{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:AUDBGG6YTTLBL5SZYY3AXOH7OM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c862bf6be01457736edbe4858b561ff5c3b0ed4075b56e1a9390911a46621aa1","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-02-16T14:39:05Z","title_canon_sha256":"8cb2937e9a7a1fd0c5c485557f6d9b7251ee30f802235b299b825a475261b15a"},"schema_version":"1.0","source":{"id":"2202.08099","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.08099","created_at":"2026-07-05T04:28:42Z"},{"alias_kind":"arxiv_version","alias_value":"2202.08099v1","created_at":"2026-07-05T04:28:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.08099","created_at":"2026-07-05T04:28:42Z"},{"alias_kind":"pith_short_12","alias_value":"AUDBGG6YTTLB","created_at":"2026-07-05T04:28:42Z"},{"alias_kind":"pith_short_16","alias_value":"AUDBGG6YTTLBL5SZ","created_at":"2026-07-05T04:28:42Z"},{"alias_kind":"pith_short_8","alias_value":"AUDBGG6Y","created_at":"2026-07-05T04:28:42Z"}],"graph_snapshots":[{"event_id":"sha256:f6702e562905c3666d0829c71207da72f6e25f8fa32091c4578823ce5c2fa44b","target":"graph","created_at":"2026-07-05T04:28:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.08099/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Neural networks pose a privacy risk to training data due to their propensity to memorise and leak information. Focusing on image classification, we show that neural networks also unintentionally memorise unique features even when they occur only once in training data. An example of a unique feature is a person's name that is accidentally present on a training image. Assuming access to the inputs and outputs of a trained model, the domain of the training data, and knowledge of unique features, we develop a score estimating the model's sensitivity to a unique feature by comparing the KL divergen","authors_text":"John Hartley, Sotirios A. Tsaftaris","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-02-16T14:39:05Z","title":"Measuring Unintended Memorisation of Unique Private Features in Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.08099","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ed8762fddd7e2c25c047fef8ae702ffa234bf581e15185ae296607ee68290d90","target":"record","created_at":"2026-07-05T04:28:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c862bf6be01457736edbe4858b561ff5c3b0ed4075b56e1a9390911a46621aa1","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-02-16T14:39:05Z","title_canon_sha256":"8cb2937e9a7a1fd0c5c485557f6d9b7251ee30f802235b299b825a475261b15a"},"schema_version":"1.0","source":{"id":"2202.08099","kind":"arxiv","version":1}},"canonical_sha256":"0506131bd89cd615f659c6360bb8ff733288145be639ae9a6d5097c2cfe63fa7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0506131bd89cd615f659c6360bb8ff733288145be639ae9a6d5097c2cfe63fa7","first_computed_at":"2026-07-05T04:28:42.964513Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:28:42.964513Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"0QBKgBobmzeraIj+9vJrK86kFGZ0sA8OwwKtE99JvgyHrszZl0bMk05QERRqdFphbaPsB1IZ+8ld9m5gMsraBw==","signature_status":"signed_v1","signed_at":"2026-07-05T04:28:42.964916Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.08099","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ed8762fddd7e2c25c047fef8ae702ffa234bf581e15185ae296607ee68290d90","sha256:f6702e562905c3666d0829c71207da72f6e25f8fa32091c4578823ce5c2fa44b"],"state_sha256":"f9d7df1e8689a94a5f759167c74ae31b4d6e2ba312abd57240c13e40072f577b"}