{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:JF7H2STRRCOOY2TGDKBGCDHYQH","short_pith_number":"pith:JF7H2STR","canonical_record":{"source":{"id":"1909.11835","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-09-26T01:01:32Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"723d27645c6da3fe657ff067fc54f2818c478b88b4900f12aca946ecf8abb29c","abstract_canon_sha256":"992b9bf8d986522b08644ce98852d010ef441d62bbff52be8ec533e3e473114f"},"schema_version":"1.0"},"canonical_sha256":"497e7d4a71889cec6a661a82610cf881c47455896d5f267f3a9c61bf6553886f","source":{"kind":"arxiv","id":"1909.11835","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.11835","created_at":"2026-07-05T00:07:28Z"},{"alias_kind":"arxiv_version","alias_value":"1909.11835v1","created_at":"2026-07-05T00:07:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.11835","created_at":"2026-07-05T00:07:28Z"},{"alias_kind":"pith_short_12","alias_value":"JF7H2STRRCOO","created_at":"2026-07-05T00:07:28Z"},{"alias_kind":"pith_short_16","alias_value":"JF7H2STRRCOOY2TG","created_at":"2026-07-05T00:07:28Z"},{"alias_kind":"pith_short_8","alias_value":"JF7H2STR","created_at":"2026-07-05T00:07:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:JF7H2STRRCOOY2TGDKBGCDHYQH","target":"record","payload":{"canonical_record":{"source":{"id":"1909.11835","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-09-26T01:01:32Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"723d27645c6da3fe657ff067fc54f2818c478b88b4900f12aca946ecf8abb29c","abstract_canon_sha256":"992b9bf8d986522b08644ce98852d010ef441d62bbff52be8ec533e3e473114f"},"schema_version":"1.0"},"canonical_sha256":"497e7d4a71889cec6a661a82610cf881c47455896d5f267f3a9c61bf6553886f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:07:28.478142Z","signature_b64":"R6+Vz1FsQpfZDum6Mptd8asjEwYTEjiFRMECQ1UK2aXIvEVMMCMEF0TGzaEWysV1Z4crbx6qqJxaUu7nH2+BAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"497e7d4a71889cec6a661a82610cf881c47455896d5f267f3a9c61bf6553886f","last_reissued_at":"2026-07-05T00:07:28.477629Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:07:28.477629Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1909.11835","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:07:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"frWAT5IBxis6H6JJxv7mjOfUKleRJnR1xF837zIwY+f4kv7a7WojyVuSXncDWdmXoq9n9ZKY8YmxxfyaPz/2DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-10T19:04:20.356301Z"},"content_sha256":"0bbc4315d17712ecd63835004fd8a2d31f87f9c9dc99170ab23380f0db4cf2a8","schema_version":"1.0","event_id":"sha256:0bbc4315d17712ecd63835004fd8a2d31f87f9c9dc99170ab23380f0db4cf2a8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:JF7H2STRRCOOY2TGDKBGCDHYQH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"GAMIN: An Adversarial Approach to Black-Box Model Inversion","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"S\\'ebastien Gambs, Timon Ther, Ulrich A\\\"ivodji","submitted_at":"2019-09-26T01:01:32Z","abstract_excerpt":"Recent works have demonstrated that machine learning models are vulnerable to model inversion attacks, which lead to the exposure of sensitive information contained in their training dataset. While some model inversion attacks have been developed in the past in the black-box attack setting, in which the adversary does not have direct access to the structure of the model, few of these have been conducted so far against complex models such as deep neural networks. In this paper, we introduce GAMIN (for Generative Adversarial Model INversion), a new black-box model inversion attack framework achi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.11835","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1909.11835/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:07:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sZpUejCVhhpIfWA6ykWrVZk1mLXvRupLe4LSLuV4IaM3r17LTNuXYdI+rSWRgSnENd9bZMSeCvZ0ddvYzCH8Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-10T19:04:20.356681Z"},"content_sha256":"db112b6394e88a7fb511074498851084ddb13ef05611990dea92ce0566850616","schema_version":"1.0","event_id":"sha256:db112b6394e88a7fb511074498851084ddb13ef05611990dea92ce0566850616"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JF7H2STRRCOOY2TGDKBGCDHYQH/bundle.json","state_url":"https://pith.science/pith/JF7H2STRRCOOY2TGDKBGCDHYQH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JF7H2STRRCOOY2TGDKBGCDHYQH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-10T19:04:20Z","links":{"resolver":"https://pith.science/pith/JF7H2STRRCOOY2TGDKBGCDHYQH","bundle":"https://pith.science/pith/JF7H2STRRCOOY2TGDKBGCDHYQH/bundle.json","state":"https://pith.science/pith/JF7H2STRRCOOY2TGDKBGCDHYQH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JF7H2STRRCOOY2TGDKBGCDHYQH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:JF7H2STRRCOOY2TGDKBGCDHYQH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"992b9bf8d986522b08644ce98852d010ef441d62bbff52be8ec533e3e473114f","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-09-26T01:01:32Z","title_canon_sha256":"723d27645c6da3fe657ff067fc54f2818c478b88b4900f12aca946ecf8abb29c"},"schema_version":"1.0","source":{"id":"1909.11835","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.11835","created_at":"2026-07-05T00:07:28Z"},{"alias_kind":"arxiv_version","alias_value":"1909.11835v1","created_at":"2026-07-05T00:07:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.11835","created_at":"2026-07-05T00:07:28Z"},{"alias_kind":"pith_short_12","alias_value":"JF7H2STRRCOO","created_at":"2026-07-05T00:07:28Z"},{"alias_kind":"pith_short_16","alias_value":"JF7H2STRRCOOY2TG","created_at":"2026-07-05T00:07:28Z"},{"alias_kind":"pith_short_8","alias_value":"JF7H2STR","created_at":"2026-07-05T00:07:28Z"}],"graph_snapshots":[{"event_id":"sha256:db112b6394e88a7fb511074498851084ddb13ef05611990dea92ce0566850616","target":"graph","created_at":"2026-07-05T00:07:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1909.11835/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent works have demonstrated that machine learning models are vulnerable to model inversion attacks, which lead to the exposure of sensitive information contained in their training dataset. While some model inversion attacks have been developed in the past in the black-box attack setting, in which the adversary does not have direct access to the structure of the model, few of these have been conducted so far against complex models such as deep neural networks. In this paper, we introduce GAMIN (for Generative Adversarial Model INversion), a new black-box model inversion attack framework achi","authors_text":"S\\'ebastien Gambs, Timon Ther, Ulrich A\\\"ivodji","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-09-26T01:01:32Z","title":"GAMIN: An Adversarial Approach to Black-Box Model Inversion"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.11835","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0bbc4315d17712ecd63835004fd8a2d31f87f9c9dc99170ab23380f0db4cf2a8","target":"record","created_at":"2026-07-05T00:07:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"992b9bf8d986522b08644ce98852d010ef441d62bbff52be8ec533e3e473114f","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-09-26T01:01:32Z","title_canon_sha256":"723d27645c6da3fe657ff067fc54f2818c478b88b4900f12aca946ecf8abb29c"},"schema_version":"1.0","source":{"id":"1909.11835","kind":"arxiv","version":1}},"canonical_sha256":"497e7d4a71889cec6a661a82610cf881c47455896d5f267f3a9c61bf6553886f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"497e7d4a71889cec6a661a82610cf881c47455896d5f267f3a9c61bf6553886f","first_computed_at":"2026-07-05T00:07:28.477629Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:07:28.477629Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"R6+Vz1FsQpfZDum6Mptd8asjEwYTEjiFRMECQ1UK2aXIvEVMMCMEF0TGzaEWysV1Z4crbx6qqJxaUu7nH2+BAA==","signature_status":"signed_v1","signed_at":"2026-07-05T00:07:28.478142Z","signed_message":"canonical_sha256_bytes"},"source_id":"1909.11835","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0bbc4315d17712ecd63835004fd8a2d31f87f9c9dc99170ab23380f0db4cf2a8","sha256:db112b6394e88a7fb511074498851084ddb13ef05611990dea92ce0566850616"],"state_sha256":"841d7e5b1043201bfc189e7e0cf193164df698221be6f0f28762416a4ec5336d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"V8he7ONNdTPBt6K4X6/XqIsnmExG73oEVIvjni9mZrGVJchkn+MsGV/iL+qRfTkRFjOOMtQy7XZoVNT2KAwHAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-10T19:04:20.358856Z","bundle_sha256":"6d5fc4b78a3863febd7b7951a7660a0431e57526a0dd2f8d5fdd940e6316808b"}}