{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:UZUFP2SXKSVJUJ4LX2XPPJPN64","short_pith_number":"pith:UZUFP2SX","canonical_record":{"source":{"id":"2107.06304","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-13T18:01:43Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"3a2eb4749087af380b6766a0440216fa74201bffac9dae51dbe9bdda9e07a99d","abstract_canon_sha256":"d80333ec0ef589d2605276d2c51929a15911d0c86150df0ed3a033de109d3a7d"},"schema_version":"1.0"},"canonical_sha256":"a66857ea5754aa9a278bbeaef7a5edf72f9c6dfb324f16864a5665047c627be4","source":{"kind":"arxiv","id":"2107.06304","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.06304","created_at":"2026-07-05T05:09:48Z"},{"alias_kind":"arxiv_version","alias_value":"2107.06304v2","created_at":"2026-07-05T05:09:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.06304","created_at":"2026-07-05T05:09:48Z"},{"alias_kind":"pith_short_12","alias_value":"UZUFP2SXKSVJ","created_at":"2026-07-05T05:09:48Z"},{"alias_kind":"pith_short_16","alias_value":"UZUFP2SXKSVJUJ4L","created_at":"2026-07-05T05:09:48Z"},{"alias_kind":"pith_short_8","alias_value":"UZUFP2SX","created_at":"2026-07-05T05:09:48Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:UZUFP2SXKSVJUJ4LX2XPPJPN64","target":"record","payload":{"canonical_record":{"source":{"id":"2107.06304","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-13T18:01:43Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"3a2eb4749087af380b6766a0440216fa74201bffac9dae51dbe9bdda9e07a99d","abstract_canon_sha256":"d80333ec0ef589d2605276d2c51929a15911d0c86150df0ed3a033de109d3a7d"},"schema_version":"1.0"},"canonical_sha256":"a66857ea5754aa9a278bbeaef7a5edf72f9c6dfb324f16864a5665047c627be4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:09:48.409097Z","signature_b64":"GmgrOsUaGyYd86yEUPz5QJxbmAeTjqbPQN2jhDHbAfdUU9SquqNyOc7j47QD9OMEKcjNVJyVxfVwG2LpcsMvAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a66857ea5754aa9a278bbeaef7a5edf72f9c6dfb324f16864a5665047c627be4","last_reissued_at":"2026-07-05T05:09:48.408672Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:09:48.408672Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2107.06304","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:09:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vAy3LvXbuXUweYnnJTwS80sPMzEcSlSpc3SqCOJSt0ctXhIpmLAhUovaype1VGeQu3JhwmQyi0BAfIp3LZ1/CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T10:07:53.174262Z"},"content_sha256":"803a17a09036137def1faf9b4ab4df584c41e2682473f47e7a9ba0725e71bb0a","schema_version":"1.0","event_id":"sha256:803a17a09036137def1faf9b4ab4df584c41e2682473f47e7a9ba0725e71bb0a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:UZUFP2SXKSVJUJ4LX2XPPJPN64","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Privacy Vulnerability of Split Computing to Data-Free Model Inversion Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.LG","authors_text":"Hongxu Yin, H.T. Kung, Jan Kautz, Jose M. Alvarez, Pavlo Molchanov, Xin Dong","submitted_at":"2021-07-13T18:01:43Z","abstract_excerpt":"Mobile edge devices see increased demands in deep neural networks (DNNs) inference while suffering from stringent constraints in computing resources. Split computing (SC) emerges as a popular approach to the issue by executing only initial layers on devices and offloading the remaining to the cloud. Prior works usually assume that SC offers privacy benefits as only intermediate features, instead of private data, are shared from devices to the cloud. In this work, we debunk this SC-induced privacy protection by (i) presenting a novel data-free model inversion method and (ii) demonstrating sampl"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.06304","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2107.06304/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:09:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dKVlO+tDoLLRlQPHNw6mdwUkXP/vWLkIxBrBVjUL8tQrELbg8l86d9j6R1fmYHPjHPxZAoTOX5FnuT1aj0FzCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T10:07:53.174975Z"},"content_sha256":"926cfde78897e18f56d47014e7c2d9646c262623bf2590a7e1faa1b2576178f7","schema_version":"1.0","event_id":"sha256:926cfde78897e18f56d47014e7c2d9646c262623bf2590a7e1faa1b2576178f7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UZUFP2SXKSVJUJ4LX2XPPJPN64/bundle.json","state_url":"https://pith.science/pith/UZUFP2SXKSVJUJ4LX2XPPJPN64/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UZUFP2SXKSVJUJ4LX2XPPJPN64/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T10:07:53Z","links":{"resolver":"https://pith.science/pith/UZUFP2SXKSVJUJ4LX2XPPJPN64","bundle":"https://pith.science/pith/UZUFP2SXKSVJUJ4LX2XPPJPN64/bundle.json","state":"https://pith.science/pith/UZUFP2SXKSVJUJ4LX2XPPJPN64/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UZUFP2SXKSVJUJ4LX2XPPJPN64/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:UZUFP2SXKSVJUJ4LX2XPPJPN64","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d80333ec0ef589d2605276d2c51929a15911d0c86150df0ed3a033de109d3a7d","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-13T18:01:43Z","title_canon_sha256":"3a2eb4749087af380b6766a0440216fa74201bffac9dae51dbe9bdda9e07a99d"},"schema_version":"1.0","source":{"id":"2107.06304","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.06304","created_at":"2026-07-05T05:09:48Z"},{"alias_kind":"arxiv_version","alias_value":"2107.06304v2","created_at":"2026-07-05T05:09:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.06304","created_at":"2026-07-05T05:09:48Z"},{"alias_kind":"pith_short_12","alias_value":"UZUFP2SXKSVJ","created_at":"2026-07-05T05:09:48Z"},{"alias_kind":"pith_short_16","alias_value":"UZUFP2SXKSVJUJ4L","created_at":"2026-07-05T05:09:48Z"},{"alias_kind":"pith_short_8","alias_value":"UZUFP2SX","created_at":"2026-07-05T05:09:48Z"}],"graph_snapshots":[{"event_id":"sha256:926cfde78897e18f56d47014e7c2d9646c262623bf2590a7e1faa1b2576178f7","target":"graph","created_at":"2026-07-05T05:09:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2107.06304/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Mobile edge devices see increased demands in deep neural networks (DNNs) inference while suffering from stringent constraints in computing resources. Split computing (SC) emerges as a popular approach to the issue by executing only initial layers on devices and offloading the remaining to the cloud. Prior works usually assume that SC offers privacy benefits as only intermediate features, instead of private data, are shared from devices to the cloud. In this work, we debunk this SC-induced privacy protection by (i) presenting a novel data-free model inversion method and (ii) demonstrating sampl","authors_text":"Hongxu Yin, H.T. Kung, Jan Kautz, Jose M. Alvarez, Pavlo Molchanov, Xin Dong","cross_cats":["cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-13T18:01:43Z","title":"Privacy Vulnerability of Split Computing to Data-Free Model Inversion Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.06304","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:803a17a09036137def1faf9b4ab4df584c41e2682473f47e7a9ba0725e71bb0a","target":"record","created_at":"2026-07-05T05:09:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d80333ec0ef589d2605276d2c51929a15911d0c86150df0ed3a033de109d3a7d","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-07-13T18:01:43Z","title_canon_sha256":"3a2eb4749087af380b6766a0440216fa74201bffac9dae51dbe9bdda9e07a99d"},"schema_version":"1.0","source":{"id":"2107.06304","kind":"arxiv","version":2}},"canonical_sha256":"a66857ea5754aa9a278bbeaef7a5edf72f9c6dfb324f16864a5665047c627be4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a66857ea5754aa9a278bbeaef7a5edf72f9c6dfb324f16864a5665047c627be4","first_computed_at":"2026-07-05T05:09:48.408672Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:09:48.408672Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GmgrOsUaGyYd86yEUPz5QJxbmAeTjqbPQN2jhDHbAfdUU9SquqNyOc7j47QD9OMEKcjNVJyVxfVwG2LpcsMvAg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:09:48.409097Z","signed_message":"canonical_sha256_bytes"},"source_id":"2107.06304","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:803a17a09036137def1faf9b4ab4df584c41e2682473f47e7a9ba0725e71bb0a","sha256:926cfde78897e18f56d47014e7c2d9646c262623bf2590a7e1faa1b2576178f7"],"state_sha256":"bb76e4ccdb101323526b3ee49c69905d97d3ad5bfafe91d8d45efe2d13c5604c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0XO4LmuFn0tokJ8PJLmZsx1efA559L8sNrrHsxI+A1h8SD+cFHVEI1Om9ewzf0PxIMPZ5ZIeOUFsxE0wffojBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T10:07:53.181436Z","bundle_sha256":"b52753a12757950b611abe8f95cace6e1ea3b1d4f27120fb754633dff49fdce2"}}