{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:SKXJ65IRBZEKABFUEBPQPCMZ65","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"abd09dd044dbacf6210876363c0ac2dd73c69d6725162ab7cbb1b6971d7ea4a5","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-12-01T16:09:50Z","title_canon_sha256":"b073b4767437200d8bcff8a30ae1fd9567611491cbecc6d67b7e95719c8f0b66"},"schema_version":"1.0","source":{"id":"2212.00612","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.00612","created_at":"2026-07-05T05:21:36Z"},{"alias_kind":"arxiv_version","alias_value":"2212.00612v1","created_at":"2026-07-05T05:21:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.00612","created_at":"2026-07-05T05:21:36Z"},{"alias_kind":"pith_short_12","alias_value":"SKXJ65IRBZEK","created_at":"2026-07-05T05:21:36Z"},{"alias_kind":"pith_short_16","alias_value":"SKXJ65IRBZEKABFU","created_at":"2026-07-05T05:21:36Z"},{"alias_kind":"pith_short_8","alias_value":"SKXJ65IR","created_at":"2026-07-05T05:21:36Z"}],"graph_snapshots":[{"event_id":"sha256:aee48e29a0f825c9f0326a643b84c48050dd5d1faf81dc6f34528dfd3b5ee92a","target":"graph","created_at":"2026-07-05T05:21:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2212.00612/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Neural networks are susceptible to data inference attacks such as the membership inference attack, the adversarial model inversion attack and the attribute inference attack, where the attacker could infer useful information such as the membership, the reconstruction or the sensitive attributes of a data sample from the confidence scores predicted by the target classifier. In this paper, we propose a method, namely PURIFIER, to defend against membership inference attacks. It transforms the confidence score vectors predicted by the target classifier and makes purified confidence scores indisting","authors_text":"Da Yang, Ee-Chien Chang, Fan Zhang, Jie Wan, Kui Ren, Lijin Wang, Ziming Zhao, Ziqi Yang","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-12-01T16:09:50Z","title":"Purifier: Defending Data Inference Attacks via Transforming Confidence Scores"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.00612","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:373215cd856e66c059fdcc05f4e2758ca2c4222339730c8162c6707eb57c4f08","target":"record","created_at":"2026-07-05T05:21:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"abd09dd044dbacf6210876363c0ac2dd73c69d6725162ab7cbb1b6971d7ea4a5","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-12-01T16:09:50Z","title_canon_sha256":"b073b4767437200d8bcff8a30ae1fd9567611491cbecc6d67b7e95719c8f0b66"},"schema_version":"1.0","source":{"id":"2212.00612","kind":"arxiv","version":1}},"canonical_sha256":"92ae9f75110e48a004b4205f078999f76156851f7a8dca39cc1786646c3538e7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"92ae9f75110e48a004b4205f078999f76156851f7a8dca39cc1786646c3538e7","first_computed_at":"2026-07-05T05:21:36.151362Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:21:36.151362Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xRJMR4xrBvUzIXT7w4F4SbkjX3fNSI7r6yPMzvYecaSOT75gzSvKbHquSKn8CqzvhkmfOdflA3RxIZIc8IkMBA==","signature_status":"signed_v1","signed_at":"2026-07-05T05:21:36.151701Z","signed_message":"canonical_sha256_bytes"},"source_id":"2212.00612","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:373215cd856e66c059fdcc05f4e2758ca2c4222339730c8162c6707eb57c4f08","sha256:aee48e29a0f825c9f0326a643b84c48050dd5d1faf81dc6f34528dfd3b5ee92a"],"state_sha256":"de6a568192ecf5aea84ad668b7dd7fbb05b4319d0f966c734acb942907b993e2"}