{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:CQJ4YUDCRMDMIG3Z6METRCP2HJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c96eea895e2439a4739644535261e7c222ade5ce7c05a1de0c599648663ddbe5","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-10-19T17:46:50Z","title_canon_sha256":"9cf3d4fb76204f7d8892c8ee35d0b2c434451dc1bb1e61303cfaebafc80b5f68"},"schema_version":"1.0","source":{"id":"2210.10750","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.10750","created_at":"2026-07-05T06:16:12Z"},{"alias_kind":"arxiv_version","alias_value":"2210.10750v2","created_at":"2026-07-05T06:16:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.10750","created_at":"2026-07-05T06:16:12Z"},{"alias_kind":"pith_short_12","alias_value":"CQJ4YUDCRMDM","created_at":"2026-07-05T06:16:12Z"},{"alias_kind":"pith_short_16","alias_value":"CQJ4YUDCRMDMIG3Z","created_at":"2026-07-05T06:16:12Z"},{"alias_kind":"pith_short_8","alias_value":"CQJ4YUDC","created_at":"2026-07-05T06:16:12Z"}],"graph_snapshots":[{"event_id":"sha256:8546d8fb00ea0ac8521cf0e4171cbf050f6407f6824dd67ab355d15f0b170636","target":"graph","created_at":"2026-07-05T06:16:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.10750/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As industrial applications are increasingly automated by machine learning models, enforcing personal data ownership and intellectual property rights requires tracing training data back to their rightful owners. Membership inference algorithms approach this problem by using statistical techniques to discern whether a target sample was included in a model's training set. However, existing methods only utilize the unaltered target sample or simple augmentations of the target to compute statistics. Such a sparse sampling of the model's behavior carries little information, leading to poor inference","authors_text":"Arpit Bansal, Eitan Borgnia, Hamid Kazemi, Jonas Geiping, Micah Goldblum, Tom Goldstein, Yuxin Wen","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-10-19T17:46:50Z","title":"Canary in a Coalmine: Better Membership Inference with Ensembled Adversarial Queries"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.10750","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:af4625c810f646ad49330daa016c5f76e07191fe1014f100c2091b64c89476ff","target":"record","created_at":"2026-07-05T06:16:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c96eea895e2439a4739644535261e7c222ade5ce7c05a1de0c599648663ddbe5","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-10-19T17:46:50Z","title_canon_sha256":"9cf3d4fb76204f7d8892c8ee35d0b2c434451dc1bb1e61303cfaebafc80b5f68"},"schema_version":"1.0","source":{"id":"2210.10750","kind":"arxiv","version":2}},"canonical_sha256":"1413cc50628b06c41b79f3093889fa3a4a1840de1e075fd253058e6dec9f79ea","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1413cc50628b06c41b79f3093889fa3a4a1840de1e075fd253058e6dec9f79ea","first_computed_at":"2026-07-05T06:16:12.801859Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:16:12.801859Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"59oUuyVc5l2L8WYdS4mXhygqWQCJvkTnNKAih407A5Osl3l/q3U5lzhPPZyRkuh5cH368hU9Pc9i5kegInPKDA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:16:12.802377Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.10750","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:af4625c810f646ad49330daa016c5f76e07191fe1014f100c2091b64c89476ff","sha256:8546d8fb00ea0ac8521cf0e4171cbf050f6407f6824dd67ab355d15f0b170636"],"state_sha256":"de26016a1c206f995bde3742c587745a445d09bbd63aae08712950e8d7011e61"}