_at":"2026-07-05T07:06:02Z"},{"alias_kind":"arxiv_version","alias_value":"2303.03908v2","created_at":"2026-07-05T07:06:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.03908","created_at":"2026-07-05T07:06:02Z"},{"alias_kind":"pith_short_12","alias_value":"ADTYY6VKZKNU","created_at":"2026-07-05T07:06:02Z"},{"alias_kind":"pith_short_16","alias_value":"ADTYY6VKZKNU7THY","created_at":"2026-07-05T07:06:02Z"},{"alias_kind":"pith_short_8","alias_value":"ADTYY6VK","created_at":"2026-07-05T07:06:02Z"}],"graph_snapshots":[{"event_id":"sha256:f7a0d2ef334edc2f264e3ac033ba819442f54462d363bed107a4943c77dec714","target":"graph","created_at":"2026-07-05T07:06:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2303.03908/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning has become a widely used paradigm for collaboratively training a common model among different participants with the help of a central server that coordinates the training. Although only the model parameters or other model updates are exchanged during the federated training instead of the participant's data, many attacks have shown that it is still possible to infer sensitive information such as membership, property, or outright reconstruction of participant data. Although differential privacy is considered an effective solution to protect against privacy attacks, it is also ","authors_text":"Gergely \\'Acs, Mario Fritz, Raouf Kerkouche","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-03-07T14:11:01Z","title":"Client-specific Property Inference against Secure Aggregation in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.03908","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7170eee37255da65a3db319bb73fefaa683db9abfed647c1f900a40f7dc512c3","target":"record","created_at":"2026-07-05T07:06:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"878a91303b363a355479f0bbe85bc5763d5a8c22b68852c47315655da128629f","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-03-07T14:11:01Z","title_canon_sha256":"b511e230775a0932b91ead78dd6690d8e838c9aaf9df2750dbdb0fe15123176d"},"schema_version":"1.0","source":{"id":"2303.03908","kind":"arxiv","version":2}},"canonical_sha256":"00e78c7aaaca9b4fccf891be8c96374ec4d1440d4d234e250ac5d7458ea734fc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"00e78c7aaaca9b4fccf891be8c96374ec4d1440d4d234e250ac5d7458ea734fc","first_computed_at":"2026-07-05T07:06:02.090302Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:06:02.090302Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Rk0H0LCJYvaQPbtpikBN0uGSO8Y70zSGdPUAj1fl83Lh12Vu8QpHeNXR41BCEg/RRy0UHntCpFsFWpVzll3ABA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:06:02.090735Z","signed_message":"canonical_sha256_bytes"},"source_id":"2303.03908","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7170eee37255da65a3db319bb73fefaa683db9abfed647c1f900a40f7dc512c3","sha256:f7a0d2ef334edc2f264e3ac033ba819442f54462d363bed107a4943c77dec714"],"state_sha256":"af30df9484d57f368a90e5e7c91a7fed3de460f814cab6a508db1337a5762851"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AoEn7pAj/zTr5NgKW+9giCKd7PysfNuETxOzrpS40j6Q5ZmI5LkyOPVgx4/UTza0vYFiYu8rArhhBXreSc1NDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T17:09:51.489220Z","bundle_sha256":"012f3c0a749ac0a35b20b13b33d74c106f7c4e011d6fdec4c5144a6633565c93"}}