{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:BSE77VLPQLPGENOFVFPULZDRIN","short_pith_number":"pith:BSE77VLP","canonical_record":{"source":{"id":"2506.13972","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-16T20:22:07Z","cross_cats_sorted":[],"title_canon_sha256":"20b340435bb7d324b420157baa570efef1f5f3797f9d363236e75e4afb7ca984","abstract_canon_sha256":"803ae2cbf474865635a0f15df44f7cc3149612ec207aa9dcb14ee41e1acffeae"},"schema_version":"1.0"},"canonical_sha256":"0c89ffd56f82de6235c5a95f45e471435190a7af57eccc4dc6f2754f8601f3b4","source":{"kind":"arxiv","id":"2506.13972","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.13972","created_at":"2026-07-05T11:31:28Z"},{"alias_kind":"arxiv_version","alias_value":"2506.13972v2","created_at":"2026-07-05T11:31:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.13972","created_at":"2026-07-05T11:31:28Z"},{"alias_kind":"pith_short_12","alias_value":"BSE77VLPQLPG","created_at":"2026-07-05T11:31:28Z"},{"alias_kind":"pith_short_16","alias_value":"BSE77VLPQLPGENOF","created_at":"2026-07-05T11:31:28Z"},{"alias_kind":"pith_short_8","alias_value":"BSE77VLP","created_at":"2026-07-05T11:31:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:BSE77VLPQLPGENOFVFPULZDRIN","target":"record","payload":{"canonical_record":{"source":{"id":"2506.13972","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-16T20:22:07Z","cross_cats_sorted":[],"title_canon_sha256":"20b340435bb7d324b420157baa570efef1f5f3797f9d363236e75e4afb7ca984","abstract_canon_sha256":"803ae2cbf474865635a0f15df44f7cc3149612ec207aa9dcb14ee41e1acffeae"},"schema_version":"1.0"},"canonical_sha256":"0c89ffd56f82de6235c5a95f45e471435190a7af57eccc4dc6f2754f8601f3b4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:31:28.527461Z","signature_b64":"qZAlrOR3PDma12QUgB6a23ddw+R9+lJbtiNRUNqjhybG23/PR8y/+nVyS9WS9aqpL9mJWVYe9OHrea4jW+OvBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0c89ffd56f82de6235c5a95f45e471435190a7af57eccc4dc6f2754f8601f3b4","last_reissued_at":"2026-07-05T11:31:28.526971Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:31:28.526971Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.13972","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:31:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ew+tzuv9bBhYVkX2rKWaAjSCO8cTcTW6dBXMq/dCFg88ferCB+RzZBT1lCRhQhDYlPux4KkbekDj24UYBLAKAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T17:44:42.287751Z"},"content_sha256":"5d781098f65f26dfdfe45eabe23062adc7464ee5931e6372b2531a4c5d2e0b5a","schema_version":"1.0","event_id":"sha256:5d781098f65f26dfdfe45eabe23062adc7464ee5931e6372b2531a4c5d2e0b5a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:BSE77VLPQLPGENOFVFPULZDRIN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Chengyu Zhang, Lei Yu, Nathalie Baracaldo, Swanand Kadhe, Yuetian Chen, Zhiqi Wang","submitted_at":"2025-06-16T20:22:07Z","abstract_excerpt":"Membership inference attacks (MIAs) pose a significant threat to the privacy of machine learning models and are widely used as tools for privacy assessment, auditing, and machine unlearning. While prior MIA research has primarily focused on performance metrics such as AUC, accuracy, and TPR@low FPR - either by developing new methods to enhance these metrics or using them to evaluate privacy solutions - we found that it overlooks the disparities among different attacks. These disparities, both between distinct attack methods and between multiple instantiations of the same method, have crucial i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.13972","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.13972/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:31:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"V2Alh0WRFvzxoJaDYQArkTYSMmo0H2qxp0eejaljjO8nFYC4efSKGOE+4Ly0Dsr23PLtFADTCYyilCnEQhF4BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T17:44:42.288122Z"},"content_sha256":"83778aff0d31a74304db3df5130ed2e86388995a82aa854a314767429871f8ac","schema_version":"1.0","event_id":"sha256:83778aff0d31a74304db3df5130ed2e86388995a82aa854a314767429871f8ac"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BSE77VLPQLPGENOFVFPULZDRIN/bundle.json","state_url":"https://pith.science/pith/BSE77VLPQLPGENOFVFPULZDRIN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BSE77VLPQLPGENOFVFPULZDRIN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-08T17:44:42Z","links":{"resolver":"https://pith.science/pith/BSE77VLPQLPGENOFVFPULZDRIN","bundle":"https://pith.science/pith/BSE77VLPQLPGENOFVFPULZDRIN/bundle.json","state":"https://pith.science/pith/BSE77VLPQLPGENOFVFPULZDRIN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BSE77VLPQLPGENOFVFPULZDRIN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:BSE77VLPQLPGENOFVFPULZDRIN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"803ae2cbf474865635a0f15df44f7cc3149612ec207aa9dcb14ee41e1acffeae","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-16T20:22:07Z","title_canon_sha256":"20b340435bb7d324b420157baa570efef1f5f3797f9d363236e75e4afb7ca984"},"schema_version":"1.0","source":{"id":"2506.13972","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.13972","created_at":"2026-07-05T11:31:28Z"},{"alias_kind":"arxiv_version","alias_value":"2506.13972v2","created_at":"2026-07-05T11:31:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.13972","created_at":"2026-07-05T11:31:28Z"},{"alias_kind":"pith_short_12","alias_value":"BSE77VLPQLPG","created_at":"2026-07-05T11:31:28Z"},{"alias_kind":"pith_short_16","alias_value":"BSE77VLPQLPGENOF","created_at":"2026-07-05T11:31:28Z"},{"alias_kind":"pith_short_8","alias_value":"BSE77VLP","created_at":"2026-07-05T11:31:28Z"}],"graph_snapshots":[{"event_id":"sha256:83778aff0d31a74304db3df5130ed2e86388995a82aa854a314767429871f8ac","target":"graph","created_at":"2026-07-05T11:31:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.13972/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Membership inference attacks (MIAs) pose a significant threat to the privacy of machine learning models and are widely used as tools for privacy assessment, auditing, and machine unlearning. While prior MIA research has primarily focused on performance metrics such as AUC, accuracy, and TPR@low FPR - either by developing new methods to enhance these metrics or using them to evaluate privacy solutions - we found that it overlooks the disparities among different attacks. These disparities, both between distinct attack methods and between multiple instantiations of the same method, have crucial i","authors_text":"Chengyu Zhang, Lei Yu, Nathalie Baracaldo, Swanand Kadhe, Yuetian Chen, Zhiqi Wang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-16T20:22:07Z","title":"Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.13972","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5d781098f65f26dfdfe45eabe23062adc7464ee5931e6372b2531a4c5d2e0b5a","target":"record","created_at":"2026-07-05T11:31:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"803ae2cbf474865635a0f15df44f7cc3149612ec207aa9dcb14ee41e1acffeae","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-16T20:22:07Z","title_canon_sha256":"20b340435bb7d324b420157baa570efef1f5f3797f9d363236e75e4afb7ca984"},"schema_version":"1.0","source":{"id":"2506.13972","kind":"arxiv","version":2}},"canonical_sha256":"0c89ffd56f82de6235c5a95f45e471435190a7af57eccc4dc6f2754f8601f3b4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0c89ffd56f82de6235c5a95f45e471435190a7af57eccc4dc6f2754f8601f3b4","first_computed_at":"2026-07-05T11:31:28.526971Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:31:28.526971Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"qZAlrOR3PDma12QUgB6a23ddw+R9+lJbtiNRUNqjhybG23/PR8y/+nVyS9WS9aqpL9mJWVYe9OHrea4jW+OvBA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:31:28.527461Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.13972","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5d781098f65f26dfdfe45eabe23062adc7464ee5931e6372b2531a4c5d2e0b5a","sha256:83778aff0d31a74304db3df5130ed2e86388995a82aa854a314767429871f8ac"],"state_sha256":"c2288526506728b50db55b4e9e4655f7e4a0cf1c74605872360c9caefaf6a372"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"W/g+7wADryJjLb+qD4ZG+EpDiPgrBihymWUS6Wcdo56cc6bFxOIhSTDm7Dfb3cZEWXE3wle7AOu9M1AevRnACg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-08T17:44:42.290464Z","bundle_sha256":"8f25ccdc9cb60aa33f2a1cc02961b29e921dac3b72262e6d1b9e352cf1fdf58c"}}