{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:VJWEJ65PLAK5YQYTXNWASATQZX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"42ca8619bfad2118b3b9238a12b77b221b15ab66ecfa4a11ccd060aa4d6b3be4","cross_cats_sorted":["cs.AI","cs.IR","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2022-03-25T21:47:59Z","title_canon_sha256":"3fdd40b412a0af53b32aa1c54291e18a20fecc6780432089839eef369da44468"},"schema_version":"1.0","source":{"id":"2203.13920","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.13920","created_at":"2026-07-05T04:08:44Z"},{"alias_kind":"arxiv_version","alias_value":"2203.13920v1","created_at":"2026-07-05T04:08:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.13920","created_at":"2026-07-05T04:08:44Z"},{"alias_kind":"pith_short_12","alias_value":"VJWEJ65PLAK5","created_at":"2026-07-05T04:08:44Z"},{"alias_kind":"pith_short_16","alias_value":"VJWEJ65PLAK5YQYT","created_at":"2026-07-05T04:08:44Z"},{"alias_kind":"pith_short_8","alias_value":"VJWEJ65P","created_at":"2026-07-05T04:08:44Z"}],"graph_snapshots":[{"event_id":"sha256:f54c9bb547a70c6e6e9d9a3a38a796ac86a407fc2a93fb58ae3dd4bf020ef228","target":"graph","created_at":"2026-07-05T04:08:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2203.13920/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Natural Language Understanding (NLU) models can be trained on sensitive information such as phone numbers, zip-codes etc. Recent literature has focused on Model Inversion Attacks (ModIvA) that can extract training data from model parameters. In this work, we present a version of such an attack by extracting canaries inserted in NLU training data. In the attack, an adversary with open-box access to the model reconstructs the canaries contained in the model's training set. We evaluate our approach by performing text completion on canaries and demonstrate that by using the prefix (non-sensitive) ","authors_text":"Christophe Dupuy, Rahil Parikh, Rahul Gupta","cross_cats":["cs.AI","cs.IR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2022-03-25T21:47:59Z","title":"Canary Extraction in Natural Language Understanding Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.13920","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cc5e605f0e14f250a69455bd261250ac3916f3e1331072a0781922bd26686835","target":"record","created_at":"2026-07-05T04:08:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"42ca8619bfad2118b3b9238a12b77b221b15ab66ecfa4a11ccd060aa4d6b3be4","cross_cats_sorted":["cs.AI","cs.IR","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2022-03-25T21:47:59Z","title_canon_sha256":"3fdd40b412a0af53b32aa1c54291e18a20fecc6780432089839eef369da44468"},"schema_version":"1.0","source":{"id":"2203.13920","kind":"arxiv","version":1}},"canonical_sha256":"aa6c44fbaf5815dc4313bb6c090270cdd766b5dd32100b9d72b09bd0a0ec82fc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"aa6c44fbaf5815dc4313bb6c090270cdd766b5dd32100b9d72b09bd0a0ec82fc","first_computed_at":"2026-07-05T04:08:44.802638Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:08:44.802638Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jUDjAPjIMOPAHrkTvjEI5zNlmNnsevkHISjHobNOGkC8Bqz34waybyqqyWY+UOB52Ex1Hjpfk9kSOszpoTOcDw==","signature_status":"signed_v1","signed_at":"2026-07-05T04:08:44.803076Z","signed_message":"canonical_sha256_bytes"},"source_id":"2203.13920","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cc5e605f0e14f250a69455bd261250ac3916f3e1331072a0781922bd26686835","sha256:f54c9bb547a70c6e6e9d9a3a38a796ac86a407fc2a93fb58ae3dd4bf020ef228"],"state_sha256":"d802e7eed53f2ba2fd397749bfe0efcbe565730682c1d48ca3b10b6af10c5339"}