{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:UWWHDGCPWVF53GPPXKASESOYG5","short_pith_number":"pith:UWWHDGCP","canonical_record":{"source":{"id":"2202.06924","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-14T18:33:12Z","cross_cats_sorted":["cs.CR","cs.CV","cs.DC"],"title_canon_sha256":"b9d4f8581b3c322350b3696b072b28c0f9eec9f8d34edae931129e0b089f93d3","abstract_canon_sha256":"dfc67faa06e98749a24e9b4d6e87383911837bf99b4c4b9c3761a57a6c59a0ac"},"schema_version":"1.0"},"canonical_sha256":"a5ac71984fb54bdd99efba812249d8376fb4a745761faa6c80de64948e327ec1","source":{"kind":"arxiv","id":"2202.06924","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.06924","created_at":"2026-07-05T05:37:04Z"},{"alias_kind":"arxiv_version","alias_value":"2202.06924v3","created_at":"2026-07-05T05:37:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.06924","created_at":"2026-07-05T05:37:04Z"},{"alias_kind":"pith_short_12","alias_value":"UWWHDGCPWVF5","created_at":"2026-07-05T05:37:04Z"},{"alias_kind":"pith_short_16","alias_value":"UWWHDGCPWVF53GPP","created_at":"2026-07-05T05:37:04Z"},{"alias_kind":"pith_short_8","alias_value":"UWWHDGCP","created_at":"2026-07-05T05:37:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:UWWHDGCPWVF53GPPXKASESOYG5","target":"record","payload":{"canonical_record":{"source":{"id":"2202.06924","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-14T18:33:12Z","cross_cats_sorted":["cs.CR","cs.CV","cs.DC"],"title_canon_sha256":"b9d4f8581b3c322350b3696b072b28c0f9eec9f8d34edae931129e0b089f93d3","abstract_canon_sha256":"dfc67faa06e98749a24e9b4d6e87383911837bf99b4c4b9c3761a57a6c59a0ac"},"schema_version":"1.0"},"canonical_sha256":"a5ac71984fb54bdd99efba812249d8376fb4a745761faa6c80de64948e327ec1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:37:04.826588Z","signature_b64":"gDWnGCieTYFLZ+gKKna2iiL7IuVzwvBu4l6mcRd1pO4J68PY7iq7KNyBlCPT8ljP2buDZrjKHqhDvg6gl6uoBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a5ac71984fb54bdd99efba812249d8376fb4a745761faa6c80de64948e327ec1","last_reissued_at":"2026-07-05T05:37:04.826115Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:37:04.826115Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2202.06924","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:37:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"E+okPRiPoBaadCvf4rjxD0/m+6w85n9jJju8FMzX0hF7Aw53NkuwKifz8atHG5uOREocJecMxQ+ET88XW40KDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T06:51:56.514964Z"},"content_sha256":"613185510b023b313d0c9bee7f07668e8824689cbe4c7f79c145c91f8a57b879","schema_version":"1.0","event_id":"sha256:613185510b023b313d0c9bee7f07668e8824689cbe4c7f79c145c91f8a57b879"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:UWWHDGCPWVF53GPPXKASESOYG5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Do Gradient Inversion Attacks Make Federated Learning Unsafe?","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV","cs.DC"],"primary_cat":"cs.LG","authors_text":"Ali Hatamizadeh, Andrew Feng, Andriy Myronenko, Daguang Xu, Holger R. Roth, Hongxu Yin, Jan Kautz, Mona G. Flores, Pavlo Molchanov, Prerna Dogra, Wenqi Li","submitted_at":"2022-02-14T18:33:12Z","abstract_excerpt":"Federated learning (FL) allows the collaborative training of AI models without needing to share raw data. This capability makes it especially interesting for healthcare applications where patient and data privacy is of utmost concern. However, recent works on the inversion of deep neural networks from model gradients raised concerns about the security of FL in preventing the leakage of training data. In this work, we show that these attacks presented in the literature are impractical in FL use-cases where the clients' training involves updating the Batch Normalization (BN) statistics and provi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.06924","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2202.06924/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:37:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"81DDz6cnrbB1nXy+8QrrCTJ7UvkWafnUnZnmwpNahDFRrAP7V0xMb4Kn0ffGQa+CPJKlw54OfqkHeW631pReBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T06:51:56.515364Z"},"content_sha256":"b5ce57458f6ac8694a488a07323100b233ff19fd9a472a082b25dfff0d566150","schema_version":"1.0","event_id":"sha256:b5ce57458f6ac8694a488a07323100b233ff19fd9a472a082b25dfff0d566150"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UWWHDGCPWVF53GPPXKASESOYG5/bundle.json","state_url":"https://pith.science/pith/UWWHDGCPWVF53GPPXKASESOYG5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UWWHDGCPWVF53GPPXKASESOYG5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-09T06:51:56Z","links":{"resolver":"https://pith.science/pith/UWWHDGCPWVF53GPPXKASESOYG5","bundle":"https://pith.science/pith/UWWHDGCPWVF53GPPXKASESOYG5/bundle.json","state":"https://pith.science/pith/UWWHDGCPWVF53GPPXKASESOYG5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UWWHDGCPWVF53GPPXKASESOYG5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:UWWHDGCPWVF53GPPXKASESOYG5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"dfc67faa06e98749a24e9b4d6e87383911837bf99b4c4b9c3761a57a6c59a0ac","cross_cats_sorted":["cs.CR","cs.CV","cs.DC"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-14T18:33:12Z","title_canon_sha256":"b9d4f8581b3c322350b3696b072b28c0f9eec9f8d34edae931129e0b089f93d3"},"schema_version":"1.0","source":{"id":"2202.06924","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.06924","created_at":"2026-07-05T05:37:04Z"},{"alias_kind":"arxiv_version","alias_value":"2202.06924v3","created_at":"2026-07-05T05:37:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.06924","created_at":"2026-07-05T05:37:04Z"},{"alias_kind":"pith_short_12","alias_value":"UWWHDGCPWVF5","created_at":"2026-07-05T05:37:04Z"},{"alias_kind":"pith_short_16","alias_value":"UWWHDGCPWVF53GPP","created_at":"2026-07-05T05:37:04Z"},{"alias_kind":"pith_short_8","alias_value":"UWWHDGCP","created_at":"2026-07-05T05:37:04Z"}],"graph_snapshots":[{"event_id":"sha256:b5ce57458f6ac8694a488a07323100b233ff19fd9a472a082b25dfff0d566150","target":"graph","created_at":"2026-07-05T05:37:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.06924/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning (FL) allows the collaborative training of AI models without needing to share raw data. This capability makes it especially interesting for healthcare applications where patient and data privacy is of utmost concern. However, recent works on the inversion of deep neural networks from model gradients raised concerns about the security of FL in preventing the leakage of training data. In this work, we show that these attacks presented in the literature are impractical in FL use-cases where the clients' training involves updating the Batch Normalization (BN) statistics and provi","authors_text":"Ali Hatamizadeh, Andrew Feng, Andriy Myronenko, Daguang Xu, Holger R. Roth, Hongxu Yin, Jan Kautz, Mona G. Flores, Pavlo Molchanov, Prerna Dogra, Wenqi Li","cross_cats":["cs.CR","cs.CV","cs.DC"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-14T18:33:12Z","title":"Do Gradient Inversion Attacks Make Federated Learning Unsafe?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.06924","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:613185510b023b313d0c9bee7f07668e8824689cbe4c7f79c145c91f8a57b879","target":"record","created_at":"2026-07-05T05:37:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"dfc67faa06e98749a24e9b4d6e87383911837bf99b4c4b9c3761a57a6c59a0ac","cross_cats_sorted":["cs.CR","cs.CV","cs.DC"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-14T18:33:12Z","title_canon_sha256":"b9d4f8581b3c322350b3696b072b28c0f9eec9f8d34edae931129e0b089f93d3"},"schema_version":"1.0","source":{"id":"2202.06924","kind":"arxiv","version":3}},"canonical_sha256":"a5ac71984fb54bdd99efba812249d8376fb4a745761faa6c80de64948e327ec1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a5ac71984fb54bdd99efba812249d8376fb4a745761faa6c80de64948e327ec1","first_computed_at":"2026-07-05T05:37:04.826115Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:37:04.826115Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gDWnGCieTYFLZ+gKKna2iiL7IuVzwvBu4l6mcRd1pO4J68PY7iq7KNyBlCPT8ljP2buDZrjKHqhDvg6gl6uoBg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:37:04.826588Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.06924","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:613185510b023b313d0c9bee7f07668e8824689cbe4c7f79c145c91f8a57b879","sha256:b5ce57458f6ac8694a488a07323100b233ff19fd9a472a082b25dfff0d566150"],"state_sha256":"0174377dc2db458f805e649a2743a9bcd2bfd1fed74066a4e8408e57884dfad5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eTjMNl+tR8a/DuL+9/JzjjqLqpOXapaUc1Nyela2KlIjCnH6zhbPkvkmXFjaNM3iIlpRPv3cF3IM12IySUUSAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-09T06:51:56.517758Z","bundle_sha256":"c9ecb1d7a5a679a63c569af16a73c5efc60f10d0218e3955ddddde85bb4ac822"}}