{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:IDANFVTJ72HIA73WYQZM3L4SP7","short_pith_number":"pith:IDANFVTJ","canonical_record":{"source":{"id":"2112.03570","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-07T08:47:00Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"9a464b12bef4ec50b327d464cefbdb4e848d969f154cd2ecc26635f79faa01ba","abstract_canon_sha256":"1d4418d6ff43885618b5c163dc710d0c6195c6b833ce32d30b60b0f3d8a5af06"},"schema_version":"1.0"},"canonical_sha256":"40c0d2d669fe8e807f76c432cdaf927fca58658880b0dcd89ee5b9a27260ff5c","source":{"kind":"arxiv","id":"2112.03570","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.03570","created_at":"2026-07-05T04:13:47Z"},{"alias_kind":"arxiv_version","alias_value":"2112.03570v2","created_at":"2026-07-05T04:13:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.03570","created_at":"2026-07-05T04:13:47Z"},{"alias_kind":"pith_short_12","alias_value":"IDANFVTJ72HI","created_at":"2026-07-05T04:13:47Z"},{"alias_kind":"pith_short_16","alias_value":"IDANFVTJ72HIA73W","created_at":"2026-07-05T04:13:47Z"},{"alias_kind":"pith_short_8","alias_value":"IDANFVTJ","created_at":"2026-07-05T04:13:47Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:IDANFVTJ72HIA73WYQZM3L4SP7","target":"record","payload":{"canonical_record":{"source":{"id":"2112.03570","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-07T08:47:00Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"9a464b12bef4ec50b327d464cefbdb4e848d969f154cd2ecc26635f79faa01ba","abstract_canon_sha256":"1d4418d6ff43885618b5c163dc710d0c6195c6b833ce32d30b60b0f3d8a5af06"},"schema_version":"1.0"},"canonical_sha256":"40c0d2d669fe8e807f76c432cdaf927fca58658880b0dcd89ee5b9a27260ff5c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:13:47.216494Z","signature_b64":"5Mnn31PkFSq7lbVYbnO74Ik8CJ3lSpAMekOszO5V/BWxM9aCVsm0YX3Kb7maT+sT5f7Ys2AYKir6jzNPqhAXCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"40c0d2d669fe8e807f76c432cdaf927fca58658880b0dcd89ee5b9a27260ff5c","last_reissued_at":"2026-07-05T04:13:47.215929Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:13:47.215929Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2112.03570","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:13:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dQeHck/B0lJyH3W33uLGNUjqxG/am0LJvQoDLgGkc/7dtxFszNzBNfzMYaZ3xhmnNNanR0h76Zxq6RhLUbV3BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T13:11:14.044566Z"},"content_sha256":"e1eb62eda1c787d3d3282aaa265e5e7d9458f67e002548e08c587b210bf2890a","schema_version":"1.0","event_id":"sha256:e1eb62eda1c787d3d3282aaa265e5e7d9458f67e002548e08c587b210bf2890a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:IDANFVTJ72HIA73WYQZM3L4SP7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Membership Inference Attacks From First Principles","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Andreas Terzis, Florian Tramer, Milad Nasr, Nicholas Carlini, Shuang Song, Steve Chien","submitted_at":"2021-12-07T08:47:00Z","abstract_excerpt":"A membership inference attack allows an adversary to query a trained machine learning model to predict whether or not a particular example was contained in the model's training dataset. These attacks are currently evaluated using average-case \"accuracy\" metrics that fail to characterize whether the attack can confidently identify any members of the training set. We argue that attacks should instead be evaluated by computing their true-positive rate at low (e.g., <0.1%) false-positive rates, and find most prior attacks perform poorly when evaluated in this way. To address this we develop a Like"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.03570","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2112.03570/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:13:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BAZUKS//AxN24Axgq0ypgsjTAhP6JAb+AE7YuxLXQPlJcFqUsIEKkIBmwP7Ek8L/7i1EN7ykF1Ucia8IG/DwDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T13:11:14.045073Z"},"content_sha256":"c3c9808a7f8b16343fcafee31a7dd8b9a02a77973fe3d29512113dcc514c5371","schema_version":"1.0","event_id":"sha256:c3c9808a7f8b16343fcafee31a7dd8b9a02a77973fe3d29512113dcc514c5371"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IDANFVTJ72HIA73WYQZM3L4SP7/bundle.json","state_url":"https://pith.science/pith/IDANFVTJ72HIA73WYQZM3L4SP7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IDANFVTJ72HIA73WYQZM3L4SP7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T13:11:14Z","links":{"resolver":"https://pith.science/pith/IDANFVTJ72HIA73WYQZM3L4SP7","bundle":"https://pith.science/pith/IDANFVTJ72HIA73WYQZM3L4SP7/bundle.json","state":"https://pith.science/pith/IDANFVTJ72HIA73WYQZM3L4SP7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IDANFVTJ72HIA73WYQZM3L4SP7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:IDANFVTJ72HIA73WYQZM3L4SP7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1d4418d6ff43885618b5c163dc710d0c6195c6b833ce32d30b60b0f3d8a5af06","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-07T08:47:00Z","title_canon_sha256":"9a464b12bef4ec50b327d464cefbdb4e848d969f154cd2ecc26635f79faa01ba"},"schema_version":"1.0","source":{"id":"2112.03570","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.03570","created_at":"2026-07-05T04:13:47Z"},{"alias_kind":"arxiv_version","alias_value":"2112.03570v2","created_at":"2026-07-05T04:13:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.03570","created_at":"2026-07-05T04:13:47Z"},{"alias_kind":"pith_short_12","alias_value":"IDANFVTJ72HI","created_at":"2026-07-05T04:13:47Z"},{"alias_kind":"pith_short_16","alias_value":"IDANFVTJ72HIA73W","created_at":"2026-07-05T04:13:47Z"},{"alias_kind":"pith_short_8","alias_value":"IDANFVTJ","created_at":"2026-07-05T04:13:47Z"}],"graph_snapshots":[{"event_id":"sha256:c3c9808a7f8b16343fcafee31a7dd8b9a02a77973fe3d29512113dcc514c5371","target":"graph","created_at":"2026-07-05T04:13:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2112.03570/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"A membership inference attack allows an adversary to query a trained machine learning model to predict whether or not a particular example was contained in the model's training dataset. These attacks are currently evaluated using average-case \"accuracy\" metrics that fail to characterize whether the attack can confidently identify any members of the training set. We argue that attacks should instead be evaluated by computing their true-positive rate at low (e.g., <0.1%) false-positive rates, and find most prior attacks perform poorly when evaluated in this way. To address this we develop a Like","authors_text":"Andreas Terzis, Florian Tramer, Milad Nasr, Nicholas Carlini, Shuang Song, Steve Chien","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-07T08:47:00Z","title":"Membership Inference Attacks From First Principles"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.03570","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e1eb62eda1c787d3d3282aaa265e5e7d9458f67e002548e08c587b210bf2890a","target":"record","created_at":"2026-07-05T04:13:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1d4418d6ff43885618b5c163dc710d0c6195c6b833ce32d30b60b0f3d8a5af06","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-07T08:47:00Z","title_canon_sha256":"9a464b12bef4ec50b327d464cefbdb4e848d969f154cd2ecc26635f79faa01ba"},"schema_version":"1.0","source":{"id":"2112.03570","kind":"arxiv","version":2}},"canonical_sha256":"40c0d2d669fe8e807f76c432cdaf927fca58658880b0dcd89ee5b9a27260ff5c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"40c0d2d669fe8e807f76c432cdaf927fca58658880b0dcd89ee5b9a27260ff5c","first_computed_at":"2026-07-05T04:13:47.215929Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:13:47.215929Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5Mnn31PkFSq7lbVYbnO74Ik8CJ3lSpAMekOszO5V/BWxM9aCVsm0YX3Kb7maT+sT5f7Ys2AYKir6jzNPqhAXCw==","signature_status":"signed_v1","signed_at":"2026-07-05T04:13:47.216494Z","signed_message":"canonical_sha256_bytes"},"source_id":"2112.03570","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e1eb62eda1c787d3d3282aaa265e5e7d9458f67e002548e08c587b210bf2890a","sha256:c3c9808a7f8b16343fcafee31a7dd8b9a02a77973fe3d29512113dcc514c5371"],"state_sha256":"8f93512a249c12374a874852de6af9404a1121b8bbbe61999cc9412ba5e40f1a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vtFN9GmsQF1uh9I6WT4KYnd/xSVQPRFBknq2NMika/ZpcRBoyVnMsNFPKlFyKNION7il6mUoP+qyzylZJgBsCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T13:11:14.050227Z","bundle_sha256":"fce67d3b9e37076d5019dbfe6f9f1d13232038d40ed459cbf170de5caba21312"}}