{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:UHRVLIY5ZJMIEUJZNOPLMR4TBG","short_pith_number":"pith:UHRVLIY5","canonical_record":{"source":{"id":"2210.16258","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-28T16:50:21Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"8c9ecd7e885281956602bf2c59619427d6649ff7e223226434e07e51b7285bca","abstract_canon_sha256":"c157b594dc324639cd97a4c6e9a6e674ebd6f992879ee60553fac4aa6d2ccd95"},"schema_version":"1.0"},"canonical_sha256":"a1e355a31dca588251396b9eb64793099d007e6921ccdd95bf27c702fbc59fdc","source":{"kind":"arxiv","id":"2210.16258","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.16258","created_at":"2026-07-05T05:11:32Z"},{"alias_kind":"arxiv_version","alias_value":"2210.16258v1","created_at":"2026-07-05T05:11:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.16258","created_at":"2026-07-05T05:11:32Z"},{"alias_kind":"pith_short_12","alias_value":"UHRVLIY5ZJMI","created_at":"2026-07-05T05:11:32Z"},{"alias_kind":"pith_short_16","alias_value":"UHRVLIY5ZJMIEUJZ","created_at":"2026-07-05T05:11:32Z"},{"alias_kind":"pith_short_8","alias_value":"UHRVLIY5","created_at":"2026-07-05T05:11:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:UHRVLIY5ZJMIEUJZNOPLMR4TBG","target":"record","payload":{"canonical_record":{"source":{"id":"2210.16258","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-28T16:50:21Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"8c9ecd7e885281956602bf2c59619427d6649ff7e223226434e07e51b7285bca","abstract_canon_sha256":"c157b594dc324639cd97a4c6e9a6e674ebd6f992879ee60553fac4aa6d2ccd95"},"schema_version":"1.0"},"canonical_sha256":"a1e355a31dca588251396b9eb64793099d007e6921ccdd95bf27c702fbc59fdc","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:11:32.259724Z","signature_b64":"ax4QPvQvGgi9D/rw7icoIvMMzZIGLo3WMyO0oRhrxE80+EZYvEYS6CFtFAjNRXIULOnd8teCMWOhoK8nazbPBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a1e355a31dca588251396b9eb64793099d007e6921ccdd95bf27c702fbc59fdc","last_reissued_at":"2026-07-05T05:11:32.259250Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:11:32.259250Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2210.16258","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:11:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VYCxLAySJn5U6B5M/yiaPa+dZ+UJrhesiBm7XMXiYS4NldGGJbAWIZFxcHxDNE4kDZHIKSBk0aSbImPp6z74CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T16:03:37.148429Z"},"content_sha256":"f25d1536c20c3f6ba272ca7766c1bbf040987a0c2cec354a4ab6aeefd7ea6346","schema_version":"1.0","event_id":"sha256:f25d1536c20c3f6ba272ca7766c1bbf040987a0c2cec354a4ab6aeefd7ea6346"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:UHRVLIY5ZJMIEUJZNOPLMR4TBG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Vulnerability of Data Points under Multiple Membership Inference Attacks and Target Models","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Jiaxin Li, Mauro Conti, Stjepan Picek","submitted_at":"2022-10-28T16:50:21Z","abstract_excerpt":"Membership Inference Attacks (MIAs) infer whether a data point is in the training data of a machine learning model. It is a threat while being in the training data is private information of a data point. MIA correctly infers some data points as members or non-members of the training data. Intuitively, data points that MIA accurately detects are vulnerable. Considering those data points may exist in different target models susceptible to multiple MIAs, the vulnerability of data points under multiple MIAs and target models is worth exploring.\n  This paper defines new metrics that can reflect the"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.16258","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2210.16258/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:11:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"x22z6QRw0sZqOnpIIpeJUBteVomxbTjAo9trp/NsDpwgrVHq7Od9vI/xBIIBIAyVcU2XxaRHCwmYY5mnUCDPAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T16:03:37.148998Z"},"content_sha256":"863fdbf2e21ed32336575fa5d907c195264526d7e7264972e4acee969d3a8262","schema_version":"1.0","event_id":"sha256:863fdbf2e21ed32336575fa5d907c195264526d7e7264972e4acee969d3a8262"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UHRVLIY5ZJMIEUJZNOPLMR4TBG/bundle.json","state_url":"https://pith.science/pith/UHRVLIY5ZJMIEUJZNOPLMR4TBG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UHRVLIY5ZJMIEUJZNOPLMR4TBG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T16:03:37Z","links":{"resolver":"https://pith.science/pith/UHRVLIY5ZJMIEUJZNOPLMR4TBG","bundle":"https://pith.science/pith/UHRVLIY5ZJMIEUJZNOPLMR4TBG/bundle.json","state":"https://pith.science/pith/UHRVLIY5ZJMIEUJZNOPLMR4TBG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UHRVLIY5ZJMIEUJZNOPLMR4TBG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:UHRVLIY5ZJMIEUJZNOPLMR4TBG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c157b594dc324639cd97a4c6e9a6e674ebd6f992879ee60553fac4aa6d2ccd95","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-28T16:50:21Z","title_canon_sha256":"8c9ecd7e885281956602bf2c59619427d6649ff7e223226434e07e51b7285bca"},"schema_version":"1.0","source":{"id":"2210.16258","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.16258","created_at":"2026-07-05T05:11:32Z"},{"alias_kind":"arxiv_version","alias_value":"2210.16258v1","created_at":"2026-07-05T05:11:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.16258","created_at":"2026-07-05T05:11:32Z"},{"alias_kind":"pith_short_12","alias_value":"UHRVLIY5ZJMI","created_at":"2026-07-05T05:11:32Z"},{"alias_kind":"pith_short_16","alias_value":"UHRVLIY5ZJMIEUJZ","created_at":"2026-07-05T05:11:32Z"},{"alias_kind":"pith_short_8","alias_value":"UHRVLIY5","created_at":"2026-07-05T05:11:32Z"}],"graph_snapshots":[{"event_id":"sha256:863fdbf2e21ed32336575fa5d907c195264526d7e7264972e4acee969d3a8262","target":"graph","created_at":"2026-07-05T05:11:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.16258/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Membership Inference Attacks (MIAs) infer whether a data point is in the training data of a machine learning model. It is a threat while being in the training data is private information of a data point. MIA correctly infers some data points as members or non-members of the training data. Intuitively, data points that MIA accurately detects are vulnerable. Considering those data points may exist in different target models susceptible to multiple MIAs, the vulnerability of data points under multiple MIAs and target models is worth exploring.\n  This paper defines new metrics that can reflect the","authors_text":"Jiaxin Li, Mauro Conti, Stjepan Picek","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-28T16:50:21Z","title":"On the Vulnerability of Data Points under Multiple Membership Inference Attacks and Target Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.16258","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f25d1536c20c3f6ba272ca7766c1bbf040987a0c2cec354a4ab6aeefd7ea6346","target":"record","created_at":"2026-07-05T05:11:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c157b594dc324639cd97a4c6e9a6e674ebd6f992879ee60553fac4aa6d2ccd95","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-28T16:50:21Z","title_canon_sha256":"8c9ecd7e885281956602bf2c59619427d6649ff7e223226434e07e51b7285bca"},"schema_version":"1.0","source":{"id":"2210.16258","kind":"arxiv","version":1}},"canonical_sha256":"a1e355a31dca588251396b9eb64793099d007e6921ccdd95bf27c702fbc59fdc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a1e355a31dca588251396b9eb64793099d007e6921ccdd95bf27c702fbc59fdc","first_computed_at":"2026-07-05T05:11:32.259250Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:11:32.259250Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ax4QPvQvGgi9D/rw7icoIvMMzZIGLo3WMyO0oRhrxE80+EZYvEYS6CFtFAjNRXIULOnd8teCMWOhoK8nazbPBg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:11:32.259724Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.16258","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f25d1536c20c3f6ba272ca7766c1bbf040987a0c2cec354a4ab6aeefd7ea6346","sha256:863fdbf2e21ed32336575fa5d907c195264526d7e7264972e4acee969d3a8262"],"state_sha256":"98d63c4b069fe47f616d619182d6530f996a6754a9d944b9bf4a025bd157c36b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mUNkxzzbpqZjIWc0X2sKOKm5cX5kkgL1SFJP7lREBlfIo7OCo9hAo7myLoOn3H+la+SPce6DnJmd5URIjE/vCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T16:03:37.153508Z","bundle_sha256":"f410c6e30ded6427b027683b4cd5105a50b6bc70d7affbfb7e1d00bdda68bc5a"}}