{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2019:LUQXUDCV6A6YN5WPFPO2VXRP65","short_pith_number":"pith:LUQXUDCV","schema_version":"1.0","canonical_sha256":"5d217a0c55f03d86f6cf2bddaade2ff777b5e521d5eb209f1c3e49404c63491f","source":{"kind":"arxiv","id":"1907.06034","version":1},"attestation_state":"computed","paper":{"title":"Towards Characterizing and Limiting Information Exposure in DNN Layers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Ali Shahin Shamsabadi, Andrea Cavallaro, Fan Mo, Hamed Haddadi, Kleomenis Katevas","submitted_at":"2019-07-13T09:17:57Z","abstract_excerpt":"Pre-trained Deep Neural Network (DNN) models are increasingly used in smartphones and other user devices to enable prediction services, leading to potential disclosures of (sensitive) information from training data captured inside these models. Based on the concept of generalization error, we propose a framework to measure the amount of sensitive information memorized in each layer of a DNN. Our results show that, when considered individually, the last layers encode a larger amount of information from the training data compared to the first layers. We find that, while the neuron of convolution"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"1907.06034","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-07-13T09:17:57Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"21ec91191b5f8e0810584376b68ddf7ea2f3c5f3d1f92c0b86d03cfe99b918e5","abstract_canon_sha256":"da222bbde2a75a4011b2d688e3798c83e68ce673c27e29ea5577c7e3cb249dfb"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:40:42.629533Z","signature_b64":"rx+Z5NK1Ven77Pj2wpoY+xonnDLoETAeCrjoGwTQ0u6p3ODDWxTLhVW4dxBzCZN6kQ7PeWi9LHBz79+cDyffBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5d217a0c55f03d86f6cf2bddaade2ff777b5e521d5eb209f1c3e49404c63491f","last_reissued_at":"2026-05-17T23:40:42.628494Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:40:42.628494Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Towards Characterizing and Limiting Information Exposure in DNN Layers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Ali Shahin Shamsabadi, Andrea Cavallaro, Fan Mo, Hamed Haddadi, Kleomenis Katevas","submitted_at":"2019-07-13T09:17:57Z","abstract_excerpt":"Pre-trained Deep Neural Network (DNN) models are increasingly used in smartphones and other user devices to enable prediction services, leading to potential disclosures of (sensitive) information from training data captured inside these models. Based on the concept of generalization error, we propose a framework to measure the amount of sensitive information memorized in each layer of a DNN. Our results show that, when considered individually, the last layers encode a larger amount of information from the training data compared to the first layers. We find that, while the neuron of convolution"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1907.06034","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"1907.06034","created_at":"2026-05-17T23:40:42.628609+00:00"},{"alias_kind":"arxiv_version","alias_value":"1907.06034v1","created_at":"2026-05-17T23:40:42.628609+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1907.06034","created_at":"2026-05-17T23:40:42.628609+00:00"},{"alias_kind":"pith_short_12","alias_value":"LUQXUDCV6A6Y","created_at":"2026-05-18T12:33:21.387695+00:00"},{"alias_kind":"pith_short_16","alias_value":"LUQXUDCV6A6YN5WP","created_at":"2026-05-18T12:33:21.387695+00:00"},{"alias_kind":"pith_short_8","alias_value":"LUQXUDCV","created_at":"2026-05-18T12:33:21.387695+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/LUQXUDCV6A6YN5WPFPO2VXRP65","json":"https://pith.science/pith/LUQXUDCV6A6YN5WPFPO2VXRP65.json","graph_json":"https://pith.science/api/pith-number/LUQXUDCV6A6YN5WPFPO2VXRP65/graph.json","events_json":"https://pith.science/api/pith-number/LUQXUDCV6A6YN5WPFPO2VXRP65/events.json","paper":"https://pith.science/paper/LUQXUDCV"},"agent_actions":{"view_html":"https://pith.science/pith/LUQXUDCV6A6YN5WPFPO2VXRP65","download_json":"https://pith.science/pith/LUQXUDCV6A6YN5WPFPO2VXRP65.json","view_paper":"https://pith.science/paper/LUQXUDCV","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=1907.06034&json=true","fetch_graph":"https://pith.science/api/pith-number/LUQXUDCV6A6YN5WPFPO2VXRP65/graph.json","fetch_events":"https://pith.science/api/pith-number/LUQXUDCV6A6YN5WPFPO2VXRP65/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/LUQXUDCV6A6YN5WPFPO2VXRP65/action/timestamp_anchor","attest_storage":"https://pith.science/pith/LUQXUDCV6A6YN5WPFPO2VXRP65/action/storage_attestation","attest_author":"https://pith.science/pith/LUQXUDCV6A6YN5WPFPO2VXRP65/action/author_attestation","sign_citation":"https://pith.science/pith/LUQXUDCV6A6YN5WPFPO2VXRP65/action/citation_signature","submit_replication":"https://pith.science/pith/LUQXUDCV6A6YN5WPFPO2VXRP65/action/replication_record"}},"created_at":"2026-05-17T23:40:42.628609+00:00","updated_at":"2026-05-17T23:40:42.628609+00:00"}