{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:UNSVXC75BHFNG4TGGZLLOO3OKG","short_pith_number":"pith:UNSVXC75","canonical_record":{"source":{"id":"1805.04049","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-10T16:28:44Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"81101cdaffdd2f63af314f2d3fb27a3a3b77656bf0e79aeac392369fc564ec73","abstract_canon_sha256":"ca657c677200fe964286ddc4f148a044f49790f173ef31dd91f5bfaea22aa639"},"schema_version":"1.0"},"canonical_sha256":"a3655b8bfd09cad372663656b73b6e51933bed6d37a2bb7213dea9e586dbe2a0","source":{"kind":"arxiv","id":"1805.04049","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1805.04049","created_at":"2026-05-18T00:01:47Z"},{"alias_kind":"arxiv_version","alias_value":"1805.04049v3","created_at":"2026-05-18T00:01:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1805.04049","created_at":"2026-05-18T00:01:47Z"},{"alias_kind":"pith_short_12","alias_value":"UNSVXC75BHFN","created_at":"2026-05-18T12:32:56Z"},{"alias_kind":"pith_short_16","alias_value":"UNSVXC75BHFNG4TG","created_at":"2026-05-18T12:32:56Z"},{"alias_kind":"pith_short_8","alias_value":"UNSVXC75","created_at":"2026-05-18T12:32:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:UNSVXC75BHFNG4TGGZLLOO3OKG","target":"record","payload":{"canonical_record":{"source":{"id":"1805.04049","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-10T16:28:44Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"81101cdaffdd2f63af314f2d3fb27a3a3b77656bf0e79aeac392369fc564ec73","abstract_canon_sha256":"ca657c677200fe964286ddc4f148a044f49790f173ef31dd91f5bfaea22aa639"},"schema_version":"1.0"},"canonical_sha256":"a3655b8bfd09cad372663656b73b6e51933bed6d37a2bb7213dea9e586dbe2a0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:01:47.227201Z","signature_b64":"dAUM2Er+lmJL7cFoB8BuMBSFR/KwiTZWf9m/NHIi1D7dq/DtpRk0UG+OPiAkv7V8mU7xVQumgJlzR5dc7UFxCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a3655b8bfd09cad372663656b73b6e51933bed6d37a2bb7213dea9e586dbe2a0","last_reissued_at":"2026-05-18T00:01:47.226457Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:01:47.226457Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1805.04049","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:01:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8lxNFIA8Zzm8V65O1g2p148A4RK1KMjgf39rpbLqnN1m3Oxg1ml1DTm/ynGDUwFiEvgyvrrG8A5s/PLLJZ3FCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-31T22:15:35.968884Z"},"content_sha256":"93201a0f21d61e470a069360ac834483fa2b642edee4034917b9bf5f1bd9a439","schema_version":"1.0","event_id":"sha256:93201a0f21d61e470a069360ac834483fa2b642edee4034917b9bf5f1bd9a439"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:UNSVXC75BHFNG4TGGZLLOO3OKG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Exploiting Unintended Feature Leakage in Collaborative Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Congzheng Song, Emiliano De Cristofaro, Luca Melis, Vitaly Shmatikov","submitted_at":"2018-05-10T16:28:44Z","abstract_excerpt":"Collaborative machine learning and related techniques such as federated learning allow multiple participants, each with his own training dataset, to build a joint model by training locally and periodically exchanging model updates. We demonstrate that these updates leak unintended information about participants' training data and develop passive and active inference attacks to exploit this leakage. First, we show that an adversarial participant can infer the presence of exact data points -- for example, specific locations -- in others' training data (i.e., membership inference). Then, we show "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1805.04049","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:01:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YaDVaeJ/3OvPkXC+qdNEEogN5lAgY1nCVlICW3QTnnpGiS5Le2j+2VyJaH/QfeKMGHWBK1Q9noVj++HfLDF7DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-31T22:15:35.969272Z"},"content_sha256":"75efeeb4e30c07ddf1661487eb978b8277c7f976a367c51fe40785e0028cc42d","schema_version":"1.0","event_id":"sha256:75efeeb4e30c07ddf1661487eb978b8277c7f976a367c51fe40785e0028cc42d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UNSVXC75BHFNG4TGGZLLOO3OKG/bundle.json","state_url":"https://pith.science/pith/UNSVXC75BHFNG4TGGZLLOO3OKG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UNSVXC75BHFNG4TGGZLLOO3OKG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-31T22:15:35Z","links":{"resolver":"https://pith.science/pith/UNSVXC75BHFNG4TGGZLLOO3OKG","bundle":"https://pith.science/pith/UNSVXC75BHFNG4TGGZLLOO3OKG/bundle.json","state":"https://pith.science/pith/UNSVXC75BHFNG4TGGZLLOO3OKG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UNSVXC75BHFNG4TGGZLLOO3OKG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:UNSVXC75BHFNG4TGGZLLOO3OKG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ca657c677200fe964286ddc4f148a044f49790f173ef31dd91f5bfaea22aa639","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-10T16:28:44Z","title_canon_sha256":"81101cdaffdd2f63af314f2d3fb27a3a3b77656bf0e79aeac392369fc564ec73"},"schema_version":"1.0","source":{"id":"1805.04049","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1805.04049","created_at":"2026-05-18T00:01:47Z"},{"alias_kind":"arxiv_version","alias_value":"1805.04049v3","created_at":"2026-05-18T00:01:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1805.04049","created_at":"2026-05-18T00:01:47Z"},{"alias_kind":"pith_short_12","alias_value":"UNSVXC75BHFN","created_at":"2026-05-18T12:32:56Z"},{"alias_kind":"pith_short_16","alias_value":"UNSVXC75BHFNG4TG","created_at":"2026-05-18T12:32:56Z"},{"alias_kind":"pith_short_8","alias_value":"UNSVXC75","created_at":"2026-05-18T12:32:56Z"}],"graph_snapshots":[{"event_id":"sha256:75efeeb4e30c07ddf1661487eb978b8277c7f976a367c51fe40785e0028cc42d","target":"graph","created_at":"2026-05-18T00:01:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Collaborative machine learning and related techniques such as federated learning allow multiple participants, each with his own training dataset, to build a joint model by training locally and periodically exchanging model updates. We demonstrate that these updates leak unintended information about participants' training data and develop passive and active inference attacks to exploit this leakage. First, we show that an adversarial participant can infer the presence of exact data points -- for example, specific locations -- in others' training data (i.e., membership inference). Then, we show ","authors_text":"Congzheng Song, Emiliano De Cristofaro, Luca Melis, Vitaly Shmatikov","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-10T16:28:44Z","title":"Exploiting Unintended Feature Leakage in Collaborative Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1805.04049","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:93201a0f21d61e470a069360ac834483fa2b642edee4034917b9bf5f1bd9a439","target":"record","created_at":"2026-05-18T00:01:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ca657c677200fe964286ddc4f148a044f49790f173ef31dd91f5bfaea22aa639","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-10T16:28:44Z","title_canon_sha256":"81101cdaffdd2f63af314f2d3fb27a3a3b77656bf0e79aeac392369fc564ec73"},"schema_version":"1.0","source":{"id":"1805.04049","kind":"arxiv","version":3}},"canonical_sha256":"a3655b8bfd09cad372663656b73b6e51933bed6d37a2bb7213dea9e586dbe2a0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a3655b8bfd09cad372663656b73b6e51933bed6d37a2bb7213dea9e586dbe2a0","first_computed_at":"2026-05-18T00:01:47.226457Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:01:47.226457Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"dAUM2Er+lmJL7cFoB8BuMBSFR/KwiTZWf9m/NHIi1D7dq/DtpRk0UG+OPiAkv7V8mU7xVQumgJlzR5dc7UFxCA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:01:47.227201Z","signed_message":"canonical_sha256_bytes"},"source_id":"1805.04049","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:93201a0f21d61e470a069360ac834483fa2b642edee4034917b9bf5f1bd9a439","sha256:75efeeb4e30c07ddf1661487eb978b8277c7f976a367c51fe40785e0028cc42d"],"state_sha256":"630c3179a2b3e1536057a3e28b4b8349c0ed05f6300addb780de73349d7c4316"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+TdHPCAWga2Jaw3rTEHaiD82qt4Ct3B6mDfx9eejyWoKusQBKrCLRvHtkZRCbLFZm0l8LLhwJSfLCsk4QnapAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-31T22:15:35.972014Z","bundle_sha256":"117ce563f27815d23405f3df9446648217cdf39e21dc7f07678def7e8b460e8f"}}