{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:VMN4A2N4EC4BDG2WJA6IU7NG77","short_pith_number":"pith:VMN4A2N4","canonical_record":{"source":{"id":"1905.10291","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-05-24T15:37:22Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"d93aed9beecfe2a2638f32d91bd40770ea6ad9df3063466c75a2501638c0d430","abstract_canon_sha256":"df1a3b3dab4967160d31cc909d0bce8f71dce9890b660791dc807955321bda60"},"schema_version":"1.0"},"canonical_sha256":"ab1bc069bc20b8119b56483c8a7da6ffc6b349c65970250e9b06e7c4a2a8cd2e","source":{"kind":"arxiv","id":"1905.10291","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1905.10291","created_at":"2026-07-04T23:59:32Z"},{"alias_kind":"arxiv_version","alias_value":"1905.10291v3","created_at":"2026-07-04T23:59:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1905.10291","created_at":"2026-07-04T23:59:32Z"},{"alias_kind":"pith_short_12","alias_value":"VMN4A2N4EC4B","created_at":"2026-07-04T23:59:32Z"},{"alias_kind":"pith_short_16","alias_value":"VMN4A2N4EC4BDG2W","created_at":"2026-07-04T23:59:32Z"},{"alias_kind":"pith_short_8","alias_value":"VMN4A2N4","created_at":"2026-07-04T23:59:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:VMN4A2N4EC4BDG2WJA6IU7NG77","target":"record","payload":{"canonical_record":{"source":{"id":"1905.10291","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-05-24T15:37:22Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"d93aed9beecfe2a2638f32d91bd40770ea6ad9df3063466c75a2501638c0d430","abstract_canon_sha256":"df1a3b3dab4967160d31cc909d0bce8f71dce9890b660791dc807955321bda60"},"schema_version":"1.0"},"canonical_sha256":"ab1bc069bc20b8119b56483c8a7da6ffc6b349c65970250e9b06e7c4a2a8cd2e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-04T23:59:32.644481Z","signature_b64":"4lKgeApxGTBfpH2ZzO07IkiAUj1A8Sm7CAc5rUJ90Amx76BkZQJACOUavPq2a5V6qY1ra/aXdPzHcTjwq3FKDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ab1bc069bc20b8119b56483c8a7da6ffc6b349c65970250e9b06e7c4a2a8cd2e","last_reissued_at":"2026-07-04T23:59:32.643985Z","signature_status":"signed_v1","first_computed_at":"2026-07-04T23:59:32.643985Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1905.10291","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:59:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kzeKawMUEFrkZNAoRtP5EW7rwRLNBHUHA269x4LsUarjP4XTreLv5hPbnwuhzjoXCJYOatJHwC5pq9vUgzgJBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T12:19:10.319581Z"},"content_sha256":"7e78a0158377323a15b49b0eb3db63a7a6c1e78dd11f02b475b0ccdc5ce03fa5","schema_version":"1.0","event_id":"sha256:7e78a0158377323a15b49b0eb3db63a7a6c1e78dd11f02b475b0ccdc5ce03fa5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:VMN4A2N4EC4BDG2WJA6IU7NG77","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Privacy Risks of Securing Machine Learning Models against Adversarial Examples","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"stat.ML","authors_text":"Liwei Song, Prateek Mittal, Reza Shokri","submitted_at":"2019-05-24T15:37:22Z","abstract_excerpt":"The arms race between attacks and defenses for machine learning models has come to a forefront in recent years, in both the security community and the privacy community. However, one big limitation of previous research is that the security domain and the privacy domain have typically been considered separately. It is thus unclear whether the defense methods in one domain will have any unexpected impact on the other domain.\n  In this paper, we take a step towards resolving this limitation by combining the two domains. In particular, we measure the success of membership inference attacks against"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1905.10291","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1905.10291/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:59:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3AODlSS8pw1s4U/JEJV8Vc1oAhYjs/KwYvWJahg+O8Bvuf6k6R0/pMBNw9TIVUKYR1DaECZdKMldXzPvXDm6BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T12:19:10.320407Z"},"content_sha256":"827713af95c276689314e189864670c4690a6206a165fcb0b3b7ae3ffaac0c46","schema_version":"1.0","event_id":"sha256:827713af95c276689314e189864670c4690a6206a165fcb0b3b7ae3ffaac0c46"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VMN4A2N4EC4BDG2WJA6IU7NG77/bundle.json","state_url":"https://pith.science/pith/VMN4A2N4EC4BDG2WJA6IU7NG77/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VMN4A2N4EC4BDG2WJA6IU7NG77/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T12:19:10Z","links":{"resolver":"https://pith.science/pith/VMN4A2N4EC4BDG2WJA6IU7NG77","bundle":"https://pith.science/pith/VMN4A2N4EC4BDG2WJA6IU7NG77/bundle.json","state":"https://pith.science/pith/VMN4A2N4EC4BDG2WJA6IU7NG77/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VMN4A2N4EC4BDG2WJA6IU7NG77/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:VMN4A2N4EC4BDG2WJA6IU7NG77","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"df1a3b3dab4967160d31cc909d0bce8f71dce9890b660791dc807955321bda60","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-05-24T15:37:22Z","title_canon_sha256":"d93aed9beecfe2a2638f32d91bd40770ea6ad9df3063466c75a2501638c0d430"},"schema_version":"1.0","source":{"id":"1905.10291","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1905.10291","created_at":"2026-07-04T23:59:32Z"},{"alias_kind":"arxiv_version","alias_value":"1905.10291v3","created_at":"2026-07-04T23:59:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1905.10291","created_at":"2026-07-04T23:59:32Z"},{"alias_kind":"pith_short_12","alias_value":"VMN4A2N4EC4B","created_at":"2026-07-04T23:59:32Z"},{"alias_kind":"pith_short_16","alias_value":"VMN4A2N4EC4BDG2W","created_at":"2026-07-04T23:59:32Z"},{"alias_kind":"pith_short_8","alias_value":"VMN4A2N4","created_at":"2026-07-04T23:59:32Z"}],"graph_snapshots":[{"event_id":"sha256:827713af95c276689314e189864670c4690a6206a165fcb0b3b7ae3ffaac0c46","target":"graph","created_at":"2026-07-04T23:59:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1905.10291/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The arms race between attacks and defenses for machine learning models has come to a forefront in recent years, in both the security community and the privacy community. However, one big limitation of previous research is that the security domain and the privacy domain have typically been considered separately. It is thus unclear whether the defense methods in one domain will have any unexpected impact on the other domain.\n  In this paper, we take a step towards resolving this limitation by combining the two domains. In particular, we measure the success of membership inference attacks against","authors_text":"Liwei Song, Prateek Mittal, Reza Shokri","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-05-24T15:37:22Z","title":"Privacy Risks of Securing Machine Learning Models against Adversarial Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1905.10291","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7e78a0158377323a15b49b0eb3db63a7a6c1e78dd11f02b475b0ccdc5ce03fa5","target":"record","created_at":"2026-07-04T23:59:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"df1a3b3dab4967160d31cc909d0bce8f71dce9890b660791dc807955321bda60","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2019-05-24T15:37:22Z","title_canon_sha256":"d93aed9beecfe2a2638f32d91bd40770ea6ad9df3063466c75a2501638c0d430"},"schema_version":"1.0","source":{"id":"1905.10291","kind":"arxiv","version":3}},"canonical_sha256":"ab1bc069bc20b8119b56483c8a7da6ffc6b349c65970250e9b06e7c4a2a8cd2e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ab1bc069bc20b8119b56483c8a7da6ffc6b349c65970250e9b06e7c4a2a8cd2e","first_computed_at":"2026-07-04T23:59:32.643985Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-04T23:59:32.643985Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4lKgeApxGTBfpH2ZzO07IkiAUj1A8Sm7CAc5rUJ90Amx76BkZQJACOUavPq2a5V6qY1ra/aXdPzHcTjwq3FKDQ==","signature_status":"signed_v1","signed_at":"2026-07-04T23:59:32.644481Z","signed_message":"canonical_sha256_bytes"},"source_id":"1905.10291","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7e78a0158377323a15b49b0eb3db63a7a6c1e78dd11f02b475b0ccdc5ce03fa5","sha256:827713af95c276689314e189864670c4690a6206a165fcb0b3b7ae3ffaac0c46"],"state_sha256":"75781ade0672ff2b88e1b4eb3079cb1106e3aada3eb4a7af4deba265af2a9d19"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uKuE5KfltLzQivoTEu+V0xfrF+L+ITJvUgjdBAdaErtPIYZIXQBIdLTMYNyxPc3wDLy4E3CMusjUOMhEUHHKCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T12:19:10.325517Z","bundle_sha256":"95e52b6e9d1c4b7b042efcc9e51ce1091bc6d0f0bd49fab52e331b6262ecce2c"}}