{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:BHQT7KRXDYZE6FRNTSTMF22DL5","short_pith_number":"pith:BHQT7KRX","canonical_record":{"source":{"id":"2404.03233","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-04T06:37:46Z","cross_cats_sorted":[],"title_canon_sha256":"f00fc15d4e558f333bbebf53f126e9c6c4b99aaf338e74fad488fcb1b1bd1257","abstract_canon_sha256":"9d7cbfc93cb73a7b50f839e329fa8a28a0d66945519b398140cbb5e97e1e6b59"},"schema_version":"1.0"},"canonical_sha256":"09e13faa371e324f162d9ca6c2eb435f60cdcdce6fbd9e9f047ed02871c66126","source":{"kind":"arxiv","id":"2404.03233","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.03233","created_at":"2026-07-05T08:04:22Z"},{"alias_kind":"arxiv_version","alias_value":"2404.03233v1","created_at":"2026-07-05T08:04:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.03233","created_at":"2026-07-05T08:04:22Z"},{"alias_kind":"pith_short_12","alias_value":"BHQT7KRXDYZE","created_at":"2026-07-05T08:04:22Z"},{"alias_kind":"pith_short_16","alias_value":"BHQT7KRXDYZE6FRN","created_at":"2026-07-05T08:04:22Z"},{"alias_kind":"pith_short_8","alias_value":"BHQT7KRX","created_at":"2026-07-05T08:04:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:BHQT7KRXDYZE6FRNTSTMF22DL5","target":"record","payload":{"canonical_record":{"source":{"id":"2404.03233","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-04T06:37:46Z","cross_cats_sorted":[],"title_canon_sha256":"f00fc15d4e558f333bbebf53f126e9c6c4b99aaf338e74fad488fcb1b1bd1257","abstract_canon_sha256":"9d7cbfc93cb73a7b50f839e329fa8a28a0d66945519b398140cbb5e97e1e6b59"},"schema_version":"1.0"},"canonical_sha256":"09e13faa371e324f162d9ca6c2eb435f60cdcdce6fbd9e9f047ed02871c66126","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:04:22.986866Z","signature_b64":"/bMRV6a8jqwC5VqMtUbBt/229MwCqd2v5xjKbc+b40FSJmhnU5s+Bax7cl9pra6ksz4RK/7leReNnoCS3s4oAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"09e13faa371e324f162d9ca6c2eb435f60cdcdce6fbd9e9f047ed02871c66126","last_reissued_at":"2026-07-05T08:04:22.986432Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:04:22.986432Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.03233","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:04:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6yffVOUwfJG8pPWXPjwUw+5idaBk5rDsd2tbPWTEGRtYsP/OrUMB+WePzOI8ZMHRKMu0fy0zB8hh7A2wi5m+Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T23:48:41.858067Z"},"content_sha256":"db1c27ccb669e6e1d532f00234ef89169e3d830c987513318e8e780f04496ca8","schema_version":"1.0","event_id":"sha256:db1c27ccb669e6e1d532f00234ef89169e3d830c987513318e8e780f04496ca8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:BHQT7KRXDYZE6FRNTSTMF22DL5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Hongsheng Hu, Minhui Xue, Shuo Wang, Tian Dong","submitted_at":"2024-04-04T06:37:46Z","abstract_excerpt":"Machine unlearning has become a promising solution for fulfilling the \"right to be forgotten\", under which individuals can request the deletion of their data from machine learning models. However, existing studies of machine unlearning mainly focus on the efficacy and efficiency of unlearning methods, while neglecting the investigation of the privacy vulnerability during the unlearning process. With two versions of a model available to an adversary, that is, the original model and the unlearned model, machine unlearning opens up a new attack surface. In this paper, we conduct the first investi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.03233","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.03233/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:04:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7ejKVmukElsM8fVNPbf15lrP5jrNHL93Smr01i+lpwtbRpSJUAK47mRphwWt9LHE4y+68uVwtkSeKD+2gpuhBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T23:48:41.858560Z"},"content_sha256":"50a923418ad711c4d978f948e496e39439d0318218b9bfbaa360f9772555cc6a","schema_version":"1.0","event_id":"sha256:50a923418ad711c4d978f948e496e39439d0318218b9bfbaa360f9772555cc6a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BHQT7KRXDYZE6FRNTSTMF22DL5/bundle.json","state_url":"https://pith.science/pith/BHQT7KRXDYZE6FRNTSTMF22DL5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BHQT7KRXDYZE6FRNTSTMF22DL5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T23:48:41Z","links":{"resolver":"https://pith.science/pith/BHQT7KRXDYZE6FRNTSTMF22DL5","bundle":"https://pith.science/pith/BHQT7KRXDYZE6FRNTSTMF22DL5/bundle.json","state":"https://pith.science/pith/BHQT7KRXDYZE6FRNTSTMF22DL5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BHQT7KRXDYZE6FRNTSTMF22DL5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:BHQT7KRXDYZE6FRNTSTMF22DL5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9d7cbfc93cb73a7b50f839e329fa8a28a0d66945519b398140cbb5e97e1e6b59","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-04T06:37:46Z","title_canon_sha256":"f00fc15d4e558f333bbebf53f126e9c6c4b99aaf338e74fad488fcb1b1bd1257"},"schema_version":"1.0","source":{"id":"2404.03233","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.03233","created_at":"2026-07-05T08:04:22Z"},{"alias_kind":"arxiv_version","alias_value":"2404.03233v1","created_at":"2026-07-05T08:04:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.03233","created_at":"2026-07-05T08:04:22Z"},{"alias_kind":"pith_short_12","alias_value":"BHQT7KRXDYZE","created_at":"2026-07-05T08:04:22Z"},{"alias_kind":"pith_short_16","alias_value":"BHQT7KRXDYZE6FRN","created_at":"2026-07-05T08:04:22Z"},{"alias_kind":"pith_short_8","alias_value":"BHQT7KRX","created_at":"2026-07-05T08:04:22Z"}],"graph_snapshots":[{"event_id":"sha256:50a923418ad711c4d978f948e496e39439d0318218b9bfbaa360f9772555cc6a","target":"graph","created_at":"2026-07-05T08:04:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.03233/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine unlearning has become a promising solution for fulfilling the \"right to be forgotten\", under which individuals can request the deletion of their data from machine learning models. However, existing studies of machine unlearning mainly focus on the efficacy and efficiency of unlearning methods, while neglecting the investigation of the privacy vulnerability during the unlearning process. With two versions of a model available to an adversary, that is, the original model and the unlearned model, machine unlearning opens up a new attack surface. In this paper, we conduct the first investi","authors_text":"Hongsheng Hu, Minhui Xue, Shuo Wang, Tian Dong","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-04T06:37:46Z","title":"Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.03233","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:db1c27ccb669e6e1d532f00234ef89169e3d830c987513318e8e780f04496ca8","target":"record","created_at":"2026-07-05T08:04:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9d7cbfc93cb73a7b50f839e329fa8a28a0d66945519b398140cbb5e97e1e6b59","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-04T06:37:46Z","title_canon_sha256":"f00fc15d4e558f333bbebf53f126e9c6c4b99aaf338e74fad488fcb1b1bd1257"},"schema_version":"1.0","source":{"id":"2404.03233","kind":"arxiv","version":1}},"canonical_sha256":"09e13faa371e324f162d9ca6c2eb435f60cdcdce6fbd9e9f047ed02871c66126","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"09e13faa371e324f162d9ca6c2eb435f60cdcdce6fbd9e9f047ed02871c66126","first_computed_at":"2026-07-05T08:04:22.986432Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:04:22.986432Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/bMRV6a8jqwC5VqMtUbBt/229MwCqd2v5xjKbc+b40FSJmhnU5s+Bax7cl9pra6ksz4RK/7leReNnoCS3s4oAg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:04:22.986866Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.03233","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:db1c27ccb669e6e1d532f00234ef89169e3d830c987513318e8e780f04496ca8","sha256:50a923418ad711c4d978f948e496e39439d0318218b9bfbaa360f9772555cc6a"],"state_sha256":"602f4547da7a50e9283afa3172b6dc0895a89282b73c7213446cf55286c54440"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GitZRvrzlmNoTfki9Gc3RSXG/fISg+z2N1Wmd22ZE8R2pncpwN8i6eHxFl0N5Y/8YouAVHzSJJM9XKx7LJmECw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T23:48:41.862801Z","bundle_sha256":"6ab47f3cc2dd79586b8e46fc7da452284496fb6e8c45d48b532546ab87dd46cb"}}