{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:I4FIJMQRMNJ3HO65M6526KY4VD","short_pith_number":"pith:I4FIJMQR","canonical_record":{"source":{"id":"1911.07135","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-17T02:48:05Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"073ed38576f7a8dafdc03d22d5de75af6d3dbf8968baed7413ec9ab80eb87a09","abstract_canon_sha256":"7db040dd44daaf0cfc02ece60ea1ce6b9fc766787838939d4aa2347b7f2762a3"},"schema_version":"1.0"},"canonical_sha256":"470a84b2116353b3bbdd67bbaf2b1ca8f6b12517df668dd41131afbabf7e7054","source":{"kind":"arxiv","id":"1911.07135","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.07135","created_at":"2026-07-05T00:56:00Z"},{"alias_kind":"arxiv_version","alias_value":"1911.07135v2","created_at":"2026-07-05T00:56:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.07135","created_at":"2026-07-05T00:56:00Z"},{"alias_kind":"pith_short_12","alias_value":"I4FIJMQRMNJ3","created_at":"2026-07-05T00:56:00Z"},{"alias_kind":"pith_short_16","alias_value":"I4FIJMQRMNJ3HO65","created_at":"2026-07-05T00:56:00Z"},{"alias_kind":"pith_short_8","alias_value":"I4FIJMQR","created_at":"2026-07-05T00:56:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:I4FIJMQRMNJ3HO65M6526KY4VD","target":"record","payload":{"canonical_record":{"source":{"id":"1911.07135","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-17T02:48:05Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"073ed38576f7a8dafdc03d22d5de75af6d3dbf8968baed7413ec9ab80eb87a09","abstract_canon_sha256":"7db040dd44daaf0cfc02ece60ea1ce6b9fc766787838939d4aa2347b7f2762a3"},"schema_version":"1.0"},"canonical_sha256":"470a84b2116353b3bbdd67bbaf2b1ca8f6b12517df668dd41131afbabf7e7054","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:56:00.553859Z","signature_b64":"NAVPCUSl5h2PcWIJvOu832BPV+veWhFxT3hMjFNzZIoUzKb4C3rRhs+oAHsS3J1zuKQ8Ak8yb5XIObWHKyVJDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"470a84b2116353b3bbdd67bbaf2b1ca8f6b12517df668dd41131afbabf7e7054","last_reissued_at":"2026-07-05T00:56:00.553408Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:56:00.553408Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1911.07135","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:56:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"J+EtXOY3hqO54vLR3ciBhYa7N9zyOiiPOvTmO5uCdCR1UQIE9yyVN9Q76FVhky/cZfbMgMma+afJ55veRiuhDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T23:21:29.892609Z"},"content_sha256":"8c8d2aed4ca5511a3b3c5b859b8e319e3de865f9fb654a14880c2a9074bdd998","schema_version":"1.0","event_id":"sha256:8c8d2aed4ca5511a3b3c5b859b8e319e3de865f9fb654a14880c2a9074bdd998"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:I4FIJMQRMNJ3HO65M6526KY4VD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Bo Li, Dawn Song, Hengzhi Pei, Ruoxi Jia, Wenxiao Wang, Yuheng Zhang","submitted_at":"2019-11-17T02:48:05Z","abstract_excerpt":"This paper studies model-inversion attacks, in which the access to a model is abused to infer information about the training data. Since its first introduction, such attacks have raised serious concerns given that training data usually contain privacy-sensitive information. Thus far, successful model-inversion attacks have only been demonstrated on simple models, such as linear regression and logistic regression. Previous attempts to invert neural networks, even the ones with simple architectures, have failed to produce convincing results. We present a novel attack method, termed the generativ"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.07135","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1911.07135/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:56:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zqlqPX0NH37XYdyjmHKaPTIiN4G9+5kNv9okxpLVD9TrFjEp6DgEGj8OEn515ZlWxCgkE8C3yqtkVKAw1Cd5Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T23:21:29.893147Z"},"content_sha256":"1221bdec76130ea1d7486e5514ec5893cf48d861fcd176ff70d6208318d2a0cf","schema_version":"1.0","event_id":"sha256:1221bdec76130ea1d7486e5514ec5893cf48d861fcd176ff70d6208318d2a0cf"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/I4FIJMQRMNJ3HO65M6526KY4VD/bundle.json","state_url":"https://pith.science/pith/I4FIJMQRMNJ3HO65M6526KY4VD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/I4FIJMQRMNJ3HO65M6526KY4VD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T23:21:29Z","links":{"resolver":"https://pith.science/pith/I4FIJMQRMNJ3HO65M6526KY4VD","bundle":"https://pith.science/pith/I4FIJMQRMNJ3HO65M6526KY4VD/bundle.json","state":"https://pith.science/pith/I4FIJMQRMNJ3HO65M6526KY4VD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/I4FIJMQRMNJ3HO65M6526KY4VD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:I4FIJMQRMNJ3HO65M6526KY4VD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7db040dd44daaf0cfc02ece60ea1ce6b9fc766787838939d4aa2347b7f2762a3","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-17T02:48:05Z","title_canon_sha256":"073ed38576f7a8dafdc03d22d5de75af6d3dbf8968baed7413ec9ab80eb87a09"},"schema_version":"1.0","source":{"id":"1911.07135","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.07135","created_at":"2026-07-05T00:56:00Z"},{"alias_kind":"arxiv_version","alias_value":"1911.07135v2","created_at":"2026-07-05T00:56:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.07135","created_at":"2026-07-05T00:56:00Z"},{"alias_kind":"pith_short_12","alias_value":"I4FIJMQRMNJ3","created_at":"2026-07-05T00:56:00Z"},{"alias_kind":"pith_short_16","alias_value":"I4FIJMQRMNJ3HO65","created_at":"2026-07-05T00:56:00Z"},{"alias_kind":"pith_short_8","alias_value":"I4FIJMQR","created_at":"2026-07-05T00:56:00Z"}],"graph_snapshots":[{"event_id":"sha256:1221bdec76130ea1d7486e5514ec5893cf48d861fcd176ff70d6208318d2a0cf","target":"graph","created_at":"2026-07-05T00:56:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1911.07135/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This paper studies model-inversion attacks, in which the access to a model is abused to infer information about the training data. Since its first introduction, such attacks have raised serious concerns given that training data usually contain privacy-sensitive information. Thus far, successful model-inversion attacks have only been demonstrated on simple models, such as linear regression and logistic regression. Previous attempts to invert neural networks, even the ones with simple architectures, have failed to produce convincing results. We present a novel attack method, termed the generativ","authors_text":"Bo Li, Dawn Song, Hengzhi Pei, Ruoxi Jia, Wenxiao Wang, Yuheng Zhang","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-17T02:48:05Z","title":"The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.07135","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8c8d2aed4ca5511a3b3c5b859b8e319e3de865f9fb654a14880c2a9074bdd998","target":"record","created_at":"2026-07-05T00:56:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7db040dd44daaf0cfc02ece60ea1ce6b9fc766787838939d4aa2347b7f2762a3","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-17T02:48:05Z","title_canon_sha256":"073ed38576f7a8dafdc03d22d5de75af6d3dbf8968baed7413ec9ab80eb87a09"},"schema_version":"1.0","source":{"id":"1911.07135","kind":"arxiv","version":2}},"canonical_sha256":"470a84b2116353b3bbdd67bbaf2b1ca8f6b12517df668dd41131afbabf7e7054","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"470a84b2116353b3bbdd67bbaf2b1ca8f6b12517df668dd41131afbabf7e7054","first_computed_at":"2026-07-05T00:56:00.553408Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:56:00.553408Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NAVPCUSl5h2PcWIJvOu832BPV+veWhFxT3hMjFNzZIoUzKb4C3rRhs+oAHsS3J1zuKQ8Ak8yb5XIObWHKyVJDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T00:56:00.553859Z","signed_message":"canonical_sha256_bytes"},"source_id":"1911.07135","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8c8d2aed4ca5511a3b3c5b859b8e319e3de865f9fb654a14880c2a9074bdd998","sha256:1221bdec76130ea1d7486e5514ec5893cf48d861fcd176ff70d6208318d2a0cf"],"state_sha256":"89d3e7f48fdf845e1413bf8f02e5e5908f100d3b422a0d668d3a8bf798e7068e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pGjnTJtQUZsaNzHH/S+ZcCZu4uNLISVqV/waP8xvdmEj89mAFlksdUyqlGI1HxFzYGRZczaf3GN5szBaPdSfCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T23:21:29.897709Z","bundle_sha256":"0b1eec1e9061b6659a1ac121227c6821f572e98a4d0f5beac0f6fa2fa66c729b"}}