{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:DXDWSNDX2SBBWF2N46IUJY2KIF","short_pith_number":"pith:DXDWSNDX","canonical_record":{"source":{"id":"2107.09898","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-21T06:32:46Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"f923cd22aca8416c583735b8e75195f294558b750eaba50743d0b8666c2e6b8f","abstract_canon_sha256":"30710c951f424e78ec5a3933ed3e48f23e1927a4a351a2824c5de2e8abca7645"},"schema_version":"1.0"},"canonical_sha256":"1dc7693477d4821b174de79144e34a415d9715b718d900fea9c48ab19fdffde3","source":{"kind":"arxiv","id":"2107.09898","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.09898","created_at":"2026-07-05T02:59:40Z"},{"alias_kind":"arxiv_version","alias_value":"2107.09898v1","created_at":"2026-07-05T02:59:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.09898","created_at":"2026-07-05T02:59:40Z"},{"alias_kind":"pith_short_12","alias_value":"DXDWSNDX2SBB","created_at":"2026-07-05T02:59:40Z"},{"alias_kind":"pith_short_16","alias_value":"DXDWSNDX2SBBWF2N","created_at":"2026-07-05T02:59:40Z"},{"alias_kind":"pith_short_8","alias_value":"DXDWSNDX","created_at":"2026-07-05T02:59:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:DXDWSNDX2SBBWF2N46IUJY2KIF","target":"record","payload":{"canonical_record":{"source":{"id":"2107.09898","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-21T06:32:46Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"f923cd22aca8416c583735b8e75195f294558b750eaba50743d0b8666c2e6b8f","abstract_canon_sha256":"30710c951f424e78ec5a3933ed3e48f23e1927a4a351a2824c5de2e8abca7645"},"schema_version":"1.0"},"canonical_sha256":"1dc7693477d4821b174de79144e34a415d9715b718d900fea9c48ab19fdffde3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:59:40.669777Z","signature_b64":"a9L1EcWY/Yj+B0vt3YLgCbklHZxlDITxNVu35jKNBb5vUZmjeyRO0Hgn3cSqPnGbJ8gVPVc471Ttnl1CrmUMCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1dc7693477d4821b174de79144e34a415d9715b718d900fea9c48ab19fdffde3","last_reissued_at":"2026-07-05T02:59:40.669368Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:59:40.669368Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2107.09898","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:59:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Hm+JwiD4mx5WKdVK2P/yBUoLSldluG2VVj5a4aXopwMnWk0jOfwsCoiQbqqmR2mLi9fOcf45aMBYJXTumu9VDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T20:29:14.376546Z"},"content_sha256":"658d0e4d02568f12a3f4611af29444083ff8629c17f6c81099bdc11f6955582b","schema_version":"1.0","event_id":"sha256:658d0e4d02568f12a3f4611af29444083ff8629c17f6c81099bdc11f6955582b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:DXDWSNDX2SBBWF2N46IUJY2KIF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Defending against Reconstruction Attack in Vertical Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Chong Wang, Jiankai Sun, Junyuan Xie, Weihao Gao, Yuanshun Yao","submitted_at":"2021-07-21T06:32:46Z","abstract_excerpt":"Recently researchers have studied input leakage problems in Federated Learning (FL) where a malicious party can reconstruct sensitive training inputs provided by users from shared gradient. It raises concerns about FL since input leakage contradicts the privacy-preserving intention of using FL. Despite a relatively rich literature on attacks and defenses of input reconstruction in Horizontal FL, input leakage and protection in vertical FL starts to draw researcher's attention recently. In this paper, we study how to defend against input leakage attacks in Vertical FL. We design an adversarial "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.09898","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2107.09898/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:59:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cBTsVPibqfTN3ujcWkaplZJlgzqRDFmFPLTQ6AnIzZ8C6Vg5gkl2+gi2gSqQKrYHBHfeRkmZc6rxwlpSTAFjAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T20:29:14.377176Z"},"content_sha256":"fc698c0f7e9d539ac1a769d556e1beffa2361d0f089a372fd85793553575681c","schema_version":"1.0","event_id":"sha256:fc698c0f7e9d539ac1a769d556e1beffa2361d0f089a372fd85793553575681c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DXDWSNDX2SBBWF2N46IUJY2KIF/bundle.json","state_url":"https://pith.science/pith/DXDWSNDX2SBBWF2N46IUJY2KIF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DXDWSNDX2SBBWF2N46IUJY2KIF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T20:29:14Z","links":{"resolver":"https://pith.science/pith/DXDWSNDX2SBBWF2N46IUJY2KIF","bundle":"https://pith.science/pith/DXDWSNDX2SBBWF2N46IUJY2KIF/bundle.json","state":"https://pith.science/pith/DXDWSNDX2SBBWF2N46IUJY2KIF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DXDWSNDX2SBBWF2N46IUJY2KIF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:DXDWSNDX2SBBWF2N46IUJY2KIF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"30710c951f424e78ec5a3933ed3e48f23e1927a4a351a2824c5de2e8abca7645","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-21T06:32:46Z","title_canon_sha256":"f923cd22aca8416c583735b8e75195f294558b750eaba50743d0b8666c2e6b8f"},"schema_version":"1.0","source":{"id":"2107.09898","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.09898","created_at":"2026-07-05T02:59:40Z"},{"alias_kind":"arxiv_version","alias_value":"2107.09898v1","created_at":"2026-07-05T02:59:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.09898","created_at":"2026-07-05T02:59:40Z"},{"alias_kind":"pith_short_12","alias_value":"DXDWSNDX2SBB","created_at":"2026-07-05T02:59:40Z"},{"alias_kind":"pith_short_16","alias_value":"DXDWSNDX2SBBWF2N","created_at":"2026-07-05T02:59:40Z"},{"alias_kind":"pith_short_8","alias_value":"DXDWSNDX","created_at":"2026-07-05T02:59:40Z"}],"graph_snapshots":[{"event_id":"sha256:fc698c0f7e9d539ac1a769d556e1beffa2361d0f089a372fd85793553575681c","target":"graph","created_at":"2026-07-05T02:59:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2107.09898/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recently researchers have studied input leakage problems in Federated Learning (FL) where a malicious party can reconstruct sensitive training inputs provided by users from shared gradient. It raises concerns about FL since input leakage contradicts the privacy-preserving intention of using FL. Despite a relatively rich literature on attacks and defenses of input reconstruction in Horizontal FL, input leakage and protection in vertical FL starts to draw researcher's attention recently. In this paper, we study how to defend against input leakage attacks in Vertical FL. We design an adversarial ","authors_text":"Chong Wang, Jiankai Sun, Junyuan Xie, Weihao Gao, Yuanshun Yao","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-21T06:32:46Z","title":"Defending against Reconstruction Attack in Vertical Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.09898","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:658d0e4d02568f12a3f4611af29444083ff8629c17f6c81099bdc11f6955582b","target":"record","created_at":"2026-07-05T02:59:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"30710c951f424e78ec5a3933ed3e48f23e1927a4a351a2824c5de2e8abca7645","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-21T06:32:46Z","title_canon_sha256":"f923cd22aca8416c583735b8e75195f294558b750eaba50743d0b8666c2e6b8f"},"schema_version":"1.0","source":{"id":"2107.09898","kind":"arxiv","version":1}},"canonical_sha256":"1dc7693477d4821b174de79144e34a415d9715b718d900fea9c48ab19fdffde3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1dc7693477d4821b174de79144e34a415d9715b718d900fea9c48ab19fdffde3","first_computed_at":"2026-07-05T02:59:40.669368Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:59:40.669368Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"a9L1EcWY/Yj+B0vt3YLgCbklHZxlDITxNVu35jKNBb5vUZmjeyRO0Hgn3cSqPnGbJ8gVPVc471Ttnl1CrmUMCw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:59:40.669777Z","signed_message":"canonical_sha256_bytes"},"source_id":"2107.09898","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:658d0e4d02568f12a3f4611af29444083ff8629c17f6c81099bdc11f6955582b","sha256:fc698c0f7e9d539ac1a769d556e1beffa2361d0f089a372fd85793553575681c"],"state_sha256":"eca52b1fa16cbe4083f7371e50b02842de704f275c8ab356c464c16034e22a41"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"W9dwOrsDHQclyMqYLyUNAkgWXFqWY6GiYTkvXxLUBbyqV8SEpzs6B0EjesHXTWmtMrlUAGn1a2a2CXX+E1UQAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T20:29:14.381165Z","bundle_sha256":"8c5c48d263020574ee4efe05aa384c90a059d7e39f356b7b90ffdfd09a2ca642"}}