{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:OJIOW7XFW3OVB5OXHQEQUEJCPG","short_pith_number":"pith:OJIOW7XF","canonical_record":{"source":{"id":"2205.04007","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-05-09T02:23:24Z","cross_cats_sorted":[],"title_canon_sha256":"bc898c1b38611c4a4b3cce1748ca01b491c6cdf9d61bd294f9dc0d61cd874052","abstract_canon_sha256":"0811061daec2815df771b15bda32b69906648d0aae971a9ced954a97079c6bf5"},"schema_version":"1.0"},"canonical_sha256":"7250eb7ee5b6dd50f5d73c090a112279883da0556d0fd875a3459faef8020ec4","source":{"kind":"arxiv","id":"2205.04007","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.04007","created_at":"2026-07-05T04:21:20Z"},{"alias_kind":"arxiv_version","alias_value":"2205.04007v1","created_at":"2026-07-05T04:21:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.04007","created_at":"2026-07-05T04:21:20Z"},{"alias_kind":"pith_short_12","alias_value":"OJIOW7XFW3OV","created_at":"2026-07-05T04:21:20Z"},{"alias_kind":"pith_short_16","alias_value":"OJIOW7XFW3OVB5OX","created_at":"2026-07-05T04:21:20Z"},{"alias_kind":"pith_short_8","alias_value":"OJIOW7XF","created_at":"2026-07-05T04:21:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:OJIOW7XFW3OVB5OXHQEQUEJCPG","target":"record","payload":{"canonical_record":{"source":{"id":"2205.04007","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-05-09T02:23:24Z","cross_cats_sorted":[],"title_canon_sha256":"bc898c1b38611c4a4b3cce1748ca01b491c6cdf9d61bd294f9dc0d61cd874052","abstract_canon_sha256":"0811061daec2815df771b15bda32b69906648d0aae971a9ced954a97079c6bf5"},"schema_version":"1.0"},"canonical_sha256":"7250eb7ee5b6dd50f5d73c090a112279883da0556d0fd875a3459faef8020ec4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:21:20.394958Z","signature_b64":"IcBvdQ5Oq0XJP0VnqkTWbL+JksuRkaNKiYbnIPi1+nIW/rif+nwcGu+TK2xcHcwgcKWFJd2Vmxg2oXsyGMNYDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7250eb7ee5b6dd50f5d73c090a112279883da0556d0fd875a3459faef8020ec4","last_reissued_at":"2026-07-05T04:21:20.394472Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:21:20.394472Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2205.04007","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:21:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dRmhCJd14uUXeizchKLSR0wU9q+52bREsB2v42PalG5P9kXyv6Gr5qlYOdG9i6xqLwykhhDmA8F49aJIi0hmDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T18:58:14.104631Z"},"content_sha256":"458245b53381db181da358c344a9304b5f951124e420875fd325c7d4969dc554","schema_version":"1.0","event_id":"sha256:458245b53381db181da358c344a9304b5f951124e420875fd325c7d4969dc554"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:OJIOW7XFW3OVB5OXHQEQUEJCPG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ResSFL: A Resistance Transfer Framework for Defending Model Inversion Attack in Split Federated Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Adnan Siraj Rakin, Chaitali Chakrabarti, Deliang Fan, Jingtao Li, Xing Chen, Zhezhi He","submitted_at":"2022-05-09T02:23:24Z","abstract_excerpt":"This work aims to tackle Model Inversion (MI) attack on Split Federated Learning (SFL). SFL is a recent distributed training scheme where multiple clients send intermediate activations (i.e., feature map), instead of raw data, to a central server. While such a scheme helps reduce the computational load at the client end, it opens itself to reconstruction of raw data from intermediate activation by the server. Existing works on protecting SFL only consider inference and do not handle attacks during training. So we propose ResSFL, a Split Federated Learning Framework that is designed to be MI-re"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.04007","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2205.04007/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:21:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ouj4t8AzFOFC5XUZah52biuyrg/yjXMINj2PFWBEVx9AOo8vs7cfqzf3DoRjfn2vfsQeu5kLoKHDYNUEA9cxBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T18:58:14.105147Z"},"content_sha256":"8e6ffb28d25821d7b7acfb0f0da0e5a684d874586051bc74b13102b61bd8cf87","schema_version":"1.0","event_id":"sha256:8e6ffb28d25821d7b7acfb0f0da0e5a684d874586051bc74b13102b61bd8cf87"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OJIOW7XFW3OVB5OXHQEQUEJCPG/bundle.json","state_url":"https://pith.science/pith/OJIOW7XFW3OVB5OXHQEQUEJCPG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OJIOW7XFW3OVB5OXHQEQUEJCPG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T18:58:14Z","links":{"resolver":"https://pith.science/pith/OJIOW7XFW3OVB5OXHQEQUEJCPG","bundle":"https://pith.science/pith/OJIOW7XFW3OVB5OXHQEQUEJCPG/bundle.json","state":"https://pith.science/pith/OJIOW7XFW3OVB5OXHQEQUEJCPG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OJIOW7XFW3OVB5OXHQEQUEJCPG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:OJIOW7XFW3OVB5OXHQEQUEJCPG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0811061daec2815df771b15bda32b69906648d0aae971a9ced954a97079c6bf5","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-05-09T02:23:24Z","title_canon_sha256":"bc898c1b38611c4a4b3cce1748ca01b491c6cdf9d61bd294f9dc0d61cd874052"},"schema_version":"1.0","source":{"id":"2205.04007","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.04007","created_at":"2026-07-05T04:21:20Z"},{"alias_kind":"arxiv_version","alias_value":"2205.04007v1","created_at":"2026-07-05T04:21:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.04007","created_at":"2026-07-05T04:21:20Z"},{"alias_kind":"pith_short_12","alias_value":"OJIOW7XFW3OV","created_at":"2026-07-05T04:21:20Z"},{"alias_kind":"pith_short_16","alias_value":"OJIOW7XFW3OVB5OX","created_at":"2026-07-05T04:21:20Z"},{"alias_kind":"pith_short_8","alias_value":"OJIOW7XF","created_at":"2026-07-05T04:21:20Z"}],"graph_snapshots":[{"event_id":"sha256:8e6ffb28d25821d7b7acfb0f0da0e5a684d874586051bc74b13102b61bd8cf87","target":"graph","created_at":"2026-07-05T04:21:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2205.04007/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This work aims to tackle Model Inversion (MI) attack on Split Federated Learning (SFL). SFL is a recent distributed training scheme where multiple clients send intermediate activations (i.e., feature map), instead of raw data, to a central server. While such a scheme helps reduce the computational load at the client end, it opens itself to reconstruction of raw data from intermediate activation by the server. Existing works on protecting SFL only consider inference and do not handle attacks during training. So we propose ResSFL, a Split Federated Learning Framework that is designed to be MI-re","authors_text":"Adnan Siraj Rakin, Chaitali Chakrabarti, Deliang Fan, Jingtao Li, Xing Chen, Zhezhi He","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-05-09T02:23:24Z","title":"ResSFL: A Resistance Transfer Framework for Defending Model Inversion Attack in Split Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.04007","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:458245b53381db181da358c344a9304b5f951124e420875fd325c7d4969dc554","target":"record","created_at":"2026-07-05T04:21:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0811061daec2815df771b15bda32b69906648d0aae971a9ced954a97079c6bf5","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-05-09T02:23:24Z","title_canon_sha256":"bc898c1b38611c4a4b3cce1748ca01b491c6cdf9d61bd294f9dc0d61cd874052"},"schema_version":"1.0","source":{"id":"2205.04007","kind":"arxiv","version":1}},"canonical_sha256":"7250eb7ee5b6dd50f5d73c090a112279883da0556d0fd875a3459faef8020ec4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7250eb7ee5b6dd50f5d73c090a112279883da0556d0fd875a3459faef8020ec4","first_computed_at":"2026-07-05T04:21:20.394472Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:21:20.394472Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IcBvdQ5Oq0XJP0VnqkTWbL+JksuRkaNKiYbnIPi1+nIW/rif+nwcGu+TK2xcHcwgcKWFJd2Vmxg2oXsyGMNYDA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:21:20.394958Z","signed_message":"canonical_sha256_bytes"},"source_id":"2205.04007","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:458245b53381db181da358c344a9304b5f951124e420875fd325c7d4969dc554","sha256:8e6ffb28d25821d7b7acfb0f0da0e5a684d874586051bc74b13102b61bd8cf87"],"state_sha256":"a6da5fe45ddee706e9de77f220f5d547b563c0c9e8f488e2593ca99c45974ef9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"khqoYud+AStMVyO5hSlF102wHRo+evRIUC9wOL4Sa5eEkfAgx2dDaGJqo2ubv2C5L4HRipRcIUkUhOKzvizAAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T18:58:14.109057Z","bundle_sha256":"5b762523075cb2876e8db5af1367b51e38564e758f2da8cbff82d37db0d6c7b2"}}