{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:OSRLBW2GA43QZ2R3RZI6YZAH3E","short_pith_number":"pith:OSRLBW2G","canonical_record":{"source":{"id":"2408.16913","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-08-29T21:21:53Z","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"title_canon_sha256":"bbf76d69531528f3f942de5229a70333db85bcacd1d7dcc095586e2760a6122f","abstract_canon_sha256":"5a002b894ee2caf310ca64b1072054fd2d31bbe29ae616d04208ef7544036674"},"schema_version":"1.0"},"canonical_sha256":"74a2b0db4607370cea3b8e51ec6407d91ecec0f0a24d8a7686956ff13ff61f94","source":{"kind":"arxiv","id":"2408.16913","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.16913","created_at":"2026-07-05T09:01:08Z"},{"alias_kind":"arxiv_version","alias_value":"2408.16913v1","created_at":"2026-07-05T09:01:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.16913","created_at":"2026-07-05T09:01:08Z"},{"alias_kind":"pith_short_12","alias_value":"OSRLBW2GA43Q","created_at":"2026-07-05T09:01:08Z"},{"alias_kind":"pith_short_16","alias_value":"OSRLBW2GA43QZ2R3","created_at":"2026-07-05T09:01:08Z"},{"alias_kind":"pith_short_8","alias_value":"OSRLBW2G","created_at":"2026-07-05T09:01:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:OSRLBW2GA43QZ2R3RZI6YZAH3E","target":"record","payload":{"canonical_record":{"source":{"id":"2408.16913","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-08-29T21:21:53Z","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"title_canon_sha256":"bbf76d69531528f3f942de5229a70333db85bcacd1d7dcc095586e2760a6122f","abstract_canon_sha256":"5a002b894ee2caf310ca64b1072054fd2d31bbe29ae616d04208ef7544036674"},"schema_version":"1.0"},"canonical_sha256":"74a2b0db4607370cea3b8e51ec6407d91ecec0f0a24d8a7686956ff13ff61f94","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:01:08.183713Z","signature_b64":"k72IcNbKqWtyu3Nbj+bERr0Tr2tmog1N7rz+YCvYumzTOoTiTZ65TWBO+OpbQdMO0RLqgxJbdbUj108myOINAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"74a2b0db4607370cea3b8e51ec6407d91ecec0f0a24d8a7686956ff13ff61f94","last_reissued_at":"2026-07-05T09:01:08.183294Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:01:08.183294Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.16913","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:01:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"z9OSMYg4qx3dSPqw+AlO5+lUC3IG24i991+3DBT+cKfz31+ynLrvE34UMZXtN56d8hVR4lHKG+sOyJN2ksWyDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T03:57:08.760410Z"},"content_sha256":"d6d8373ed5abffa86f0a92bf3801311b1317ecfa9b091ee4e300e96e547591e3","schema_version":"1.0","event_id":"sha256:d6d8373ed5abffa86f0a92bf3801311b1317ecfa9b091ee4e300e96e547591e3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:OSRLBW2GA43QZ2R3RZI6YZAH3E","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Analyzing Inference Privacy Risks Through Gradients in Machine Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Andrew Lowy, Bradley Malin, Jing Liu, Kieran Parsons, Toshiaki Koike-Akino, Ye Wang, Zhuohang Li","submitted_at":"2024-08-29T21:21:53Z","abstract_excerpt":"In distributed learning settings, models are iteratively updated with shared gradients computed from potentially sensitive user data. While previous work has studied various privacy risks of sharing gradients, our paper aims to provide a systematic approach to analyze private information leakage from gradients. We present a unified game-based framework that encompasses a broad range of attacks including attribute, property, distributional, and user disclosures. We investigate how different uncertainties of the adversary affect their inferential power via extensive experiments on five datasets "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.16913","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.16913/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:01:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Td1xOEIVwjRgWeSEGrb8Ba84jFKkntj6t4vuCMJ/Pdt1hfJSgRJj8D7CAuACpZM5XcwwGxWkYkgzu+ASIJ1NDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T03:57:08.761305Z"},"content_sha256":"64f0934601b54d16b2c03a6ffcb179513f8ebd3daf338c885fc600f375875fce","schema_version":"1.0","event_id":"sha256:64f0934601b54d16b2c03a6ffcb179513f8ebd3daf338c885fc600f375875fce"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OSRLBW2GA43QZ2R3RZI6YZAH3E/bundle.json","state_url":"https://pith.science/pith/OSRLBW2GA43QZ2R3RZI6YZAH3E/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OSRLBW2GA43QZ2R3RZI6YZAH3E/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T03:57:08Z","links":{"resolver":"https://pith.science/pith/OSRLBW2GA43QZ2R3RZI6YZAH3E","bundle":"https://pith.science/pith/OSRLBW2GA43QZ2R3RZI6YZAH3E/bundle.json","state":"https://pith.science/pith/OSRLBW2GA43QZ2R3RZI6YZAH3E/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OSRLBW2GA43QZ2R3RZI6YZAH3E/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:OSRLBW2GA43QZ2R3RZI6YZAH3E","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5a002b894ee2caf310ca64b1072054fd2d31bbe29ae616d04208ef7544036674","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-08-29T21:21:53Z","title_canon_sha256":"bbf76d69531528f3f942de5229a70333db85bcacd1d7dcc095586e2760a6122f"},"schema_version":"1.0","source":{"id":"2408.16913","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.16913","created_at":"2026-07-05T09:01:08Z"},{"alias_kind":"arxiv_version","alias_value":"2408.16913v1","created_at":"2026-07-05T09:01:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.16913","created_at":"2026-07-05T09:01:08Z"},{"alias_kind":"pith_short_12","alias_value":"OSRLBW2GA43Q","created_at":"2026-07-05T09:01:08Z"},{"alias_kind":"pith_short_16","alias_value":"OSRLBW2GA43QZ2R3","created_at":"2026-07-05T09:01:08Z"},{"alias_kind":"pith_short_8","alias_value":"OSRLBW2G","created_at":"2026-07-05T09:01:08Z"}],"graph_snapshots":[{"event_id":"sha256:64f0934601b54d16b2c03a6ffcb179513f8ebd3daf338c885fc600f375875fce","target":"graph","created_at":"2026-07-05T09:01:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.16913/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In distributed learning settings, models are iteratively updated with shared gradients computed from potentially sensitive user data. While previous work has studied various privacy risks of sharing gradients, our paper aims to provide a systematic approach to analyze private information leakage from gradients. We present a unified game-based framework that encompasses a broad range of attacks including attribute, property, distributional, and user disclosures. We investigate how different uncertainties of the adversary affect their inferential power via extensive experiments on five datasets ","authors_text":"Andrew Lowy, Bradley Malin, Jing Liu, Kieran Parsons, Toshiaki Koike-Akino, Ye Wang, Zhuohang Li","cross_cats":["cs.AI","cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-08-29T21:21:53Z","title":"Analyzing Inference Privacy Risks Through Gradients in Machine Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.16913","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d6d8373ed5abffa86f0a92bf3801311b1317ecfa9b091ee4e300e96e547591e3","target":"record","created_at":"2026-07-05T09:01:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5a002b894ee2caf310ca64b1072054fd2d31bbe29ae616d04208ef7544036674","cross_cats_sorted":["cs.AI","cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-08-29T21:21:53Z","title_canon_sha256":"bbf76d69531528f3f942de5229a70333db85bcacd1d7dcc095586e2760a6122f"},"schema_version":"1.0","source":{"id":"2408.16913","kind":"arxiv","version":1}},"canonical_sha256":"74a2b0db4607370cea3b8e51ec6407d91ecec0f0a24d8a7686956ff13ff61f94","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"74a2b0db4607370cea3b8e51ec6407d91ecec0f0a24d8a7686956ff13ff61f94","first_computed_at":"2026-07-05T09:01:08.183294Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:01:08.183294Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"k72IcNbKqWtyu3Nbj+bERr0Tr2tmog1N7rz+YCvYumzTOoTiTZ65TWBO+OpbQdMO0RLqgxJbdbUj108myOINAA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:01:08.183713Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.16913","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d6d8373ed5abffa86f0a92bf3801311b1317ecfa9b091ee4e300e96e547591e3","sha256:64f0934601b54d16b2c03a6ffcb179513f8ebd3daf338c885fc600f375875fce"],"state_sha256":"fcd17e71a62af2295f4eb7e32d347ad0a99c9fca389898adf3e163894d45f432"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WNgYxONgAsIA5cdAcdeXlvOciYDmCjsaTK3uQBiLtvcCkGH7BxdkX4BGiQjpM98OH1DOvNPUs8jZVYmnjoOlDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T03:57:08.767998Z","bundle_sha256":"d0cbd5674fafe234652d272228890be0b93ceb68d3e21854977022096b757b85"}}