{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:VQVRC4A2X7QM2PE2GQHQXEFBKK","short_pith_number":"pith:VQVRC4A2","canonical_record":{"source":{"id":"2310.00108","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-09-29T19:38:40Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"2cfcb1bb964284df5ee6228ad63cf917ad085ea60599c3c734165f8f9fded2df","abstract_canon_sha256":"b0f3037820fec1611df092a2cd98e285ef0ba714f7a90acce1f764c59980681e"},"schema_version":"1.0"},"canonical_sha256":"ac2b11701abfe0cd3c9a340f0b90a1529109c3ea5b9880c581d210827b960228","source":{"kind":"arxiv","id":"2310.00108","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.00108","created_at":"2026-07-05T06:56:01Z"},{"alias_kind":"arxiv_version","alias_value":"2310.00108v1","created_at":"2026-07-05T06:56:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.00108","created_at":"2026-07-05T06:56:01Z"},{"alias_kind":"pith_short_12","alias_value":"VQVRC4A2X7QM","created_at":"2026-07-05T06:56:01Z"},{"alias_kind":"pith_short_16","alias_value":"VQVRC4A2X7QM2PE2","created_at":"2026-07-05T06:56:01Z"},{"alias_kind":"pith_short_8","alias_value":"VQVRC4A2","created_at":"2026-07-05T06:56:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:VQVRC4A2X7QM2PE2GQHQXEFBKK","target":"record","payload":{"canonical_record":{"source":{"id":"2310.00108","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-09-29T19:38:40Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"2cfcb1bb964284df5ee6228ad63cf917ad085ea60599c3c734165f8f9fded2df","abstract_canon_sha256":"b0f3037820fec1611df092a2cd98e285ef0ba714f7a90acce1f764c59980681e"},"schema_version":"1.0"},"canonical_sha256":"ac2b11701abfe0cd3c9a340f0b90a1529109c3ea5b9880c581d210827b960228","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:56:01.422072Z","signature_b64":"WEosbng2MXm4/QN5h+IQKI5ZWpo0i8AAZJe1I6gN8ByK6TQlgpcpL2KFL4Zij8met1wx66ksssGlkvZ/DGPECA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ac2b11701abfe0cd3c9a340f0b90a1529109c3ea5b9880c581d210827b960228","last_reissued_at":"2026-07-05T06:56:01.421603Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:56:01.421603Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.00108","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:56:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zHAsQr7slzvBJKCRguDQLKjjG5OJcOPtMAtsT2oolq4H/RmO33oSpkWZro58BM4apGaI8zSrZzB5pf0FZw2nBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T23:21:26.704631Z"},"content_sha256":"71e0734332d57e9a1cbf7c789cca418866a57efaadd6e7dd6162f9f45c469e65","schema_version":"1.0","event_id":"sha256:71e0734332d57e9a1cbf7c789cca418866a57efaadd6e7dd6162f9f45c469e65"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:VQVRC4A2X7QM2PE2GQHQXEFBKK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Practical Membership Inference Attacks Against Large-Scale Multi-Modal Models: A Pilot Study","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.LG","authors_text":"Chenguang Wang, Ming Jin, Myeongseob Ko, Ruoxi Jia","submitted_at":"2023-09-29T19:38:40Z","abstract_excerpt":"Membership inference attacks (MIAs) aim to infer whether a data point has been used to train a machine learning model. These attacks can be employed to identify potential privacy vulnerabilities and detect unauthorized use of personal data. While MIAs have been traditionally studied for simple classification models, recent advancements in multi-modal pre-training, such as CLIP, have demonstrated remarkable zero-shot performance across a range of computer vision tasks. However, the sheer scale of data and models presents significant computational challenges for performing the attacks.\n  This pa"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.00108","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.00108/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:56:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sWpU5ttZMIP7DgtW44LgACyuCC3cV8j+cb+Sp6Ys1Lu+MX5V6EIjQDg4H+OGQSqPYPxvSVB5qZSvwU3Res/OCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T23:21:26.705216Z"},"content_sha256":"f1bfab33b8780fa7cabe96df6fc9b42c165246b87094ab0a9bd978b4cb2d6e86","schema_version":"1.0","event_id":"sha256:f1bfab33b8780fa7cabe96df6fc9b42c165246b87094ab0a9bd978b4cb2d6e86"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VQVRC4A2X7QM2PE2GQHQXEFBKK/bundle.json","state_url":"https://pith.science/pith/VQVRC4A2X7QM2PE2GQHQXEFBKK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VQVRC4A2X7QM2PE2GQHQXEFBKK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T23:21:26Z","links":{"resolver":"https://pith.science/pith/VQVRC4A2X7QM2PE2GQHQXEFBKK","bundle":"https://pith.science/pith/VQVRC4A2X7QM2PE2GQHQXEFBKK/bundle.json","state":"https://pith.science/pith/VQVRC4A2X7QM2PE2GQHQXEFBKK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VQVRC4A2X7QM2PE2GQHQXEFBKK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:VQVRC4A2X7QM2PE2GQHQXEFBKK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b0f3037820fec1611df092a2cd98e285ef0ba714f7a90acce1f764c59980681e","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-09-29T19:38:40Z","title_canon_sha256":"2cfcb1bb964284df5ee6228ad63cf917ad085ea60599c3c734165f8f9fded2df"},"schema_version":"1.0","source":{"id":"2310.00108","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.00108","created_at":"2026-07-05T06:56:01Z"},{"alias_kind":"arxiv_version","alias_value":"2310.00108v1","created_at":"2026-07-05T06:56:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.00108","created_at":"2026-07-05T06:56:01Z"},{"alias_kind":"pith_short_12","alias_value":"VQVRC4A2X7QM","created_at":"2026-07-05T06:56:01Z"},{"alias_kind":"pith_short_16","alias_value":"VQVRC4A2X7QM2PE2","created_at":"2026-07-05T06:56:01Z"},{"alias_kind":"pith_short_8","alias_value":"VQVRC4A2","created_at":"2026-07-05T06:56:01Z"}],"graph_snapshots":[{"event_id":"sha256:f1bfab33b8780fa7cabe96df6fc9b42c165246b87094ab0a9bd978b4cb2d6e86","target":"graph","created_at":"2026-07-05T06:56:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.00108/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Membership inference attacks (MIAs) aim to infer whether a data point has been used to train a machine learning model. These attacks can be employed to identify potential privacy vulnerabilities and detect unauthorized use of personal data. While MIAs have been traditionally studied for simple classification models, recent advancements in multi-modal pre-training, such as CLIP, have demonstrated remarkable zero-shot performance across a range of computer vision tasks. However, the sheer scale of data and models presents significant computational challenges for performing the attacks.\n  This pa","authors_text":"Chenguang Wang, Ming Jin, Myeongseob Ko, Ruoxi Jia","cross_cats":["cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-09-29T19:38:40Z","title":"Practical Membership Inference Attacks Against Large-Scale Multi-Modal Models: A Pilot Study"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.00108","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:71e0734332d57e9a1cbf7c789cca418866a57efaadd6e7dd6162f9f45c469e65","target":"record","created_at":"2026-07-05T06:56:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b0f3037820fec1611df092a2cd98e285ef0ba714f7a90acce1f764c59980681e","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-09-29T19:38:40Z","title_canon_sha256":"2cfcb1bb964284df5ee6228ad63cf917ad085ea60599c3c734165f8f9fded2df"},"schema_version":"1.0","source":{"id":"2310.00108","kind":"arxiv","version":1}},"canonical_sha256":"ac2b11701abfe0cd3c9a340f0b90a1529109c3ea5b9880c581d210827b960228","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ac2b11701abfe0cd3c9a340f0b90a1529109c3ea5b9880c581d210827b960228","first_computed_at":"2026-07-05T06:56:01.421603Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:56:01.421603Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"WEosbng2MXm4/QN5h+IQKI5ZWpo0i8AAZJe1I6gN8ByK6TQlgpcpL2KFL4Zij8met1wx66ksssGlkvZ/DGPECA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:56:01.422072Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.00108","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:71e0734332d57e9a1cbf7c789cca418866a57efaadd6e7dd6162f9f45c469e65","sha256:f1bfab33b8780fa7cabe96df6fc9b42c165246b87094ab0a9bd978b4cb2d6e86"],"state_sha256":"66045372e9911f9d73218f97ca639a3216dd2dae26e58f5439025268512c4f6b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xAoXxSZsl08hlZk2GhYKa/C0hagGufuyWrQ+20YWI1PYqTfg3vYAc9sPMnFSveoC2UwUmHxvlHwXyRx8iogaAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T23:21:26.708821Z","bundle_sha256":"9397b0e4f8b88ff5c97f5ce564833ed6e6dfc58d582c65fc01a1d52576304563"}}