{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:BAGB7C7NIRXMCYMSFB4IDDYS4D","short_pith_number":"pith:BAGB7C7N","canonical_record":{"source":{"id":"2203.16463","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-30T17:01:19Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"fa97ce1afe09acfeb0524563ff320ecd4f166a63997040b650386fe6636d0486","abstract_canon_sha256":"1b269f9311ae632da3adcf1d97cae462ea84fe6b45e0bb8f508a61d9ab825acc"},"schema_version":"1.0"},"canonical_sha256":"080c1f8bed446ec161922878818f12e0fa5e8e04c2beaa870620e85aef531722","source":{"kind":"arxiv","id":"2203.16463","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.16463","created_at":"2026-07-05T07:10:44Z"},{"alias_kind":"arxiv_version","alias_value":"2203.16463v2","created_at":"2026-07-05T07:10:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.16463","created_at":"2026-07-05T07:10:44Z"},{"alias_kind":"pith_short_12","alias_value":"BAGB7C7NIRXM","created_at":"2026-07-05T07:10:44Z"},{"alias_kind":"pith_short_16","alias_value":"BAGB7C7NIRXMCYMS","created_at":"2026-07-05T07:10:44Z"},{"alias_kind":"pith_short_8","alias_value":"BAGB7C7N","created_at":"2026-07-05T07:10:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:BAGB7C7NIRXMCYMSFB4IDDYS4D","target":"record","payload":{"canonical_record":{"source":{"id":"2203.16463","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-30T17:01:19Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"fa97ce1afe09acfeb0524563ff320ecd4f166a63997040b650386fe6636d0486","abstract_canon_sha256":"1b269f9311ae632da3adcf1d97cae462ea84fe6b45e0bb8f508a61d9ab825acc"},"schema_version":"1.0"},"canonical_sha256":"080c1f8bed446ec161922878818f12e0fa5e8e04c2beaa870620e85aef531722","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:10:44.841386Z","signature_b64":"qk4Y4ZjpWxK4oCcBQ/7unHqBbrYrkGLdF23zNOmvPq9Bz5jMLkmjQ0iVTWOHH+dGrNEcLFGF31Li7Ou5VkBgBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"080c1f8bed446ec161922878818f12e0fa5e8e04c2beaa870620e85aef531722","last_reissued_at":"2026-07-05T07:10:44.840924Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:10:44.840924Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2203.16463","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:10:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FrvkRJ2GduUBUrIbaRisAFMwTdOsRWqiXgz8IWjmzC3O8lGDMuUsEitcKYQqllOtZ5+A8vveVZ11oF8uw9tGBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T12:42:25.268823Z"},"content_sha256":"5a5d0bcfd5ae73ef99c068b98d89170bc42c7f86d5013015caf7100c1e28a14e","schema_version":"1.0","event_id":"sha256:5a5d0bcfd5ae73ef99c068b98d89170bc42c7f86d5013015caf7100c1e28a14e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:BAGB7C7NIRXMCYMSFB4IDDYS4D","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Perfectly Accurate Membership Inference by a Dishonest Central Server in Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Georg Pichler, Leonardo Rey Vega, Marco Romanelli, Pablo Piantanida","submitted_at":"2022-03-30T17:01:19Z","abstract_excerpt":"Federated Learning is expected to provide strong privacy guarantees, as only gradients or model parameters but no plain text training data is ever exchanged either between the clients or between the clients and the central server. In this paper, we challenge this claim by introducing a simple but still very effective membership inference attack algorithm, which relies only on a single training step. In contrast to the popular honest-but-curious model, we investigate a framework with a dishonest central server. Our strategy is applicable to models with ReLU activations and uses the properties o"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.16463","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2203.16463/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:10:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VUSu1ZXxsv2LumuvR8hjVhMm9si0Rtthh52Ofwhp0npBBiEs4CDwxRiuwc3DuYLhNUYOrBX/bsJF6w7gdpWWAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T12:42:25.269332Z"},"content_sha256":"1ede0038c9f7eb44b2bd78b9a855bbe73c90c01d709a6373fd63a00c2e9284a8","schema_version":"1.0","event_id":"sha256:1ede0038c9f7eb44b2bd78b9a855bbe73c90c01d709a6373fd63a00c2e9284a8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BAGB7C7NIRXMCYMSFB4IDDYS4D/bundle.json","state_url":"https://pith.science/pith/BAGB7C7NIRXMCYMSFB4IDDYS4D/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BAGB7C7NIRXMCYMSFB4IDDYS4D/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T12:42:25Z","links":{"resolver":"https://pith.science/pith/BAGB7C7NIRXMCYMSFB4IDDYS4D","bundle":"https://pith.science/pith/BAGB7C7NIRXMCYMSFB4IDDYS4D/bundle.json","state":"https://pith.science/pith/BAGB7C7NIRXMCYMSFB4IDDYS4D/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BAGB7C7NIRXMCYMSFB4IDDYS4D/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:BAGB7C7NIRXMCYMSFB4IDDYS4D","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1b269f9311ae632da3adcf1d97cae462ea84fe6b45e0bb8f508a61d9ab825acc","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-30T17:01:19Z","title_canon_sha256":"fa97ce1afe09acfeb0524563ff320ecd4f166a63997040b650386fe6636d0486"},"schema_version":"1.0","source":{"id":"2203.16463","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.16463","created_at":"2026-07-05T07:10:44Z"},{"alias_kind":"arxiv_version","alias_value":"2203.16463v2","created_at":"2026-07-05T07:10:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.16463","created_at":"2026-07-05T07:10:44Z"},{"alias_kind":"pith_short_12","alias_value":"BAGB7C7NIRXM","created_at":"2026-07-05T07:10:44Z"},{"alias_kind":"pith_short_16","alias_value":"BAGB7C7NIRXMCYMS","created_at":"2026-07-05T07:10:44Z"},{"alias_kind":"pith_short_8","alias_value":"BAGB7C7N","created_at":"2026-07-05T07:10:44Z"}],"graph_snapshots":[{"event_id":"sha256:1ede0038c9f7eb44b2bd78b9a855bbe73c90c01d709a6373fd63a00c2e9284a8","target":"graph","created_at":"2026-07-05T07:10:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2203.16463/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated Learning is expected to provide strong privacy guarantees, as only gradients or model parameters but no plain text training data is ever exchanged either between the clients or between the clients and the central server. In this paper, we challenge this claim by introducing a simple but still very effective membership inference attack algorithm, which relies only on a single training step. In contrast to the popular honest-but-curious model, we investigate a framework with a dishonest central server. Our strategy is applicable to models with ReLU activations and uses the properties o","authors_text":"Georg Pichler, Leonardo Rey Vega, Marco Romanelli, Pablo Piantanida","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-30T17:01:19Z","title":"Perfectly Accurate Membership Inference by a Dishonest Central Server in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.16463","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5a5d0bcfd5ae73ef99c068b98d89170bc42c7f86d5013015caf7100c1e28a14e","target":"record","created_at":"2026-07-05T07:10:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1b269f9311ae632da3adcf1d97cae462ea84fe6b45e0bb8f508a61d9ab825acc","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-03-30T17:01:19Z","title_canon_sha256":"fa97ce1afe09acfeb0524563ff320ecd4f166a63997040b650386fe6636d0486"},"schema_version":"1.0","source":{"id":"2203.16463","kind":"arxiv","version":2}},"canonical_sha256":"080c1f8bed446ec161922878818f12e0fa5e8e04c2beaa870620e85aef531722","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"080c1f8bed446ec161922878818f12e0fa5e8e04c2beaa870620e85aef531722","first_computed_at":"2026-07-05T07:10:44.840924Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:10:44.840924Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"qk4Y4ZjpWxK4oCcBQ/7unHqBbrYrkGLdF23zNOmvPq9Bz5jMLkmjQ0iVTWOHH+dGrNEcLFGF31Li7Ou5VkBgBw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:10:44.841386Z","signed_message":"canonical_sha256_bytes"},"source_id":"2203.16463","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5a5d0bcfd5ae73ef99c068b98d89170bc42c7f86d5013015caf7100c1e28a14e","sha256:1ede0038c9f7eb44b2bd78b9a855bbe73c90c01d709a6373fd63a00c2e9284a8"],"state_sha256":"cc1202fb85caa836e74d6fed486373d21becbda2f9e85a5271e3928307042fae"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ejssw6KG+w/J2ONNzC6eJkT/1XySwHdwQQFOhft6F6viTDBFYixn4TAeToII8DBwCpAhzIiRLa3q4KQyT382Bw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T12:42:25.274022Z","bundle_sha256":"c1ee8cfd32c7c146d10dcebd122031478b41a043e2dc3fd50ae41dcca7766cab"}}