{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:S4XN6FDUZR7NF6R27ZGM7PD34K","short_pith_number":"pith:S4XN6FDU","canonical_record":{"source":{"id":"2006.05336","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-09T15:17:21Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"10075b7df5afb678ae083a039c1a6e46b7a41129b1c83222326c4708b638cf6d","abstract_canon_sha256":"e9a2d66f15b4d07dbdf35fb708041514ab79784b56fe35ee76fa2f8b38e12f75"},"schema_version":"1.0"},"canonical_sha256":"972edf1474cc7ed2fa3afe4ccfbc7be291cf6599498196a1d81420a58a478c5d","source":{"kind":"arxiv","id":"2006.05336","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2006.05336","created_at":"2026-07-05T01:09:12Z"},{"alias_kind":"arxiv_version","alias_value":"2006.05336v1","created_at":"2026-07-05T01:09:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2006.05336","created_at":"2026-07-05T01:09:12Z"},{"alias_kind":"pith_short_12","alias_value":"S4XN6FDUZR7N","created_at":"2026-07-05T01:09:12Z"},{"alias_kind":"pith_short_16","alias_value":"S4XN6FDUZR7NF6R2","created_at":"2026-07-05T01:09:12Z"},{"alias_kind":"pith_short_8","alias_value":"S4XN6FDU","created_at":"2026-07-05T01:09:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:S4XN6FDUZR7NF6R27ZGM7PD34K","target":"record","payload":{"canonical_record":{"source":{"id":"2006.05336","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-09T15:17:21Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"10075b7df5afb678ae083a039c1a6e46b7a41129b1c83222326c4708b638cf6d","abstract_canon_sha256":"e9a2d66f15b4d07dbdf35fb708041514ab79784b56fe35ee76fa2f8b38e12f75"},"schema_version":"1.0"},"canonical_sha256":"972edf1474cc7ed2fa3afe4ccfbc7be291cf6599498196a1d81420a58a478c5d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:09:12.820826Z","signature_b64":"gUxhwzEA9yB5KW/jA6i/dASY1Lo6AkhCWQqqueimfxDn5poMsGa+oaJmOE6hsun2/c5PBERqF4JwspGsBwkBCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"972edf1474cc7ed2fa3afe4ccfbc7be291cf6599498196a1d81420a58a478c5d","last_reissued_at":"2026-07-05T01:09:12.820336Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:09:12.820336Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2006.05336","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:09:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IQm+n/49qokWXDFfn4AvN3eF5DDqZw/+LMn1EKUFZELYZBlq+U3iPVEpJvN9hA4ed3QXtQ2GZ3+jwcDwQNIqCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T05:29:37.307364Z"},"content_sha256":"03bd4e801ede7cb054615579c90d0f0684edff4e10b18c1a362c08b0e6ee0929","schema_version":"1.0","event_id":"sha256:03bd4e801ede7cb054615579c90d0f0684edff4e10b18c1a362c08b0e6ee0929"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:S4XN6FDUZR7NF6R27ZGM7PD34K","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Effectiveness of Regularization Against Membership Inference Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Sanghyun Hong, Tudor Dumitras, Yigitcan Kaya","submitted_at":"2020-06-09T15:17:21Z","abstract_excerpt":"Deep learning models often raise privacy concerns as they leak information about their training data. This enables an adversary to determine whether a data point was in a model's training set by conducting a membership inference attack (MIA). Prior work has conjectured that regularization techniques, which combat overfitting, may also mitigate the leakage. While many regularization mechanisms exist, their effectiveness against MIAs has not been studied systematically, and the resulting privacy properties are not well understood. We explore the lower bound for information leakage that practical"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2006.05336","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2006.05336/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:09:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ziVQwxnr/27MUmC7AohLXtnliaagZPyGx8OUXsLRoN2nv1FnA7DLEjVzTejWsOCkhGDXKRh1TmTtBacNjs/9Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T05:29:37.307857Z"},"content_sha256":"8f16d79b3b109a54d0825a454b589c23d6f9fc27d6dd168a13d33d74538a2e05","schema_version":"1.0","event_id":"sha256:8f16d79b3b109a54d0825a454b589c23d6f9fc27d6dd168a13d33d74538a2e05"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/S4XN6FDUZR7NF6R27ZGM7PD34K/bundle.json","state_url":"https://pith.science/pith/S4XN6FDUZR7NF6R27ZGM7PD34K/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/S4XN6FDUZR7NF6R27ZGM7PD34K/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T05:29:37Z","links":{"resolver":"https://pith.science/pith/S4XN6FDUZR7NF6R27ZGM7PD34K","bundle":"https://pith.science/pith/S4XN6FDUZR7NF6R27ZGM7PD34K/bundle.json","state":"https://pith.science/pith/S4XN6FDUZR7NF6R27ZGM7PD34K/state.json","well_known_bundle":"https://pith.science/.well-known/pith/S4XN6FDUZR7NF6R27ZGM7PD34K/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:S4XN6FDUZR7NF6R27ZGM7PD34K","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e9a2d66f15b4d07dbdf35fb708041514ab79784b56fe35ee76fa2f8b38e12f75","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-09T15:17:21Z","title_canon_sha256":"10075b7df5afb678ae083a039c1a6e46b7a41129b1c83222326c4708b638cf6d"},"schema_version":"1.0","source":{"id":"2006.05336","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2006.05336","created_at":"2026-07-05T01:09:12Z"},{"alias_kind":"arxiv_version","alias_value":"2006.05336v1","created_at":"2026-07-05T01:09:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2006.05336","created_at":"2026-07-05T01:09:12Z"},{"alias_kind":"pith_short_12","alias_value":"S4XN6FDUZR7N","created_at":"2026-07-05T01:09:12Z"},{"alias_kind":"pith_short_16","alias_value":"S4XN6FDUZR7NF6R2","created_at":"2026-07-05T01:09:12Z"},{"alias_kind":"pith_short_8","alias_value":"S4XN6FDU","created_at":"2026-07-05T01:09:12Z"}],"graph_snapshots":[{"event_id":"sha256:8f16d79b3b109a54d0825a454b589c23d6f9fc27d6dd168a13d33d74538a2e05","target":"graph","created_at":"2026-07-05T01:09:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2006.05336/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep learning models often raise privacy concerns as they leak information about their training data. This enables an adversary to determine whether a data point was in a model's training set by conducting a membership inference attack (MIA). Prior work has conjectured that regularization techniques, which combat overfitting, may also mitigate the leakage. While many regularization mechanisms exist, their effectiveness against MIAs has not been studied systematically, and the resulting privacy properties are not well understood. We explore the lower bound for information leakage that practical","authors_text":"Sanghyun Hong, Tudor Dumitras, Yigitcan Kaya","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-09T15:17:21Z","title":"On the Effectiveness of Regularization Against Membership Inference Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2006.05336","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:03bd4e801ede7cb054615579c90d0f0684edff4e10b18c1a362c08b0e6ee0929","target":"record","created_at":"2026-07-05T01:09:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e9a2d66f15b4d07dbdf35fb708041514ab79784b56fe35ee76fa2f8b38e12f75","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-09T15:17:21Z","title_canon_sha256":"10075b7df5afb678ae083a039c1a6e46b7a41129b1c83222326c4708b638cf6d"},"schema_version":"1.0","source":{"id":"2006.05336","kind":"arxiv","version":1}},"canonical_sha256":"972edf1474cc7ed2fa3afe4ccfbc7be291cf6599498196a1d81420a58a478c5d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"972edf1474cc7ed2fa3afe4ccfbc7be291cf6599498196a1d81420a58a478c5d","first_computed_at":"2026-07-05T01:09:12.820336Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:09:12.820336Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gUxhwzEA9yB5KW/jA6i/dASY1Lo6AkhCWQqqueimfxDn5poMsGa+oaJmOE6hsun2/c5PBERqF4JwspGsBwkBCg==","signature_status":"signed_v1","signed_at":"2026-07-05T01:09:12.820826Z","signed_message":"canonical_sha256_bytes"},"source_id":"2006.05336","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:03bd4e801ede7cb054615579c90d0f0684edff4e10b18c1a362c08b0e6ee0929","sha256:8f16d79b3b109a54d0825a454b589c23d6f9fc27d6dd168a13d33d74538a2e05"],"state_sha256":"e3e992b75c922e59f91ee3fbcba36e269c83b457d52cbcaeec989163a30d4e19"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"B0uqwEO0BC1eR36NQcQQt8KtYDK+wuGgFfla9fV5/25VaIAk8yyQpe7rH14A4SSlFMLrChiXoGDTaqJApVyrBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T05:29:37.311481Z","bundle_sha256":"cf4806787c2a14443f23a8e18237f5b81f390a009eb632cb5465e3d42ecbdd89"}}