{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:INGYQMUBXU7QKTHUCH2SVAWKUC","short_pith_number":"pith:INGYQMUB","canonical_record":{"source":{"id":"1904.01067","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-04-01T19:08:49Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"1b0ec2a3442bf9b93a6a2dc2e14f94bd8edba5635ee9cd8c5b8dfa8b500dfede","abstract_canon_sha256":"3d61980fdd7e7b8b221820d7c3d4f33905d23ed9927b35ca41dab3fedb3b9d15"},"schema_version":"1.0"},"canonical_sha256":"434d883281bd3f054cf411f52a82caa0aabfc7f9029327dd38ecd014b5948634","source":{"kind":"arxiv","id":"1904.01067","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1904.01067","created_at":"2026-07-05T00:23:03Z"},{"alias_kind":"arxiv_version","alias_value":"1904.01067v2","created_at":"2026-07-05T00:23:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1904.01067","created_at":"2026-07-05T00:23:03Z"},{"alias_kind":"pith_short_12","alias_value":"INGYQMUBXU7Q","created_at":"2026-07-05T00:23:03Z"},{"alias_kind":"pith_short_16","alias_value":"INGYQMUBXU7QKTHU","created_at":"2026-07-05T00:23:03Z"},{"alias_kind":"pith_short_8","alias_value":"INGYQMUB","created_at":"2026-07-05T00:23:03Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:INGYQMUBXU7QKTHUCH2SVAWKUC","target":"record","payload":{"canonical_record":{"source":{"id":"1904.01067","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-04-01T19:08:49Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"1b0ec2a3442bf9b93a6a2dc2e14f94bd8edba5635ee9cd8c5b8dfa8b500dfede","abstract_canon_sha256":"3d61980fdd7e7b8b221820d7c3d4f33905d23ed9927b35ca41dab3fedb3b9d15"},"schema_version":"1.0"},"canonical_sha256":"434d883281bd3f054cf411f52a82caa0aabfc7f9029327dd38ecd014b5948634","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:23:03.763490Z","signature_b64":"VtAlt6nPgRIvTjwgaD3x7lT+O3UXmVRVZ/vjnr9PbZPAoR06wNn5YgXoMk2pPvHQRF9KgtL2GzXkF2ddqr8UDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"434d883281bd3f054cf411f52a82caa0aabfc7f9029327dd38ecd014b5948634","last_reissued_at":"2026-07-05T00:23:03.762917Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:23:03.762917Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1904.01067","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:23:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9jdoSfdN28S39JCMMpOQ803vrTKzCCpybsYeS70C0QBFpkhBkC2V1lyOCmZypV2Q3lDu/LDgfL8y4ghFd0HCCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T03:03:10.919120Z"},"content_sha256":"08b3b08fafc7b93ddec029b3ca8c1263693552bb3bb1ecff8059b140355e5623","schema_version":"1.0","event_id":"sha256:08b3b08fafc7b93ddec029b3ca8c1263693552bb3bb1ecff8059b140355e5623"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:INGYQMUBXU7QKTHUCH2SVAWKUC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","stat.ML"],"primary_cat":"cs.CR","authors_text":"Ahmed Salem, Apratim Bhattacharya, Mario Fritz, Michael Backes, Yang Zhang","submitted_at":"2019-04-01T19:08:49Z","abstract_excerpt":"Machine learning (ML) has progressed rapidly during the past decade and the major factor that drives such development is the unprecedented large-scale data. As data generation is a continuous process, this leads to ML model owners updating their models frequently with newly-collected data in an online learning scenario. In consequence, if an ML model is queried with the same set of data samples at two different points in time, it will provide different results.\n  In this paper, we investigate whether the change in the output of a black-box ML model before and after being updated can leak infor"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1904.01067","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1904.01067/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:23:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jqvBEe2Sf43q29zuJ9Nmz0Bxp0LLTB7+JFBWZ2+fyCHIUaeAO2LK7SVGQpQTlWEy93t2bwbYb0TzQoJcFReECQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T03:03:10.920079Z"},"content_sha256":"d7306ca4bb463030d57c0ec215881edd75cb3a25d9aa7a9ae90e057e4b8f3e58","schema_version":"1.0","event_id":"sha256:d7306ca4bb463030d57c0ec215881edd75cb3a25d9aa7a9ae90e057e4b8f3e58"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/INGYQMUBXU7QKTHUCH2SVAWKUC/bundle.json","state_url":"https://pith.science/pith/INGYQMUBXU7QKTHUCH2SVAWKUC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/INGYQMUBXU7QKTHUCH2SVAWKUC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T03:03:10Z","links":{"resolver":"https://pith.science/pith/INGYQMUBXU7QKTHUCH2SVAWKUC","bundle":"https://pith.science/pith/INGYQMUBXU7QKTHUCH2SVAWKUC/bundle.json","state":"https://pith.science/pith/INGYQMUBXU7QKTHUCH2SVAWKUC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/INGYQMUBXU7QKTHUCH2SVAWKUC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:INGYQMUBXU7QKTHUCH2SVAWKUC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3d61980fdd7e7b8b221820d7c3d4f33905d23ed9927b35ca41dab3fedb3b9d15","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-04-01T19:08:49Z","title_canon_sha256":"1b0ec2a3442bf9b93a6a2dc2e14f94bd8edba5635ee9cd8c5b8dfa8b500dfede"},"schema_version":"1.0","source":{"id":"1904.01067","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1904.01067","created_at":"2026-07-05T00:23:03Z"},{"alias_kind":"arxiv_version","alias_value":"1904.01067v2","created_at":"2026-07-05T00:23:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1904.01067","created_at":"2026-07-05T00:23:03Z"},{"alias_kind":"pith_short_12","alias_value":"INGYQMUBXU7Q","created_at":"2026-07-05T00:23:03Z"},{"alias_kind":"pith_short_16","alias_value":"INGYQMUBXU7QKTHU","created_at":"2026-07-05T00:23:03Z"},{"alias_kind":"pith_short_8","alias_value":"INGYQMUB","created_at":"2026-07-05T00:23:03Z"}],"graph_snapshots":[{"event_id":"sha256:d7306ca4bb463030d57c0ec215881edd75cb3a25d9aa7a9ae90e057e4b8f3e58","target":"graph","created_at":"2026-07-05T00:23:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1904.01067/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning (ML) has progressed rapidly during the past decade and the major factor that drives such development is the unprecedented large-scale data. As data generation is a continuous process, this leads to ML model owners updating their models frequently with newly-collected data in an online learning scenario. In consequence, if an ML model is queried with the same set of data samples at two different points in time, it will provide different results.\n  In this paper, we investigate whether the change in the output of a black-box ML model before and after being updated can leak infor","authors_text":"Ahmed Salem, Apratim Bhattacharya, Mario Fritz, Michael Backes, Yang Zhang","cross_cats":["cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-04-01T19:08:49Z","title":"Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1904.01067","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:08b3b08fafc7b93ddec029b3ca8c1263693552bb3bb1ecff8059b140355e5623","target":"record","created_at":"2026-07-05T00:23:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3d61980fdd7e7b8b221820d7c3d4f33905d23ed9927b35ca41dab3fedb3b9d15","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-04-01T19:08:49Z","title_canon_sha256":"1b0ec2a3442bf9b93a6a2dc2e14f94bd8edba5635ee9cd8c5b8dfa8b500dfede"},"schema_version":"1.0","source":{"id":"1904.01067","kind":"arxiv","version":2}},"canonical_sha256":"434d883281bd3f054cf411f52a82caa0aabfc7f9029327dd38ecd014b5948634","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"434d883281bd3f054cf411f52a82caa0aabfc7f9029327dd38ecd014b5948634","first_computed_at":"2026-07-05T00:23:03.762917Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:23:03.762917Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"VtAlt6nPgRIvTjwgaD3x7lT+O3UXmVRVZ/vjnr9PbZPAoR06wNn5YgXoMk2pPvHQRF9KgtL2GzXkF2ddqr8UDw==","signature_status":"signed_v1","signed_at":"2026-07-05T00:23:03.763490Z","signed_message":"canonical_sha256_bytes"},"source_id":"1904.01067","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:08b3b08fafc7b93ddec029b3ca8c1263693552bb3bb1ecff8059b140355e5623","sha256:d7306ca4bb463030d57c0ec215881edd75cb3a25d9aa7a9ae90e057e4b8f3e58"],"state_sha256":"a8c65bc29cc64f10df79220146b811eee0e77e13220de7099109b2a126354365"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5k7A9k4vpyw72OO1hgqy5IMqgMpCWLOXFIgjsO7mK5ZAS0PuNTVh5VEhs2HSwY+jJmJ6FbKlyeKn2/e5N6DyCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T03:03:10.926512Z","bundle_sha256":"a1cb3fb09e29ed79ace584d0bf5fe38ca114a8e4462d7d03cef0f7a3c355de84"}}