{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:QWBF3WZAKAKSZR3LUXCPWO5EHE","short_pith_number":"pith:QWBF3WZA","canonical_record":{"source":{"id":"2602.18934","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2026-02-21T18:57:17Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"65b9559219f08f043861d3461d5d2eaeaf8fa43ba584b4de248557c2d258b285","abstract_canon_sha256":"d19f77e58e926674bbefcdd76bcaa46eb83614c2607dc8a260080ab98da74f92"},"schema_version":"1.0"},"canonical_sha256":"85825ddb2050152cc76ba5c4fb3ba4393f2fa5538680abc48c028809ccc2ad8b","source":{"kind":"arxiv","id":"2602.18934","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2602.18934","created_at":"2026-06-24T01:15:01Z"},{"alias_kind":"arxiv_version","alias_value":"2602.18934v2","created_at":"2026-06-24T01:15:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2602.18934","created_at":"2026-06-24T01:15:01Z"},{"alias_kind":"pith_short_12","alias_value":"QWBF3WZAKAKS","created_at":"2026-06-24T01:15:01Z"},{"alias_kind":"pith_short_16","alias_value":"QWBF3WZAKAKSZR3L","created_at":"2026-06-24T01:15:01Z"},{"alias_kind":"pith_short_8","alias_value":"QWBF3WZA","created_at":"2026-06-24T01:15:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:QWBF3WZAKAKSZR3LUXCPWO5EHE","target":"record","payload":{"canonical_record":{"source":{"id":"2602.18934","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2026-02-21T18:57:17Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"65b9559219f08f043861d3461d5d2eaeaf8fa43ba584b4de248557c2d258b285","abstract_canon_sha256":"d19f77e58e926674bbefcdd76bcaa46eb83614c2607dc8a260080ab98da74f92"},"schema_version":"1.0"},"canonical_sha256":"85825ddb2050152cc76ba5c4fb3ba4393f2fa5538680abc48c028809ccc2ad8b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-24T01:15:01.335366Z","signature_b64":"s8mgED8cAyQ9Ci9Xh1KvwEHkl0+CwkOkJ5M8bebRimdYoG/AA69B/pMQARvY6Tc03oHeoaCSR4a41dfdjea7BQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"85825ddb2050152cc76ba5c4fb3ba4393f2fa5538680abc48c028809ccc2ad8b","last_reissued_at":"2026-06-24T01:15:01.334814Z","signature_status":"signed_v1","first_computed_at":"2026-06-24T01:15:01.334814Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2602.18934","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-24T01:15:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JFmCMlpL7x8WHlsVVE5h0R0hYNIED6+rXDiazjd9Wb2uSpbNYUXsfAOzqotO3Ua6gkDu4+BgVz4Nb9AofBJiCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T11:31:44.490174Z"},"content_sha256":"ba1cf03a87b195c18c09f51d174624a13af1dc4b355b080eec7d73a9b3097961","schema_version":"1.0","event_id":"sha256:ba1cf03a87b195c18c09f51d174624a13af1dc4b355b080eec7d73a9b3097961"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:QWBF3WZAKAKSZR3LUXCPWO5EHE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LoMime: Query-Efficient Membership Inference using Model Extraction in Label-Only Settings","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Abdullah Caglar Oksuz, Anisa Halimi, Erman Ayday","submitted_at":"2026-02-21T18:57:17Z","abstract_excerpt":"Membership inference attacks (MIAs) threaten the privacy of machine learning models by revealing whether a specific data point was used during training. Existing MIAs often rely on impractical assumptions, such as access to public datasets, shadow models, confidence scores, or knowledge of the training data distribution, making them vulnerable to defenses like confidence masking and adversarial regularization. Label-only MIAs, even under strict constraints, suffer from high query requirements per sample.\n  We propose a cost-effective label-only MIA framework based on transferability and model "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2602.18934","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2602.18934/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-24T01:15:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"q2jiW1zrAg2iHtDHTbEl+o6EXVp95yt/azeFtICCeBGjCtvgJIP7MzhNJsvqL/oNZ05p0QRhqYwgdIABREGHDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T11:31:44.490713Z"},"content_sha256":"1b327e0c650f12b5913562ec1364756e3201f768df1fc8358d8ccf70e3d8ae56","schema_version":"1.0","event_id":"sha256:1b327e0c650f12b5913562ec1364756e3201f768df1fc8358d8ccf70e3d8ae56"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QWBF3WZAKAKSZR3LUXCPWO5EHE/bundle.json","state_url":"https://pith.science/pith/QWBF3WZAKAKSZR3LUXCPWO5EHE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QWBF3WZAKAKSZR3LUXCPWO5EHE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T11:31:44Z","links":{"resolver":"https://pith.science/pith/QWBF3WZAKAKSZR3LUXCPWO5EHE","bundle":"https://pith.science/pith/QWBF3WZAKAKSZR3LUXCPWO5EHE/bundle.json","state":"https://pith.science/pith/QWBF3WZAKAKSZR3LUXCPWO5EHE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QWBF3WZAKAKSZR3LUXCPWO5EHE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:QWBF3WZAKAKSZR3LUXCPWO5EHE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d19f77e58e926674bbefcdd76bcaa46eb83614c2607dc8a260080ab98da74f92","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2026-02-21T18:57:17Z","title_canon_sha256":"65b9559219f08f043861d3461d5d2eaeaf8fa43ba584b4de248557c2d258b285"},"schema_version":"1.0","source":{"id":"2602.18934","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2602.18934","created_at":"2026-06-24T01:15:01Z"},{"alias_kind":"arxiv_version","alias_value":"2602.18934v2","created_at":"2026-06-24T01:15:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2602.18934","created_at":"2026-06-24T01:15:01Z"},{"alias_kind":"pith_short_12","alias_value":"QWBF3WZAKAKS","created_at":"2026-06-24T01:15:01Z"},{"alias_kind":"pith_short_16","alias_value":"QWBF3WZAKAKSZR3L","created_at":"2026-06-24T01:15:01Z"},{"alias_kind":"pith_short_8","alias_value":"QWBF3WZA","created_at":"2026-06-24T01:15:01Z"}],"graph_snapshots":[{"event_id":"sha256:1b327e0c650f12b5913562ec1364756e3201f768df1fc8358d8ccf70e3d8ae56","target":"graph","created_at":"2026-06-24T01:15:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2602.18934/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Membership inference attacks (MIAs) threaten the privacy of machine learning models by revealing whether a specific data point was used during training. Existing MIAs often rely on impractical assumptions, such as access to public datasets, shadow models, confidence scores, or knowledge of the training data distribution, making them vulnerable to defenses like confidence masking and adversarial regularization. Label-only MIAs, even under strict constraints, suffer from high query requirements per sample.\n  We propose a cost-effective label-only MIA framework based on transferability and model ","authors_text":"Abdullah Caglar Oksuz, Anisa Halimi, Erman Ayday","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2026-02-21T18:57:17Z","title":"LoMime: Query-Efficient Membership Inference using Model Extraction in Label-Only Settings"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2602.18934","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ba1cf03a87b195c18c09f51d174624a13af1dc4b355b080eec7d73a9b3097961","target":"record","created_at":"2026-06-24T01:15:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d19f77e58e926674bbefcdd76bcaa46eb83614c2607dc8a260080ab98da74f92","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2026-02-21T18:57:17Z","title_canon_sha256":"65b9559219f08f043861d3461d5d2eaeaf8fa43ba584b4de248557c2d258b285"},"schema_version":"1.0","source":{"id":"2602.18934","kind":"arxiv","version":2}},"canonical_sha256":"85825ddb2050152cc76ba5c4fb3ba4393f2fa5538680abc48c028809ccc2ad8b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"85825ddb2050152cc76ba5c4fb3ba4393f2fa5538680abc48c028809ccc2ad8b","first_computed_at":"2026-06-24T01:15:01.334814Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-24T01:15:01.334814Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"s8mgED8cAyQ9Ci9Xh1KvwEHkl0+CwkOkJ5M8bebRimdYoG/AA69B/pMQARvY6Tc03oHeoaCSR4a41dfdjea7BQ==","signature_status":"signed_v1","signed_at":"2026-06-24T01:15:01.335366Z","signed_message":"canonical_sha256_bytes"},"source_id":"2602.18934","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ba1cf03a87b195c18c09f51d174624a13af1dc4b355b080eec7d73a9b3097961","sha256:1b327e0c650f12b5913562ec1364756e3201f768df1fc8358d8ccf70e3d8ae56"],"state_sha256":"5915c98d088716565596c1849b0a49fcbcc840ed276329b34599885029eb7133"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UbKd4j2atFwQKw7yHS41/481gifCCfsIUjo52Tp1IRA2nDGLrQezucsx2RQxFV/KiqjDGyqz6aloXy1pYt6XDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T11:31:44.497128Z","bundle_sha256":"36dc1267e354782c3efcc8dcb5c6b3076aa55fe2100874129a4715ff7be53bd6"}}