{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:IGD6SV6JF2EMKAYHHXORTW3KZV","short_pith_number":"pith:IGD6SV6J","canonical_record":{"source":{"id":"2111.08440","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-15T12:32:20Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"9b6a3fcee9d7ae68964d3b5b9cb900b223fd3767f3b79ec2eb99cda2a6d8a31a","abstract_canon_sha256":"257197844c45150f7c959fdd3782e2b074865a07b1a999b3d94f5fb5e174436d"},"schema_version":"1.0"},"canonical_sha256":"4187e957c92e88c503073ddd19db6acd626751e81802d8ff17377d192283174f","source":{"kind":"arxiv","id":"2111.08440","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.08440","created_at":"2026-07-05T04:13:11Z"},{"alias_kind":"arxiv_version","alias_value":"2111.08440v2","created_at":"2026-07-05T04:13:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.08440","created_at":"2026-07-05T04:13:11Z"},{"alias_kind":"pith_short_12","alias_value":"IGD6SV6JF2EM","created_at":"2026-07-05T04:13:11Z"},{"alias_kind":"pith_short_16","alias_value":"IGD6SV6JF2EMKAYH","created_at":"2026-07-05T04:13:11Z"},{"alias_kind":"pith_short_8","alias_value":"IGD6SV6J","created_at":"2026-07-05T04:13:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:IGD6SV6JF2EMKAYHHXORTW3KZV","target":"record","payload":{"canonical_record":{"source":{"id":"2111.08440","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-15T12:32:20Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"9b6a3fcee9d7ae68964d3b5b9cb900b223fd3767f3b79ec2eb99cda2a6d8a31a","abstract_canon_sha256":"257197844c45150f7c959fdd3782e2b074865a07b1a999b3d94f5fb5e174436d"},"schema_version":"1.0"},"canonical_sha256":"4187e957c92e88c503073ddd19db6acd626751e81802d8ff17377d192283174f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:13:11.283043Z","signature_b64":"BhisPGZvJxRRrhHg5ZXFY/f5bK9jOwt0RKC0zos1Y17U/+G1WmBLGb+/PpWf2b/NZSfHKro8iwjjEchsc7GABA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4187e957c92e88c503073ddd19db6acd626751e81802d8ff17377d192283174f","last_reissued_at":"2026-07-05T04:13:11.282569Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:13:11.282569Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2111.08440","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:13:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UoXwsJYS26prEGRAp99iG+n0zDyN+e/VW+Q01ZJjsfBb+KXgtai2K9WJbC5KlrOCkj4Og9Iyb68vdzBtBOxEDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T04:21:35.785021Z"},"content_sha256":"255be72e5a8eff773ef64dd1b9111cc3433fea5db5838f384ad6851b69ccae83","schema_version":"1.0","event_id":"sha256:255be72e5a8eff773ef64dd1b9111cc3433fea5db5838f384ad6851b69ccae83"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:IGD6SV6JF2EMKAYHHXORTW3KZV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Importance of Difficulty Calibration in Membership Inference Attacks","license":"http://creativecommons.org/publicdomain/zero/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Alex Sablayrolles, Chuan Guo, Graham Cormode, Lauren Watson","submitted_at":"2021-11-15T12:32:20Z","abstract_excerpt":"The vulnerability of machine learning models to membership inference attacks has received much attention in recent years. However, existing attacks mostly remain impractical due to having high false positive rates, where non-member samples are often erroneously predicted as members. This type of error makes the predicted membership signal unreliable, especially since most samples are non-members in real world applications. In this work, we argue that membership inference attacks can benefit drastically from \\emph{difficulty calibration}, where an attack's predicted membership score is adjusted"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.08440","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2111.08440/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:13:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"k5WKn/e4MctCOeINujkv/Y1tePnAQ0MvxasnKrfVtmqw8r5y9JrZ6pqrTK+vUcZ/r0Uii0PDOwgFj6PrON6bBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T04:21:35.785915Z"},"content_sha256":"9d64150973d045d4af163c21b4516508d8db55e2e5de15e32a204cc9f138dc66","schema_version":"1.0","event_id":"sha256:9d64150973d045d4af163c21b4516508d8db55e2e5de15e32a204cc9f138dc66"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IGD6SV6JF2EMKAYHHXORTW3KZV/bundle.json","state_url":"https://pith.science/pith/IGD6SV6JF2EMKAYHHXORTW3KZV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IGD6SV6JF2EMKAYHHXORTW3KZV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T04:21:35Z","links":{"resolver":"https://pith.science/pith/IGD6SV6JF2EMKAYHHXORTW3KZV","bundle":"https://pith.science/pith/IGD6SV6JF2EMKAYHHXORTW3KZV/bundle.json","state":"https://pith.science/pith/IGD6SV6JF2EMKAYHHXORTW3KZV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IGD6SV6JF2EMKAYHHXORTW3KZV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:IGD6SV6JF2EMKAYHHXORTW3KZV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"257197844c45150f7c959fdd3782e2b074865a07b1a999b3d94f5fb5e174436d","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-15T12:32:20Z","title_canon_sha256":"9b6a3fcee9d7ae68964d3b5b9cb900b223fd3767f3b79ec2eb99cda2a6d8a31a"},"schema_version":"1.0","source":{"id":"2111.08440","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.08440","created_at":"2026-07-05T04:13:11Z"},{"alias_kind":"arxiv_version","alias_value":"2111.08440v2","created_at":"2026-07-05T04:13:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.08440","created_at":"2026-07-05T04:13:11Z"},{"alias_kind":"pith_short_12","alias_value":"IGD6SV6JF2EM","created_at":"2026-07-05T04:13:11Z"},{"alias_kind":"pith_short_16","alias_value":"IGD6SV6JF2EMKAYH","created_at":"2026-07-05T04:13:11Z"},{"alias_kind":"pith_short_8","alias_value":"IGD6SV6J","created_at":"2026-07-05T04:13:11Z"}],"graph_snapshots":[{"event_id":"sha256:9d64150973d045d4af163c21b4516508d8db55e2e5de15e32a204cc9f138dc66","target":"graph","created_at":"2026-07-05T04:13:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2111.08440/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The vulnerability of machine learning models to membership inference attacks has received much attention in recent years. However, existing attacks mostly remain impractical due to having high false positive rates, where non-member samples are often erroneously predicted as members. This type of error makes the predicted membership signal unreliable, especially since most samples are non-members in real world applications. In this work, we argue that membership inference attacks can benefit drastically from \\emph{difficulty calibration}, where an attack's predicted membership score is adjusted","authors_text":"Alex Sablayrolles, Chuan Guo, Graham Cormode, Lauren Watson","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-15T12:32:20Z","title":"On the Importance of Difficulty Calibration in Membership Inference Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.08440","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:255be72e5a8eff773ef64dd1b9111cc3433fea5db5838f384ad6851b69ccae83","target":"record","created_at":"2026-07-05T04:13:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"257197844c45150f7c959fdd3782e2b074865a07b1a999b3d94f5fb5e174436d","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-15T12:32:20Z","title_canon_sha256":"9b6a3fcee9d7ae68964d3b5b9cb900b223fd3767f3b79ec2eb99cda2a6d8a31a"},"schema_version":"1.0","source":{"id":"2111.08440","kind":"arxiv","version":2}},"canonical_sha256":"4187e957c92e88c503073ddd19db6acd626751e81802d8ff17377d192283174f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4187e957c92e88c503073ddd19db6acd626751e81802d8ff17377d192283174f","first_computed_at":"2026-07-05T04:13:11.282569Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:13:11.282569Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"BhisPGZvJxRRrhHg5ZXFY/f5bK9jOwt0RKC0zos1Y17U/+G1WmBLGb+/PpWf2b/NZSfHKro8iwjjEchsc7GABA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:13:11.283043Z","signed_message":"canonical_sha256_bytes"},"source_id":"2111.08440","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:255be72e5a8eff773ef64dd1b9111cc3433fea5db5838f384ad6851b69ccae83","sha256:9d64150973d045d4af163c21b4516508d8db55e2e5de15e32a204cc9f138dc66"],"state_sha256":"4060eec2bdb0e951b39eae7efeef43b5d424efee236f896689d0228d93893cc3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IJz3LsvSi5nAgj3UkrCx6Q4MqfBid+kbcUN52jWETZV7emWb+nWTZOVgtXYoPY25TZJayc5xwRn5jexnVlUxCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T04:21:35.791304Z","bundle_sha256":"2ba249131eb4f76f003a5a33c24de6a5288a64a49fa1162099e6b0f8ea147e14"}}