{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:MELDKTNDD7DTT3K6RMPZWIFEY2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3c98c4c240fefc663753441a5da4b4da8465f2d704cd7a86eb7c6c92557a9e37","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-07-04T09:50:33Z","title_canon_sha256":"ea7635615093e8d96ec43272df7f5637257c456133450e06bdd4d476420c9ab5"},"schema_version":"1.0","source":{"id":"2307.01610","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.01610","created_at":"2026-07-05T06:27:58Z"},{"alias_kind":"arxiv_version","alias_value":"2307.01610v1","created_at":"2026-07-05T06:27:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.01610","created_at":"2026-07-05T06:27:58Z"},{"alias_kind":"pith_short_12","alias_value":"MELDKTNDD7DT","created_at":"2026-07-05T06:27:58Z"},{"alias_kind":"pith_short_16","alias_value":"MELDKTNDD7DTT3K6","created_at":"2026-07-05T06:27:58Z"},{"alias_kind":"pith_short_8","alias_value":"MELDKTND","created_at":"2026-07-05T06:27:58Z"}],"graph_snapshots":[{"event_id":"sha256:17040e08535dedc687078a6dacd691b3e0d1759e54f0e1f2a8bbfa7db4f68d48","target":"graph","created_at":"2026-07-05T06:27:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2307.01610/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning (ML) models are vulnerable to membership inference attacks (MIAs), which determine whether a given input is used for training the target model. While there have been many efforts to mitigate MIAs, they often suffer from limited privacy protection, large accuracy drop, and/or requiring additional data that may be difficult to acquire. This work proposes a defense technique, HAMP that can achieve both strong membership privacy and high accuracy, without requiring extra data. To mitigate MIAs in different forms, we observe that they can be unified as they all exploit the ML model","authors_text":"Karthik Pattabiraman, Zitao Chen","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-07-04T09:50:33Z","title":"Overconfidence is a Dangerous Thing: Mitigating Membership Inference Attacks by Enforcing Less Confident Prediction"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.01610","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:93892a644b6f7a08a4894aad7735d934c4d68ad9c263b5a10deef5b3cb81da19","target":"record","created_at":"2026-07-05T06:27:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3c98c4c240fefc663753441a5da4b4da8465f2d704cd7a86eb7c6c92557a9e37","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-07-04T09:50:33Z","title_canon_sha256":"ea7635615093e8d96ec43272df7f5637257c456133450e06bdd4d476420c9ab5"},"schema_version":"1.0","source":{"id":"2307.01610","kind":"arxiv","version":1}},"canonical_sha256":"6116354da31fc739ed5e8b1f9b20a4c694c3d9283206cca45957dc94a36ee2cd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6116354da31fc739ed5e8b1f9b20a4c694c3d9283206cca45957dc94a36ee2cd","first_computed_at":"2026-07-05T06:27:58.695535Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:27:58.695535Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"U732g4jpmQyriqbh0vZBxQKtYwM6dVVNjKJC10M1VySw1OwnKi5nTGzO5SzYdyfIoVbNeeFofy8NpflMOLozDA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:27:58.695958Z","signed_message":"canonical_sha256_bytes"},"source_id":"2307.01610","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:93892a644b6f7a08a4894aad7735d934c4d68ad9c263b5a10deef5b3cb81da19","sha256:17040e08535dedc687078a6dacd691b3e0d1759e54f0e1f2a8bbfa7db4f68d48"],"state_sha256":"ec5757fc811077f72128162d4d1235b087de4d051374e99b48cd84a9daf046d9"}