{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:W5ZN3WHK36AO2GZJUBGGSM7EWH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"35193c39a1f93fe7451f9f02265b871ae3282b00ccc987eed328b951e7cfbbf5","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-08-11T22:03:36Z","title_canon_sha256":"3111e0a18a68ae8ec297c8e802b361a0ab074f2b77c2ec7727a5f7a0ce17b0c6"},"schema_version":"1.0","source":{"id":"2308.06405","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.06405","created_at":"2026-07-05T11:32:13Z"},{"alias_kind":"arxiv_version","alias_value":"2308.06405v3","created_at":"2026-07-05T11:32:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.06405","created_at":"2026-07-05T11:32:13Z"},{"alias_kind":"pith_short_12","alias_value":"W5ZN3WHK36AO","created_at":"2026-07-05T11:32:13Z"},{"alias_kind":"pith_short_16","alias_value":"W5ZN3WHK36AO2GZJ","created_at":"2026-07-05T11:32:13Z"},{"alias_kind":"pith_short_8","alias_value":"W5ZN3WHK","created_at":"2026-07-05T11:32:13Z"}],"graph_snapshots":[{"event_id":"sha256:4a126e5cf792e205719db6a79af63a692ae76da36c4aa9db7b92d22ef9385f90","target":"graph","created_at":"2026-07-05T11:32:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2308.06405/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Diffusion models have begun to overshadow GANs and other generative models in industrial applications due to their superior image generation performance. The complex architecture of these models furnishes an extensive array of attack features. In light of this, we aim to design membership inference attacks (MIAs) catered to diffusion models. We first conduct an exhaustive analysis of existing MIAs on diffusion models, taking into account factors such as black-box/white-box models and the selection of attack features. We found that white-box attacks are highly applicable in real-world scenarios","authors_text":"Mengdi Huai, Tianhao Wang, Xuhui Kang, Yang Zhang, Yan Pang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-08-11T22:03:36Z","title":"White-box Membership Inference Attacks against Diffusion Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.06405","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7532166a7a622461f42962b5b18e05dcf6cc5903de1450971ba3ae99d59e5033","target":"record","created_at":"2026-07-05T11:32:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"35193c39a1f93fe7451f9f02265b871ae3282b00ccc987eed328b951e7cfbbf5","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-08-11T22:03:36Z","title_canon_sha256":"3111e0a18a68ae8ec297c8e802b361a0ab074f2b77c2ec7727a5f7a0ce17b0c6"},"schema_version":"1.0","source":{"id":"2308.06405","kind":"arxiv","version":3}},"canonical_sha256":"b772ddd8eadf80ed1b29a04c6933e4b1d6ee45ee098f77be4608a21525e819ab","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b772ddd8eadf80ed1b29a04c6933e4b1d6ee45ee098f77be4608a21525e819ab","first_computed_at":"2026-07-05T11:32:13.121934Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:32:13.121934Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PmrdLPxLlM0QZJLgVWQfkMGk9N1FvV1XQHYvWvyWtdWgmWnvkWKPc2bMrtog56xORxJUh9eufi02yOmcty+hAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:32:13.122476Z","signed_message":"canonical_sha256_bytes"},"source_id":"2308.06405","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7532166a7a622461f42962b5b18e05dcf6cc5903de1450971ba3ae99d59e5033","sha256:4a126e5cf792e205719db6a79af63a692ae76da36c4aa9db7b92d22ef9385f90"],"state_sha256":"37de164d7b5208771f5ee2f827010988305e27773e917ff99ead2fa396e43526"}