{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:Q7ESIA242NJDOLWLCRPKTHHV2Y","short_pith_number":"pith:Q7ESIA24","canonical_record":{"source":{"id":"2506.02711","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-03T10:09:24Z","cross_cats_sorted":[],"title_canon_sha256":"2e7622e8ebff7fa20d42bacc5a8be03f79d27a7b470627e93bab88f09f2ca206","abstract_canon_sha256":"46faa3fd04049a9b52b4b1736ac10772d9a250e009bc289f6480bee320085f6a"},"schema_version":"1.0"},"canonical_sha256":"87c924035cd352372ecb145ea99cf5d60ed015eb8f91b3c0cfe78cd0b7bdade0","source":{"kind":"arxiv","id":"2506.02711","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.02711","created_at":"2026-07-05T11:15:06Z"},{"alias_kind":"arxiv_version","alias_value":"2506.02711v1","created_at":"2026-07-05T11:15:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.02711","created_at":"2026-07-05T11:15:06Z"},{"alias_kind":"pith_short_12","alias_value":"Q7ESIA242NJD","created_at":"2026-07-05T11:15:06Z"},{"alias_kind":"pith_short_16","alias_value":"Q7ESIA242NJDOLWL","created_at":"2026-07-05T11:15:06Z"},{"alias_kind":"pith_short_8","alias_value":"Q7ESIA24","created_at":"2026-07-05T11:15:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:Q7ESIA242NJDOLWLCRPKTHHV2Y","target":"record","payload":{"canonical_record":{"source":{"id":"2506.02711","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-03T10:09:24Z","cross_cats_sorted":[],"title_canon_sha256":"2e7622e8ebff7fa20d42bacc5a8be03f79d27a7b470627e93bab88f09f2ca206","abstract_canon_sha256":"46faa3fd04049a9b52b4b1736ac10772d9a250e009bc289f6480bee320085f6a"},"schema_version":"1.0"},"canonical_sha256":"87c924035cd352372ecb145ea99cf5d60ed015eb8f91b3c0cfe78cd0b7bdade0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:15:06.943928Z","signature_b64":"hsPqrOdl3DYjdceCCQlxfSg3F8JPGjFDIgO0ukK2LpwTI8IsGm1Zw8jIlN1k4/BHVihxgWWl59MdwXEstF8sAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"87c924035cd352372ecb145ea99cf5d60ed015eb8f91b3c0cfe78cd0b7bdade0","last_reissued_at":"2026-07-05T11:15:06.943398Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:15:06.943398Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.02711","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:15:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"v6x8NCIsGseIauJBKUrJc+KhIZ2lStSIFLkux3J0R5X7PPcj/3zCYo+JX2LV+fvCGcJWuoTg6p6Ayv2/hlVQDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:54:57.394918Z"},"content_sha256":"eaa157bd8cbb690952baf23e261d415186cffd468b35cfb1d7c52dea42e1f3ed","schema_version":"1.0","event_id":"sha256:eaa157bd8cbb690952baf23e261d415186cffd468b35cfb1d7c52dea42e1f3ed"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:Q7ESIA242NJDOLWLCRPKTHHV2Y","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Guang Dai, Haishan Ye, Ivor Tsang, Jing Xue, Luo Luo, Xiangyu Chang, Zhishen Sun","submitted_at":"2025-06-03T10:09:24Z","abstract_excerpt":"Membership inference attack (MIA) has become one of the most widely used and effective methods for evaluating the privacy risks of machine learning models. These attacks aim to determine whether a specific sample is part of the model's training set by analyzing the model's output. While traditional membership inference attacks focus on leveraging the model's posterior output, such as confidence on the target sample, we propose IMIA, a novel attack strategy that utilizes the process of generating adversarial samples to infer membership. We propose to infer the member properties of the target sa"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.02711","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.02711/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:15:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"x83c8rR/eWxp4/od9SbUWdITh/eQHhrPxQXWrW3fAH7EC4DN7hn38BlUL8V0d1KRPN9rr6xDJdVtQeJ09lZKBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:54:57.395562Z"},"content_sha256":"71b723fad7c09d99126dc7462cb4ab1f94367ab9405e9fc60c0eaf786628929d","schema_version":"1.0","event_id":"sha256:71b723fad7c09d99126dc7462cb4ab1f94367ab9405e9fc60c0eaf786628929d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Q7ESIA242NJDOLWLCRPKTHHV2Y/bundle.json","state_url":"https://pith.science/pith/Q7ESIA242NJDOLWLCRPKTHHV2Y/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Q7ESIA242NJDOLWLCRPKTHHV2Y/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T18:54:57Z","links":{"resolver":"https://pith.science/pith/Q7ESIA242NJDOLWLCRPKTHHV2Y","bundle":"https://pith.science/pith/Q7ESIA242NJDOLWLCRPKTHHV2Y/bundle.json","state":"https://pith.science/pith/Q7ESIA242NJDOLWLCRPKTHHV2Y/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Q7ESIA242NJDOLWLCRPKTHHV2Y/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:Q7ESIA242NJDOLWLCRPKTHHV2Y","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"46faa3fd04049a9b52b4b1736ac10772d9a250e009bc289f6480bee320085f6a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-03T10:09:24Z","title_canon_sha256":"2e7622e8ebff7fa20d42bacc5a8be03f79d27a7b470627e93bab88f09f2ca206"},"schema_version":"1.0","source":{"id":"2506.02711","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.02711","created_at":"2026-07-05T11:15:06Z"},{"alias_kind":"arxiv_version","alias_value":"2506.02711v1","created_at":"2026-07-05T11:15:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.02711","created_at":"2026-07-05T11:15:06Z"},{"alias_kind":"pith_short_12","alias_value":"Q7ESIA242NJD","created_at":"2026-07-05T11:15:06Z"},{"alias_kind":"pith_short_16","alias_value":"Q7ESIA242NJDOLWL","created_at":"2026-07-05T11:15:06Z"},{"alias_kind":"pith_short_8","alias_value":"Q7ESIA24","created_at":"2026-07-05T11:15:06Z"}],"graph_snapshots":[{"event_id":"sha256:71b723fad7c09d99126dc7462cb4ab1f94367ab9405e9fc60c0eaf786628929d","target":"graph","created_at":"2026-07-05T11:15:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.02711/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Membership inference attack (MIA) has become one of the most widely used and effective methods for evaluating the privacy risks of machine learning models. These attacks aim to determine whether a specific sample is part of the model's training set by analyzing the model's output. While traditional membership inference attacks focus on leveraging the model's posterior output, such as confidence on the target sample, we propose IMIA, a novel attack strategy that utilizes the process of generating adversarial samples to infer membership. We propose to infer the member properties of the target sa","authors_text":"Guang Dai, Haishan Ye, Ivor Tsang, Jing Xue, Luo Luo, Xiangyu Chang, Zhishen Sun","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.02711","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:eaa157bd8cbb690952baf23e261d415186cffd468b35cfb1d7c52dea42e1f3ed","target":"record","created_at":"2026-07-05T11:15:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"46faa3fd04049a9b52b4b1736ac10772d9a250e009bc289f6480bee320085f6a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-03T10:09:24Z","title_canon_sha256":"2e7622e8ebff7fa20d42bacc5a8be03f79d27a7b470627e93bab88f09f2ca206"},"schema_version":"1.0","source":{"id":"2506.02711","kind":"arxiv","version":1}},"canonical_sha256":"87c924035cd352372ecb145ea99cf5d60ed015eb8f91b3c0cfe78cd0b7bdade0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"87c924035cd352372ecb145ea99cf5d60ed015eb8f91b3c0cfe78cd0b7bdade0","first_computed_at":"2026-07-05T11:15:06.943398Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:15:06.943398Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"hsPqrOdl3DYjdceCCQlxfSg3F8JPGjFDIgO0ukK2LpwTI8IsGm1Zw8jIlN1k4/BHVihxgWWl59MdwXEstF8sAg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:15:06.943928Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.02711","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:eaa157bd8cbb690952baf23e261d415186cffd468b35cfb1d7c52dea42e1f3ed","sha256:71b723fad7c09d99126dc7462cb4ab1f94367ab9405e9fc60c0eaf786628929d"],"state_sha256":"35ec3997fb98f725755f6eebe466bf387450c232ed19d139bbee18350b08f4c1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"s0+7ZSePP7bOQuzMFM1ImTQPv7vuGCw6TfkMhpAMcudBzF/yyNRUWsS4yYmpgkZZ7a2eTF/Yv5V691TS4YOBCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T18:54:57.404873Z","bundle_sha256":"b0f507144605dcc9bef8214721df3d0cc5dc56fce2f3458ca17832bc3b0a4d0a"}}