{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:AIMA3CRRKFEOFZYSMMOCG2MWGX","short_pith_number":"pith:AIMA3CRR","canonical_record":{"source":{"id":"2208.10445","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-08-22T17:00:53Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"ab9044f5afa1a9dfd8b14d3f13ca25dde08aaead9f69a9fb925c7f8b7fbbf4f0","abstract_canon_sha256":"0705def2366b51d7dbbbb87c03a4753974bfa3df44a7653b304d8e848b1ac7e3"},"schema_version":"1.0"},"canonical_sha256":"02180d8a315148e2e712631c23699635cff1429ecdc403817b5e2bbaf2b8e060","source":{"kind":"arxiv","id":"2208.10445","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2208.10445","created_at":"2026-07-05T04:50:28Z"},{"alias_kind":"arxiv_version","alias_value":"2208.10445v1","created_at":"2026-07-05T04:50:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2208.10445","created_at":"2026-07-05T04:50:28Z"},{"alias_kind":"pith_short_12","alias_value":"AIMA3CRRKFEO","created_at":"2026-07-05T04:50:28Z"},{"alias_kind":"pith_short_16","alias_value":"AIMA3CRRKFEOFZYS","created_at":"2026-07-05T04:50:28Z"},{"alias_kind":"pith_short_8","alias_value":"AIMA3CRR","created_at":"2026-07-05T04:50:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:AIMA3CRRKFEOFZYSMMOCG2MWGX","target":"record","payload":{"canonical_record":{"source":{"id":"2208.10445","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-08-22T17:00:53Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"ab9044f5afa1a9dfd8b14d3f13ca25dde08aaead9f69a9fb925c7f8b7fbbf4f0","abstract_canon_sha256":"0705def2366b51d7dbbbb87c03a4753974bfa3df44a7653b304d8e848b1ac7e3"},"schema_version":"1.0"},"canonical_sha256":"02180d8a315148e2e712631c23699635cff1429ecdc403817b5e2bbaf2b8e060","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:50:28.889983Z","signature_b64":"pBdf0SEDfsnzvXTkJHoyJx9wkbRS4znLBY3rK9AWrLKljzKZhA0S0zqtLZ16uEiDTxqqNCmaP+GOwqhOTykoBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"02180d8a315148e2e712631c23699635cff1429ecdc403817b5e2bbaf2b8e060","last_reissued_at":"2026-07-05T04:50:28.889543Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:50:28.889543Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2208.10445","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:50:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XFwdr4f26CRwv8Runq/4pKVcxVwl2ZyXfzjxhIqAEkKIdpFWo5mZX7wSbNIiqZyidT+fG1SHXNsZ6MOhAaQKBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T13:46:01.825862Z"},"content_sha256":"1e11a474c6b90bb19d247b01918c43016065adc77621edf2ae0cf67ae685098e","schema_version":"1.0","event_id":"sha256:1e11a474c6b90bb19d247b01918c43016065adc77621edf2ae0cf67ae685098e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:AIMA3CRRKFEOFZYSMMOCG2MWGX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Cory Cornelius, Weilin Xu, Xinlei He, Yang Zhang, Zheng Li","submitted_at":"2022-08-22T17:00:53Z","abstract_excerpt":"Machine learning models are prone to memorizing sensitive data, making them vulnerable to membership inference attacks in which an adversary aims to infer whether an input sample was used to train the model. Over the past few years, researchers have produced many membership inference attacks and defenses. However, these attacks and defenses employ a variety of strategies and are conducted in different models and datasets. The lack of comprehensive benchmark, however, means we do not understand the strengths and weaknesses of existing attacks and defenses.\n  We fill this gap by presenting a lar"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2208.10445","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2208.10445/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:50:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0ROiNVY4n93AJcV5FQ/1yJYc/t00BuAEd/FjGKJFLfFjQJI93Vs+6amN+JnNBWm9OIGWP3UWDQqP7YfohcwMDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T13:46:01.826158Z"},"content_sha256":"13685bba1c44da93b232902c3f3c9a253b14610e57226d8f07e8522c0f61c5cd","schema_version":"1.0","event_id":"sha256:13685bba1c44da93b232902c3f3c9a253b14610e57226d8f07e8522c0f61c5cd"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AIMA3CRRKFEOFZYSMMOCG2MWGX/bundle.json","state_url":"https://pith.science/pith/AIMA3CRRKFEOFZYSMMOCG2MWGX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AIMA3CRRKFEOFZYSMMOCG2MWGX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T13:46:01Z","links":{"resolver":"https://pith.science/pith/AIMA3CRRKFEOFZYSMMOCG2MWGX","bundle":"https://pith.science/pith/AIMA3CRRKFEOFZYSMMOCG2MWGX/bundle.json","state":"https://pith.science/pith/AIMA3CRRKFEOFZYSMMOCG2MWGX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AIMA3CRRKFEOFZYSMMOCG2MWGX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:AIMA3CRRKFEOFZYSMMOCG2MWGX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0705def2366b51d7dbbbb87c03a4753974bfa3df44a7653b304d8e848b1ac7e3","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-08-22T17:00:53Z","title_canon_sha256":"ab9044f5afa1a9dfd8b14d3f13ca25dde08aaead9f69a9fb925c7f8b7fbbf4f0"},"schema_version":"1.0","source":{"id":"2208.10445","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2208.10445","created_at":"2026-07-05T04:50:28Z"},{"alias_kind":"arxiv_version","alias_value":"2208.10445v1","created_at":"2026-07-05T04:50:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2208.10445","created_at":"2026-07-05T04:50:28Z"},{"alias_kind":"pith_short_12","alias_value":"AIMA3CRRKFEO","created_at":"2026-07-05T04:50:28Z"},{"alias_kind":"pith_short_16","alias_value":"AIMA3CRRKFEOFZYS","created_at":"2026-07-05T04:50:28Z"},{"alias_kind":"pith_short_8","alias_value":"AIMA3CRR","created_at":"2026-07-05T04:50:28Z"}],"graph_snapshots":[{"event_id":"sha256:13685bba1c44da93b232902c3f3c9a253b14610e57226d8f07e8522c0f61c5cd","target":"graph","created_at":"2026-07-05T04:50:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2208.10445/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning models are prone to memorizing sensitive data, making them vulnerable to membership inference attacks in which an adversary aims to infer whether an input sample was used to train the model. Over the past few years, researchers have produced many membership inference attacks and defenses. However, these attacks and defenses employ a variety of strategies and are conducted in different models and datasets. The lack of comprehensive benchmark, however, means we do not understand the strengths and weaknesses of existing attacks and defenses.\n  We fill this gap by presenting a lar","authors_text":"Cory Cornelius, Weilin Xu, Xinlei He, Yang Zhang, Zheng Li","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-08-22T17:00:53Z","title":"Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2208.10445","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1e11a474c6b90bb19d247b01918c43016065adc77621edf2ae0cf67ae685098e","target":"record","created_at":"2026-07-05T04:50:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0705def2366b51d7dbbbb87c03a4753974bfa3df44a7653b304d8e848b1ac7e3","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-08-22T17:00:53Z","title_canon_sha256":"ab9044f5afa1a9dfd8b14d3f13ca25dde08aaead9f69a9fb925c7f8b7fbbf4f0"},"schema_version":"1.0","source":{"id":"2208.10445","kind":"arxiv","version":1}},"canonical_sha256":"02180d8a315148e2e712631c23699635cff1429ecdc403817b5e2bbaf2b8e060","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"02180d8a315148e2e712631c23699635cff1429ecdc403817b5e2bbaf2b8e060","first_computed_at":"2026-07-05T04:50:28.889543Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:50:28.889543Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"pBdf0SEDfsnzvXTkJHoyJx9wkbRS4znLBY3rK9AWrLKljzKZhA0S0zqtLZ16uEiDTxqqNCmaP+GOwqhOTykoBA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:50:28.889983Z","signed_message":"canonical_sha256_bytes"},"source_id":"2208.10445","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1e11a474c6b90bb19d247b01918c43016065adc77621edf2ae0cf67ae685098e","sha256:13685bba1c44da93b232902c3f3c9a253b14610e57226d8f07e8522c0f61c5cd"],"state_sha256":"55a48a72af48218afc477ab3231fcac5e277c54da0fbfb43c54daca9dd4c2d9d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MaMJuzgYus9w26wjuOkxZ0S4hNOIcv0CNzFiE6Y53lCg3CYxpl8Apmzay9QKzFm5VnJnyZLPj83ATMWfkMm6Dw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T13:46:01.829398Z","bundle_sha256":"05c4b0c4925de9ba5c119945aa121be358003806726dba6ee2e270ccdf9f9004"}}