{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:RALNPKXC5RUZHWODES265KBHSG","short_pith_number":"pith:RALNPKXC","canonical_record":{"source":{"id":"2407.11424","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-07-16T06:38:49Z","cross_cats_sorted":[],"title_canon_sha256":"3d219f0f1897645bd097f802a6e52318ec99d7496b38d1c899f151e36b0adc45","abstract_canon_sha256":"7ba53b352686a3a05fcae27ecd8755a0a82a8bb7495998273b3a3aab28e21141"},"schema_version":"1.0"},"canonical_sha256":"8816d7aae2ec6993d9c324b5eea827919855c5f6f01f42c08c7d7b04d303b540","source":{"kind":"arxiv","id":"2407.11424","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.11424","created_at":"2026-07-05T09:38:27Z"},{"alias_kind":"arxiv_version","alias_value":"2407.11424v2","created_at":"2026-07-05T09:38:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.11424","created_at":"2026-07-05T09:38:27Z"},{"alias_kind":"pith_short_12","alias_value":"RALNPKXC5RUZ","created_at":"2026-07-05T09:38:27Z"},{"alias_kind":"pith_short_16","alias_value":"RALNPKXC5RUZHWOD","created_at":"2026-07-05T09:38:27Z"},{"alias_kind":"pith_short_8","alias_value":"RALNPKXC","created_at":"2026-07-05T09:38:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:RALNPKXC5RUZHWODES265KBHSG","target":"record","payload":{"canonical_record":{"source":{"id":"2407.11424","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-07-16T06:38:49Z","cross_cats_sorted":[],"title_canon_sha256":"3d219f0f1897645bd097f802a6e52318ec99d7496b38d1c899f151e36b0adc45","abstract_canon_sha256":"7ba53b352686a3a05fcae27ecd8755a0a82a8bb7495998273b3a3aab28e21141"},"schema_version":"1.0"},"canonical_sha256":"8816d7aae2ec6993d9c324b5eea827919855c5f6f01f42c08c7d7b04d303b540","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:38:27.944818Z","signature_b64":"ppl+0SPmGE99g27TrwyXrhmmIwUVIfom87phgw2jU3BYeSJa+9TRDpF6S1HyYfHTyXaVZd/T+PB258VoqDfYAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8816d7aae2ec6993d9c324b5eea827919855c5f6f01f42c08c7d7b04d303b540","last_reissued_at":"2026-07-05T09:38:27.944394Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:38:27.944394Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.11424","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:38:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jC7k5vLU9dsQrfNL6qW04hFO0z4unMa7XcKNgX+lUQuwcKsZZVIzkooW2fG5mq0fvj36VTAwP2m/W2HpV8jXCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T08:10:29.804577Z"},"content_sha256":"f594cdb7a499064af7cd133f03fb33444d42fa0b7b46e2202589d978bbd7a7e1","schema_version":"1.0","event_id":"sha256:f594cdb7a499064af7cd133f03fb33444d42fa0b7b46e2202589d978bbd7a7e1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:RALNPKXC5RUZHWODES265KBHSG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Model Inversion Attacks Through Target-Specific Conditional Diffusion Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Bin Zhu, Fuli Feng, Ouxiang Li, Shuo Wang, Yanbin Hao, Zaixi Zhang, Zhicai Wang","submitted_at":"2024-07-16T06:38:49Z","abstract_excerpt":"Model inversion attacks (MIAs) aim to reconstruct private images from a target classifier's training set, thereby raising privacy concerns in AI applications. Previous GAN-based MIAs tend to suffer from inferior generative fidelity due to GAN's inherent flaws and biased optimization within latent space. To alleviate these issues, leveraging on diffusion models' remarkable synthesis capabilities, we propose Diffusion-based Model Inversion (Diff-MI) attacks. Specifically, we introduce a novel target-specific conditional diffusion model (CDM) to purposely approximate target classifier's private d"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.11424","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.11424/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:38:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+cphqyfM29mb8jipwgLz6ceEjQSFUCNzDuVy9FJcim1s8Z9+gwGZNQBEtLBuS8YBFKYjqgfJxfTUUO/L71G5BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T08:10:29.805196Z"},"content_sha256":"5f9e689bd875c37eb54216de4b244da2f3b247ffc52c3d83500bd384961d535c","schema_version":"1.0","event_id":"sha256:5f9e689bd875c37eb54216de4b244da2f3b247ffc52c3d83500bd384961d535c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RALNPKXC5RUZHWODES265KBHSG/bundle.json","state_url":"https://pith.science/pith/RALNPKXC5RUZHWODES265KBHSG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RALNPKXC5RUZHWODES265KBHSG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T08:10:29Z","links":{"resolver":"https://pith.science/pith/RALNPKXC5RUZHWODES265KBHSG","bundle":"https://pith.science/pith/RALNPKXC5RUZHWODES265KBHSG/bundle.json","state":"https://pith.science/pith/RALNPKXC5RUZHWODES265KBHSG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RALNPKXC5RUZHWODES265KBHSG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:RALNPKXC5RUZHWODES265KBHSG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7ba53b352686a3a05fcae27ecd8755a0a82a8bb7495998273b3a3aab28e21141","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-07-16T06:38:49Z","title_canon_sha256":"3d219f0f1897645bd097f802a6e52318ec99d7496b38d1c899f151e36b0adc45"},"schema_version":"1.0","source":{"id":"2407.11424","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.11424","created_at":"2026-07-05T09:38:27Z"},{"alias_kind":"arxiv_version","alias_value":"2407.11424v2","created_at":"2026-07-05T09:38:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.11424","created_at":"2026-07-05T09:38:27Z"},{"alias_kind":"pith_short_12","alias_value":"RALNPKXC5RUZ","created_at":"2026-07-05T09:38:27Z"},{"alias_kind":"pith_short_16","alias_value":"RALNPKXC5RUZHWOD","created_at":"2026-07-05T09:38:27Z"},{"alias_kind":"pith_short_8","alias_value":"RALNPKXC","created_at":"2026-07-05T09:38:27Z"}],"graph_snapshots":[{"event_id":"sha256:5f9e689bd875c37eb54216de4b244da2f3b247ffc52c3d83500bd384961d535c","target":"graph","created_at":"2026-07-05T09:38:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.11424/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Model inversion attacks (MIAs) aim to reconstruct private images from a target classifier's training set, thereby raising privacy concerns in AI applications. Previous GAN-based MIAs tend to suffer from inferior generative fidelity due to GAN's inherent flaws and biased optimization within latent space. To alleviate these issues, leveraging on diffusion models' remarkable synthesis capabilities, we propose Diffusion-based Model Inversion (Diff-MI) attacks. Specifically, we introduce a novel target-specific conditional diffusion model (CDM) to purposely approximate target classifier's private d","authors_text":"Bin Zhu, Fuli Feng, Ouxiang Li, Shuo Wang, Yanbin Hao, Zaixi Zhang, Zhicai Wang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-07-16T06:38:49Z","title":"Model Inversion Attacks Through Target-Specific Conditional Diffusion Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.11424","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f594cdb7a499064af7cd133f03fb33444d42fa0b7b46e2202589d978bbd7a7e1","target":"record","created_at":"2026-07-05T09:38:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7ba53b352686a3a05fcae27ecd8755a0a82a8bb7495998273b3a3aab28e21141","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-07-16T06:38:49Z","title_canon_sha256":"3d219f0f1897645bd097f802a6e52318ec99d7496b38d1c899f151e36b0adc45"},"schema_version":"1.0","source":{"id":"2407.11424","kind":"arxiv","version":2}},"canonical_sha256":"8816d7aae2ec6993d9c324b5eea827919855c5f6f01f42c08c7d7b04d303b540","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8816d7aae2ec6993d9c324b5eea827919855c5f6f01f42c08c7d7b04d303b540","first_computed_at":"2026-07-05T09:38:27.944394Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:38:27.944394Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ppl+0SPmGE99g27TrwyXrhmmIwUVIfom87phgw2jU3BYeSJa+9TRDpF6S1HyYfHTyXaVZd/T+PB258VoqDfYAA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:38:27.944818Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.11424","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f594cdb7a499064af7cd133f03fb33444d42fa0b7b46e2202589d978bbd7a7e1","sha256:5f9e689bd875c37eb54216de4b244da2f3b247ffc52c3d83500bd384961d535c"],"state_sha256":"554685cb83d8f5b396f8f689a20688562140f6cfc2aea2b82f96c74be618b2d3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"S2YVouFDYkln7jEdB1IFAzxSze+wQknaSgS8Q0knnSO3ZGSqcaJgIpo7dK3LTUU1InC9BtknzPLT4w6T1tCaBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T08:10:29.810104Z","bundle_sha256":"c02ff8b50ef7e30627dc13ddccab89457a53bec16c8a4cc90bfd15c07f1682d3"}}