{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:BD4K44KACINW7NAOFZE27OHCL7","short_pith_number":"pith:BD4K44KA","canonical_record":{"source":{"id":"2005.03915","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-08T09:07:38Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"35c2f4584a4f225cc3554de306860c802304e8a6938e4410070f7d40d23b6225","abstract_canon_sha256":"1470b3a20bb15c81ec20e4fc2ed2fd19a3503da3ecbd70c793b9e8af7674fe1a"},"schema_version":"1.0"},"canonical_sha256":"08f8ae7140121b6fb40e2e49afb8e25fd3fdede5d2786bdcea9aa79d0de8a89d","source":{"kind":"arxiv","id":"2005.03915","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2005.03915","created_at":"2026-07-05T01:28:30Z"},{"alias_kind":"arxiv_version","alias_value":"2005.03915v2","created_at":"2026-07-05T01:28:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2005.03915","created_at":"2026-07-05T01:28:30Z"},{"alias_kind":"pith_short_12","alias_value":"BD4K44KACINW","created_at":"2026-07-05T01:28:30Z"},{"alias_kind":"pith_short_16","alias_value":"BD4K44KACINW7NAO","created_at":"2026-07-05T01:28:30Z"},{"alias_kind":"pith_short_8","alias_value":"BD4K44KA","created_at":"2026-07-05T01:28:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:BD4K44KACINW7NAOFZE27OHCL7","target":"record","payload":{"canonical_record":{"source":{"id":"2005.03915","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-08T09:07:38Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"35c2f4584a4f225cc3554de306860c802304e8a6938e4410070f7d40d23b6225","abstract_canon_sha256":"1470b3a20bb15c81ec20e4fc2ed2fd19a3503da3ecbd70c793b9e8af7674fe1a"},"schema_version":"1.0"},"canonical_sha256":"08f8ae7140121b6fb40e2e49afb8e25fd3fdede5d2786bdcea9aa79d0de8a89d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:28:30.419273Z","signature_b64":"h8GcbT1G9n02QpZePUhiF40VvBKb+M4CcIk9tOYrujiVsQthJ/rfr6Yuzre1LfVUJJDE+4IGIW34GKIWhmTwBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"08f8ae7140121b6fb40e2e49afb8e25fd3fdede5d2786bdcea9aa79d0de8a89d","last_reissued_at":"2026-07-05T01:28:30.418801Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:28:30.418801Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2005.03915","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:28:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QbYI0f+HWuUuWM4+0Fco0NNCEpEi3RsPur6XD7177nkmvkO3Fp9W2YjIN56TcsFSFe5WHiebkTe9e3cBOgr9Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T16:15:37.599595Z"},"content_sha256":"2a8e80542230cf10eff22fb4ed9cb828f3ebe4c26e37244ae67a90b06033bd2b","schema_version":"1.0","event_id":"sha256:2a8e80542230cf10eff22fb4ed9cb828f3ebe4c26e37244ae67a90b06033bd2b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:BD4K44KACINW7NAOFZE27OHCL7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Defending Model Inversion and Membership Inference Attacks via Prediction Purification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Bin Shao, Bohan Xuan, Ee-Chien Chang, Fan Zhang, Ziqi Yang","submitted_at":"2020-05-08T09:07:38Z","abstract_excerpt":"Neural networks are susceptible to data inference attacks such as the model inversion attack and the membership inference attack, where the attacker could infer the reconstruction and the membership of a data sample from the confidence scores predicted by the target classifier. In this paper, we propose a unified approach, namely purification framework, to defend data inference attacks. It purifies the confidence score vectors predicted by the target classifier by reducing their dispersion. The purifier can be further specialized in defending a particular attack via adversarial learning. We ev"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2005.03915","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2005.03915/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:28:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ke7u1qb172gav8OwWPbcfsUUcionF7TV8f8D9162nRtNZvCauBG39IZDISApsFHVeZ7Pqyv6qOkpxEQtjZXUDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T16:15:37.600120Z"},"content_sha256":"5ee6885016e2004eed07fdacf864d1f790f66d08d10672fd99df9165e0b313e6","schema_version":"1.0","event_id":"sha256:5ee6885016e2004eed07fdacf864d1f790f66d08d10672fd99df9165e0b313e6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BD4K44KACINW7NAOFZE27OHCL7/bundle.json","state_url":"https://pith.science/pith/BD4K44KACINW7NAOFZE27OHCL7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BD4K44KACINW7NAOFZE27OHCL7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T16:15:37Z","links":{"resolver":"https://pith.science/pith/BD4K44KACINW7NAOFZE27OHCL7","bundle":"https://pith.science/pith/BD4K44KACINW7NAOFZE27OHCL7/bundle.json","state":"https://pith.science/pith/BD4K44KACINW7NAOFZE27OHCL7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BD4K44KACINW7NAOFZE27OHCL7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:BD4K44KACINW7NAOFZE27OHCL7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1470b3a20bb15c81ec20e4fc2ed2fd19a3503da3ecbd70c793b9e8af7674fe1a","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-08T09:07:38Z","title_canon_sha256":"35c2f4584a4f225cc3554de306860c802304e8a6938e4410070f7d40d23b6225"},"schema_version":"1.0","source":{"id":"2005.03915","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2005.03915","created_at":"2026-07-05T01:28:30Z"},{"alias_kind":"arxiv_version","alias_value":"2005.03915v2","created_at":"2026-07-05T01:28:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2005.03915","created_at":"2026-07-05T01:28:30Z"},{"alias_kind":"pith_short_12","alias_value":"BD4K44KACINW","created_at":"2026-07-05T01:28:30Z"},{"alias_kind":"pith_short_16","alias_value":"BD4K44KACINW7NAO","created_at":"2026-07-05T01:28:30Z"},{"alias_kind":"pith_short_8","alias_value":"BD4K44KA","created_at":"2026-07-05T01:28:30Z"}],"graph_snapshots":[{"event_id":"sha256:5ee6885016e2004eed07fdacf864d1f790f66d08d10672fd99df9165e0b313e6","target":"graph","created_at":"2026-07-05T01:28:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2005.03915/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Neural networks are susceptible to data inference attacks such as the model inversion attack and the membership inference attack, where the attacker could infer the reconstruction and the membership of a data sample from the confidence scores predicted by the target classifier. In this paper, we propose a unified approach, namely purification framework, to defend data inference attacks. It purifies the confidence score vectors predicted by the target classifier by reducing their dispersion. The purifier can be further specialized in defending a particular attack via adversarial learning. We ev","authors_text":"Bin Shao, Bohan Xuan, Ee-Chien Chang, Fan Zhang, Ziqi Yang","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-08T09:07:38Z","title":"Defending Model Inversion and Membership Inference Attacks via Prediction Purification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2005.03915","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2a8e80542230cf10eff22fb4ed9cb828f3ebe4c26e37244ae67a90b06033bd2b","target":"record","created_at":"2026-07-05T01:28:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1470b3a20bb15c81ec20e4fc2ed2fd19a3503da3ecbd70c793b9e8af7674fe1a","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-08T09:07:38Z","title_canon_sha256":"35c2f4584a4f225cc3554de306860c802304e8a6938e4410070f7d40d23b6225"},"schema_version":"1.0","source":{"id":"2005.03915","kind":"arxiv","version":2}},"canonical_sha256":"08f8ae7140121b6fb40e2e49afb8e25fd3fdede5d2786bdcea9aa79d0de8a89d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"08f8ae7140121b6fb40e2e49afb8e25fd3fdede5d2786bdcea9aa79d0de8a89d","first_computed_at":"2026-07-05T01:28:30.418801Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:28:30.418801Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"h8GcbT1G9n02QpZePUhiF40VvBKb+M4CcIk9tOYrujiVsQthJ/rfr6Yuzre1LfVUJJDE+4IGIW34GKIWhmTwBw==","signature_status":"signed_v1","signed_at":"2026-07-05T01:28:30.419273Z","signed_message":"canonical_sha256_bytes"},"source_id":"2005.03915","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2a8e80542230cf10eff22fb4ed9cb828f3ebe4c26e37244ae67a90b06033bd2b","sha256:5ee6885016e2004eed07fdacf864d1f790f66d08d10672fd99df9165e0b313e6"],"state_sha256":"a9ffdc7848632adbf15eb02ef294a15fafecbe45de6adbf548ceacddc3ee2829"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DDiI9LDiP5JTvorxxXP9hsO/MVSbofNo6nJ7+6mXggOPcV/qPpWCioN0F/bZ/kWS1FWSFojwH51Wh7ppYAdYCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T16:15:37.604471Z","bundle_sha256":"e834010898e11de8d9f2c0a469ac9fbc500679ce41847090e7f98ec1b7a5da09"}}