{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:IOVCHSZZZQBVC7I46KI5KNROVU","short_pith_number":"pith:IOVCHSZZ","canonical_record":{"source":{"id":"2407.08127","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-07-11T01:58:35Z","cross_cats_sorted":[],"title_canon_sha256":"bfa3b585a50ef08cfea93ba1f52344b53bdcfaf22da7bdda53e96a6cc791f5bd","abstract_canon_sha256":"563f2a6a4743d8e2688bfb537e6f3d2d5aff54a186ded9b8ab81342105fc6169"},"schema_version":"1.0"},"canonical_sha256":"43aa23cb39cc03517d1cf291d5362ead27ddca8a5aa947a623ff6f7a94626b42","source":{"kind":"arxiv","id":"2407.08127","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.08127","created_at":"2026-07-05T09:53:42Z"},{"alias_kind":"arxiv_version","alias_value":"2407.08127v2","created_at":"2026-07-05T09:53:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.08127","created_at":"2026-07-05T09:53:42Z"},{"alias_kind":"pith_short_12","alias_value":"IOVCHSZZZQBV","created_at":"2026-07-05T09:53:42Z"},{"alias_kind":"pith_short_16","alias_value":"IOVCHSZZZQBVC7I4","created_at":"2026-07-05T09:53:42Z"},{"alias_kind":"pith_short_8","alias_value":"IOVCHSZZ","created_at":"2026-07-05T09:53:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:IOVCHSZZZQBVC7I46KI5KNROVU","target":"record","payload":{"canonical_record":{"source":{"id":"2407.08127","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-07-11T01:58:35Z","cross_cats_sorted":[],"title_canon_sha256":"bfa3b585a50ef08cfea93ba1f52344b53bdcfaf22da7bdda53e96a6cc791f5bd","abstract_canon_sha256":"563f2a6a4743d8e2688bfb537e6f3d2d5aff54a186ded9b8ab81342105fc6169"},"schema_version":"1.0"},"canonical_sha256":"43aa23cb39cc03517d1cf291d5362ead27ddca8a5aa947a623ff6f7a94626b42","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:53:42.269729Z","signature_b64":"96oH12FQvF52vDQwdN1nzrfO0pzcocYV18/qwWpJvij44uycBPPHz6V7fQM0zL0zbkmM+nNdWh/zN5FGb0IrCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"43aa23cb39cc03517d1cf291d5362ead27ddca8a5aa947a623ff6f7a94626b42","last_reissued_at":"2026-07-05T09:53:42.269302Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:53:42.269302Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.08127","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:53:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qG6h/YR9rPnU3bsd76xFmqjPZ4EC22l2XXy4erDaZsRYQcVHcupgTZq0hBe0xksFAWhNLvjmprhDcYbP3DqMBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T09:35:13.767371Z"},"content_sha256":"b8c1c8142d82936057665bc42632feee43144ddfa03a891808e335b385f6f1e6","schema_version":"1.0","event_id":"sha256:b8c1c8142d82936057665bc42632feee43144ddfa03a891808e335b385f6f1e6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:IOVCHSZZZQBVC7I46KI5KNROVU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Prediction Exposes Your Face: Black-box Model Inversion via Prediction Alignment","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Dayan Wu, Jingzi Gu, Wanqian Zhang, Weiping Wang, Yufan Liu, Zheng Lin","submitted_at":"2024-07-11T01:58:35Z","abstract_excerpt":"Model inversion (MI) attack reconstructs the private training data of a target model given its output, posing a significant threat to deep learning models and data privacy. On one hand, most of existing MI methods focus on searching for latent codes to represent the target identity, yet this iterative optimization-based scheme consumes a huge number of queries to the target model, making it unrealistic especially in black-box scenario. On the other hand, some training-based methods launch an attack through a single forward inference, whereas failing to directly learn high-level mappings from p"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.08127","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.08127/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:53:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lRsHV2NgWVjJH9e7FDngj9VXtZtNwCm0qUTqI1eH0LUfnbBHazx6kp7EGOoL+nHbjlNZBpk92k0ozad/6dlHAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T09:35:13.767870Z"},"content_sha256":"7798e0eca5727a85e590944f253ffade5da7e61c101de4402720f8501a2b1c43","schema_version":"1.0","event_id":"sha256:7798e0eca5727a85e590944f253ffade5da7e61c101de4402720f8501a2b1c43"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IOVCHSZZZQBVC7I46KI5KNROVU/bundle.json","state_url":"https://pith.science/pith/IOVCHSZZZQBVC7I46KI5KNROVU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IOVCHSZZZQBVC7I46KI5KNROVU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T09:35:13Z","links":{"resolver":"https://pith.science/pith/IOVCHSZZZQBVC7I46KI5KNROVU","bundle":"https://pith.science/pith/IOVCHSZZZQBVC7I46KI5KNROVU/bundle.json","state":"https://pith.science/pith/IOVCHSZZZQBVC7I46KI5KNROVU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IOVCHSZZZQBVC7I46KI5KNROVU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:IOVCHSZZZQBVC7I46KI5KNROVU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"563f2a6a4743d8e2688bfb537e6f3d2d5aff54a186ded9b8ab81342105fc6169","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-07-11T01:58:35Z","title_canon_sha256":"bfa3b585a50ef08cfea93ba1f52344b53bdcfaf22da7bdda53e96a6cc791f5bd"},"schema_version":"1.0","source":{"id":"2407.08127","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.08127","created_at":"2026-07-05T09:53:42Z"},{"alias_kind":"arxiv_version","alias_value":"2407.08127v2","created_at":"2026-07-05T09:53:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.08127","created_at":"2026-07-05T09:53:42Z"},{"alias_kind":"pith_short_12","alias_value":"IOVCHSZZZQBV","created_at":"2026-07-05T09:53:42Z"},{"alias_kind":"pith_short_16","alias_value":"IOVCHSZZZQBVC7I4","created_at":"2026-07-05T09:53:42Z"},{"alias_kind":"pith_short_8","alias_value":"IOVCHSZZ","created_at":"2026-07-05T09:53:42Z"}],"graph_snapshots":[{"event_id":"sha256:7798e0eca5727a85e590944f253ffade5da7e61c101de4402720f8501a2b1c43","target":"graph","created_at":"2026-07-05T09:53:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.08127/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Model inversion (MI) attack reconstructs the private training data of a target model given its output, posing a significant threat to deep learning models and data privacy. On one hand, most of existing MI methods focus on searching for latent codes to represent the target identity, yet this iterative optimization-based scheme consumes a huge number of queries to the target model, making it unrealistic especially in black-box scenario. On the other hand, some training-based methods launch an attack through a single forward inference, whereas failing to directly learn high-level mappings from p","authors_text":"Dayan Wu, Jingzi Gu, Wanqian Zhang, Weiping Wang, Yufan Liu, Zheng Lin","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-07-11T01:58:35Z","title":"Prediction Exposes Your Face: Black-box Model Inversion via Prediction Alignment"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.08127","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b8c1c8142d82936057665bc42632feee43144ddfa03a891808e335b385f6f1e6","target":"record","created_at":"2026-07-05T09:53:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"563f2a6a4743d8e2688bfb537e6f3d2d5aff54a186ded9b8ab81342105fc6169","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-07-11T01:58:35Z","title_canon_sha256":"bfa3b585a50ef08cfea93ba1f52344b53bdcfaf22da7bdda53e96a6cc791f5bd"},"schema_version":"1.0","source":{"id":"2407.08127","kind":"arxiv","version":2}},"canonical_sha256":"43aa23cb39cc03517d1cf291d5362ead27ddca8a5aa947a623ff6f7a94626b42","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"43aa23cb39cc03517d1cf291d5362ead27ddca8a5aa947a623ff6f7a94626b42","first_computed_at":"2026-07-05T09:53:42.269302Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:53:42.269302Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"96oH12FQvF52vDQwdN1nzrfO0pzcocYV18/qwWpJvij44uycBPPHz6V7fQM0zL0zbkmM+nNdWh/zN5FGb0IrCg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:53:42.269729Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.08127","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b8c1c8142d82936057665bc42632feee43144ddfa03a891808e335b385f6f1e6","sha256:7798e0eca5727a85e590944f253ffade5da7e61c101de4402720f8501a2b1c43"],"state_sha256":"c710a58dd460b05abc2b61d26b2dadbffcd56f79227b1f0ec7bf7a83ee696b92"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uZqJxtLdY7p19ssKodgCMJk7kDenqDcuxU2QKS8RAw+3l2biZg7oOe2Tk9GW2nkf8LGBuBRbFH5qo1h5JG83Dw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T09:35:13.771892Z","bundle_sha256":"14efbbe643ee8abe303e78080a02cd6ee208cc6c61446c0ee2a5fada48a47f8c"}}