{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:HTUGVUZF3WDEG43OUQV2VYLS4Y","short_pith_number":"pith:HTUGVUZF","canonical_record":{"source":{"id":"2409.17283","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-25T18:49:21Z","cross_cats_sorted":[],"title_canon_sha256":"037ecbe004f6e742d929eedc6f30b5aea9905e4b40ef09a99e7fb2f1a8b8d1af","abstract_canon_sha256":"8c8c4a465411887692f7b411f826d2a8d23c30a29778bdee2819a4c57b9055f1"},"schema_version":"1.0"},"canonical_sha256":"3ce86ad325dd8643736ea42baae172e604c51016f739a2ba424c58ea6b4d24ea","source":{"kind":"arxiv","id":"2409.17283","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.17283","created_at":"2026-07-05T09:11:50Z"},{"alias_kind":"arxiv_version","alias_value":"2409.17283v1","created_at":"2026-07-05T09:11:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.17283","created_at":"2026-07-05T09:11:50Z"},{"alias_kind":"pith_short_12","alias_value":"HTUGVUZF3WDE","created_at":"2026-07-05T09:11:50Z"},{"alias_kind":"pith_short_16","alias_value":"HTUGVUZF3WDEG43O","created_at":"2026-07-05T09:11:50Z"},{"alias_kind":"pith_short_8","alias_value":"HTUGVUZF","created_at":"2026-07-05T09:11:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:HTUGVUZF3WDEG43OUQV2VYLS4Y","target":"record","payload":{"canonical_record":{"source":{"id":"2409.17283","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-25T18:49:21Z","cross_cats_sorted":[],"title_canon_sha256":"037ecbe004f6e742d929eedc6f30b5aea9905e4b40ef09a99e7fb2f1a8b8d1af","abstract_canon_sha256":"8c8c4a465411887692f7b411f826d2a8d23c30a29778bdee2819a4c57b9055f1"},"schema_version":"1.0"},"canonical_sha256":"3ce86ad325dd8643736ea42baae172e604c51016f739a2ba424c58ea6b4d24ea","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:11:50.752434Z","signature_b64":"UIa7bI4XJZpXPf4txEg0b8ZIXIv7S38xdbyMJMYH98k+dRq/1O8Q22jcq+deXFGLiGlCKuKZRdI7DKVO/3GSAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3ce86ad325dd8643736ea42baae172e604c51016f739a2ba424c58ea6b4d24ea","last_reissued_at":"2026-07-05T09:11:50.751917Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:11:50.751917Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.17283","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:11:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KOTOgdN0T9X47572CerhW/Ri6tk8TiFCYOkVnuU1++2EHMRBMnd1ZV/rzhmxD3slF3kBgUpeslt1MvnJAZ7VBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T07:59:48.115004Z"},"content_sha256":"ccae1f3a8a9b7e372284d0d0b16476c502c5fd4144a5ec0f3094d26e67fad1b3","schema_version":"1.0","event_id":"sha256:ccae1f3a8a9b7e372284d0d0b16476c502c5fd4144a5ec0f3094d26e67fad1b3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:HTUGVUZF3WDEG43OUQV2VYLS4Y","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Investigating Privacy Attacks in the Gray-Box Setting to Enhance Collaborative Learning Schemes","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ahmad Al Badawi, Andreas Peter, Federico Mazzone, Florian Hahn, Maarten Everts, Yuriy Polyakov","submitted_at":"2024-09-25T18:49:21Z","abstract_excerpt":"The notion that collaborative machine learning can ensure privacy by just withholding the raw data is widely acknowledged to be flawed. Over the past seven years, the literature has revealed several privacy attacks that enable adversaries to extract information about a model's training dataset by exploiting access to model parameters during or after training. In this work, we study privacy attacks in the gray-box setting, where the attacker has only limited access - in terms of view and actions - to the model. The findings of our investigation provide new insights for the development of privac"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.17283","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.17283/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:11:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"L8luT9NNtGp/OSd6v2zsQ1RsgEfjtKvlBjkfzQ7BS/iC5esS71uCe8Gglc5XADcbiSHSDYOVdDT2CQFG5moxCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T07:59:48.115512Z"},"content_sha256":"6eb1b382643fa4cff005eff01bfd77929b70c048f96b27c66deb1d1471e96ca3","schema_version":"1.0","event_id":"sha256:6eb1b382643fa4cff005eff01bfd77929b70c048f96b27c66deb1d1471e96ca3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HTUGVUZF3WDEG43OUQV2VYLS4Y/bundle.json","state_url":"https://pith.science/pith/HTUGVUZF3WDEG43OUQV2VYLS4Y/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HTUGVUZF3WDEG43OUQV2VYLS4Y/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T07:59:48Z","links":{"resolver":"https://pith.science/pith/HTUGVUZF3WDEG43OUQV2VYLS4Y","bundle":"https://pith.science/pith/HTUGVUZF3WDEG43OUQV2VYLS4Y/bundle.json","state":"https://pith.science/pith/HTUGVUZF3WDEG43OUQV2VYLS4Y/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HTUGVUZF3WDEG43OUQV2VYLS4Y/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:HTUGVUZF3WDEG43OUQV2VYLS4Y","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8c8c4a465411887692f7b411f826d2a8d23c30a29778bdee2819a4c57b9055f1","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-25T18:49:21Z","title_canon_sha256":"037ecbe004f6e742d929eedc6f30b5aea9905e4b40ef09a99e7fb2f1a8b8d1af"},"schema_version":"1.0","source":{"id":"2409.17283","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.17283","created_at":"2026-07-05T09:11:50Z"},{"alias_kind":"arxiv_version","alias_value":"2409.17283v1","created_at":"2026-07-05T09:11:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.17283","created_at":"2026-07-05T09:11:50Z"},{"alias_kind":"pith_short_12","alias_value":"HTUGVUZF3WDE","created_at":"2026-07-05T09:11:50Z"},{"alias_kind":"pith_short_16","alias_value":"HTUGVUZF3WDEG43O","created_at":"2026-07-05T09:11:50Z"},{"alias_kind":"pith_short_8","alias_value":"HTUGVUZF","created_at":"2026-07-05T09:11:50Z"}],"graph_snapshots":[{"event_id":"sha256:6eb1b382643fa4cff005eff01bfd77929b70c048f96b27c66deb1d1471e96ca3","target":"graph","created_at":"2026-07-05T09:11:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.17283/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The notion that collaborative machine learning can ensure privacy by just withholding the raw data is widely acknowledged to be flawed. Over the past seven years, the literature has revealed several privacy attacks that enable adversaries to extract information about a model's training dataset by exploiting access to model parameters during or after training. In this work, we study privacy attacks in the gray-box setting, where the attacker has only limited access - in terms of view and actions - to the model. The findings of our investigation provide new insights for the development of privac","authors_text":"Ahmad Al Badawi, Andreas Peter, Federico Mazzone, Florian Hahn, Maarten Everts, Yuriy Polyakov","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-25T18:49:21Z","title":"Investigating Privacy Attacks in the Gray-Box Setting to Enhance Collaborative Learning Schemes"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.17283","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ccae1f3a8a9b7e372284d0d0b16476c502c5fd4144a5ec0f3094d26e67fad1b3","target":"record","created_at":"2026-07-05T09:11:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8c8c4a465411887692f7b411f826d2a8d23c30a29778bdee2819a4c57b9055f1","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-25T18:49:21Z","title_canon_sha256":"037ecbe004f6e742d929eedc6f30b5aea9905e4b40ef09a99e7fb2f1a8b8d1af"},"schema_version":"1.0","source":{"id":"2409.17283","kind":"arxiv","version":1}},"canonical_sha256":"3ce86ad325dd8643736ea42baae172e604c51016f739a2ba424c58ea6b4d24ea","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3ce86ad325dd8643736ea42baae172e604c51016f739a2ba424c58ea6b4d24ea","first_computed_at":"2026-07-05T09:11:50.751917Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:11:50.751917Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"UIa7bI4XJZpXPf4txEg0b8ZIXIv7S38xdbyMJMYH98k+dRq/1O8Q22jcq+deXFGLiGlCKuKZRdI7DKVO/3GSAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:11:50.752434Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.17283","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ccae1f3a8a9b7e372284d0d0b16476c502c5fd4144a5ec0f3094d26e67fad1b3","sha256:6eb1b382643fa4cff005eff01bfd77929b70c048f96b27c66deb1d1471e96ca3"],"state_sha256":"bfacfd70fd15d8b6351d2015fc798406c105f90e4f1926f6007430fc26594bb0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7+pM7QWfI2Ic9rJnSpm7Q2ShJARhWWSfn5lPCjx1CEXXHx+4la0scIibkTPgylPvi2CBM90gX8VDh1XsJkMhAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T07:59:48.119518Z","bundle_sha256":"baa7601021021450c1e9365157dcef498127d35fefc739b463a5e33eac4e3f03"}}