{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:OWNPGUH5LJG2E67Z53A6HMC5WM","short_pith_number":"pith:OWNPGUH5","canonical_record":{"source":{"id":"2204.12495","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-04-26T12:08:28Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CY"],"title_canon_sha256":"2f8383b4cd632c3c7dc08c081cefc8280d28946e4442011413704d5bca8485fd","abstract_canon_sha256":"93ff149cc46e737c1109e169d68ae553ac80dba55adf9ad421c22a25c523001e"},"schema_version":"1.0"},"canonical_sha256":"759af350fd5a4da27bf9eec1e3b05db30f520838993bcd86343fd024403e1fed","source":{"kind":"arxiv","id":"2204.12495","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2204.12495","created_at":"2026-07-05T04:18:19Z"},{"alias_kind":"arxiv_version","alias_value":"2204.12495v1","created_at":"2026-07-05T04:18:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.12495","created_at":"2026-07-05T04:18:19Z"},{"alias_kind":"pith_short_12","alias_value":"OWNPGUH5LJG2","created_at":"2026-07-05T04:18:19Z"},{"alias_kind":"pith_short_16","alias_value":"OWNPGUH5LJG2E67Z","created_at":"2026-07-05T04:18:19Z"},{"alias_kind":"pith_short_8","alias_value":"OWNPGUH5","created_at":"2026-07-05T04:18:19Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:OWNPGUH5LJG2E67Z53A6HMC5WM","target":"record","payload":{"canonical_record":{"source":{"id":"2204.12495","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-04-26T12:08:28Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CY"],"title_canon_sha256":"2f8383b4cd632c3c7dc08c081cefc8280d28946e4442011413704d5bca8485fd","abstract_canon_sha256":"93ff149cc46e737c1109e169d68ae553ac80dba55adf9ad421c22a25c523001e"},"schema_version":"1.0"},"canonical_sha256":"759af350fd5a4da27bf9eec1e3b05db30f520838993bcd86343fd024403e1fed","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:18:19.588095Z","signature_b64":"MWf6tMTGoU/6lEOCP2aAFEz3MZAQ8tOlB2w/9t9ccuuK/Eul1olgYwxvtbtiQ3rFOoW62FlDWEYkFBzNzOlwCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"759af350fd5a4da27bf9eec1e3b05db30f520838993bcd86343fd024403e1fed","last_reissued_at":"2026-07-05T04:18:19.587561Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:18:19.587561Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2204.12495","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:18:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/1jJkrwmTKx24XMUssjpXrNIozbblFHeQiVxxbgtBGjo9/ufBVmBQ+5O0//mCQ0Sf++GbQtM+GmJl/CP09rCBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T06:27:50.280816Z"},"content_sha256":"3bca3ac174d3fd94796593a857fc0c9b21b867dc4867cb88d8ca7e5ba40c45f7","schema_version":"1.0","event_id":"sha256:3bca3ac174d3fd94796593a857fc0c9b21b867dc4867cb88d8ca7e5ba40c45f7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:OWNPGUH5LJG2E67Z53A6HMC5WM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Enhancing Privacy against Inversion Attacks in Federated Learning by using Mixing Gradients Strategies","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.CY"],"primary_cat":"cs.LG","authors_text":"Antonios Georgiadis, Fran Silavong, Sanket Kamthe, Sean J. Moran, Shaltiel Eloul","submitted_at":"2022-04-26T12:08:28Z","abstract_excerpt":"Federated learning reduces the risk of information leakage, but remains vulnerable to attacks. We investigate how several neural network design decisions can defend against gradients inversion attacks. We show that overlapping gradients provides numerical resistance to gradient inversion on the highly vulnerable dense layer. Specifically, we propose to leverage batching to maximise mixing of gradients by choosing an appropriate loss function and drawing identical labels. We show that otherwise it is possible to directly recover all vectors in a mini-batch without any numerical optimisation due"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.12495","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2204.12495/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:18:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9yTR5WOVMT/cpShSONWcMMQRMuZpvmXQZvVBUvgQoQ5+/UDm7n1197TLvD150s+Yn5wrbEDIJmzP37sldktsAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T06:27:50.281338Z"},"content_sha256":"1c1c9a339b1394afdcf9191c499ae9ddf47d919906164f250b1124ae1764c80b","schema_version":"1.0","event_id":"sha256:1c1c9a339b1394afdcf9191c499ae9ddf47d919906164f250b1124ae1764c80b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OWNPGUH5LJG2E67Z53A6HMC5WM/bundle.json","state_url":"https://pith.science/pith/OWNPGUH5LJG2E67Z53A6HMC5WM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OWNPGUH5LJG2E67Z53A6HMC5WM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T06:27:50Z","links":{"resolver":"https://pith.science/pith/OWNPGUH5LJG2E67Z53A6HMC5WM","bundle":"https://pith.science/pith/OWNPGUH5LJG2E67Z53A6HMC5WM/bundle.json","state":"https://pith.science/pith/OWNPGUH5LJG2E67Z53A6HMC5WM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OWNPGUH5LJG2E67Z53A6HMC5WM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:OWNPGUH5LJG2E67Z53A6HMC5WM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"93ff149cc46e737c1109e169d68ae553ac80dba55adf9ad421c22a25c523001e","cross_cats_sorted":["cs.AI","cs.CR","cs.CY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-04-26T12:08:28Z","title_canon_sha256":"2f8383b4cd632c3c7dc08c081cefc8280d28946e4442011413704d5bca8485fd"},"schema_version":"1.0","source":{"id":"2204.12495","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2204.12495","created_at":"2026-07-05T04:18:19Z"},{"alias_kind":"arxiv_version","alias_value":"2204.12495v1","created_at":"2026-07-05T04:18:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.12495","created_at":"2026-07-05T04:18:19Z"},{"alias_kind":"pith_short_12","alias_value":"OWNPGUH5LJG2","created_at":"2026-07-05T04:18:19Z"},{"alias_kind":"pith_short_16","alias_value":"OWNPGUH5LJG2E67Z","created_at":"2026-07-05T04:18:19Z"},{"alias_kind":"pith_short_8","alias_value":"OWNPGUH5","created_at":"2026-07-05T04:18:19Z"}],"graph_snapshots":[{"event_id":"sha256:1c1c9a339b1394afdcf9191c499ae9ddf47d919906164f250b1124ae1764c80b","target":"graph","created_at":"2026-07-05T04:18:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2204.12495/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning reduces the risk of information leakage, but remains vulnerable to attacks. We investigate how several neural network design decisions can defend against gradients inversion attacks. We show that overlapping gradients provides numerical resistance to gradient inversion on the highly vulnerable dense layer. Specifically, we propose to leverage batching to maximise mixing of gradients by choosing an appropriate loss function and drawing identical labels. We show that otherwise it is possible to directly recover all vectors in a mini-batch without any numerical optimisation due","authors_text":"Antonios Georgiadis, Fran Silavong, Sanket Kamthe, Sean J. Moran, Shaltiel Eloul","cross_cats":["cs.AI","cs.CR","cs.CY"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-04-26T12:08:28Z","title":"Enhancing Privacy against Inversion Attacks in Federated Learning by using Mixing Gradients Strategies"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.12495","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3bca3ac174d3fd94796593a857fc0c9b21b867dc4867cb88d8ca7e5ba40c45f7","target":"record","created_at":"2026-07-05T04:18:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"93ff149cc46e737c1109e169d68ae553ac80dba55adf9ad421c22a25c523001e","cross_cats_sorted":["cs.AI","cs.CR","cs.CY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-04-26T12:08:28Z","title_canon_sha256":"2f8383b4cd632c3c7dc08c081cefc8280d28946e4442011413704d5bca8485fd"},"schema_version":"1.0","source":{"id":"2204.12495","kind":"arxiv","version":1}},"canonical_sha256":"759af350fd5a4da27bf9eec1e3b05db30f520838993bcd86343fd024403e1fed","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"759af350fd5a4da27bf9eec1e3b05db30f520838993bcd86343fd024403e1fed","first_computed_at":"2026-07-05T04:18:19.587561Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:18:19.587561Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MWf6tMTGoU/6lEOCP2aAFEz3MZAQ8tOlB2w/9t9ccuuK/Eul1olgYwxvtbtiQ3rFOoW62FlDWEYkFBzNzOlwCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T04:18:19.588095Z","signed_message":"canonical_sha256_bytes"},"source_id":"2204.12495","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3bca3ac174d3fd94796593a857fc0c9b21b867dc4867cb88d8ca7e5ba40c45f7","sha256:1c1c9a339b1394afdcf9191c499ae9ddf47d919906164f250b1124ae1764c80b"],"state_sha256":"865abf513c20591e9538be9aa3c04e811bddcaaa91db91c4e047da4fc5d65108"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KjaBEDdS1sg8fpyl4nVVYFlyPo5xmZLrVv1JjmJo5QaLhj6fJFXeBYUlEWURewSiF5hEOIB4z3pl+4NckwClAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T06:27:50.288666Z","bundle_sha256":"ba6b51185681f4e92f9885b255adddf9d4f761afec6ef1dcb00f89419a593770"}}