{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:NRGZGHQSS2TZZPD5ZNP23FCPJ4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e5121219afbb7f095e83dea9dcc1d242cab5a96a2a168cb28755d76825114309","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-11-10T00:53:22Z","title_canon_sha256":"30a8d1d7946467c87231ade1c48ff0da6e6c5a83380afe149232045f3325e3e4"},"schema_version":"1.0","source":{"id":"2311.05808","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.05808","created_at":"2026-07-05T09:41:29Z"},{"alias_kind":"arxiv_version","alias_value":"2311.05808v3","created_at":"2026-07-05T09:41:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.05808","created_at":"2026-07-05T09:41:29Z"},{"alias_kind":"pith_short_12","alias_value":"NRGZGHQSS2TZ","created_at":"2026-07-05T09:41:29Z"},{"alias_kind":"pith_short_16","alias_value":"NRGZGHQSS2TZZPD5","created_at":"2026-07-05T09:41:29Z"},{"alias_kind":"pith_short_8","alias_value":"NRGZGHQS","created_at":"2026-07-05T09:41:29Z"}],"graph_snapshots":[{"event_id":"sha256:f55a9839bab10d0846552cfdadce4f3cf7aef724d66ab9ec9127e6d63b4c8b49","target":"graph","created_at":"2026-07-05T09:41:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.05808/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning is known for its capability to safeguard the participants' data privacy. However, recently emerged model inversion attacks (MIAs) have shown that a malicious parameter server can reconstruct individual users' local data samples from model updates. The state-of-the-art attacks either rely on computation-intensive iterative optimization methods to reconstruct each input batch, making scaling difficult, or involve the malicious parameter server adding extra modules before the global model architecture, rendering the attacks too conspicuous and easily detectable.\n  To overcome t","authors_text":"Chaoyu Zhang, Ning Wang, Shanghao Shi, Wenjing Lou, Yang Xiao, Yi Shi, Y.Thomas Hou","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-11-10T00:53:22Z","title":"Scale-MIA: A Scalable Model Inversion Attack against Secure Federated Learning via Latent Space Reconstruction"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.05808","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6da5b0e71be65668b3e17de420c60b16925e9ef478d3ae97307b5f26b59e0112","target":"record","created_at":"2026-07-05T09:41:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e5121219afbb7f095e83dea9dcc1d242cab5a96a2a168cb28755d76825114309","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-11-10T00:53:22Z","title_canon_sha256":"30a8d1d7946467c87231ade1c48ff0da6e6c5a83380afe149232045f3325e3e4"},"schema_version":"1.0","source":{"id":"2311.05808","kind":"arxiv","version":3}},"canonical_sha256":"6c4d931e1296a79cbc7dcb5fad944f4f32e4defeeb52433add2a54cad5775987","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6c4d931e1296a79cbc7dcb5fad944f4f32e4defeeb52433add2a54cad5775987","first_computed_at":"2026-07-05T09:41:29.633043Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:41:29.633043Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/uH1WCH8rSK4oAx4WMzqOFn9bITdm8Uo+HdkNOps2JMqS7bvSX4rG09LlvDftCsPjlXaKhfydzKL1uADq9VMAw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:41:29.633479Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.05808","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6da5b0e71be65668b3e17de420c60b16925e9ef478d3ae97307b5f26b59e0112","sha256:f55a9839bab10d0846552cfdadce4f3cf7aef724d66ab9ec9127e6d63b4c8b49"],"state_sha256":"17921cc749cf638aea4983e5282b0cd1984f4b6ec2391ec27327e1344e105232"}