{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:RKFFQW2IA7YSLXQ4OYWNYQCZIT","short_pith_number":"pith:RKFFQW2I","canonical_record":{"source":{"id":"2210.09617","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-18T06:21:11Z","cross_cats_sorted":["cs.AI","cs.DC","cs.LG"],"title_canon_sha256":"6b2ba22fccb87abb716d80d6ae84354df78c2b8b6b2367b2c13ecd72cf1b4151","abstract_canon_sha256":"d51be4e6edfa14dddb4833b37f67bf092be409587e45577edc8dd57a423e2ace"},"schema_version":"1.0"},"canonical_sha256":"8a8a585b4807f125de1c762cdc405944e65a39787a1ccad281339a0c073b9105","source":{"kind":"arxiv","id":"2210.09617","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.09617","created_at":"2026-07-05T08:24:20Z"},{"alias_kind":"arxiv_version","alias_value":"2210.09617v2","created_at":"2026-07-05T08:24:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.09617","created_at":"2026-07-05T08:24:20Z"},{"alias_kind":"pith_short_12","alias_value":"RKFFQW2IA7YS","created_at":"2026-07-05T08:24:20Z"},{"alias_kind":"pith_short_16","alias_value":"RKFFQW2IA7YSLXQ4","created_at":"2026-07-05T08:24:20Z"},{"alias_kind":"pith_short_8","alias_value":"RKFFQW2I","created_at":"2026-07-05T08:24:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:RKFFQW2IA7YSLXQ4OYWNYQCZIT","target":"record","payload":{"canonical_record":{"source":{"id":"2210.09617","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-18T06:21:11Z","cross_cats_sorted":["cs.AI","cs.DC","cs.LG"],"title_canon_sha256":"6b2ba22fccb87abb716d80d6ae84354df78c2b8b6b2367b2c13ecd72cf1b4151","abstract_canon_sha256":"d51be4e6edfa14dddb4833b37f67bf092be409587e45577edc8dd57a423e2ace"},"schema_version":"1.0"},"canonical_sha256":"8a8a585b4807f125de1c762cdc405944e65a39787a1ccad281339a0c073b9105","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:24:20.956425Z","signature_b64":"pJ2nO0OibeUfG/p3dTSnCZfAVC6jVu8apwV9xEWcy9QQXSpmZh/QJ5+27Ah5Ts2xAL04p+PgH7Kyh3XWUoA3BQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8a8a585b4807f125de1c762cdc405944e65a39787a1ccad281339a0c073b9105","last_reissued_at":"2026-07-05T08:24:20.955998Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:24:20.955998Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2210.09617","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:24:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kCXa/ZmNsMhyhmgg2jrpkrbiqezSUGSdJOte2QA4qPHD7J5J66d33TZPrfMzNcOCMIR9syBnF6ma1BL1M5Z7Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T17:49:40.440673Z"},"content_sha256":"5b603604054e2d37e27cbba6c14a688f9a0ff3727d3c2e2f4360baaefeac44d2","schema_version":"1.0","event_id":"sha256:5b603604054e2d37e27cbba6c14a688f9a0ff3727d3c2e2f4360baaefeac44d2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:RKFFQW2IA7YSLXQ4OYWNYQCZIT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Protecting Split Learning by Potential Energy Loss","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.DC","cs.LG"],"primary_cat":"cs.CR","authors_text":"Chaochao Chen, Fei Zheng, Jianwei Yin, Lingjuan Lyu, Weiqiang Wang, Xiaolin Zheng, Xing Fu, Xinyi Fu","submitted_at":"2022-10-18T06:21:11Z","abstract_excerpt":"As a practical privacy-preserving learning method, split learning has drawn much attention in academia and industry. However, its security is constantly being questioned since the intermediate results are shared during training and inference. In this paper, we focus on the privacy leakage from the forward embeddings of split learning. Specifically, since the forward embeddings contain too much information about the label, the attacker can either use a few labeled samples to fine-tune the top model or perform unsupervised attacks such as clustering to infer the true labels from the forward embe"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.09617","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2210.09617/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:24:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5xk62pKd3qmS8NmA7f1Z4mll+qMussNHYqS+x00IFL+66hjVcbSsOlPl5Wj7BLix9aNKRNcQh3pon8JRM5q0AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T17:49:40.441502Z"},"content_sha256":"e94f5b205b10d753ad6ba60a38c9ffecc0259ed01dc33b721acd4c792e604578","schema_version":"1.0","event_id":"sha256:e94f5b205b10d753ad6ba60a38c9ffecc0259ed01dc33b721acd4c792e604578"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RKFFQW2IA7YSLXQ4OYWNYQCZIT/bundle.json","state_url":"https://pith.science/pith/RKFFQW2IA7YSLXQ4OYWNYQCZIT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RKFFQW2IA7YSLXQ4OYWNYQCZIT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T17:49:40Z","links":{"resolver":"https://pith.science/pith/RKFFQW2IA7YSLXQ4OYWNYQCZIT","bundle":"https://pith.science/pith/RKFFQW2IA7YSLXQ4OYWNYQCZIT/bundle.json","state":"https://pith.science/pith/RKFFQW2IA7YSLXQ4OYWNYQCZIT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RKFFQW2IA7YSLXQ4OYWNYQCZIT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:RKFFQW2IA7YSLXQ4OYWNYQCZIT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d51be4e6edfa14dddb4833b37f67bf092be409587e45577edc8dd57a423e2ace","cross_cats_sorted":["cs.AI","cs.DC","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-18T06:21:11Z","title_canon_sha256":"6b2ba22fccb87abb716d80d6ae84354df78c2b8b6b2367b2c13ecd72cf1b4151"},"schema_version":"1.0","source":{"id":"2210.09617","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.09617","created_at":"2026-07-05T08:24:20Z"},{"alias_kind":"arxiv_version","alias_value":"2210.09617v2","created_at":"2026-07-05T08:24:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.09617","created_at":"2026-07-05T08:24:20Z"},{"alias_kind":"pith_short_12","alias_value":"RKFFQW2IA7YS","created_at":"2026-07-05T08:24:20Z"},{"alias_kind":"pith_short_16","alias_value":"RKFFQW2IA7YSLXQ4","created_at":"2026-07-05T08:24:20Z"},{"alias_kind":"pith_short_8","alias_value":"RKFFQW2I","created_at":"2026-07-05T08:24:20Z"}],"graph_snapshots":[{"event_id":"sha256:e94f5b205b10d753ad6ba60a38c9ffecc0259ed01dc33b721acd4c792e604578","target":"graph","created_at":"2026-07-05T08:24:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.09617/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As a practical privacy-preserving learning method, split learning has drawn much attention in academia and industry. However, its security is constantly being questioned since the intermediate results are shared during training and inference. In this paper, we focus on the privacy leakage from the forward embeddings of split learning. Specifically, since the forward embeddings contain too much information about the label, the attacker can either use a few labeled samples to fine-tune the top model or perform unsupervised attacks such as clustering to infer the true labels from the forward embe","authors_text":"Chaochao Chen, Fei Zheng, Jianwei Yin, Lingjuan Lyu, Weiqiang Wang, Xiaolin Zheng, Xing Fu, Xinyi Fu","cross_cats":["cs.AI","cs.DC","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-18T06:21:11Z","title":"Protecting Split Learning by Potential Energy Loss"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.09617","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5b603604054e2d37e27cbba6c14a688f9a0ff3727d3c2e2f4360baaefeac44d2","target":"record","created_at":"2026-07-05T08:24:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d51be4e6edfa14dddb4833b37f67bf092be409587e45577edc8dd57a423e2ace","cross_cats_sorted":["cs.AI","cs.DC","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-18T06:21:11Z","title_canon_sha256":"6b2ba22fccb87abb716d80d6ae84354df78c2b8b6b2367b2c13ecd72cf1b4151"},"schema_version":"1.0","source":{"id":"2210.09617","kind":"arxiv","version":2}},"canonical_sha256":"8a8a585b4807f125de1c762cdc405944e65a39787a1ccad281339a0c073b9105","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8a8a585b4807f125de1c762cdc405944e65a39787a1ccad281339a0c073b9105","first_computed_at":"2026-07-05T08:24:20.955998Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:24:20.955998Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"pJ2nO0OibeUfG/p3dTSnCZfAVC6jVu8apwV9xEWcy9QQXSpmZh/QJ5+27Ah5Ts2xAL04p+PgH7Kyh3XWUoA3BQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:24:20.956425Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.09617","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5b603604054e2d37e27cbba6c14a688f9a0ff3727d3c2e2f4360baaefeac44d2","sha256:e94f5b205b10d753ad6ba60a38c9ffecc0259ed01dc33b721acd4c792e604578"],"state_sha256":"5b3e093b84994d6a179dc351b3d1ab53b6c81411859528e1623732bcb603bf2e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2U+0Ds8UAN83h+PuJWpvfNNYoeIbmI9tOH10g8nOB3qz4NPz2SfCPT/tXYQegm+yBkg7dRG95zMJQ3EPPVqXBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T17:49:40.466904Z","bundle_sha256":"024bdebc0ea3c2b6dd5958617fc92c7b2f7176f7f3a6b4b3c9f19ebd1a560b4e"}}