{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:ELOG627ZTB4E2DSCAYAZE2H2DD","short_pith_number":"pith:ELOG627Z","canonical_record":{"source":{"id":"2210.08956","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2022-10-17T11:51:02Z","cross_cats_sorted":[],"title_canon_sha256":"a98ea51a413c8986e8fe5e98d6fe8b80324ac517369d9e1cc132befbb364b673","abstract_canon_sha256":"5058db60348ce0535c6ef7775e23e31510ce6b32f3b7538872570732a398dbe8"},"schema_version":"1.0"},"canonical_sha256":"22dc6f6bf998784d0e4206019268fa18f7f593e4f9e09256a53c896652033244","source":{"kind":"arxiv","id":"2210.08956","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.08956","created_at":"2026-07-05T05:07:17Z"},{"alias_kind":"arxiv_version","alias_value":"2210.08956v1","created_at":"2026-07-05T05:07:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.08956","created_at":"2026-07-05T05:07:17Z"},{"alias_kind":"pith_short_12","alias_value":"ELOG627ZTB4E","created_at":"2026-07-05T05:07:17Z"},{"alias_kind":"pith_short_16","alias_value":"ELOG627ZTB4E2DSC","created_at":"2026-07-05T05:07:17Z"},{"alias_kind":"pith_short_8","alias_value":"ELOG627Z","created_at":"2026-07-05T05:07:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:ELOG627ZTB4E2DSCAYAZE2H2DD","target":"record","payload":{"canonical_record":{"source":{"id":"2210.08956","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2022-10-17T11:51:02Z","cross_cats_sorted":[],"title_canon_sha256":"a98ea51a413c8986e8fe5e98d6fe8b80324ac517369d9e1cc132befbb364b673","abstract_canon_sha256":"5058db60348ce0535c6ef7775e23e31510ce6b32f3b7538872570732a398dbe8"},"schema_version":"1.0"},"canonical_sha256":"22dc6f6bf998784d0e4206019268fa18f7f593e4f9e09256a53c896652033244","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:07:17.056519Z","signature_b64":"9ej65F0JzZJLU/GzvHoXNqw91+EakmJq+y3e6HE4HMSivgIeIzsJerKo4TRM+W744hSBP7fsVNPRRF56KKtWAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"22dc6f6bf998784d0e4206019268fa18f7f593e4f9e09256a53c896652033244","last_reissued_at":"2026-07-05T05:07:17.056170Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:07:17.056170Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2210.08956","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:07:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iE+Rsy5QL6jbTm6mIJo6NUOnteXQm2CpS89sNSmkzng9nTYPpMw4NzCeNmfCizY/Iwiy65Bp3zXpG1NVElUlBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-24T05:59:53.634078Z"},"content_sha256":"3ec3b3d132cb49a3b833ceaa36428b99274388e841db4e39d88582d080ea09ac","schema_version":"1.0","event_id":"sha256:3ec3b3d132cb49a3b833ceaa36428b99274388e841db4e39d88582d080ea09ac"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:ELOG627ZTB4E2DSCAYAZE2H2DD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Novel Membership Inference Attack against Dynamic Neural Networks by Utilizing Policy Networks Information","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.AI","authors_text":"Kai Chen, Pan Li, Peizhuo Lv, Ruigang Liang, Shenchen Zhu","submitted_at":"2022-10-17T11:51:02Z","abstract_excerpt":"Unlike traditional static deep neural networks (DNNs), dynamic neural networks (NNs) adjust their structures or parameters to different inputs to guarantee accuracy and computational efficiency. Meanwhile, it has been an emerging research area in deep learning recently. Although traditional static DNNs are vulnerable to the membership inference attack (MIA) , which aims to infer whether a particular point was used to train the model, little is known about how such an attack performs on the dynamic NNs. In this paper, we propose a novel MI attack against dynamic NNs, leveraging the unique polic"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.08956","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2210.08956/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:07:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ax2MsrDzKfFdZe4SC+t8KfIb2DYAJaPDFcNgxoUZY/5q1TRkJuDPONglSVzOq20jP84azCIOQQ+dsZ/ob3FaCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-24T05:59:53.634465Z"},"content_sha256":"40f5a795c169d30febcb223c778836c7f6d29695e99b39b8bf655c6d6e9455ae","schema_version":"1.0","event_id":"sha256:40f5a795c169d30febcb223c778836c7f6d29695e99b39b8bf655c6d6e9455ae"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ELOG627ZTB4E2DSCAYAZE2H2DD/bundle.json","state_url":"https://pith.science/pith/ELOG627ZTB4E2DSCAYAZE2H2DD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ELOG627ZTB4E2DSCAYAZE2H2DD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-24T05:59:53Z","links":{"resolver":"https://pith.science/pith/ELOG627ZTB4E2DSCAYAZE2H2DD","bundle":"https://pith.science/pith/ELOG627ZTB4E2DSCAYAZE2H2DD/bundle.json","state":"https://pith.science/pith/ELOG627ZTB4E2DSCAYAZE2H2DD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ELOG627ZTB4E2DSCAYAZE2H2DD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:ELOG627ZTB4E2DSCAYAZE2H2DD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5058db60348ce0535c6ef7775e23e31510ce6b32f3b7538872570732a398dbe8","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2022-10-17T11:51:02Z","title_canon_sha256":"a98ea51a413c8986e8fe5e98d6fe8b80324ac517369d9e1cc132befbb364b673"},"schema_version":"1.0","source":{"id":"2210.08956","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.08956","created_at":"2026-07-05T05:07:17Z"},{"alias_kind":"arxiv_version","alias_value":"2210.08956v1","created_at":"2026-07-05T05:07:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.08956","created_at":"2026-07-05T05:07:17Z"},{"alias_kind":"pith_short_12","alias_value":"ELOG627ZTB4E","created_at":"2026-07-05T05:07:17Z"},{"alias_kind":"pith_short_16","alias_value":"ELOG627ZTB4E2DSC","created_at":"2026-07-05T05:07:17Z"},{"alias_kind":"pith_short_8","alias_value":"ELOG627Z","created_at":"2026-07-05T05:07:17Z"}],"graph_snapshots":[{"event_id":"sha256:40f5a795c169d30febcb223c778836c7f6d29695e99b39b8bf655c6d6e9455ae","target":"graph","created_at":"2026-07-05T05:07:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.08956/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Unlike traditional static deep neural networks (DNNs), dynamic neural networks (NNs) adjust their structures or parameters to different inputs to guarantee accuracy and computational efficiency. Meanwhile, it has been an emerging research area in deep learning recently. Although traditional static DNNs are vulnerable to the membership inference attack (MIA) , which aims to infer whether a particular point was used to train the model, little is known about how such an attack performs on the dynamic NNs. In this paper, we propose a novel MI attack against dynamic NNs, leveraging the unique polic","authors_text":"Kai Chen, Pan Li, Peizhuo Lv, Ruigang Liang, Shenchen Zhu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2022-10-17T11:51:02Z","title":"A Novel Membership Inference Attack against Dynamic Neural Networks by Utilizing Policy Networks Information"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.08956","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3ec3b3d132cb49a3b833ceaa36428b99274388e841db4e39d88582d080ea09ac","target":"record","created_at":"2026-07-05T05:07:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5058db60348ce0535c6ef7775e23e31510ce6b32f3b7538872570732a398dbe8","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2022-10-17T11:51:02Z","title_canon_sha256":"a98ea51a413c8986e8fe5e98d6fe8b80324ac517369d9e1cc132befbb364b673"},"schema_version":"1.0","source":{"id":"2210.08956","kind":"arxiv","version":1}},"canonical_sha256":"22dc6f6bf998784d0e4206019268fa18f7f593e4f9e09256a53c896652033244","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"22dc6f6bf998784d0e4206019268fa18f7f593e4f9e09256a53c896652033244","first_computed_at":"2026-07-05T05:07:17.056170Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:07:17.056170Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"9ej65F0JzZJLU/GzvHoXNqw91+EakmJq+y3e6HE4HMSivgIeIzsJerKo4TRM+W744hSBP7fsVNPRRF56KKtWAg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:07:17.056519Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.08956","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3ec3b3d132cb49a3b833ceaa36428b99274388e841db4e39d88582d080ea09ac","sha256:40f5a795c169d30febcb223c778836c7f6d29695e99b39b8bf655c6d6e9455ae"],"state_sha256":"905d8935f772b2e86abbbbad7050b5cb95eeb4729b53c9f969f41eea86d5fbbd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Y3Q/7miO6CJVQxoB3FmUOvSKh6Xyp5iLNm4WBMm+VHrKlCty7qzlVmVEhLa+R5P71ENbZEqBy2AKZ1vk1iPYCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-24T05:59:53.636526Z","bundle_sha256":"d0318c6ca02132c1540e636e2d9b83923a4ec56e93cfeab18948f409e48266ee"}}