{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:GSB63MEYWPBFVLKPWBUGTVDSOQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7f7bf4203e4cc4e120da0bea54ff33558a23fab487cbc5968e5b6906af89d869","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2021-10-31T17:57:49Z","title_canon_sha256":"4b68dd6473f2666c2a30f7833f377017cf4ba3f93a67de89900022f1680675ac"},"schema_version":"1.0","source":{"id":"2111.00556","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.00556","created_at":"2026-07-05T03:27:43Z"},{"alias_kind":"arxiv_version","alias_value":"2111.00556v1","created_at":"2026-07-05T03:27:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.00556","created_at":"2026-07-05T03:27:43Z"},{"alias_kind":"pith_short_12","alias_value":"GSB63MEYWPBF","created_at":"2026-07-05T03:27:43Z"},{"alias_kind":"pith_short_16","alias_value":"GSB63MEYWPBFVLKP","created_at":"2026-07-05T03:27:43Z"},{"alias_kind":"pith_short_8","alias_value":"GSB63MEY","created_at":"2026-07-05T03:27:43Z"}],"graph_snapshots":[{"event_id":"sha256:6e4a4ec633b6875631db0d5a5162e505f2529b2e1bae79a703ee210a69be594f","target":"graph","created_at":"2026-07-05T03:27:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2111.00556/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Distributed learning paradigms such as federated learning often involve transmission of model updates, or gradients, over a network, thereby avoiding transmission of private data. However, it is possible for sensitive information about the training data to be revealed from such gradients. Prior works have demonstrated that labels can be revealed analytically from the last layer of certain models (e.g., ResNet), or they can be reconstructed jointly with model inputs by using Gradients Matching [Zhu et al'19] with additional knowledge about the current state of the model. In this work, we propos","authors_text":"Fran\\c{c}oise Beaufays, Om Thakkar, Peter Chin, Rajiv Mathews, Swaroop Ramaswamy, Trung Dang","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2021-10-31T17:57:49Z","title":"Revealing and Protecting Labels in Distributed Training"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.00556","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cca2ef32a8f9e4dabf19047c2c24a5867f81f25034e5659556327a676fd23957","target":"record","created_at":"2026-07-05T03:27:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7f7bf4203e4cc4e120da0bea54ff33558a23fab487cbc5968e5b6906af89d869","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2021-10-31T17:57:49Z","title_canon_sha256":"4b68dd6473f2666c2a30f7833f377017cf4ba3f93a67de89900022f1680675ac"},"schema_version":"1.0","source":{"id":"2111.00556","kind":"arxiv","version":1}},"canonical_sha256":"3483edb098b3c25aad4fb06869d47274149a189b0f01e02875fbcf8ecec9ecc6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3483edb098b3c25aad4fb06869d47274149a189b0f01e02875fbcf8ecec9ecc6","first_computed_at":"2026-07-05T03:27:43.985624Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:27:43.985624Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IIFzB+G5TKaq2CmnvwQokUsWqPgjQBARQWxKN2niTf2qDipclslLtjLk4uWm08iFHoya9Vr8u3EUzyHySDcSCg==","signature_status":"signed_v1","signed_at":"2026-07-05T03:27:43.986086Z","signed_message":"canonical_sha256_bytes"},"source_id":"2111.00556","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cca2ef32a8f9e4dabf19047c2c24a5867f81f25034e5659556327a676fd23957","sha256:6e4a4ec633b6875631db0d5a5162e505f2529b2e1bae79a703ee210a69be594f"],"state_sha256":"7497cdd9d787e6bacc96dbe595a51b878ded79a622a6a58b33b7e6d3fe350779"}