{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:IVPBXOGUMPPBOX3R6PMH4NISBG","short_pith_number":"pith:IVPBXOGU","canonical_record":{"source":{"id":"2409.14513","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-09-22T16:18:14Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"5ad2ce011491948408c1061d68e8173f2fb53d48447f2b153ccda221f7cd2b26","abstract_canon_sha256":"6dfb0c4067d56b5e7219c6879ac4183ac4e0d229f7898c7d2e5bef695d251b3e"},"schema_version":"1.0"},"canonical_sha256":"455e1bb8d463de175f71f3d87e351209af3c2d0c23307a9a5294e52a1c14025d","source":{"kind":"arxiv","id":"2409.14513","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.14513","created_at":"2026-07-05T09:11:16Z"},{"alias_kind":"arxiv_version","alias_value":"2409.14513v2","created_at":"2026-07-05T09:11:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.14513","created_at":"2026-07-05T09:11:16Z"},{"alias_kind":"pith_short_12","alias_value":"IVPBXOGUMPPB","created_at":"2026-07-05T09:11:16Z"},{"alias_kind":"pith_short_16","alias_value":"IVPBXOGUMPPBOX3R","created_at":"2026-07-05T09:11:16Z"},{"alias_kind":"pith_short_8","alias_value":"IVPBXOGU","created_at":"2026-07-05T09:11:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:IVPBXOGUMPPBOX3R6PMH4NISBG","target":"record","payload":{"canonical_record":{"source":{"id":"2409.14513","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-09-22T16:18:14Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"5ad2ce011491948408c1061d68e8173f2fb53d48447f2b153ccda221f7cd2b26","abstract_canon_sha256":"6dfb0c4067d56b5e7219c6879ac4183ac4e0d229f7898c7d2e5bef695d251b3e"},"schema_version":"1.0"},"canonical_sha256":"455e1bb8d463de175f71f3d87e351209af3c2d0c23307a9a5294e52a1c14025d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:11:17.000247Z","signature_b64":"4Y/krtAQJ8Q0lAv8B2Yfph2qb+m5A8UGl1KCWuvUPCh/EJd9J1gFWWswDxR66qftXdtdCq0fCOM5QUfKiU2tDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"455e1bb8d463de175f71f3d87e351209af3c2d0c23307a9a5294e52a1c14025d","last_reissued_at":"2026-07-05T09:11:16.999806Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:11:16.999806Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.14513","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:11:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BHqhznP9nlGdNqt2byK0Hl31YYvaB5E7wHKOkzZY+OpXk4Cci+qGbXOd4/pKIDfEsCg/jwPuQ0fwadnZZIz5Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:38:19.141764Z"},"content_sha256":"5913056ad83f9cc080363d4a0b221ac6177a8c8fef9617e9447b907404b752c6","schema_version":"1.0","event_id":"sha256:5913056ad83f9cc080363d4a0b221ac6177a8c8fef9617e9447b907404b752c6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:IVPBXOGUMPPBOX3R6PMH4NISBG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Order of Magnitude Speedups for LLM Membership Inference","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Aaron Roth, Martin Bertran, Rongting Zhang","submitted_at":"2024-09-22T16:18:14Z","abstract_excerpt":"Large Language Models (LLMs) have the promise to revolutionize computing broadly, but their complexity and extensive training data also expose significant privacy vulnerabilities. One of the simplest privacy risks associated with LLMs is their susceptibility to membership inference attacks (MIAs), wherein an adversary aims to determine whether a specific data point was part of the model's training set. Although this is a known risk, state of the art methodologies for MIAs rely on training multiple computationally costly shadow models, making risk evaluation prohibitive for large models. Here w"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.14513","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.14513/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:11:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Y8cCVnEPg2S7Gdcxy0MksZtn05k15jj4lUW/wdF2UnrOUmQg73UMx0i+CwNmDAZFMCy3gU52CZglvfZqHQk4Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:38:19.142765Z"},"content_sha256":"1ba067fa59e9887cf347ad298929e9dacb1e1cfecacff448d723d5110c427564","schema_version":"1.0","event_id":"sha256:1ba067fa59e9887cf347ad298929e9dacb1e1cfecacff448d723d5110c427564"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IVPBXOGUMPPBOX3R6PMH4NISBG/bundle.json","state_url":"https://pith.science/pith/IVPBXOGUMPPBOX3R6PMH4NISBG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IVPBXOGUMPPBOX3R6PMH4NISBG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T18:38:19Z","links":{"resolver":"https://pith.science/pith/IVPBXOGUMPPBOX3R6PMH4NISBG","bundle":"https://pith.science/pith/IVPBXOGUMPPBOX3R6PMH4NISBG/bundle.json","state":"https://pith.science/pith/IVPBXOGUMPPBOX3R6PMH4NISBG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IVPBXOGUMPPBOX3R6PMH4NISBG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:IVPBXOGUMPPBOX3R6PMH4NISBG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6dfb0c4067d56b5e7219c6879ac4183ac4e0d229f7898c7d2e5bef695d251b3e","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-09-22T16:18:14Z","title_canon_sha256":"5ad2ce011491948408c1061d68e8173f2fb53d48447f2b153ccda221f7cd2b26"},"schema_version":"1.0","source":{"id":"2409.14513","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.14513","created_at":"2026-07-05T09:11:16Z"},{"alias_kind":"arxiv_version","alias_value":"2409.14513v2","created_at":"2026-07-05T09:11:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.14513","created_at":"2026-07-05T09:11:16Z"},{"alias_kind":"pith_short_12","alias_value":"IVPBXOGUMPPB","created_at":"2026-07-05T09:11:16Z"},{"alias_kind":"pith_short_16","alias_value":"IVPBXOGUMPPBOX3R","created_at":"2026-07-05T09:11:16Z"},{"alias_kind":"pith_short_8","alias_value":"IVPBXOGU","created_at":"2026-07-05T09:11:16Z"}],"graph_snapshots":[{"event_id":"sha256:1ba067fa59e9887cf347ad298929e9dacb1e1cfecacff448d723d5110c427564","target":"graph","created_at":"2026-07-05T09:11:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.14513/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) have the promise to revolutionize computing broadly, but their complexity and extensive training data also expose significant privacy vulnerabilities. One of the simplest privacy risks associated with LLMs is their susceptibility to membership inference attacks (MIAs), wherein an adversary aims to determine whether a specific data point was part of the model's training set. Although this is a known risk, state of the art methodologies for MIAs rely on training multiple computationally costly shadow models, making risk evaluation prohibitive for large models. Here w","authors_text":"Aaron Roth, Martin Bertran, Rongting Zhang","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-09-22T16:18:14Z","title":"Order of Magnitude Speedups for LLM Membership Inference"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.14513","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5913056ad83f9cc080363d4a0b221ac6177a8c8fef9617e9447b907404b752c6","target":"record","created_at":"2026-07-05T09:11:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6dfb0c4067d56b5e7219c6879ac4183ac4e0d229f7898c7d2e5bef695d251b3e","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-09-22T16:18:14Z","title_canon_sha256":"5ad2ce011491948408c1061d68e8173f2fb53d48447f2b153ccda221f7cd2b26"},"schema_version":"1.0","source":{"id":"2409.14513","kind":"arxiv","version":2}},"canonical_sha256":"455e1bb8d463de175f71f3d87e351209af3c2d0c23307a9a5294e52a1c14025d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"455e1bb8d463de175f71f3d87e351209af3c2d0c23307a9a5294e52a1c14025d","first_computed_at":"2026-07-05T09:11:16.999806Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:11:16.999806Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4Y/krtAQJ8Q0lAv8B2Yfph2qb+m5A8UGl1KCWuvUPCh/EJd9J1gFWWswDxR66qftXdtdCq0fCOM5QUfKiU2tDg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:11:17.000247Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.14513","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5913056ad83f9cc080363d4a0b221ac6177a8c8fef9617e9447b907404b752c6","sha256:1ba067fa59e9887cf347ad298929e9dacb1e1cfecacff448d723d5110c427564"],"state_sha256":"4f676b6fd2360f66e6c9ed46539d6aa2aac7663b25fecea6a81a060e107eb196"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ju3Wey0JHFfFqahO7u7tJRSsiMnEnIE4vRc/+nPqoWtkNyY1rW12+LmGVHvaUogoh09pot8vVWaNFv+WNcpZCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T18:38:19.161544Z","bundle_sha256":"337b5c5b87cfecd68003de36bd78a13d8ef119680e996f29c795716131409aa0"}}