{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:QFLZ6HYM65OEV5ODCBXIZLQ46E","short_pith_number":"pith:QFLZ6HYM","canonical_record":{"source":{"id":"2407.09972","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-07-13T18:31:35Z","cross_cats_sorted":["cs.CR","eess.IV"],"title_canon_sha256":"23c110ece446e04f6a42a52a6b897a51a6055a98c24f49f41673f83c6853c4be","abstract_canon_sha256":"b2262ccc8af393c32b7e4510fe52a0059efa5094c204790c52047d32ca532e18"},"schema_version":"1.0"},"canonical_sha256":"81579f1f0cf75c4af5c3106e8cae1cf1358822a5857aa50eb0b7c21db2c94157","source":{"kind":"arxiv","id":"2407.09972","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.09972","created_at":"2026-07-05T11:29:00Z"},{"alias_kind":"arxiv_version","alias_value":"2407.09972v2","created_at":"2026-07-05T11:29:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.09972","created_at":"2026-07-05T11:29:00Z"},{"alias_kind":"pith_short_12","alias_value":"QFLZ6HYM65OE","created_at":"2026-07-05T11:29:00Z"},{"alias_kind":"pith_short_16","alias_value":"QFLZ6HYM65OEV5OD","created_at":"2026-07-05T11:29:00Z"},{"alias_kind":"pith_short_8","alias_value":"QFLZ6HYM","created_at":"2026-07-05T11:29:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:QFLZ6HYM65OEV5ODCBXIZLQ46E","target":"record","payload":{"canonical_record":{"source":{"id":"2407.09972","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-07-13T18:31:35Z","cross_cats_sorted":["cs.CR","eess.IV"],"title_canon_sha256":"23c110ece446e04f6a42a52a6b897a51a6055a98c24f49f41673f83c6853c4be","abstract_canon_sha256":"b2262ccc8af393c32b7e4510fe52a0059efa5094c204790c52047d32ca532e18"},"schema_version":"1.0"},"canonical_sha256":"81579f1f0cf75c4af5c3106e8cae1cf1358822a5857aa50eb0b7c21db2c94157","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:29:00.350150Z","signature_b64":"GU0PT9H+Rg0gy6DxZsTheVI/QDNpmqMokceRFpy6lUBbuWqfIQHy+3a7T70mq0e/LtggIk/8Us8nD/VBp+8zAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"81579f1f0cf75c4af5c3106e8cae1cf1358822a5857aa50eb0b7c21db2c94157","last_reissued_at":"2026-07-05T11:29:00.349645Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:29:00.349645Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.09972","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:29:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yfr5c599Aa5y9k9Yo2Bxi1iHp9Zz0284Op6t52JCM17ee1qtoU+HLtR8goTs0JqXMO8zOlMAWJ4ENFrT5p1sBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T22:42:52.473396Z"},"content_sha256":"332f9743ca27c68ce984899aa1f062605f695bc43a64d6b9bf5c8f6ccf359cac","schema_version":"1.0","event_id":"sha256:332f9743ca27c68ce984899aa1f062605f695bc43a64d6b9bf5c8f6ccf359cac"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:QFLZ6HYM65OEV5ODCBXIZLQ46E","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MedLeak: Multimodal Medical Data Leakage in Secure Federated Learning with Crafted Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","eess.IV"],"primary_cat":"cs.LG","authors_text":"Abhijeet Parida, Chaoyu Zhang, Marius George Linguraru, Md Shahedul Haque, Shanghao Shi, Syed Muhammad Anwar, Wenjing Lou, Y.Thomas Hou","submitted_at":"2024-07-13T18:31:35Z","abstract_excerpt":"Federated learning (FL) allows participants to collaboratively train machine learning models while keeping their data local, making it ideal for collaborations among healthcare institutions on sensitive data. However, in this paper, we propose a novel privacy attack called MedLeak, which allows a malicious FL server to recover high-quality site-specific private medical data from the client model updates. MedLeak works by introducing an adversarially crafted model during the FL training process. Honest clients, unaware of the insidious changes in the published models, continue to send back thei"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.09972","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.09972/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:29:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wWqONRMpy0ECddWXfU9hTxJ3IXmgibbzfNPlj6eXQSHQz2EOcRWpuHhTTEHUq+V7I4kcOV+qzUl7VxVVL/FoBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T22:42:52.474412Z"},"content_sha256":"08489b2ff785637d9872c3d16914a4c4ded61ab1a47604168d443f349a438660","schema_version":"1.0","event_id":"sha256:08489b2ff785637d9872c3d16914a4c4ded61ab1a47604168d443f349a438660"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QFLZ6HYM65OEV5ODCBXIZLQ46E/bundle.json","state_url":"https://pith.science/pith/QFLZ6HYM65OEV5ODCBXIZLQ46E/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QFLZ6HYM65OEV5ODCBXIZLQ46E/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T22:42:52Z","links":{"resolver":"https://pith.science/pith/QFLZ6HYM65OEV5ODCBXIZLQ46E","bundle":"https://pith.science/pith/QFLZ6HYM65OEV5ODCBXIZLQ46E/bundle.json","state":"https://pith.science/pith/QFLZ6HYM65OEV5ODCBXIZLQ46E/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QFLZ6HYM65OEV5ODCBXIZLQ46E/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:QFLZ6HYM65OEV5ODCBXIZLQ46E","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b2262ccc8af393c32b7e4510fe52a0059efa5094c204790c52047d32ca532e18","cross_cats_sorted":["cs.CR","eess.IV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-07-13T18:31:35Z","title_canon_sha256":"23c110ece446e04f6a42a52a6b897a51a6055a98c24f49f41673f83c6853c4be"},"schema_version":"1.0","source":{"id":"2407.09972","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.09972","created_at":"2026-07-05T11:29:00Z"},{"alias_kind":"arxiv_version","alias_value":"2407.09972v2","created_at":"2026-07-05T11:29:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.09972","created_at":"2026-07-05T11:29:00Z"},{"alias_kind":"pith_short_12","alias_value":"QFLZ6HYM65OE","created_at":"2026-07-05T11:29:00Z"},{"alias_kind":"pith_short_16","alias_value":"QFLZ6HYM65OEV5OD","created_at":"2026-07-05T11:29:00Z"},{"alias_kind":"pith_short_8","alias_value":"QFLZ6HYM","created_at":"2026-07-05T11:29:00Z"}],"graph_snapshots":[{"event_id":"sha256:08489b2ff785637d9872c3d16914a4c4ded61ab1a47604168d443f349a438660","target":"graph","created_at":"2026-07-05T11:29:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.09972/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning (FL) allows participants to collaboratively train machine learning models while keeping their data local, making it ideal for collaborations among healthcare institutions on sensitive data. However, in this paper, we propose a novel privacy attack called MedLeak, which allows a malicious FL server to recover high-quality site-specific private medical data from the client model updates. MedLeak works by introducing an adversarially crafted model during the FL training process. Honest clients, unaware of the insidious changes in the published models, continue to send back thei","authors_text":"Abhijeet Parida, Chaoyu Zhang, Marius George Linguraru, Md Shahedul Haque, Shanghao Shi, Syed Muhammad Anwar, Wenjing Lou, Y.Thomas Hou","cross_cats":["cs.CR","eess.IV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-07-13T18:31:35Z","title":"MedLeak: Multimodal Medical Data Leakage in Secure Federated Learning with Crafted Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.09972","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:332f9743ca27c68ce984899aa1f062605f695bc43a64d6b9bf5c8f6ccf359cac","target":"record","created_at":"2026-07-05T11:29:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b2262ccc8af393c32b7e4510fe52a0059efa5094c204790c52047d32ca532e18","cross_cats_sorted":["cs.CR","eess.IV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-07-13T18:31:35Z","title_canon_sha256":"23c110ece446e04f6a42a52a6b897a51a6055a98c24f49f41673f83c6853c4be"},"schema_version":"1.0","source":{"id":"2407.09972","kind":"arxiv","version":2}},"canonical_sha256":"81579f1f0cf75c4af5c3106e8cae1cf1358822a5857aa50eb0b7c21db2c94157","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"81579f1f0cf75c4af5c3106e8cae1cf1358822a5857aa50eb0b7c21db2c94157","first_computed_at":"2026-07-05T11:29:00.349645Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:29:00.349645Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GU0PT9H+Rg0gy6DxZsTheVI/QDNpmqMokceRFpy6lUBbuWqfIQHy+3a7T70mq0e/LtggIk/8Us8nD/VBp+8zAA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:29:00.350150Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.09972","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:332f9743ca27c68ce984899aa1f062605f695bc43a64d6b9bf5c8f6ccf359cac","sha256:08489b2ff785637d9872c3d16914a4c4ded61ab1a47604168d443f349a438660"],"state_sha256":"49e5dc7111b1e1d3798ac98ebf29097612c34cac1a09714e155279f99f96602d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IDvq4VEMXodpj6mcyCFnUNnP85z4OQYA2oSYWpt4oFDmWZexF2HFzQBocl2svPVEivxy3pIBeyDV4Dio7ul1AQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T22:42:52.490962Z","bundle_sha256":"5944c69900732ee14461d4a35706a366b113edf31442b93cf90132a917b96012"}}