{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:AFEPRVFRH4VVMYMO7W272DIVPI","short_pith_number":"pith:AFEPRVFR","canonical_record":{"source":{"id":"2310.03838","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-10-05T18:46:27Z","cross_cats_sorted":[],"title_canon_sha256":"dc340c0eeaf43247e54397afe0ca026ee0ef267b76ea8682f87c5fd1f7578d5a","abstract_canon_sha256":"69e122eb596563ec3b1d0d7eaf7bf90e8a2e40f5ad0090b33daaf22e38f180a1"},"schema_version":"1.0"},"canonical_sha256":"0148f8d4b13f2b56618efdb5fd0d157a1d6ee289b6a40e7f2afda02a4a6805ec","source":{"kind":"arxiv","id":"2310.03838","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.03838","created_at":"2026-07-05T07:34:16Z"},{"alias_kind":"arxiv_version","alias_value":"2310.03838v2","created_at":"2026-07-05T07:34:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.03838","created_at":"2026-07-05T07:34:16Z"},{"alias_kind":"pith_short_12","alias_value":"AFEPRVFRH4VV","created_at":"2026-07-05T07:34:16Z"},{"alias_kind":"pith_short_16","alias_value":"AFEPRVFRH4VVMYMO","created_at":"2026-07-05T07:34:16Z"},{"alias_kind":"pith_short_8","alias_value":"AFEPRVFR","created_at":"2026-07-05T07:34:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:AFEPRVFRH4VVMYMO7W272DIVPI","target":"record","payload":{"canonical_record":{"source":{"id":"2310.03838","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-10-05T18:46:27Z","cross_cats_sorted":[],"title_canon_sha256":"dc340c0eeaf43247e54397afe0ca026ee0ef267b76ea8682f87c5fd1f7578d5a","abstract_canon_sha256":"69e122eb596563ec3b1d0d7eaf7bf90e8a2e40f5ad0090b33daaf22e38f180a1"},"schema_version":"1.0"},"canonical_sha256":"0148f8d4b13f2b56618efdb5fd0d157a1d6ee289b6a40e7f2afda02a4a6805ec","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:34:16.420758Z","signature_b64":"WpD1BeGw/vhIUMXcz3wEQ9/TpdDVFW3XfspiEUAnydRzZESsruBIc2Flc6erWhNPVfoWikAM2BysRB8+IqJOAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0148f8d4b13f2b56618efdb5fd0d157a1d6ee289b6a40e7f2afda02a4a6805ec","last_reissued_at":"2026-07-05T07:34:16.420239Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:34:16.420239Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.03838","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:34:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BH3hrKZNzHF1BQb2qBKUJBpjc+o6mSvVoEEH7BPpDMwLG9GBgP6OkSebKK+WpJRlIn+mLyv/iNinEsEUv0qlDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T19:01:33.262588Z"},"content_sha256":"c77fb55b27e90ba46ce313ea06fc11beedcba744bcbf678210992b9536ff5b3d","schema_version":"1.0","event_id":"sha256:c77fb55b27e90ba46ce313ea06fc11beedcba744bcbf678210992b9536ff5b3d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:AFEPRVFRH4VVMYMO7W272DIVPI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Chameleon: Increasing Label-Only Membership Leakage with Adaptive Poisoning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Alina Oprea, Giorgio Severi, Harsh Chaudhari, Jonathan Ullman","submitted_at":"2023-10-05T18:46:27Z","abstract_excerpt":"The integration of machine learning (ML) in numerous critical applications introduces a range of privacy concerns for individuals who provide their datasets for model training. One such privacy risk is Membership Inference (MI), in which an attacker seeks to determine whether a particular data sample was included in the training dataset of a model. Current state-of-the-art MI attacks capitalize on access to the model's predicted confidence scores to successfully perform membership inference, and employ data poisoning to further enhance their effectiveness. In this work, we focus on the less ex"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.03838","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.03838/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:34:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zOvmjtxcO58NDIkvIok4dfi/tVpt2vNgkRqRKGw74010dYpusUjdb2yE0F7CyKzyc3EMZj6NvXyCUlqQkT/cCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T19:01:33.262958Z"},"content_sha256":"ee24b8775493b092a822c51671a9b52b3eb25a9eaa708cca41bfd74ffab18d4a","schema_version":"1.0","event_id":"sha256:ee24b8775493b092a822c51671a9b52b3eb25a9eaa708cca41bfd74ffab18d4a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AFEPRVFRH4VVMYMO7W272DIVPI/bundle.json","state_url":"https://pith.science/pith/AFEPRVFRH4VVMYMO7W272DIVPI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AFEPRVFRH4VVMYMO7W272DIVPI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-08T19:01:33Z","links":{"resolver":"https://pith.science/pith/AFEPRVFRH4VVMYMO7W272DIVPI","bundle":"https://pith.science/pith/AFEPRVFRH4VVMYMO7W272DIVPI/bundle.json","state":"https://pith.science/pith/AFEPRVFRH4VVMYMO7W272DIVPI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AFEPRVFRH4VVMYMO7W272DIVPI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:AFEPRVFRH4VVMYMO7W272DIVPI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"69e122eb596563ec3b1d0d7eaf7bf90e8a2e40f5ad0090b33daaf22e38f180a1","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-10-05T18:46:27Z","title_canon_sha256":"dc340c0eeaf43247e54397afe0ca026ee0ef267b76ea8682f87c5fd1f7578d5a"},"schema_version":"1.0","source":{"id":"2310.03838","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.03838","created_at":"2026-07-05T07:34:16Z"},{"alias_kind":"arxiv_version","alias_value":"2310.03838v2","created_at":"2026-07-05T07:34:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.03838","created_at":"2026-07-05T07:34:16Z"},{"alias_kind":"pith_short_12","alias_value":"AFEPRVFRH4VV","created_at":"2026-07-05T07:34:16Z"},{"alias_kind":"pith_short_16","alias_value":"AFEPRVFRH4VVMYMO","created_at":"2026-07-05T07:34:16Z"},{"alias_kind":"pith_short_8","alias_value":"AFEPRVFR","created_at":"2026-07-05T07:34:16Z"}],"graph_snapshots":[{"event_id":"sha256:ee24b8775493b092a822c51671a9b52b3eb25a9eaa708cca41bfd74ffab18d4a","target":"graph","created_at":"2026-07-05T07:34:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.03838/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The integration of machine learning (ML) in numerous critical applications introduces a range of privacy concerns for individuals who provide their datasets for model training. One such privacy risk is Membership Inference (MI), in which an attacker seeks to determine whether a particular data sample was included in the training dataset of a model. Current state-of-the-art MI attacks capitalize on access to the model's predicted confidence scores to successfully perform membership inference, and employ data poisoning to further enhance their effectiveness. In this work, we focus on the less ex","authors_text":"Alina Oprea, Giorgio Severi, Harsh Chaudhari, Jonathan Ullman","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-10-05T18:46:27Z","title":"Chameleon: Increasing Label-Only Membership Leakage with Adaptive Poisoning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.03838","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c77fb55b27e90ba46ce313ea06fc11beedcba744bcbf678210992b9536ff5b3d","target":"record","created_at":"2026-07-05T07:34:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"69e122eb596563ec3b1d0d7eaf7bf90e8a2e40f5ad0090b33daaf22e38f180a1","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-10-05T18:46:27Z","title_canon_sha256":"dc340c0eeaf43247e54397afe0ca026ee0ef267b76ea8682f87c5fd1f7578d5a"},"schema_version":"1.0","source":{"id":"2310.03838","kind":"arxiv","version":2}},"canonical_sha256":"0148f8d4b13f2b56618efdb5fd0d157a1d6ee289b6a40e7f2afda02a4a6805ec","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0148f8d4b13f2b56618efdb5fd0d157a1d6ee289b6a40e7f2afda02a4a6805ec","first_computed_at":"2026-07-05T07:34:16.420239Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:34:16.420239Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"WpD1BeGw/vhIUMXcz3wEQ9/TpdDVFW3XfspiEUAnydRzZESsruBIc2Flc6erWhNPVfoWikAM2BysRB8+IqJOAw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:34:16.420758Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.03838","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c77fb55b27e90ba46ce313ea06fc11beedcba744bcbf678210992b9536ff5b3d","sha256:ee24b8775493b092a822c51671a9b52b3eb25a9eaa708cca41bfd74ffab18d4a"],"state_sha256":"845fe6380de317112a954d45dfbf801a53e0faf22212fb54f19b7b523c4f39fd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"InfoOZcx0Q+7t+iEut9bX+BE8lhIw2YAivlH5z0zKFvrlaNNWkmndstaZ9yPF3LWHRw/x7FEKRaa0BQEFbjQAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-08T19:01:33.265029Z","bundle_sha256":"127652347ba4881bd7b5eccd23753947040bdd0a54fe09cec9e5edd6cbb68248"}}