{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:DF7HX7DRD2LXG2EQ2NKCMXM4X6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f08830d4d31956d3565226dcc910523ed069ac0e598657ccf88955c5fe3174c5","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-12-08T20:42:12Z","title_canon_sha256":"5000c7553e8051ffe8a94974853d0943c3e8b8178be0a45a0221b93f6de6c094"},"schema_version":"1.0","source":{"id":"2012.06043","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2012.06043","created_at":"2026-07-05T01:58:46Z"},{"alias_kind":"arxiv_version","alias_value":"2012.06043v1","created_at":"2026-07-05T01:58:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.06043","created_at":"2026-07-05T01:58:46Z"},{"alias_kind":"pith_short_12","alias_value":"DF7HX7DRD2LX","created_at":"2026-07-05T01:58:46Z"},{"alias_kind":"pith_short_16","alias_value":"DF7HX7DRD2LXG2EQ","created_at":"2026-07-05T01:58:46Z"},{"alias_kind":"pith_short_8","alias_value":"DF7HX7DR","created_at":"2026-07-05T01:58:46Z"}],"graph_snapshots":[{"event_id":"sha256:9db66d58f1d050baebb190f3d5e67b48cd14526e0322d13d1211a91d8c5d4737","target":"graph","created_at":"2026-07-05T01:58:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2012.06043/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning (FL) is a popular distributed learning framework that can reduce privacy risks by not explicitly sharing private data. However, recent works demonstrated that sharing model updates makes FL vulnerable to inference attacks. In this work, we show our key observation that the data representation leakage from gradients is the essential cause of privacy leakage in FL. We also provide an analysis of this observation to explain how the data presentation is leaked. Based on this observation, we propose a defense against model inversion attack in FL. The key idea of our defense is le","authors_text":"Ang Li, Binghui Wang, Hai Li, Huanrui Yang, Jingwei Sun, Yiran Chen","cross_cats":["cs.AI","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-12-08T20:42:12Z","title":"Provable Defense against Privacy Leakage in Federated Learning from Representation Perspective"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.06043","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8c6f812b615e99fb77a5930fff2189bff96eb8b680d81ff4747c9cc0b33ea1c9","target":"record","created_at":"2026-07-05T01:58:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f08830d4d31956d3565226dcc910523ed069ac0e598657ccf88955c5fe3174c5","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-12-08T20:42:12Z","title_canon_sha256":"5000c7553e8051ffe8a94974853d0943c3e8b8178be0a45a0221b93f6de6c094"},"schema_version":"1.0","source":{"id":"2012.06043","kind":"arxiv","version":1}},"canonical_sha256":"197e7bfc711e97736890d354265d9cbf80afbe2658830a02fe5922f9bf67d1b3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"197e7bfc711e97736890d354265d9cbf80afbe2658830a02fe5922f9bf67d1b3","first_computed_at":"2026-07-05T01:58:46.934593Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:58:46.934593Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"BCQ5tHMzKjzv5zpApnEBn2DYMskqnJbFfcE6W04z4QgCAxGfbv0geBbnbHzDi03rNXB8IpQFKxqXLmyaBewlBg==","signature_status":"signed_v1","signed_at":"2026-07-05T01:58:46.935010Z","signed_message":"canonical_sha256_bytes"},"source_id":"2012.06043","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8c6f812b615e99fb77a5930fff2189bff96eb8b680d81ff4747c9cc0b33ea1c9","sha256:9db66d58f1d050baebb190f3d5e67b48cd14526e0322d13d1211a91d8c5d4737"],"state_sha256":"487884db3c13399b9d2059c1107f106e50e956310fdf8bff3c7366474c170ef5"}