{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:RSCC5XG42SOC7WJ57NS5AKD75G","short_pith_number":"pith:RSCC5XG4","canonical_record":{"source":{"id":"2502.18943","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-26T08:47:19Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"a746f3374e4c5d9f1c5f64a8e2e47d743ae71a6e1b80428a6252b909aae5ca04","abstract_canon_sha256":"9bf2a8fb78fd78add3b1c9eb3ebd780c6ebb007369e4602e4c6ca0fdf00efd05"},"schema_version":"1.0"},"canonical_sha256":"8c842edcdcd49c2fd93dfb65d0287fe990f04fa08e456a8a2f4d7ea4972e390a","source":{"kind":"arxiv","id":"2502.18943","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.18943","created_at":"2026-07-05T10:20:23Z"},{"alias_kind":"arxiv_version","alias_value":"2502.18943v1","created_at":"2026-07-05T10:20:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.18943","created_at":"2026-07-05T10:20:23Z"},{"alias_kind":"pith_short_12","alias_value":"RSCC5XG42SOC","created_at":"2026-07-05T10:20:23Z"},{"alias_kind":"pith_short_16","alias_value":"RSCC5XG42SOC7WJ5","created_at":"2026-07-05T10:20:23Z"},{"alias_kind":"pith_short_8","alias_value":"RSCC5XG4","created_at":"2026-07-05T10:20:23Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:RSCC5XG42SOC7WJ57NS5AKD75G","target":"record","payload":{"canonical_record":{"source":{"id":"2502.18943","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-26T08:47:19Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"a746f3374e4c5d9f1c5f64a8e2e47d743ae71a6e1b80428a6252b909aae5ca04","abstract_canon_sha256":"9bf2a8fb78fd78add3b1c9eb3ebd780c6ebb007369e4602e4c6ca0fdf00efd05"},"schema_version":"1.0"},"canonical_sha256":"8c842edcdcd49c2fd93dfb65d0287fe990f04fa08e456a8a2f4d7ea4972e390a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:20:23.672102Z","signature_b64":"w8vfcsKYzjnhkzG43gEaQf4kdNzeYLHuMjBYf7fHLs4CpMk0mkYX28SP5CpntBq2s6o6+7PDONoi2p4WTjIXDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8c842edcdcd49c2fd93dfb65d0287fe990f04fa08e456a8a2f4d7ea4972e390a","last_reissued_at":"2026-07-05T10:20:23.671573Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:20:23.671573Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.18943","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:20:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Oqo9SEoTl/TPcYh3qXybl56DPzrI221UJytAi/rN8vf9nrp23dyIjszh5G36crsfkXtm/B4FEEZhJwZSwWcMCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T03:15:27.275172Z"},"content_sha256":"2bc86800a2a4dca6355222db15b990452cda0364f0f289de8a4de2365021a510","schema_version":"1.0","event_id":"sha256:2bc86800a2a4dca6355222db15b990452cda0364f0f289de8a4de2365021a510"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:RSCC5XG42SOC7WJ57NS5AKD75G","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL"],"primary_cat":"cs.CR","authors_text":"Boheng Li, Chun Chen, Kui Ren, Liu Liu, Wei Dong, Yiming Li, Yu He, Zhan Qin, Zhongjie Ba","submitted_at":"2025-02-26T08:47:19Z","abstract_excerpt":"Membership Inference Attacks (MIAs) aim to predict whether a data sample belongs to the model's training set or not. Although prior research has extensively explored MIAs in Large Language Models (LLMs), they typically require accessing to complete output logits (\\ie, \\textit{logits-based attacks}), which are usually not available in practice. In this paper, we study the vulnerability of pre-trained LLMs to MIAs in the \\textit{label-only setting}, where the adversary can only access generated tokens (text). We first reveal that existing label-only MIAs have minor effects in attacking pre-train"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.18943","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.18943/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:20:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cxAPHZcEsf3qkdL/jMD8O1vveqoLg07qkPATBPoMzHk60OAWgLX32SvbPyTn/DIiHooILW4hjRg2BPS0PMjCDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T03:15:27.275680Z"},"content_sha256":"9b563b7573591771d7993a70c5f56c5fcabf87aef66da5ca332fd1513ee905ee","schema_version":"1.0","event_id":"sha256:9b563b7573591771d7993a70c5f56c5fcabf87aef66da5ca332fd1513ee905ee"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RSCC5XG42SOC7WJ57NS5AKD75G/bundle.json","state_url":"https://pith.science/pith/RSCC5XG42SOC7WJ57NS5AKD75G/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RSCC5XG42SOC7WJ57NS5AKD75G/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T03:15:27Z","links":{"resolver":"https://pith.science/pith/RSCC5XG42SOC7WJ57NS5AKD75G","bundle":"https://pith.science/pith/RSCC5XG42SOC7WJ57NS5AKD75G/bundle.json","state":"https://pith.science/pith/RSCC5XG42SOC7WJ57NS5AKD75G/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RSCC5XG42SOC7WJ57NS5AKD75G/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:RSCC5XG42SOC7WJ57NS5AKD75G","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9bf2a8fb78fd78add3b1c9eb3ebd780c6ebb007369e4602e4c6ca0fdf00efd05","cross_cats_sorted":["cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-26T08:47:19Z","title_canon_sha256":"a746f3374e4c5d9f1c5f64a8e2e47d743ae71a6e1b80428a6252b909aae5ca04"},"schema_version":"1.0","source":{"id":"2502.18943","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.18943","created_at":"2026-07-05T10:20:23Z"},{"alias_kind":"arxiv_version","alias_value":"2502.18943v1","created_at":"2026-07-05T10:20:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.18943","created_at":"2026-07-05T10:20:23Z"},{"alias_kind":"pith_short_12","alias_value":"RSCC5XG42SOC","created_at":"2026-07-05T10:20:23Z"},{"alias_kind":"pith_short_16","alias_value":"RSCC5XG42SOC7WJ5","created_at":"2026-07-05T10:20:23Z"},{"alias_kind":"pith_short_8","alias_value":"RSCC5XG4","created_at":"2026-07-05T10:20:23Z"}],"graph_snapshots":[{"event_id":"sha256:9b563b7573591771d7993a70c5f56c5fcabf87aef66da5ca332fd1513ee905ee","target":"graph","created_at":"2026-07-05T10:20:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.18943/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Membership Inference Attacks (MIAs) aim to predict whether a data sample belongs to the model's training set or not. Although prior research has extensively explored MIAs in Large Language Models (LLMs), they typically require accessing to complete output logits (\\ie, \\textit{logits-based attacks}), which are usually not available in practice. In this paper, we study the vulnerability of pre-trained LLMs to MIAs in the \\textit{label-only setting}, where the adversary can only access generated tokens (text). We first reveal that existing label-only MIAs have minor effects in attacking pre-train","authors_text":"Boheng Li, Chun Chen, Kui Ren, Liu Liu, Wei Dong, Yiming Li, Yu He, Zhan Qin, Zhongjie Ba","cross_cats":["cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-26T08:47:19Z","title":"Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.18943","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2bc86800a2a4dca6355222db15b990452cda0364f0f289de8a4de2365021a510","target":"record","created_at":"2026-07-05T10:20:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9bf2a8fb78fd78add3b1c9eb3ebd780c6ebb007369e4602e4c6ca0fdf00efd05","cross_cats_sorted":["cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-26T08:47:19Z","title_canon_sha256":"a746f3374e4c5d9f1c5f64a8e2e47d743ae71a6e1b80428a6252b909aae5ca04"},"schema_version":"1.0","source":{"id":"2502.18943","kind":"arxiv","version":1}},"canonical_sha256":"8c842edcdcd49c2fd93dfb65d0287fe990f04fa08e456a8a2f4d7ea4972e390a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8c842edcdcd49c2fd93dfb65d0287fe990f04fa08e456a8a2f4d7ea4972e390a","first_computed_at":"2026-07-05T10:20:23.671573Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:20:23.671573Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"w8vfcsKYzjnhkzG43gEaQf4kdNzeYLHuMjBYf7fHLs4CpMk0mkYX28SP5CpntBq2s6o6+7PDONoi2p4WTjIXDg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:20:23.672102Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.18943","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2bc86800a2a4dca6355222db15b990452cda0364f0f289de8a4de2365021a510","sha256:9b563b7573591771d7993a70c5f56c5fcabf87aef66da5ca332fd1513ee905ee"],"state_sha256":"6927c5dd3cfb473ea9a12fa258266a416f59e82fc28dbf9adc647a0626925d71"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"z66OqGkYcvY6DZih931k2/6fKlArGCjLXGbkQyRvljbIYuuyIFspNvHQHlmp0njT1iPblkFeWnUVeaoycHk9Ag==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T03:15:27.280087Z","bundle_sha256":"fe505f385e120c3bc2d6f1bcb45c44545201646b09a2c257da1604435d794cf4"}}