{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:B4NVVE7SH6JMM62HL4YVEE36I6","short_pith_number":"pith:B4NVVE7S","canonical_record":{"source":{"id":"2405.07018","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-11T13:52:22Z","cross_cats_sorted":[],"title_canon_sha256":"ed3dadd823f0a58591f76d1928ba65d59f71aa6cde59f2d284c73a1292a35fd8","abstract_canon_sha256":"ff53b29c72583b7ddf7cbc728ee973ea5fef939c2ba5e08c10d7892560e6c381"},"schema_version":"1.0"},"canonical_sha256":"0f1b5a93f23f92c67b475f3152137e47a1728d6503945529d67709c66cad3faf","source":{"kind":"arxiv","id":"2405.07018","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.07018","created_at":"2026-07-05T08:18:15Z"},{"alias_kind":"arxiv_version","alias_value":"2405.07018v1","created_at":"2026-07-05T08:18:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.07018","created_at":"2026-07-05T08:18:15Z"},{"alias_kind":"pith_short_12","alias_value":"B4NVVE7SH6JM","created_at":"2026-07-05T08:18:15Z"},{"alias_kind":"pith_short_16","alias_value":"B4NVVE7SH6JMM62H","created_at":"2026-07-05T08:18:15Z"},{"alias_kind":"pith_short_8","alias_value":"B4NVVE7S","created_at":"2026-07-05T08:18:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:B4NVVE7SH6JMM62HL4YVEE36I6","target":"record","payload":{"canonical_record":{"source":{"id":"2405.07018","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-11T13:52:22Z","cross_cats_sorted":[],"title_canon_sha256":"ed3dadd823f0a58591f76d1928ba65d59f71aa6cde59f2d284c73a1292a35fd8","abstract_canon_sha256":"ff53b29c72583b7ddf7cbc728ee973ea5fef939c2ba5e08c10d7892560e6c381"},"schema_version":"1.0"},"canonical_sha256":"0f1b5a93f23f92c67b475f3152137e47a1728d6503945529d67709c66cad3faf","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:18:15.286863Z","signature_b64":"MXbxxsHCPmhnlamqFqQ/aniM1NY0sZHToLfxiTbswM0BMq1tOfcFfhnNCwZnID4uTwAPKqFMOrDcMqNek652AQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0f1b5a93f23f92c67b475f3152137e47a1728d6503945529d67709c66cad3faf","last_reissued_at":"2026-07-05T08:18:15.286388Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:18:15.286388Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.07018","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:18:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M04xXv9hzCsJKUKlLvb0ek+gVvYwghmnBoLJZIRtOCrOECEK/4WKH0PnNjY5yybjr2nwa0LnAx4K7FieiDx7Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T11:18:20.281286Z"},"content_sha256":"cb3398e2024f655c9a434efafed914a73c9b94ae39df28cd410c8e636ee458a4","schema_version":"1.0","event_id":"sha256:cb3398e2024f655c9a434efafed914a73c9b94ae39df28cd410c8e636ee458a4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:B4NVVE7SH6JMM62HL4YVEE36I6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Shadow-Free Membership Inference Attacks: Recommender Systems Are More Vulnerable Than You Thought","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Amin Beheshti, Hongsheng Hu, Kim-Kwang Raymond Choo, Lianyong Qi, Shuo Wang, Xiaolong Xu, Xiaoxiao Chi, Xuyun Zhang, Yan Wang","submitted_at":"2024-05-11T13:52:22Z","abstract_excerpt":"Recommender systems have been successfully applied in many applications. Nonetheless, recent studies demonstrate that recommender systems are vulnerable to membership inference attacks (MIAs), leading to the leakage of users' membership privacy. However, existing MIAs relying on shadow training suffer a large performance drop when the attacker lacks knowledge of the training data distribution and the model architecture of the target recommender system. To better understand the privacy risks of recommender systems, we propose shadow-free MIAs that directly leverage a user's recommendations for "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.07018","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.07018/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:18:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"a7MtRn2hQxRminij0yIVrPQJsbXwN5BEpuIe4KlHaFs+YfeTFHUwuD6+ZrNqJo8yxlA62lT3lsrQobICrD30CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T11:18:20.282203Z"},"content_sha256":"439909a7f11f681bd87c862826e8eff401dda6c2f38b3406871714181698a40a","schema_version":"1.0","event_id":"sha256:439909a7f11f681bd87c862826e8eff401dda6c2f38b3406871714181698a40a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/B4NVVE7SH6JMM62HL4YVEE36I6/bundle.json","state_url":"https://pith.science/pith/B4NVVE7SH6JMM62HL4YVEE36I6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/B4NVVE7SH6JMM62HL4YVEE36I6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T11:18:20Z","links":{"resolver":"https://pith.science/pith/B4NVVE7SH6JMM62HL4YVEE36I6","bundle":"https://pith.science/pith/B4NVVE7SH6JMM62HL4YVEE36I6/bundle.json","state":"https://pith.science/pith/B4NVVE7SH6JMM62HL4YVEE36I6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/B4NVVE7SH6JMM62HL4YVEE36I6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:B4NVVE7SH6JMM62HL4YVEE36I6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ff53b29c72583b7ddf7cbc728ee973ea5fef939c2ba5e08c10d7892560e6c381","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-11T13:52:22Z","title_canon_sha256":"ed3dadd823f0a58591f76d1928ba65d59f71aa6cde59f2d284c73a1292a35fd8"},"schema_version":"1.0","source":{"id":"2405.07018","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.07018","created_at":"2026-07-05T08:18:15Z"},{"alias_kind":"arxiv_version","alias_value":"2405.07018v1","created_at":"2026-07-05T08:18:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.07018","created_at":"2026-07-05T08:18:15Z"},{"alias_kind":"pith_short_12","alias_value":"B4NVVE7SH6JM","created_at":"2026-07-05T08:18:15Z"},{"alias_kind":"pith_short_16","alias_value":"B4NVVE7SH6JMM62H","created_at":"2026-07-05T08:18:15Z"},{"alias_kind":"pith_short_8","alias_value":"B4NVVE7S","created_at":"2026-07-05T08:18:15Z"}],"graph_snapshots":[{"event_id":"sha256:439909a7f11f681bd87c862826e8eff401dda6c2f38b3406871714181698a40a","target":"graph","created_at":"2026-07-05T08:18:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.07018/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recommender systems have been successfully applied in many applications. Nonetheless, recent studies demonstrate that recommender systems are vulnerable to membership inference attacks (MIAs), leading to the leakage of users' membership privacy. However, existing MIAs relying on shadow training suffer a large performance drop when the attacker lacks knowledge of the training data distribution and the model architecture of the target recommender system. To better understand the privacy risks of recommender systems, we propose shadow-free MIAs that directly leverage a user's recommendations for ","authors_text":"Amin Beheshti, Hongsheng Hu, Kim-Kwang Raymond Choo, Lianyong Qi, Shuo Wang, Xiaolong Xu, Xiaoxiao Chi, Xuyun Zhang, Yan Wang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-11T13:52:22Z","title":"Shadow-Free Membership Inference Attacks: Recommender Systems Are More Vulnerable Than You Thought"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.07018","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cb3398e2024f655c9a434efafed914a73c9b94ae39df28cd410c8e636ee458a4","target":"record","created_at":"2026-07-05T08:18:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ff53b29c72583b7ddf7cbc728ee973ea5fef939c2ba5e08c10d7892560e6c381","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-11T13:52:22Z","title_canon_sha256":"ed3dadd823f0a58591f76d1928ba65d59f71aa6cde59f2d284c73a1292a35fd8"},"schema_version":"1.0","source":{"id":"2405.07018","kind":"arxiv","version":1}},"canonical_sha256":"0f1b5a93f23f92c67b475f3152137e47a1728d6503945529d67709c66cad3faf","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0f1b5a93f23f92c67b475f3152137e47a1728d6503945529d67709c66cad3faf","first_computed_at":"2026-07-05T08:18:15.286388Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:18:15.286388Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MXbxxsHCPmhnlamqFqQ/aniM1NY0sZHToLfxiTbswM0BMq1tOfcFfhnNCwZnID4uTwAPKqFMOrDcMqNek652AQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:18:15.286863Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.07018","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cb3398e2024f655c9a434efafed914a73c9b94ae39df28cd410c8e636ee458a4","sha256:439909a7f11f681bd87c862826e8eff401dda6c2f38b3406871714181698a40a"],"state_sha256":"a7b9ffc681e67d2f2cab972b86d96236cee479f13cc6cf8f6846d51f1092e494"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qpT4xLMBV+SumULyGRrmsVVGgi80haxBfF9uVtboXkst4haxGDyM5lvGIDu3hYJo4D+yi5OF370Iovwtq2vFBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T11:18:20.288000Z","bundle_sha256":"34409358c771096cfd39613a1480d8f675cb3207ada5102805518ae81819f1fb"}}