{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:DYVOPZHQKFRFHFLT47TIOGVFE4","short_pith_number":"pith:DYVOPZHQ","canonical_record":{"source":{"id":"2204.08345","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.SD","submitted_at":"2022-04-18T14:43:17Z","cross_cats_sorted":["cs.CR","cs.LG","eess.AS"],"title_canon_sha256":"fa8062fa3261a85025ba280136f0c2554a77ba53f3347d8883f142835db581a9","abstract_canon_sha256":"a168fe13a7f2a0813d4de9b994ab2d15f34f7ee141c2f0ce3956ab573cbb47b8"},"schema_version":"1.0"},"canonical_sha256":"1e2ae7e4f05162539573e7e6871aa527180ce4db052481f1cb549fd5f8350bb7","source":{"kind":"arxiv","id":"2204.08345","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2204.08345","created_at":"2026-07-05T04:35:21Z"},{"alias_kind":"arxiv_version","alias_value":"2204.08345v2","created_at":"2026-07-05T04:35:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.08345","created_at":"2026-07-05T04:35:21Z"},{"alias_kind":"pith_short_12","alias_value":"DYVOPZHQKFRF","created_at":"2026-07-05T04:35:21Z"},{"alias_kind":"pith_short_16","alias_value":"DYVOPZHQKFRFHFLT","created_at":"2026-07-05T04:35:21Z"},{"alias_kind":"pith_short_8","alias_value":"DYVOPZHQ","created_at":"2026-07-05T04:35:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:DYVOPZHQKFRFHFLT47TIOGVFE4","target":"record","payload":{"canonical_record":{"source":{"id":"2204.08345","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.SD","submitted_at":"2022-04-18T14:43:17Z","cross_cats_sorted":["cs.CR","cs.LG","eess.AS"],"title_canon_sha256":"fa8062fa3261a85025ba280136f0c2554a77ba53f3347d8883f142835db581a9","abstract_canon_sha256":"a168fe13a7f2a0813d4de9b994ab2d15f34f7ee141c2f0ce3956ab573cbb47b8"},"schema_version":"1.0"},"canonical_sha256":"1e2ae7e4f05162539573e7e6871aa527180ce4db052481f1cb549fd5f8350bb7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:35:21.078780Z","signature_b64":"IcVETBI0RlPfHcsDCC7zAw2dHhOIROhR/LCuAAsmlqP9Rq/LTM3VJ+D1JTC84pW9zBNuI2bDZmFMWJlSSKEBCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1e2ae7e4f05162539573e7e6871aa527180ce4db052481f1cb549fd5f8350bb7","last_reissued_at":"2026-07-05T04:35:21.078335Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:35:21.078335Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2204.08345","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:35:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ifF33PGpTVCOCvbICdOsLT/xDnGcPi8bmA9e0gk9IQV4StZQzeZ4Xj9fpUEtYQt2uplQ8qtd0DrIkyGmdPfoAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T06:03:36.804528Z"},"content_sha256":"9b154e16a24245958e3a8ed3b6861f2da11f0c124d35a890861edf791eb514fc","schema_version":"1.0","event_id":"sha256:9b154e16a24245958e3a8ed3b6861f2da11f0c124d35a890861edf791eb514fc"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:DYVOPZHQKFRFHFLT47TIOGVFE4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Extracting Targeted Training Data from ASR Models, and How to Mitigate It","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.CR","cs.LG","eess.AS"],"primary_cat":"cs.SD","authors_text":"Arun Narayanan, Ehsan Amid, Fran\\c{c}oise Beaufays, Om Thakkar, Rajiv Mathews","submitted_at":"2022-04-18T14:43:17Z","abstract_excerpt":"Recent work has designed methods to demonstrate that model updates in ASR training can leak potentially sensitive attributes of the utterances used in computing the updates. In this work, we design the first method to demonstrate information leakage about training data from trained ASR models. We design Noise Masking, a fill-in-the-blank style method for extracting targeted parts of training data from trained ASR models. We demonstrate the success of Noise Masking by using it in four settings for extracting names from the LibriSpeech dataset used for training a state-of-the-art Conformer model"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.08345","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2204.08345/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:35:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ftbAirclbncyGomdXOkD846TmPRL0VniU7hf1PjYipWh1+BZeeItN8LsN4VXqRelzSIYzbBXpgxOqj3W8++rDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T06:03:36.805194Z"},"content_sha256":"ca591dd4f439220030070637e54a6d70fdf4765acd141c91adedae4cf125922d","schema_version":"1.0","event_id":"sha256:ca591dd4f439220030070637e54a6d70fdf4765acd141c91adedae4cf125922d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DYVOPZHQKFRFHFLT47TIOGVFE4/bundle.json","state_url":"https://pith.science/pith/DYVOPZHQKFRFHFLT47TIOGVFE4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DYVOPZHQKFRFHFLT47TIOGVFE4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T06:03:36Z","links":{"resolver":"https://pith.science/pith/DYVOPZHQKFRFHFLT47TIOGVFE4","bundle":"https://pith.science/pith/DYVOPZHQKFRFHFLT47TIOGVFE4/bundle.json","state":"https://pith.science/pith/DYVOPZHQKFRFHFLT47TIOGVFE4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DYVOPZHQKFRFHFLT47TIOGVFE4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:DYVOPZHQKFRFHFLT47TIOGVFE4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a168fe13a7f2a0813d4de9b994ab2d15f34f7ee141c2f0ce3956ab573cbb47b8","cross_cats_sorted":["cs.CR","cs.LG","eess.AS"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.SD","submitted_at":"2022-04-18T14:43:17Z","title_canon_sha256":"fa8062fa3261a85025ba280136f0c2554a77ba53f3347d8883f142835db581a9"},"schema_version":"1.0","source":{"id":"2204.08345","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2204.08345","created_at":"2026-07-05T04:35:21Z"},{"alias_kind":"arxiv_version","alias_value":"2204.08345v2","created_at":"2026-07-05T04:35:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.08345","created_at":"2026-07-05T04:35:21Z"},{"alias_kind":"pith_short_12","alias_value":"DYVOPZHQKFRF","created_at":"2026-07-05T04:35:21Z"},{"alias_kind":"pith_short_16","alias_value":"DYVOPZHQKFRFHFLT","created_at":"2026-07-05T04:35:21Z"},{"alias_kind":"pith_short_8","alias_value":"DYVOPZHQ","created_at":"2026-07-05T04:35:21Z"}],"graph_snapshots":[{"event_id":"sha256:ca591dd4f439220030070637e54a6d70fdf4765acd141c91adedae4cf125922d","target":"graph","created_at":"2026-07-05T04:35:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2204.08345/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent work has designed methods to demonstrate that model updates in ASR training can leak potentially sensitive attributes of the utterances used in computing the updates. In this work, we design the first method to demonstrate information leakage about training data from trained ASR models. We design Noise Masking, a fill-in-the-blank style method for extracting targeted parts of training data from trained ASR models. We demonstrate the success of Noise Masking by using it in four settings for extracting names from the LibriSpeech dataset used for training a state-of-the-art Conformer model","authors_text":"Arun Narayanan, Ehsan Amid, Fran\\c{c}oise Beaufays, Om Thakkar, Rajiv Mathews","cross_cats":["cs.CR","cs.LG","eess.AS"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.SD","submitted_at":"2022-04-18T14:43:17Z","title":"Extracting Targeted Training Data from ASR Models, and How to Mitigate It"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.08345","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9b154e16a24245958e3a8ed3b6861f2da11f0c124d35a890861edf791eb514fc","target":"record","created_at":"2026-07-05T04:35:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a168fe13a7f2a0813d4de9b994ab2d15f34f7ee141c2f0ce3956ab573cbb47b8","cross_cats_sorted":["cs.CR","cs.LG","eess.AS"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.SD","submitted_at":"2022-04-18T14:43:17Z","title_canon_sha256":"fa8062fa3261a85025ba280136f0c2554a77ba53f3347d8883f142835db581a9"},"schema_version":"1.0","source":{"id":"2204.08345","kind":"arxiv","version":2}},"canonical_sha256":"1e2ae7e4f05162539573e7e6871aa527180ce4db052481f1cb549fd5f8350bb7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1e2ae7e4f05162539573e7e6871aa527180ce4db052481f1cb549fd5f8350bb7","first_computed_at":"2026-07-05T04:35:21.078335Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:35:21.078335Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IcVETBI0RlPfHcsDCC7zAw2dHhOIROhR/LCuAAsmlqP9Rq/LTM3VJ+D1JTC84pW9zBNuI2bDZmFMWJlSSKEBCg==","signature_status":"signed_v1","signed_at":"2026-07-05T04:35:21.078780Z","signed_message":"canonical_sha256_bytes"},"source_id":"2204.08345","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9b154e16a24245958e3a8ed3b6861f2da11f0c124d35a890861edf791eb514fc","sha256:ca591dd4f439220030070637e54a6d70fdf4765acd141c91adedae4cf125922d"],"state_sha256":"4a1856c73f11be021066d21a13ae67e3af716513cb7c0d0025c3cf56e4182a9a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MfG4Vg8ubFT6XDVec1gQUGYTDBH4bLtPdYxClUj/opfXYgBddRH6YTwibAAnE0yxJkYGlso0yVjOJHwxdhlzAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T06:03:36.810256Z","bundle_sha256":"4593c0bf130f397af14b59d715b16fb1d43876bbca05d457301c5e7c3798ced7"}}