{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:OR44MIXNYOSQ4SJM2OBUEMYYWJ","short_pith_number":"pith:OR44MIXN","canonical_record":{"source":{"id":"2104.12669","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-04-26T15:53:57Z","cross_cats_sorted":["cs.CY","cs.LG"],"title_canon_sha256":"74ea846be4d1dbe30f0729d2e3d2df3942f08341f5faf775f648e5a92f570461","abstract_canon_sha256":"e3258ef9b4c9816dec49ba3e2fe8fa2c5f4e4526d8c4ccc182c289b7703e3bcb"},"schema_version":"1.0"},"canonical_sha256":"7479c622edc3a50e492cd383423318b2424de6ccfb4a741476a00a4dda9b876d","source":{"kind":"arxiv","id":"2104.12669","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.12669","created_at":"2026-07-05T04:04:38Z"},{"alias_kind":"arxiv_version","alias_value":"2104.12669v3","created_at":"2026-07-05T04:04:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.12669","created_at":"2026-07-05T04:04:38Z"},{"alias_kind":"pith_short_12","alias_value":"OR44MIXNYOSQ","created_at":"2026-07-05T04:04:38Z"},{"alias_kind":"pith_short_16","alias_value":"OR44MIXNYOSQ4SJM","created_at":"2026-07-05T04:04:38Z"},{"alias_kind":"pith_short_8","alias_value":"OR44MIXN","created_at":"2026-07-05T04:04:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:OR44MIXNYOSQ4SJM2OBUEMYYWJ","target":"record","payload":{"canonical_record":{"source":{"id":"2104.12669","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-04-26T15:53:57Z","cross_cats_sorted":["cs.CY","cs.LG"],"title_canon_sha256":"74ea846be4d1dbe30f0729d2e3d2df3942f08341f5faf775f648e5a92f570461","abstract_canon_sha256":"e3258ef9b4c9816dec49ba3e2fe8fa2c5f4e4526d8c4ccc182c289b7703e3bcb"},"schema_version":"1.0"},"canonical_sha256":"7479c622edc3a50e492cd383423318b2424de6ccfb4a741476a00a4dda9b876d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:04:38.757543Z","signature_b64":"PbcgLOxrabwGhE3sYihzmH/STlyl4oTrJVJp+LoV7sYqIKuB/eeEaJDHlyRfR61/mv/p3pA+/mQiGmPtdRkhAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7479c622edc3a50e492cd383423318b2424de6ccfb4a741476a00a4dda9b876d","last_reissued_at":"2026-07-05T04:04:38.757085Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:04:38.757085Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2104.12669","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:04:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DmgtP6ODqpZYDTtPkzFn5v54CV8SpcykmmutEBrc+OsixV65xcXNn3CXMKoDOyefWXz/FhXcwwIk/pGcN+YzBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T21:29:32.021981Z"},"content_sha256":"07954115203ce50ce60aab5ce886ec99cfeb072fcfeb92ee475bf5f46bf606e9","schema_version":"1.0","event_id":"sha256:07954115203ce50ce60aab5ce886ec99cfeb072fcfeb92ee475bf5f46bf606e9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:OR44MIXNYOSQ4SJM2OBUEMYYWJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Exploiting Explanations for Model Inversion Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CY","cs.LG"],"primary_cat":"cs.CV","authors_text":"Brian Y. Lim, Wencan Zhang, Xiaokui Xiao, Xuejun Zhao","submitted_at":"2021-04-26T15:53:57Z","abstract_excerpt":"The successful deployment of artificial intelligence (AI) in many domains from healthcare to hiring requires their responsible use, particularly in model explanations and privacy. Explainable artificial intelligence (XAI) provides more information to help users to understand model decisions, yet this additional knowledge exposes additional risks for privacy attacks. Hence, providing explanation harms privacy. We study this risk for image-based model inversion attacks and identified several attack architectures with increasing performance to reconstruct private image data from model explanation"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.12669","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2104.12669/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:04:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2+qX7yxScbV9xEO2feB4QAU3WjIezy2YtqcAENWiDMd8t1bBN8nPmS8DJfXpWt+0Phx1HAbeObxRnUyN1463Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T21:29:32.022507Z"},"content_sha256":"16100110b4c0f591bf7efe91e5f2712628b0520f2b4197d1955d586e4aad0c50","schema_version":"1.0","event_id":"sha256:16100110b4c0f591bf7efe91e5f2712628b0520f2b4197d1955d586e4aad0c50"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OR44MIXNYOSQ4SJM2OBUEMYYWJ/bundle.json","state_url":"https://pith.science/pith/OR44MIXNYOSQ4SJM2OBUEMYYWJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OR44MIXNYOSQ4SJM2OBUEMYYWJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T21:29:32Z","links":{"resolver":"https://pith.science/pith/OR44MIXNYOSQ4SJM2OBUEMYYWJ","bundle":"https://pith.science/pith/OR44MIXNYOSQ4SJM2OBUEMYYWJ/bundle.json","state":"https://pith.science/pith/OR44MIXNYOSQ4SJM2OBUEMYYWJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OR44MIXNYOSQ4SJM2OBUEMYYWJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:OR44MIXNYOSQ4SJM2OBUEMYYWJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e3258ef9b4c9816dec49ba3e2fe8fa2c5f4e4526d8c4ccc182c289b7703e3bcb","cross_cats_sorted":["cs.CY","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-04-26T15:53:57Z","title_canon_sha256":"74ea846be4d1dbe30f0729d2e3d2df3942f08341f5faf775f648e5a92f570461"},"schema_version":"1.0","source":{"id":"2104.12669","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.12669","created_at":"2026-07-05T04:04:38Z"},{"alias_kind":"arxiv_version","alias_value":"2104.12669v3","created_at":"2026-07-05T04:04:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.12669","created_at":"2026-07-05T04:04:38Z"},{"alias_kind":"pith_short_12","alias_value":"OR44MIXNYOSQ","created_at":"2026-07-05T04:04:38Z"},{"alias_kind":"pith_short_16","alias_value":"OR44MIXNYOSQ4SJM","created_at":"2026-07-05T04:04:38Z"},{"alias_kind":"pith_short_8","alias_value":"OR44MIXN","created_at":"2026-07-05T04:04:38Z"}],"graph_snapshots":[{"event_id":"sha256:16100110b4c0f591bf7efe91e5f2712628b0520f2b4197d1955d586e4aad0c50","target":"graph","created_at":"2026-07-05T04:04:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2104.12669/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The successful deployment of artificial intelligence (AI) in many domains from healthcare to hiring requires their responsible use, particularly in model explanations and privacy. Explainable artificial intelligence (XAI) provides more information to help users to understand model decisions, yet this additional knowledge exposes additional risks for privacy attacks. Hence, providing explanation harms privacy. We study this risk for image-based model inversion attacks and identified several attack architectures with increasing performance to reconstruct private image data from model explanation","authors_text":"Brian Y. Lim, Wencan Zhang, Xiaokui Xiao, Xuejun Zhao","cross_cats":["cs.CY","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-04-26T15:53:57Z","title":"Exploiting Explanations for Model Inversion Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.12669","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:07954115203ce50ce60aab5ce886ec99cfeb072fcfeb92ee475bf5f46bf606e9","target":"record","created_at":"2026-07-05T04:04:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e3258ef9b4c9816dec49ba3e2fe8fa2c5f4e4526d8c4ccc182c289b7703e3bcb","cross_cats_sorted":["cs.CY","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-04-26T15:53:57Z","title_canon_sha256":"74ea846be4d1dbe30f0729d2e3d2df3942f08341f5faf775f648e5a92f570461"},"schema_version":"1.0","source":{"id":"2104.12669","kind":"arxiv","version":3}},"canonical_sha256":"7479c622edc3a50e492cd383423318b2424de6ccfb4a741476a00a4dda9b876d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7479c622edc3a50e492cd383423318b2424de6ccfb4a741476a00a4dda9b876d","first_computed_at":"2026-07-05T04:04:38.757085Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:04:38.757085Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PbcgLOxrabwGhE3sYihzmH/STlyl4oTrJVJp+LoV7sYqIKuB/eeEaJDHlyRfR61/mv/p3pA+/mQiGmPtdRkhAw==","signature_status":"signed_v1","signed_at":"2026-07-05T04:04:38.757543Z","signed_message":"canonical_sha256_bytes"},"source_id":"2104.12669","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:07954115203ce50ce60aab5ce886ec99cfeb072fcfeb92ee475bf5f46bf606e9","sha256:16100110b4c0f591bf7efe91e5f2712628b0520f2b4197d1955d586e4aad0c50"],"state_sha256":"b38473cc710365ccd376b13f871c8a4d8bd8c78c3fcc9416faa6ba297fdead2d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/tAOWeHgI9LgRuDJXYHYjGGz6bngCXNKaZDBchhjo7dpcZ5vuQ7XxcHtc/NPyloQYZX3WYIfkZbL9abQfqjZCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T21:29:32.026422Z","bundle_sha256":"0f7d919a3c2a5ce23f713d33210f7db87a88fe0899652b23e1ee5c0f87017bf5"}}