{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:EOALQK4T4HPH7XJ7E4XFLPBMUM","short_pith_number":"pith:EOALQK4T","canonical_record":{"source":{"id":"2307.06123","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-07-12T12:23:47Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"d635d0f43836a9673a713bdc7190dc8ffee9cf83319048be7bf9a61a8d2b090d","abstract_canon_sha256":"256e9ed908ec8d4dc02d274e1c395910ac6daa23e719d522e29e360a0e4059cb"},"schema_version":"1.0"},"canonical_sha256":"2380b82b93e1de7fdd3f272e55bc2ca307989512d1dc3b6c18b042fba3cfeffd","source":{"kind":"arxiv","id":"2307.06123","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.06123","created_at":"2026-07-05T06:30:16Z"},{"alias_kind":"arxiv_version","alias_value":"2307.06123v1","created_at":"2026-07-05T06:30:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.06123","created_at":"2026-07-05T06:30:16Z"},{"alias_kind":"pith_short_12","alias_value":"EOALQK4T4HPH","created_at":"2026-07-05T06:30:16Z"},{"alias_kind":"pith_short_16","alias_value":"EOALQK4T4HPH7XJ7","created_at":"2026-07-05T06:30:16Z"},{"alias_kind":"pith_short_8","alias_value":"EOALQK4T","created_at":"2026-07-05T06:30:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:EOALQK4T4HPH7XJ7E4XFLPBMUM","target":"record","payload":{"canonical_record":{"source":{"id":"2307.06123","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-07-12T12:23:47Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"d635d0f43836a9673a713bdc7190dc8ffee9cf83319048be7bf9a61a8d2b090d","abstract_canon_sha256":"256e9ed908ec8d4dc02d274e1c395910ac6daa23e719d522e29e360a0e4059cb"},"schema_version":"1.0"},"canonical_sha256":"2380b82b93e1de7fdd3f272e55bc2ca307989512d1dc3b6c18b042fba3cfeffd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:30:16.971291Z","signature_b64":"zXdLH7tuGloVofLFVWOCmqMAjf81Vb1ho6yO1zTiEdpGZImmN+RPXtdeGknJRHe90ACYZqGf0erYPVdQvgH5CA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2380b82b93e1de7fdd3f272e55bc2ca307989512d1dc3b6c18b042fba3cfeffd","last_reissued_at":"2026-07-05T06:30:16.970820Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:30:16.970820Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2307.06123","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:30:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RbHAYElvwyJfKvt2R7yjHFCMeWBi7EVoIQfNRVitYjXdyy2RUj06YU9lOJUNL8o0c/epTQxQAuwMIQhPqIXbBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T17:03:50.535393Z"},"content_sha256":"038096ce13fa0f345e54c6e3d3771da70767cb90afd5408078264d684cea0744","schema_version":"1.0","event_id":"sha256:038096ce13fa0f345e54c6e3d3771da70767cb90afd5408078264d684cea0744"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:EOALQK4T4HPH7XJ7E4XFLPBMUM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SoK: Comparing Different Membership Inference Attacks with a Comprehensive Benchmark","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Chunhui Huang, Ge Zhang, Jianfeng Ma, Jun Niu, Kuo Shen, Moxuan Zeng, Peng Liu, Qingyang Zhao, Suyu An, Weihao Guo, Xiaohong Jiang, Xiaoyan Zhu, Xinghui Yue, Yangming Zhang, Yangzhong Wang, Yulong Shen, Yuqing Zhang, Zhipeng He","submitted_at":"2023-07-12T12:23:47Z","abstract_excerpt":"Membership inference (MI) attacks threaten user privacy through determining if a given data example has been used to train a target model. However, it has been increasingly recognized that the \"comparing different MI attacks\" methodology used in the existing works has serious limitations. Due to these limitations, we found (through the experiments in this work) that some comparison results reported in the literature are quite misleading. In this paper, we seek to develop a comprehensive benchmark for comparing different MI attacks, called MIBench, which consists not only the evaluation metrics"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.06123","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2307.06123/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:30:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dUZ4XYH8Hfoo/zkG9W67EpPVwjK+OKYRrX8TB5ksZGBpuHsK0xkOrZvyGfDyoj6O7mBVf8ji3z3visHGc98zDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T17:03:50.536137Z"},"content_sha256":"2e9ffc61f78553293d21312ba4a1d0e74c63d202e91a91358dba1d90f319689d","schema_version":"1.0","event_id":"sha256:2e9ffc61f78553293d21312ba4a1d0e74c63d202e91a91358dba1d90f319689d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EOALQK4T4HPH7XJ7E4XFLPBMUM/bundle.json","state_url":"https://pith.science/pith/EOALQK4T4HPH7XJ7E4XFLPBMUM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EOALQK4T4HPH7XJ7E4XFLPBMUM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T17:03:50Z","links":{"resolver":"https://pith.science/pith/EOALQK4T4HPH7XJ7E4XFLPBMUM","bundle":"https://pith.science/pith/EOALQK4T4HPH7XJ7E4XFLPBMUM/bundle.json","state":"https://pith.science/pith/EOALQK4T4HPH7XJ7E4XFLPBMUM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EOALQK4T4HPH7XJ7E4XFLPBMUM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:EOALQK4T4HPH7XJ7E4XFLPBMUM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"256e9ed908ec8d4dc02d274e1c395910ac6daa23e719d522e29e360a0e4059cb","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-07-12T12:23:47Z","title_canon_sha256":"d635d0f43836a9673a713bdc7190dc8ffee9cf83319048be7bf9a61a8d2b090d"},"schema_version":"1.0","source":{"id":"2307.06123","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.06123","created_at":"2026-07-05T06:30:16Z"},{"alias_kind":"arxiv_version","alias_value":"2307.06123v1","created_at":"2026-07-05T06:30:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.06123","created_at":"2026-07-05T06:30:16Z"},{"alias_kind":"pith_short_12","alias_value":"EOALQK4T4HPH","created_at":"2026-07-05T06:30:16Z"},{"alias_kind":"pith_short_16","alias_value":"EOALQK4T4HPH7XJ7","created_at":"2026-07-05T06:30:16Z"},{"alias_kind":"pith_short_8","alias_value":"EOALQK4T","created_at":"2026-07-05T06:30:16Z"}],"graph_snapshots":[{"event_id":"sha256:2e9ffc61f78553293d21312ba4a1d0e74c63d202e91a91358dba1d90f319689d","target":"graph","created_at":"2026-07-05T06:30:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2307.06123/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Membership inference (MI) attacks threaten user privacy through determining if a given data example has been used to train a target model. However, it has been increasingly recognized that the \"comparing different MI attacks\" methodology used in the existing works has serious limitations. Due to these limitations, we found (through the experiments in this work) that some comparison results reported in the literature are quite misleading. In this paper, we seek to develop a comprehensive benchmark for comparing different MI attacks, called MIBench, which consists not only the evaluation metrics","authors_text":"Chunhui Huang, Ge Zhang, Jianfeng Ma, Jun Niu, Kuo Shen, Moxuan Zeng, Peng Liu, Qingyang Zhao, Suyu An, Weihao Guo, Xiaohong Jiang, Xiaoyan Zhu, Xinghui Yue, Yangming Zhang, Yangzhong Wang, Yulong Shen, Yuqing Zhang, Zhipeng He","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-07-12T12:23:47Z","title":"SoK: Comparing Different Membership Inference Attacks with a Comprehensive Benchmark"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.06123","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:038096ce13fa0f345e54c6e3d3771da70767cb90afd5408078264d684cea0744","target":"record","created_at":"2026-07-05T06:30:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"256e9ed908ec8d4dc02d274e1c395910ac6daa23e719d522e29e360a0e4059cb","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-07-12T12:23:47Z","title_canon_sha256":"d635d0f43836a9673a713bdc7190dc8ffee9cf83319048be7bf9a61a8d2b090d"},"schema_version":"1.0","source":{"id":"2307.06123","kind":"arxiv","version":1}},"canonical_sha256":"2380b82b93e1de7fdd3f272e55bc2ca307989512d1dc3b6c18b042fba3cfeffd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2380b82b93e1de7fdd3f272e55bc2ca307989512d1dc3b6c18b042fba3cfeffd","first_computed_at":"2026-07-05T06:30:16.970820Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:30:16.970820Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zXdLH7tuGloVofLFVWOCmqMAjf81Vb1ho6yO1zTiEdpGZImmN+RPXtdeGknJRHe90ACYZqGf0erYPVdQvgH5CA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:30:16.971291Z","signed_message":"canonical_sha256_bytes"},"source_id":"2307.06123","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:038096ce13fa0f345e54c6e3d3771da70767cb90afd5408078264d684cea0744","sha256:2e9ffc61f78553293d21312ba4a1d0e74c63d202e91a91358dba1d90f319689d"],"state_sha256":"b37cab53c9d30f89862fa0c12f8a749202d620ee39977cd9b8810e68f6b2f996"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NwWk4cLA6cWSkdqhdiGFIGVfiUJ8qxmuMpI48vxrxKFXyGkLxDX0tRxAIqUhpCI800gygZQBjih48n/uXPP0Dg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T17:03:50.545146Z","bundle_sha256":"cb1ac5dc1f8cc0b168d196c59b04f1ebd9bd83232280a509b37d4448b8fb6a5b"}}