{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:BMHQ7IM4JQ77NVIG5ZSN4FHHNX","short_pith_number":"pith:BMHQ7IM4","canonical_record":{"source":{"id":"2504.18497","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-04-25T17:10:33Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"1d18c5005e9f80759f3b371d7f231285a7eb8e4d406ad5ac3cb700d1fd892c3e","abstract_canon_sha256":"4508c987ccdadf54469e2ebae5205928a53dabca57932416f5593615a7b9f0ec"},"schema_version":"1.0"},"canonical_sha256":"0b0f0fa19c4c3ff6d506ee64de14e76dc591d00750af83e44cee5ae760753939","source":{"kind":"arxiv","id":"2504.18497","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.18497","created_at":"2026-07-05T10:54:08Z"},{"alias_kind":"arxiv_version","alias_value":"2504.18497v1","created_at":"2026-07-05T10:54:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.18497","created_at":"2026-07-05T10:54:08Z"},{"alias_kind":"pith_short_12","alias_value":"BMHQ7IM4JQ77","created_at":"2026-07-05T10:54:08Z"},{"alias_kind":"pith_short_16","alias_value":"BMHQ7IM4JQ77NVIG","created_at":"2026-07-05T10:54:08Z"},{"alias_kind":"pith_short_8","alias_value":"BMHQ7IM4","created_at":"2026-07-05T10:54:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:BMHQ7IM4JQ77NVIG5ZSN4FHHNX","target":"record","payload":{"canonical_record":{"source":{"id":"2504.18497","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-04-25T17:10:33Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"1d18c5005e9f80759f3b371d7f231285a7eb8e4d406ad5ac3cb700d1fd892c3e","abstract_canon_sha256":"4508c987ccdadf54469e2ebae5205928a53dabca57932416f5593615a7b9f0ec"},"schema_version":"1.0"},"canonical_sha256":"0b0f0fa19c4c3ff6d506ee64de14e76dc591d00750af83e44cee5ae760753939","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:54:08.655234Z","signature_b64":"qnZf02/UccAzSuIkDLkIJRJYXDOVhrYkagGIKzganWUWUsLmDzpVjL8e8FuXMUlgNlGkWvivV1+lqxVFOJo6AA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0b0f0fa19c4c3ff6d506ee64de14e76dc591d00750af83e44cee5ae760753939","last_reissued_at":"2026-07-05T10:54:08.654675Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:54:08.654675Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.18497","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:54:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"11vGtAAI5F4w0ko9wkT9doKGwNKC6cxvEZDswbb578biFyVHqwfmXXiLIAV3Qqfi4f9OwycZgL6/NmsketW9CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T07:36:37.824224Z"},"content_sha256":"8e30484f20f0a9921006d8f6f9fa3d6416de7558d847fa7fdf11b5973eff9609","schema_version":"1.0","event_id":"sha256:8e30484f20f0a9921006d8f6f9fa3d6416de7558d847fa7fdf11b5973eff9609"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:BMHQ7IM4JQ77NVIG5ZSN4FHHNX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DeSIA: Attribute Inference Attacks Against Limited Fixed Aggregate Statistics","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Bozhidar Stevanoski, Yifeng Mao, Yves-Alexandre de Montjoye","submitted_at":"2025-04-25T17:10:33Z","abstract_excerpt":"Empirical inference attacks are a popular approach for evaluating the privacy risk of data release mechanisms in practice. While an active attack literature exists to evaluate machine learning models or synthetic data release, we currently lack comparable methods for fixed aggregate statistics, in particular when only a limited number of statistics are released. We here propose an inference attack framework against fixed aggregate statistics and an attribute inference attack called DeSIA. We instantiate DeSIA against the U.S. Census PPMF dataset and show it to strongly outperform reconstructio"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.18497","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.18497/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:54:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1c6uCV1yVvqc/TUFmk+GgvjE6RrYSMTbOZWgkhiFSaUtLRi1bb/zbBWwxJqgHri/gS88uQp8LKE9uWlx2ezbDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T07:36:37.824943Z"},"content_sha256":"99b438d95f23ba66e4eb1ed8da6aac8f884360f3df0f67df47668c76f5068a29","schema_version":"1.0","event_id":"sha256:99b438d95f23ba66e4eb1ed8da6aac8f884360f3df0f67df47668c76f5068a29"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BMHQ7IM4JQ77NVIG5ZSN4FHHNX/bundle.json","state_url":"https://pith.science/pith/BMHQ7IM4JQ77NVIG5ZSN4FHHNX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BMHQ7IM4JQ77NVIG5ZSN4FHHNX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T07:36:37Z","links":{"resolver":"https://pith.science/pith/BMHQ7IM4JQ77NVIG5ZSN4FHHNX","bundle":"https://pith.science/pith/BMHQ7IM4JQ77NVIG5ZSN4FHHNX/bundle.json","state":"https://pith.science/pith/BMHQ7IM4JQ77NVIG5ZSN4FHHNX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BMHQ7IM4JQ77NVIG5ZSN4FHHNX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:BMHQ7IM4JQ77NVIG5ZSN4FHHNX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4508c987ccdadf54469e2ebae5205928a53dabca57932416f5593615a7b9f0ec","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-04-25T17:10:33Z","title_canon_sha256":"1d18c5005e9f80759f3b371d7f231285a7eb8e4d406ad5ac3cb700d1fd892c3e"},"schema_version":"1.0","source":{"id":"2504.18497","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.18497","created_at":"2026-07-05T10:54:08Z"},{"alias_kind":"arxiv_version","alias_value":"2504.18497v1","created_at":"2026-07-05T10:54:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.18497","created_at":"2026-07-05T10:54:08Z"},{"alias_kind":"pith_short_12","alias_value":"BMHQ7IM4JQ77","created_at":"2026-07-05T10:54:08Z"},{"alias_kind":"pith_short_16","alias_value":"BMHQ7IM4JQ77NVIG","created_at":"2026-07-05T10:54:08Z"},{"alias_kind":"pith_short_8","alias_value":"BMHQ7IM4","created_at":"2026-07-05T10:54:08Z"}],"graph_snapshots":[{"event_id":"sha256:99b438d95f23ba66e4eb1ed8da6aac8f884360f3df0f67df47668c76f5068a29","target":"graph","created_at":"2026-07-05T10:54:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.18497/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Empirical inference attacks are a popular approach for evaluating the privacy risk of data release mechanisms in practice. While an active attack literature exists to evaluate machine learning models or synthetic data release, we currently lack comparable methods for fixed aggregate statistics, in particular when only a limited number of statistics are released. We here propose an inference attack framework against fixed aggregate statistics and an attribute inference attack called DeSIA. We instantiate DeSIA against the U.S. Census PPMF dataset and show it to strongly outperform reconstructio","authors_text":"Bozhidar Stevanoski, Yifeng Mao, Yves-Alexandre de Montjoye","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-04-25T17:10:33Z","title":"DeSIA: Attribute Inference Attacks Against Limited Fixed Aggregate Statistics"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.18497","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8e30484f20f0a9921006d8f6f9fa3d6416de7558d847fa7fdf11b5973eff9609","target":"record","created_at":"2026-07-05T10:54:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4508c987ccdadf54469e2ebae5205928a53dabca57932416f5593615a7b9f0ec","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-04-25T17:10:33Z","title_canon_sha256":"1d18c5005e9f80759f3b371d7f231285a7eb8e4d406ad5ac3cb700d1fd892c3e"},"schema_version":"1.0","source":{"id":"2504.18497","kind":"arxiv","version":1}},"canonical_sha256":"0b0f0fa19c4c3ff6d506ee64de14e76dc591d00750af83e44cee5ae760753939","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0b0f0fa19c4c3ff6d506ee64de14e76dc591d00750af83e44cee5ae760753939","first_computed_at":"2026-07-05T10:54:08.654675Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:54:08.654675Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"qnZf02/UccAzSuIkDLkIJRJYXDOVhrYkagGIKzganWUWUsLmDzpVjL8e8FuXMUlgNlGkWvivV1+lqxVFOJo6AA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:54:08.655234Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.18497","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8e30484f20f0a9921006d8f6f9fa3d6416de7558d847fa7fdf11b5973eff9609","sha256:99b438d95f23ba66e4eb1ed8da6aac8f884360f3df0f67df47668c76f5068a29"],"state_sha256":"51783e66572298920d2f2fde252d905d17a7a6fe283ebe5bb39d5d5f7c3685db"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DKGeVagPS7efLPRA85Y0dg73ZKsH1+ktgYfmB60o2+3C4JmQLkKiKApiYeiEN2a664bPo1Tp0f7/qF8tD+VqCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T07:36:37.830736Z","bundle_sha256":"abca903f217a682555c7219dd5d10527b6f3859008cc4da03f7aa9b8526eb993"}}