{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:UHPC3OUQROJQJJFJDYWQBZ422U","short_pith_number":"pith:UHPC3OUQ","canonical_record":{"source":{"id":"2004.10397","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-04-22T05:15:03Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"9c8a2316f480649da089dd63d257d33601d166284450bbee73bb1f074243e27c","abstract_canon_sha256":"9df21681d4577c5ba41169071800e274ce357259e28f6c017b2b5702547de5a2"},"schema_version":"1.0"},"canonical_sha256":"a1de2dba908b9304a4a91e2d00e79ad538a3f745a87e7b1b4406b65cba2bd9a9","source":{"kind":"arxiv","id":"2004.10397","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2004.10397","created_at":"2026-07-05T00:57:35Z"},{"alias_kind":"arxiv_version","alias_value":"2004.10397v2","created_at":"2026-07-05T00:57:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2004.10397","created_at":"2026-07-05T00:57:35Z"},{"alias_kind":"pith_short_12","alias_value":"UHPC3OUQROJQ","created_at":"2026-07-05T00:57:35Z"},{"alias_kind":"pith_short_16","alias_value":"UHPC3OUQROJQJJFJ","created_at":"2026-07-05T00:57:35Z"},{"alias_kind":"pith_short_8","alias_value":"UHPC3OUQ","created_at":"2026-07-05T00:57:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:UHPC3OUQROJQJJFJDYWQBZ422U","target":"record","payload":{"canonical_record":{"source":{"id":"2004.10397","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-04-22T05:15:03Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"9c8a2316f480649da089dd63d257d33601d166284450bbee73bb1f074243e27c","abstract_canon_sha256":"9df21681d4577c5ba41169071800e274ce357259e28f6c017b2b5702547de5a2"},"schema_version":"1.0"},"canonical_sha256":"a1de2dba908b9304a4a91e2d00e79ad538a3f745a87e7b1b4406b65cba2bd9a9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:57:35.952183Z","signature_b64":"biOrxBgsd1pcGZvowSuL51hgaV/o76XG4qaJMqCFM1oxf5wWqCF+tMR1P1fesNiTyLcu0H0WBICa7IAmklS+AA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a1de2dba908b9304a4a91e2d00e79ad538a3f745a87e7b1b4406b65cba2bd9a9","last_reissued_at":"2026-07-05T00:57:35.951834Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:57:35.951834Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2004.10397","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:57:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VfjwLPM5aLNVksXZPM43r5yP1Eg+B27xAHImQvkQnL6SW6i23+vQ4D5qb2Y9fWAd3GQX95YpcxLhQw/LcoxhDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T09:01:48.542770Z"},"content_sha256":"fa38c317b396834db672471541133ca158546b6d11d79cd538087362810298c3","schema_version":"1.0","event_id":"sha256:fa38c317b396834db672471541133ca158546b6d11d79cd538087362810298c3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:UHPC3OUQROJQJJFJDYWQBZ422U","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Framework for Evaluating Gradient Leakage Attacks in Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Ka-Ho Chow, Ling Liu, Margaret Loper, Mehmet Emre Gursoy, Stacey Truex, Wenqi Wei, Yanzhao Wu","submitted_at":"2020-04-22T05:15:03Z","abstract_excerpt":"Federated learning (FL) is an emerging distributed machine learning framework for collaborative model training with a network of clients (edge devices). FL offers default client privacy by allowing clients to keep their sensitive data on local devices and to only share local training parameter updates with the federated server. However, recent studies have shown that even sharing local parameter updates from a client to the federated server may be susceptible to gradient leakage attacks and intrude the client privacy regarding its training data. In this paper, we present a principled framework"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2004.10397","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2004.10397/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:57:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3/bWKQPwH2tfLfkVZc8QKvQ+TLXkhAjolop9dY+Acj+d39gK8Kn3RmA1zoF0bm18RkZ+15Vv3ynE3T7rxHSOBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T09:01:48.543144Z"},"content_sha256":"ac747822d22c4bd52f132acd2894a78a7c59d2495c43d403abebd6b270c4cf50","schema_version":"1.0","event_id":"sha256:ac747822d22c4bd52f132acd2894a78a7c59d2495c43d403abebd6b270c4cf50"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UHPC3OUQROJQJJFJDYWQBZ422U/bundle.json","state_url":"https://pith.science/pith/UHPC3OUQROJQJJFJDYWQBZ422U/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UHPC3OUQROJQJJFJDYWQBZ422U/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T09:01:48Z","links":{"resolver":"https://pith.science/pith/UHPC3OUQROJQJJFJDYWQBZ422U","bundle":"https://pith.science/pith/UHPC3OUQROJQJJFJDYWQBZ422U/bundle.json","state":"https://pith.science/pith/UHPC3OUQROJQJJFJDYWQBZ422U/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UHPC3OUQROJQJJFJDYWQBZ422U/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:UHPC3OUQROJQJJFJDYWQBZ422U","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9df21681d4577c5ba41169071800e274ce357259e28f6c017b2b5702547de5a2","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-04-22T05:15:03Z","title_canon_sha256":"9c8a2316f480649da089dd63d257d33601d166284450bbee73bb1f074243e27c"},"schema_version":"1.0","source":{"id":"2004.10397","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2004.10397","created_at":"2026-07-05T00:57:35Z"},{"alias_kind":"arxiv_version","alias_value":"2004.10397v2","created_at":"2026-07-05T00:57:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2004.10397","created_at":"2026-07-05T00:57:35Z"},{"alias_kind":"pith_short_12","alias_value":"UHPC3OUQROJQ","created_at":"2026-07-05T00:57:35Z"},{"alias_kind":"pith_short_16","alias_value":"UHPC3OUQROJQJJFJ","created_at":"2026-07-05T00:57:35Z"},{"alias_kind":"pith_short_8","alias_value":"UHPC3OUQ","created_at":"2026-07-05T00:57:35Z"}],"graph_snapshots":[{"event_id":"sha256:ac747822d22c4bd52f132acd2894a78a7c59d2495c43d403abebd6b270c4cf50","target":"graph","created_at":"2026-07-05T00:57:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2004.10397/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning (FL) is an emerging distributed machine learning framework for collaborative model training with a network of clients (edge devices). FL offers default client privacy by allowing clients to keep their sensitive data on local devices and to only share local training parameter updates with the federated server. However, recent studies have shown that even sharing local parameter updates from a client to the federated server may be susceptible to gradient leakage attacks and intrude the client privacy regarding its training data. In this paper, we present a principled framework","authors_text":"Ka-Ho Chow, Ling Liu, Margaret Loper, Mehmet Emre Gursoy, Stacey Truex, Wenqi Wei, Yanzhao Wu","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-04-22T05:15:03Z","title":"A Framework for Evaluating Gradient Leakage Attacks in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2004.10397","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fa38c317b396834db672471541133ca158546b6d11d79cd538087362810298c3","target":"record","created_at":"2026-07-05T00:57:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9df21681d4577c5ba41169071800e274ce357259e28f6c017b2b5702547de5a2","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-04-22T05:15:03Z","title_canon_sha256":"9c8a2316f480649da089dd63d257d33601d166284450bbee73bb1f074243e27c"},"schema_version":"1.0","source":{"id":"2004.10397","kind":"arxiv","version":2}},"canonical_sha256":"a1de2dba908b9304a4a91e2d00e79ad538a3f745a87e7b1b4406b65cba2bd9a9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a1de2dba908b9304a4a91e2d00e79ad538a3f745a87e7b1b4406b65cba2bd9a9","first_computed_at":"2026-07-05T00:57:35.951834Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:57:35.951834Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"biOrxBgsd1pcGZvowSuL51hgaV/o76XG4qaJMqCFM1oxf5wWqCF+tMR1P1fesNiTyLcu0H0WBICa7IAmklS+AA==","signature_status":"signed_v1","signed_at":"2026-07-05T00:57:35.952183Z","signed_message":"canonical_sha256_bytes"},"source_id":"2004.10397","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fa38c317b396834db672471541133ca158546b6d11d79cd538087362810298c3","sha256:ac747822d22c4bd52f132acd2894a78a7c59d2495c43d403abebd6b270c4cf50"],"state_sha256":"25eef90096192df558e973d9c6eaba9667c478f3f86b05476c97e9e8bc3d2306"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KG//cxRvistQR4CLIKbCxqLzFT/yHliC5ohKF0se4InakY3g3u+Ft711QQIJjSVpSb2ljjqWNXM9TKHS7MFjCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T09:01:48.545023Z","bundle_sha256":"7f7bcdb9b38d050a948ef656f08107dd4482bcd802b7f0d526c7d679a056e183"}}