{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:MZVMBQZLWGF3LC5JC7ZR6OYX3J","short_pith_number":"pith:MZVMBQZL","canonical_record":{"source":{"id":"2411.16763","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-24T20:56:18Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"ba7d902629060c3b9e47bacb0a414251c25f7aceaddbc4c60f10ebc86d16cd77","abstract_canon_sha256":"8ca61673820b34b1ff821319cf97a4979d14a5fee949fae97a5f5f57dda0db1a"},"schema_version":"1.0"},"canonical_sha256":"666ac0c32bb18bb58ba917f31f3b17da66cb2057dbff6b03aed98e711fbc7796","source":{"kind":"arxiv","id":"2411.16763","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.16763","created_at":"2026-07-05T09:40:45Z"},{"alias_kind":"arxiv_version","alias_value":"2411.16763v1","created_at":"2026-07-05T09:40:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.16763","created_at":"2026-07-05T09:40:45Z"},{"alias_kind":"pith_short_12","alias_value":"MZVMBQZLWGF3","created_at":"2026-07-05T09:40:45Z"},{"alias_kind":"pith_short_16","alias_value":"MZVMBQZLWGF3LC5J","created_at":"2026-07-05T09:40:45Z"},{"alias_kind":"pith_short_8","alias_value":"MZVMBQZL","created_at":"2026-07-05T09:40:45Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:MZVMBQZLWGF3LC5JC7ZR6OYX3J","target":"record","payload":{"canonical_record":{"source":{"id":"2411.16763","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-24T20:56:18Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"ba7d902629060c3b9e47bacb0a414251c25f7aceaddbc4c60f10ebc86d16cd77","abstract_canon_sha256":"8ca61673820b34b1ff821319cf97a4979d14a5fee949fae97a5f5f57dda0db1a"},"schema_version":"1.0"},"canonical_sha256":"666ac0c32bb18bb58ba917f31f3b17da66cb2057dbff6b03aed98e711fbc7796","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:40:45.464953Z","signature_b64":"0HhekHdIIzS97/aAc8R4AYWt02/F42mJrnh8sJKChNTLLs4ge+mn01YQOZpCeeeyEwr/IrSVO5LN6s/jj5wOCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"666ac0c32bb18bb58ba917f31f3b17da66cb2057dbff6b03aed98e711fbc7796","last_reissued_at":"2026-07-05T09:40:45.464493Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:40:45.464493Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.16763","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:40:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LP3qvIVO/YJVshk/qev5CqyTnWGiBECDLodDyTtYl3WHRUcDlGyR4GQjtfv1FyqzCA2riYSuprPmf8aBbp7DDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T09:24:02.767674Z"},"content_sha256":"b471e9e83cd909a628887fbc363880bda89454d23b22ad5494e37f3817e0fbe8","schema_version":"1.0","event_id":"sha256:b471e9e83cd909a628887fbc363880bda89454d23b22ad5494e37f3817e0fbe8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:MZVMBQZLWGF3LC5JC7ZR6OYX3J","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Hide in Plain Sight: Clean-Label Backdoor for Auditing Membership Inference","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Depeng Chen, Hao Chen, Hong Zhong, Hulin Jin, Jie Cui","submitted_at":"2024-11-24T20:56:18Z","abstract_excerpt":"Membership inference attacks (MIAs) are critical tools for assessing privacy risks and ensuring compliance with regulations like the General Data Protection Regulation (GDPR). However, their potential for auditing unauthorized use of data remains under explored. To bridge this gap, we propose a novel clean-label backdoor-based approach for MIAs, designed specifically for robust and stealthy data auditing. Unlike conventional methods that rely on detectable poisoned samples with altered labels, our approach retains natural labels, enhancing stealthiness even at low poisoning rates. Our approach"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.16763","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.16763/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:40:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aTk8jKGetCDjBkU0RcBSRbjNnyyBLuobBUoPS1WfNsH7HzWbeGlkEYL/0k6oAU5NgUlX48bSYdjZF3yyIgZEAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T09:24:02.768195Z"},"content_sha256":"3c49028c981f9ee64d99f2033c6e4bc87f59bd2048541ab0aefca941a269a20c","schema_version":"1.0","event_id":"sha256:3c49028c981f9ee64d99f2033c6e4bc87f59bd2048541ab0aefca941a269a20c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MZVMBQZLWGF3LC5JC7ZR6OYX3J/bundle.json","state_url":"https://pith.science/pith/MZVMBQZLWGF3LC5JC7ZR6OYX3J/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MZVMBQZLWGF3LC5JC7ZR6OYX3J/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T09:24:02Z","links":{"resolver":"https://pith.science/pith/MZVMBQZLWGF3LC5JC7ZR6OYX3J","bundle":"https://pith.science/pith/MZVMBQZLWGF3LC5JC7ZR6OYX3J/bundle.json","state":"https://pith.science/pith/MZVMBQZLWGF3LC5JC7ZR6OYX3J/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MZVMBQZLWGF3LC5JC7ZR6OYX3J/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:MZVMBQZLWGF3LC5JC7ZR6OYX3J","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8ca61673820b34b1ff821319cf97a4979d14a5fee949fae97a5f5f57dda0db1a","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-24T20:56:18Z","title_canon_sha256":"ba7d902629060c3b9e47bacb0a414251c25f7aceaddbc4c60f10ebc86d16cd77"},"schema_version":"1.0","source":{"id":"2411.16763","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.16763","created_at":"2026-07-05T09:40:45Z"},{"alias_kind":"arxiv_version","alias_value":"2411.16763v1","created_at":"2026-07-05T09:40:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.16763","created_at":"2026-07-05T09:40:45Z"},{"alias_kind":"pith_short_12","alias_value":"MZVMBQZLWGF3","created_at":"2026-07-05T09:40:45Z"},{"alias_kind":"pith_short_16","alias_value":"MZVMBQZLWGF3LC5J","created_at":"2026-07-05T09:40:45Z"},{"alias_kind":"pith_short_8","alias_value":"MZVMBQZL","created_at":"2026-07-05T09:40:45Z"}],"graph_snapshots":[{"event_id":"sha256:3c49028c981f9ee64d99f2033c6e4bc87f59bd2048541ab0aefca941a269a20c","target":"graph","created_at":"2026-07-05T09:40:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.16763/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Membership inference attacks (MIAs) are critical tools for assessing privacy risks and ensuring compliance with regulations like the General Data Protection Regulation (GDPR). However, their potential for auditing unauthorized use of data remains under explored. To bridge this gap, we propose a novel clean-label backdoor-based approach for MIAs, designed specifically for robust and stealthy data auditing. Unlike conventional methods that rely on detectable poisoned samples with altered labels, our approach retains natural labels, enhancing stealthiness even at low poisoning rates. Our approach","authors_text":"Depeng Chen, Hao Chen, Hong Zhong, Hulin Jin, Jie Cui","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-24T20:56:18Z","title":"Hide in Plain Sight: Clean-Label Backdoor for Auditing Membership Inference"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.16763","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b471e9e83cd909a628887fbc363880bda89454d23b22ad5494e37f3817e0fbe8","target":"record","created_at":"2026-07-05T09:40:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8ca61673820b34b1ff821319cf97a4979d14a5fee949fae97a5f5f57dda0db1a","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-24T20:56:18Z","title_canon_sha256":"ba7d902629060c3b9e47bacb0a414251c25f7aceaddbc4c60f10ebc86d16cd77"},"schema_version":"1.0","source":{"id":"2411.16763","kind":"arxiv","version":1}},"canonical_sha256":"666ac0c32bb18bb58ba917f31f3b17da66cb2057dbff6b03aed98e711fbc7796","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"666ac0c32bb18bb58ba917f31f3b17da66cb2057dbff6b03aed98e711fbc7796","first_computed_at":"2026-07-05T09:40:45.464493Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:40:45.464493Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"0HhekHdIIzS97/aAc8R4AYWt02/F42mJrnh8sJKChNTLLs4ge+mn01YQOZpCeeeyEwr/IrSVO5LN6s/jj5wOCg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:40:45.464953Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.16763","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b471e9e83cd909a628887fbc363880bda89454d23b22ad5494e37f3817e0fbe8","sha256:3c49028c981f9ee64d99f2033c6e4bc87f59bd2048541ab0aefca941a269a20c"],"state_sha256":"8e7a9b1752b4d59e65ddd9d23e521cea52bab7395bb87624845623ae52b5e55b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pRAq1w/cQ5lQGQi3cpZCLzdYq2mBtMGksIQzooSVNPbMkKjuvpKlYBeXLJiOPSSlqMkaipHvpFqy5U8j97cBDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T09:24:02.771803Z","bundle_sha256":"2d39999ea4084b6e68590b670652a80b5e5c86362d1d1feebbbd48fa32a983c5"}}