{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:HNYJOVWF5P44TXYX2YFT5NLZWV","short_pith_number":"pith:HNYJOVWF","canonical_record":{"source":{"id":"2409.07291","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-11T14:20:47Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV","stat.ML"],"title_canon_sha256":"2617fa854535308521821731a1f73f83b73a4007444d10d4de0aa9f7b4e1cf9a","abstract_canon_sha256":"c4bc7e47adbe9b50683c26f48e1693acf83875be3300db10cc84933aea50f843"},"schema_version":"1.0"},"canonical_sha256":"3b709756c5ebf9c9df17d60b3eb579b573ae6e8a60750fe8bd346e221c8a71a5","source":{"kind":"arxiv","id":"2409.07291","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.07291","created_at":"2026-07-05T09:05:55Z"},{"alias_kind":"arxiv_version","alias_value":"2409.07291v1","created_at":"2026-07-05T09:05:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.07291","created_at":"2026-07-05T09:05:55Z"},{"alias_kind":"pith_short_12","alias_value":"HNYJOVWF5P44","created_at":"2026-07-05T09:05:55Z"},{"alias_kind":"pith_short_16","alias_value":"HNYJOVWF5P44TXYX","created_at":"2026-07-05T09:05:55Z"},{"alias_kind":"pith_short_8","alias_value":"HNYJOVWF","created_at":"2026-07-05T09:05:55Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:HNYJOVWF5P44TXYX2YFT5NLZWV","target":"record","payload":{"canonical_record":{"source":{"id":"2409.07291","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-11T14:20:47Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV","stat.ML"],"title_canon_sha256":"2617fa854535308521821731a1f73f83b73a4007444d10d4de0aa9f7b4e1cf9a","abstract_canon_sha256":"c4bc7e47adbe9b50683c26f48e1693acf83875be3300db10cc84933aea50f843"},"schema_version":"1.0"},"canonical_sha256":"3b709756c5ebf9c9df17d60b3eb579b573ae6e8a60750fe8bd346e221c8a71a5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:05:55.783447Z","signature_b64":"jC4fgAzVb9hWpOKxxE23+kd4syJN8z1961Co/WN6cnLT7v8fiq+goPyncFvXs+lTTzxTjGkWwaRcVDrhMROHDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3b709756c5ebf9c9df17d60b3eb579b573ae6e8a60750fe8bd346e221c8a71a5","last_reissued_at":"2026-07-05T09:05:55.782979Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:05:55.782979Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.07291","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:05:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+vM9guXy61lOPGkprVSWAYPt5UCXW3XRBlkrPeMHJF4Pra5sxGzhi1Mp2I7JWPXaA/Wu+It5/XAIgQQPFAlfAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T04:13:48.084852Z"},"content_sha256":"693705ee091c7f9799657486ea7409fce885fa04d623ab4a8af62d720665681f","schema_version":"1.0","event_id":"sha256:693705ee091c7f9799657486ea7409fce885fa04d623ab4a8af62d720665681f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:HNYJOVWF5P44TXYX2YFT5NLZWV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Exploring User-level Gradient Inversion with a Diffusion Prior","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.CV","stat.ML"],"primary_cat":"cs.LG","authors_text":"Andrew Lowy, Bradley Malin, Jing Liu, Kieran Parsons, Toshiaki Koike-Akino, Ye Wang, Zhuohang Li","submitted_at":"2024-09-11T14:20:47Z","abstract_excerpt":"We explore user-level gradient inversion as a new attack surface in distributed learning. We first investigate existing attacks on their ability to make inferences about private information beyond training data reconstruction. Motivated by the low reconstruction quality of existing methods, we propose a novel gradient inversion attack that applies a denoising diffusion model as a strong image prior in order to enhance recovery in the large batch setting. Unlike traditional attacks, which aim to reconstruct individual samples and suffer at large batch and image sizes, our approach instead aims "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.07291","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.07291/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:05:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eBnV4SnemA//pVsH33J/1+sJSrtgN3DIOcvyClVfnTrrZyy0YbPaM3r/sIhA069QTrs8s3fykMzq9i8rDBPtBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T04:13:48.085440Z"},"content_sha256":"935a4eef7de24e62fb9deac4025a426c786b31484a63dfc07b943511641d422a","schema_version":"1.0","event_id":"sha256:935a4eef7de24e62fb9deac4025a426c786b31484a63dfc07b943511641d422a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HNYJOVWF5P44TXYX2YFT5NLZWV/bundle.json","state_url":"https://pith.science/pith/HNYJOVWF5P44TXYX2YFT5NLZWV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HNYJOVWF5P44TXYX2YFT5NLZWV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T04:13:48Z","links":{"resolver":"https://pith.science/pith/HNYJOVWF5P44TXYX2YFT5NLZWV","bundle":"https://pith.science/pith/HNYJOVWF5P44TXYX2YFT5NLZWV/bundle.json","state":"https://pith.science/pith/HNYJOVWF5P44TXYX2YFT5NLZWV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HNYJOVWF5P44TXYX2YFT5NLZWV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:HNYJOVWF5P44TXYX2YFT5NLZWV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c4bc7e47adbe9b50683c26f48e1693acf83875be3300db10cc84933aea50f843","cross_cats_sorted":["cs.AI","cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-11T14:20:47Z","title_canon_sha256":"2617fa854535308521821731a1f73f83b73a4007444d10d4de0aa9f7b4e1cf9a"},"schema_version":"1.0","source":{"id":"2409.07291","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.07291","created_at":"2026-07-05T09:05:55Z"},{"alias_kind":"arxiv_version","alias_value":"2409.07291v1","created_at":"2026-07-05T09:05:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.07291","created_at":"2026-07-05T09:05:55Z"},{"alias_kind":"pith_short_12","alias_value":"HNYJOVWF5P44","created_at":"2026-07-05T09:05:55Z"},{"alias_kind":"pith_short_16","alias_value":"HNYJOVWF5P44TXYX","created_at":"2026-07-05T09:05:55Z"},{"alias_kind":"pith_short_8","alias_value":"HNYJOVWF","created_at":"2026-07-05T09:05:55Z"}],"graph_snapshots":[{"event_id":"sha256:935a4eef7de24e62fb9deac4025a426c786b31484a63dfc07b943511641d422a","target":"graph","created_at":"2026-07-05T09:05:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.07291/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We explore user-level gradient inversion as a new attack surface in distributed learning. We first investigate existing attacks on their ability to make inferences about private information beyond training data reconstruction. Motivated by the low reconstruction quality of existing methods, we propose a novel gradient inversion attack that applies a denoising diffusion model as a strong image prior in order to enhance recovery in the large batch setting. Unlike traditional attacks, which aim to reconstruct individual samples and suffer at large batch and image sizes, our approach instead aims ","authors_text":"Andrew Lowy, Bradley Malin, Jing Liu, Kieran Parsons, Toshiaki Koike-Akino, Ye Wang, Zhuohang Li","cross_cats":["cs.AI","cs.CR","cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-11T14:20:47Z","title":"Exploring User-level Gradient Inversion with a Diffusion Prior"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.07291","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:693705ee091c7f9799657486ea7409fce885fa04d623ab4a8af62d720665681f","target":"record","created_at":"2026-07-05T09:05:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c4bc7e47adbe9b50683c26f48e1693acf83875be3300db10cc84933aea50f843","cross_cats_sorted":["cs.AI","cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-11T14:20:47Z","title_canon_sha256":"2617fa854535308521821731a1f73f83b73a4007444d10d4de0aa9f7b4e1cf9a"},"schema_version":"1.0","source":{"id":"2409.07291","kind":"arxiv","version":1}},"canonical_sha256":"3b709756c5ebf9c9df17d60b3eb579b573ae6e8a60750fe8bd346e221c8a71a5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3b709756c5ebf9c9df17d60b3eb579b573ae6e8a60750fe8bd346e221c8a71a5","first_computed_at":"2026-07-05T09:05:55.782979Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:05:55.782979Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jC4fgAzVb9hWpOKxxE23+kd4syJN8z1961Co/WN6cnLT7v8fiq+goPyncFvXs+lTTzxTjGkWwaRcVDrhMROHDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:05:55.783447Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.07291","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:693705ee091c7f9799657486ea7409fce885fa04d623ab4a8af62d720665681f","sha256:935a4eef7de24e62fb9deac4025a426c786b31484a63dfc07b943511641d422a"],"state_sha256":"eef0649241c5181d152875a1bbcdeebf48bd1d00fda9abadf4a0d04d1b1f01b5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EFcQ0vtpVWD21U1GQdIq6GmJpxvfiEsHjzCjhbbxXHNrDL3ZVa+6CF3lxEBraRMGfx+TlRE5PONS8HQ4BVW+BQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T04:13:48.089861Z","bundle_sha256":"52a42d87c3a85e83fb0f616ef7205800e2a7b4b8516087dc51382ae7c6316c0b"}}