{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:V4T67XHQJQURP5FFROFIY774DD","short_pith_number":"pith:V4T67XHQ","canonical_record":{"source":{"id":"2110.08324","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-10-15T19:22:52Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"23e3170975d24d12602add8695094a1c174bfc862bfcd972352dace518db8f94","abstract_canon_sha256":"8f01fdece1e7e9e6ac07ff733beb71a652b39c89ca0493bf6bfc2008b66e81be"},"schema_version":"1.0"},"canonical_sha256":"af27efdcf04c2917f4a58b8a8c7ffc18ede7c0730349d7ec8bed14418b5f3f78","source":{"kind":"arxiv","id":"2110.08324","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.08324","created_at":"2026-07-05T03:23:16Z"},{"alias_kind":"arxiv_version","alias_value":"2110.08324v1","created_at":"2026-07-05T03:23:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.08324","created_at":"2026-07-05T03:23:16Z"},{"alias_kind":"pith_short_12","alias_value":"V4T67XHQJQUR","created_at":"2026-07-05T03:23:16Z"},{"alias_kind":"pith_short_16","alias_value":"V4T67XHQJQURP5FF","created_at":"2026-07-05T03:23:16Z"},{"alias_kind":"pith_short_8","alias_value":"V4T67XHQ","created_at":"2026-07-05T03:23:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:V4T67XHQJQURP5FFROFIY774DD","target":"record","payload":{"canonical_record":{"source":{"id":"2110.08324","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-10-15T19:22:52Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"23e3170975d24d12602add8695094a1c174bfc862bfcd972352dace518db8f94","abstract_canon_sha256":"8f01fdece1e7e9e6ac07ff733beb71a652b39c89ca0493bf6bfc2008b66e81be"},"schema_version":"1.0"},"canonical_sha256":"af27efdcf04c2917f4a58b8a8c7ffc18ede7c0730349d7ec8bed14418b5f3f78","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:23:16.252824Z","signature_b64":"fR4ewLnACPZuelBdpkOlid2hHL6zLb6LDRL09eZ3WcNjCsUQLrEpseALye4SaCLW5r4EWQfDuwXCGrUiLJ+fDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"af27efdcf04c2917f4a58b8a8c7ffc18ede7c0730349d7ec8bed14418b5f3f78","last_reissued_at":"2026-07-05T03:23:16.252465Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:23:16.252465Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2110.08324","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:23:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8HxKHP5gTkLTXwUy8Ls54PAx+Psb1jPk7yKRsPlQ95uttzTslowwfwyDw4ivps0S7w5YiWjXaJ/qO7xN4aewBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T04:49:08.602625Z"},"content_sha256":"5d8fc5b3dff268e0f7ca330b649a37487f20036960983996550cba14a17253c0","schema_version":"1.0","event_id":"sha256:5d8fc5b3dff268e0f7ca330b649a37487f20036960983996550cba14a17253c0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:V4T67XHQJQURP5FFROFIY774DD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Amir Houmansadr, Liwei Song, Milad Nasr, Prateek Mittal, Saeed Mahloujifar, Virat Shejwalkar, Xinyu Tang","submitted_at":"2021-10-15T19:22:52Z","abstract_excerpt":"Membership inference attacks are a key measure to evaluate privacy leakage in machine learning (ML) models. These attacks aim to distinguish training members from non-members by exploiting differential behavior of the models on member and non-member inputs. The goal of this work is to train ML models that have high membership privacy while largely preserving their utility; we therefore aim for an empirical membership privacy guarantee as opposed to the provable privacy guarantees provided by techniques like differential privacy, as such techniques are shown to deteriorate model utility. Specif"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.08324","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2110.08324/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:23:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jBhqVHwEaHGxsNc45YKHUaUThIvTkaE1os4zSqnbLk0ntqWI3BqE6e1oGrxMdjzc/VRYjOonRIqEHtKjTZDsCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T04:49:08.603459Z"},"content_sha256":"756384b0bad025abf3d06fd29c25840d6fa96c06feb7b6f2dd58b3928003b684","schema_version":"1.0","event_id":"sha256:756384b0bad025abf3d06fd29c25840d6fa96c06feb7b6f2dd58b3928003b684"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/V4T67XHQJQURP5FFROFIY774DD/bundle.json","state_url":"https://pith.science/pith/V4T67XHQJQURP5FFROFIY774DD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/V4T67XHQJQURP5FFROFIY774DD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T04:49:08Z","links":{"resolver":"https://pith.science/pith/V4T67XHQJQURP5FFROFIY774DD","bundle":"https://pith.science/pith/V4T67XHQJQURP5FFROFIY774DD/bundle.json","state":"https://pith.science/pith/V4T67XHQJQURP5FFROFIY774DD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/V4T67XHQJQURP5FFROFIY774DD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:V4T67XHQJQURP5FFROFIY774DD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8f01fdece1e7e9e6ac07ff733beb71a652b39c89ca0493bf6bfc2008b66e81be","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-10-15T19:22:52Z","title_canon_sha256":"23e3170975d24d12602add8695094a1c174bfc862bfcd972352dace518db8f94"},"schema_version":"1.0","source":{"id":"2110.08324","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.08324","created_at":"2026-07-05T03:23:16Z"},{"alias_kind":"arxiv_version","alias_value":"2110.08324v1","created_at":"2026-07-05T03:23:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.08324","created_at":"2026-07-05T03:23:16Z"},{"alias_kind":"pith_short_12","alias_value":"V4T67XHQJQUR","created_at":"2026-07-05T03:23:16Z"},{"alias_kind":"pith_short_16","alias_value":"V4T67XHQJQURP5FF","created_at":"2026-07-05T03:23:16Z"},{"alias_kind":"pith_short_8","alias_value":"V4T67XHQ","created_at":"2026-07-05T03:23:16Z"}],"graph_snapshots":[{"event_id":"sha256:756384b0bad025abf3d06fd29c25840d6fa96c06feb7b6f2dd58b3928003b684","target":"graph","created_at":"2026-07-05T03:23:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2110.08324/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Membership inference attacks are a key measure to evaluate privacy leakage in machine learning (ML) models. These attacks aim to distinguish training members from non-members by exploiting differential behavior of the models on member and non-member inputs. The goal of this work is to train ML models that have high membership privacy while largely preserving their utility; we therefore aim for an empirical membership privacy guarantee as opposed to the provable privacy guarantees provided by techniques like differential privacy, as such techniques are shown to deteriorate model utility. Specif","authors_text":"Amir Houmansadr, Liwei Song, Milad Nasr, Prateek Mittal, Saeed Mahloujifar, Virat Shejwalkar, Xinyu Tang","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-10-15T19:22:52Z","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.08324","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5d8fc5b3dff268e0f7ca330b649a37487f20036960983996550cba14a17253c0","target":"record","created_at":"2026-07-05T03:23:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8f01fdece1e7e9e6ac07ff733beb71a652b39c89ca0493bf6bfc2008b66e81be","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-10-15T19:22:52Z","title_canon_sha256":"23e3170975d24d12602add8695094a1c174bfc862bfcd972352dace518db8f94"},"schema_version":"1.0","source":{"id":"2110.08324","kind":"arxiv","version":1}},"canonical_sha256":"af27efdcf04c2917f4a58b8a8c7ffc18ede7c0730349d7ec8bed14418b5f3f78","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"af27efdcf04c2917f4a58b8a8c7ffc18ede7c0730349d7ec8bed14418b5f3f78","first_computed_at":"2026-07-05T03:23:16.252465Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:23:16.252465Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fR4ewLnACPZuelBdpkOlid2hHL6zLb6LDRL09eZ3WcNjCsUQLrEpseALye4SaCLW5r4EWQfDuwXCGrUiLJ+fDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:23:16.252824Z","signed_message":"canonical_sha256_bytes"},"source_id":"2110.08324","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5d8fc5b3dff268e0f7ca330b649a37487f20036960983996550cba14a17253c0","sha256:756384b0bad025abf3d06fd29c25840d6fa96c06feb7b6f2dd58b3928003b684"],"state_sha256":"24659475e3d4dff51c7944705d1c542f4315bab000edb769593b80e623c73381"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Sana4uDzSfbDIa8wnWvlTV+JWDzPp4P34OxIFq5sN+XKzTwSzumo02ccXYueKsH+rdbJr0gMIvj0k7yzZWAtCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T04:49:08.608907Z","bundle_sha256":"cc7116985599a7af366819f2b0742502501284cb9ec5ea8fc81560a0ff5a3f30"}}