{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:ES3MP7M3WQKLCNKTG3KJ72IR74","short_pith_number":"pith:ES3MP7M3","canonical_record":{"source":{"id":"2501.00824","kind":"arxiv","version":7},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-01T13:00:01Z","cross_cats_sorted":["cs.IT","math.IT"],"title_canon_sha256":"ee0ad8a490f3a217529f7159d3d2a6877b5e6cf8ffa3a9f0785c03b1b271ce7e","abstract_canon_sha256":"231f193772038adc0a71b085c67cee423c491cddaf865a7f23e903fe82138e9e"},"schema_version":"1.0"},"canonical_sha256":"24b6c7fd9bb414b1355336d49fe911ff161346ea536e3488977c6339d316e8a5","source":{"kind":"arxiv","id":"2501.00824","version":7},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.00824","created_at":"2026-07-05T11:24:52Z"},{"alias_kind":"arxiv_version","alias_value":"2501.00824v7","created_at":"2026-07-05T11:24:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.00824","created_at":"2026-07-05T11:24:52Z"},{"alias_kind":"pith_short_12","alias_value":"ES3MP7M3WQKL","created_at":"2026-07-05T11:24:52Z"},{"alias_kind":"pith_short_16","alias_value":"ES3MP7M3WQKLCNKT","created_at":"2026-07-05T11:24:52Z"},{"alias_kind":"pith_short_8","alias_value":"ES3MP7M3","created_at":"2026-07-05T11:24:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:ES3MP7M3WQKLCNKTG3KJ72IR74","target":"record","payload":{"canonical_record":{"source":{"id":"2501.00824","kind":"arxiv","version":7},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-01T13:00:01Z","cross_cats_sorted":["cs.IT","math.IT"],"title_canon_sha256":"ee0ad8a490f3a217529f7159d3d2a6877b5e6cf8ffa3a9f0785c03b1b271ce7e","abstract_canon_sha256":"231f193772038adc0a71b085c67cee423c491cddaf865a7f23e903fe82138e9e"},"schema_version":"1.0"},"canonical_sha256":"24b6c7fd9bb414b1355336d49fe911ff161346ea536e3488977c6339d316e8a5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:24:52.390733Z","signature_b64":"D1TBHZexf6MXklLSFS2pU8SLEJOedW58SXXhOAbwyn4r7AOfyAzz8w0vXYmiLVWjgr1YMoEIL1XwrHSGMZy3CA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"24b6c7fd9bb414b1355336d49fe911ff161346ea536e3488977c6339d316e8a5","last_reissued_at":"2026-07-05T11:24:52.390273Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:24:52.390273Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.00824","source_version":7,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:24:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vSdThWdpq3q6MCCdoKLt4l7qISc6ogv8ycR8aJtiIHP9MT9ehi+HrNrMVy27IQ7lsNoZwc2ZJn8pFnd+NnJmAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T05:07:21.241878Z"},"content_sha256":"0ea3283bd46c4ded606a52bd34109b9d27bec41630add89c00ddc3a6e377f4d0","schema_version":"1.0","event_id":"sha256:0ea3283bd46c4ded606a52bd34109b9d27bec41630add89c00ddc3a6e377f4d0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:ES3MP7M3WQKLCNKTG3KJ72IR74","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"How Breakable Is Privacy: Probing and Resisting Model Inversion Attacks in Collaborative Inference","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.IT","math.IT"],"primary_cat":"cs.CR","authors_text":"Dong Wang, Gaoning Pan, Rongke Liu, Weizhi Meng, Xingyu He, Youwen Zhu","submitted_at":"2025-01-01T13:00:01Z","abstract_excerpt":"Collaborative inference (CI) improves computational efficiency for edge devices by transmitting intermediate features to cloud models. However, this process inevitably exposes feature representations to model inversion attacks (MIAs), enabling unauthorized data reconstruction. Despite extensive research, there is no established criterion for assessing the difficulty of MIA implementation, leaving a fundamental question unanswered: \\textit{What factors truly and verifiably determine the attack's success in CI?} Moreover, existing defenses lack the theoretical foundation described above, making "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.00824","kind":"arxiv","version":7},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.00824/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:24:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fikJ6XLycuTAM7JBW67Ib4lGRPdPGsezXvWlRnIxTZ0h9W0jIGM/JPrjAaxJAjNDiPmdSEK2XjwzhU+R2v38Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T05:07:21.243469Z"},"content_sha256":"e29528ecb2125a2be6155243d3f6969988c831a527efaa63bde02a594e0cafb0","schema_version":"1.0","event_id":"sha256:e29528ecb2125a2be6155243d3f6969988c831a527efaa63bde02a594e0cafb0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ES3MP7M3WQKLCNKTG3KJ72IR74/bundle.json","state_url":"https://pith.science/pith/ES3MP7M3WQKLCNKTG3KJ72IR74/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ES3MP7M3WQKLCNKTG3KJ72IR74/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T05:07:21Z","links":{"resolver":"https://pith.science/pith/ES3MP7M3WQKLCNKTG3KJ72IR74","bundle":"https://pith.science/pith/ES3MP7M3WQKLCNKTG3KJ72IR74/bundle.json","state":"https://pith.science/pith/ES3MP7M3WQKLCNKTG3KJ72IR74/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ES3MP7M3WQKLCNKTG3KJ72IR74/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:ES3MP7M3WQKLCNKTG3KJ72IR74","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"231f193772038adc0a71b085c67cee423c491cddaf865a7f23e903fe82138e9e","cross_cats_sorted":["cs.IT","math.IT"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-01T13:00:01Z","title_canon_sha256":"ee0ad8a490f3a217529f7159d3d2a6877b5e6cf8ffa3a9f0785c03b1b271ce7e"},"schema_version":"1.0","source":{"id":"2501.00824","kind":"arxiv","version":7}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.00824","created_at":"2026-07-05T11:24:52Z"},{"alias_kind":"arxiv_version","alias_value":"2501.00824v7","created_at":"2026-07-05T11:24:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.00824","created_at":"2026-07-05T11:24:52Z"},{"alias_kind":"pith_short_12","alias_value":"ES3MP7M3WQKL","created_at":"2026-07-05T11:24:52Z"},{"alias_kind":"pith_short_16","alias_value":"ES3MP7M3WQKLCNKT","created_at":"2026-07-05T11:24:52Z"},{"alias_kind":"pith_short_8","alias_value":"ES3MP7M3","created_at":"2026-07-05T11:24:52Z"}],"graph_snapshots":[{"event_id":"sha256:e29528ecb2125a2be6155243d3f6969988c831a527efaa63bde02a594e0cafb0","target":"graph","created_at":"2026-07-05T11:24:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.00824/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Collaborative inference (CI) improves computational efficiency for edge devices by transmitting intermediate features to cloud models. However, this process inevitably exposes feature representations to model inversion attacks (MIAs), enabling unauthorized data reconstruction. Despite extensive research, there is no established criterion for assessing the difficulty of MIA implementation, leaving a fundamental question unanswered: \\textit{What factors truly and verifiably determine the attack's success in CI?} Moreover, existing defenses lack the theoretical foundation described above, making ","authors_text":"Dong Wang, Gaoning Pan, Rongke Liu, Weizhi Meng, Xingyu He, Youwen Zhu","cross_cats":["cs.IT","math.IT"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-01T13:00:01Z","title":"How Breakable Is Privacy: Probing and Resisting Model Inversion Attacks in Collaborative Inference"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.00824","kind":"arxiv","version":7},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0ea3283bd46c4ded606a52bd34109b9d27bec41630add89c00ddc3a6e377f4d0","target":"record","created_at":"2026-07-05T11:24:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"231f193772038adc0a71b085c67cee423c491cddaf865a7f23e903fe82138e9e","cross_cats_sorted":["cs.IT","math.IT"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-01T13:00:01Z","title_canon_sha256":"ee0ad8a490f3a217529f7159d3d2a6877b5e6cf8ffa3a9f0785c03b1b271ce7e"},"schema_version":"1.0","source":{"id":"2501.00824","kind":"arxiv","version":7}},"canonical_sha256":"24b6c7fd9bb414b1355336d49fe911ff161346ea536e3488977c6339d316e8a5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"24b6c7fd9bb414b1355336d49fe911ff161346ea536e3488977c6339d316e8a5","first_computed_at":"2026-07-05T11:24:52.390273Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:24:52.390273Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"D1TBHZexf6MXklLSFS2pU8SLEJOedW58SXXhOAbwyn4r7AOfyAzz8w0vXYmiLVWjgr1YMoEIL1XwrHSGMZy3CA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:24:52.390733Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.00824","source_kind":"arxiv","source_version":7}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0ea3283bd46c4ded606a52bd34109b9d27bec41630add89c00ddc3a6e377f4d0","sha256:e29528ecb2125a2be6155243d3f6969988c831a527efaa63bde02a594e0cafb0"],"state_sha256":"dca97e91f9f69493e1633f4e06168ab690155533474c28e08b66dd154b3f390e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OzHqencj4Vixcb/aa5+NHZ/dFHO/9XAfvQqyX45ZI9LFf+LktXWQdWYpsdqTb0jC/opN3ltHpzm/0a5D4uQzBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T05:07:21.259894Z","bundle_sha256":"cbe5a96ef981bfc3ccf41cd442ce1d5ca508bd0360a9ca46f8b30fab7b52d763"}}