{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:LJAVGLSSETJFMEW7IJ6K4UHA6T","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"68618676155a9f1ea542026e82f1453a1958bbd592a818cf104b666a59e35f2d","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2021-05-19T19:21:05Z","title_canon_sha256":"3ed1a452c276595eedcfaf296f844c7c9f21ea53f9a3437dfc0d3f919cdcabf5"},"schema_version":"1.0","source":{"id":"2105.09369","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.09369","created_at":"2026-07-05T03:44:53Z"},{"alias_kind":"arxiv_version","alias_value":"2105.09369v4","created_at":"2026-07-05T03:44:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.09369","created_at":"2026-07-05T03:44:53Z"},{"alias_kind":"pith_short_12","alias_value":"LJAVGLSSETJF","created_at":"2026-07-05T03:44:53Z"},{"alias_kind":"pith_short_16","alias_value":"LJAVGLSSETJFMEW7","created_at":"2026-07-05T03:44:53Z"},{"alias_kind":"pith_short_8","alias_value":"LJAVGLSS","created_at":"2026-07-05T03:44:53Z"}],"graph_snapshots":[{"event_id":"sha256:5eb4390a1ba19e6db17d3962807126ba40fb23c2482905f6cbac1775a8596265","target":"graph","created_at":"2026-07-05T03:44:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2105.09369/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning enables multiple users to build a joint model by sharing their model updates (gradients), while their raw data remains local on their devices. In contrast to the common belief that this provides privacy benefits, we here add to the very recent results on privacy risks when sharing gradients. Specifically, we investigate Label Leakage from Gradients (LLG), a novel attack to extract the labels of the users' training data from their shared gradients. The attack exploits the direction and magnitude of gradients to determine the presence or absence of any label. LLG is simple yet","authors_text":"Aidmar Wainakh, Carlos Garcia Cordero, Ephraim Zimmer, Fabrizio Ventola, Jens Keim, Kristian Kersting, Max M\\\"uhlh\\\"auser, Till M\\\"u{\\ss}ig, Tim Grube","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2021-05-19T19:21:05Z","title":"User-Level Label Leakage from Gradients in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.09369","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f0acf2a580756d1af528d386ec2c793a94a1fabc29861ec4970819cc320d21e5","target":"record","created_at":"2026-07-05T03:44:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"68618676155a9f1ea542026e82f1453a1958bbd592a818cf104b666a59e35f2d","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2021-05-19T19:21:05Z","title_canon_sha256":"3ed1a452c276595eedcfaf296f844c7c9f21ea53f9a3437dfc0d3f919cdcabf5"},"schema_version":"1.0","source":{"id":"2105.09369","kind":"arxiv","version":4}},"canonical_sha256":"5a41532e5224d25612df427cae50e0f4db20e9b1bae18d9d3f7c603a9e1dddf4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5a41532e5224d25612df427cae50e0f4db20e9b1bae18d9d3f7c603a9e1dddf4","first_computed_at":"2026-07-05T03:44:53.600794Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:44:53.600794Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"OT9C4nK6amvosl8MuzIHVuiHmEGRy92vtjyz7UhqA0SiLwbUN0LYz46xvCPrY+InmvyOQjbz/tYG9TGxo15bCg==","signature_status":"signed_v1","signed_at":"2026-07-05T03:44:53.601295Z","signed_message":"canonical_sha256_bytes"},"source_id":"2105.09369","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f0acf2a580756d1af528d386ec2c793a94a1fabc29861ec4970819cc320d21e5","sha256:5eb4390a1ba19e6db17d3962807126ba40fb23c2482905f6cbac1775a8596265"],"state_sha256":"2bd56af639fd375da4e46c76c38c2f59c4004ad390fb282bbf198cb517bcba8c"}