{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:WLINJR5FDFN7XF3XPXCSC6AKQP","short_pith_number":"pith:WLINJR5F","canonical_record":{"source":{"id":"2402.06289","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-09T09:58:35Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"448bf0bf0ded57ac6700598f2c188f35a54c5b53093ba46648fdf0850b54e57a","abstract_canon_sha256":"2f111e57f0a353e354e2bcd3721aec081848ffd7ecbf0f7ee50101e6c417cd3d"},"schema_version":"1.0"},"canonical_sha256":"b2d0d4c7a5195bfb97777dc521780a83ff998e517ab2c3a76983be9489256b24","source":{"kind":"arxiv","id":"2402.06289","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.06289","created_at":"2026-07-05T10:40:00Z"},{"alias_kind":"arxiv_version","alias_value":"2402.06289v3","created_at":"2026-07-05T10:40:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.06289","created_at":"2026-07-05T10:40:00Z"},{"alias_kind":"pith_short_12","alias_value":"WLINJR5FDFN7","created_at":"2026-07-05T10:40:00Z"},{"alias_kind":"pith_short_16","alias_value":"WLINJR5FDFN7XF3X","created_at":"2026-07-05T10:40:00Z"},{"alias_kind":"pith_short_8","alias_value":"WLINJR5F","created_at":"2026-07-05T10:40:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:WLINJR5FDFN7XF3XPXCSC6AKQP","target":"record","payload":{"canonical_record":{"source":{"id":"2402.06289","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-09T09:58:35Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"448bf0bf0ded57ac6700598f2c188f35a54c5b53093ba46648fdf0850b54e57a","abstract_canon_sha256":"2f111e57f0a353e354e2bcd3721aec081848ffd7ecbf0f7ee50101e6c417cd3d"},"schema_version":"1.0"},"canonical_sha256":"b2d0d4c7a5195bfb97777dc521780a83ff998e517ab2c3a76983be9489256b24","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:40:00.049691Z","signature_b64":"chVnpiZfC6SjlWosZIDG3nufkbb1aige/omE8LttNobOpyMjx8Zdbr0N65c2UOJLCkuTZ/3yOY4JeQDS7rrICw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b2d0d4c7a5195bfb97777dc521780a83ff998e517ab2c3a76983be9489256b24","last_reissued_at":"2026-07-05T10:40:00.049285Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:40:00.049285Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.06289","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:40:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GCUoZDUkvHw1+hesVUaPVPfqrmIQyplDdMPrWoCeMWnJr6af5tosRrgt8N3qXR5JifMvt66HZD4l7jQrWgGlCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T09:10:22.102144Z"},"content_sha256":"88ce953bbb6a0126a8aa78fa24601bda32e954dfc4478a577f63603fd1a7be36","schema_version":"1.0","event_id":"sha256:88ce953bbb6a0126a8aa78fa24601bda32e954dfc4478a577f63603fd1a7be36"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:WLINJR5FDFN7XF3XPXCSC6AKQP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"FedMIA: An Effective Membership Inference Attack Exploiting \"All for One\" Principle in Federated Learning","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Donghao Li, Gongxi Zhu, Hanlin Gu, Lixin Fan, Yuan Yao, Yuxing Han","submitted_at":"2024-02-09T09:58:35Z","abstract_excerpt":"Federated Learning (FL) is a promising approach for training machine learning models on decentralized data while preserving privacy. However, privacy risks, particularly Membership Inference Attacks (MIAs), which aim to determine whether a specific data point belongs to a target client's training set, remain a significant concern. Existing methods for implementing MIAs in FL primarily analyze updates from the target client, focusing on metrics such as loss, gradient norm, and gradient difference. However, these methods fail to leverage updates from non-target clients, potentially underutilizin"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.06289","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.06289/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:40:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gqC+JbIEcr1ZhPsMoeJTyo5ZFjcjflXJvGwuX6Nhdl8q1Z/5L84ETkuXNh2gPxHiJK3Popcoggv3c89idxn6Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T09:10:22.102648Z"},"content_sha256":"f6431712e25f458c230ddd6f33bc5ad5253ecc2eda269e4edb8939d45ca335a3","schema_version":"1.0","event_id":"sha256:f6431712e25f458c230ddd6f33bc5ad5253ecc2eda269e4edb8939d45ca335a3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WLINJR5FDFN7XF3XPXCSC6AKQP/bundle.json","state_url":"https://pith.science/pith/WLINJR5FDFN7XF3XPXCSC6AKQP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WLINJR5FDFN7XF3XPXCSC6AKQP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T09:10:22Z","links":{"resolver":"https://pith.science/pith/WLINJR5FDFN7XF3XPXCSC6AKQP","bundle":"https://pith.science/pith/WLINJR5FDFN7XF3XPXCSC6AKQP/bundle.json","state":"https://pith.science/pith/WLINJR5FDFN7XF3XPXCSC6AKQP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WLINJR5FDFN7XF3XPXCSC6AKQP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:WLINJR5FDFN7XF3XPXCSC6AKQP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2f111e57f0a353e354e2bcd3721aec081848ffd7ecbf0f7ee50101e6c417cd3d","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-09T09:58:35Z","title_canon_sha256":"448bf0bf0ded57ac6700598f2c188f35a54c5b53093ba46648fdf0850b54e57a"},"schema_version":"1.0","source":{"id":"2402.06289","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.06289","created_at":"2026-07-05T10:40:00Z"},{"alias_kind":"arxiv_version","alias_value":"2402.06289v3","created_at":"2026-07-05T10:40:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.06289","created_at":"2026-07-05T10:40:00Z"},{"alias_kind":"pith_short_12","alias_value":"WLINJR5FDFN7","created_at":"2026-07-05T10:40:00Z"},{"alias_kind":"pith_short_16","alias_value":"WLINJR5FDFN7XF3X","created_at":"2026-07-05T10:40:00Z"},{"alias_kind":"pith_short_8","alias_value":"WLINJR5F","created_at":"2026-07-05T10:40:00Z"}],"graph_snapshots":[{"event_id":"sha256:f6431712e25f458c230ddd6f33bc5ad5253ecc2eda269e4edb8939d45ca335a3","target":"graph","created_at":"2026-07-05T10:40:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.06289/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated Learning (FL) is a promising approach for training machine learning models on decentralized data while preserving privacy. However, privacy risks, particularly Membership Inference Attacks (MIAs), which aim to determine whether a specific data point belongs to a target client's training set, remain a significant concern. Existing methods for implementing MIAs in FL primarily analyze updates from the target client, focusing on metrics such as loss, gradient norm, and gradient difference. However, these methods fail to leverage updates from non-target clients, potentially underutilizin","authors_text":"Donghao Li, Gongxi Zhu, Hanlin Gu, Lixin Fan, Yuan Yao, Yuxing Han","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-09T09:58:35Z","title":"FedMIA: An Effective Membership Inference Attack Exploiting \"All for One\" Principle in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.06289","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:88ce953bbb6a0126a8aa78fa24601bda32e954dfc4478a577f63603fd1a7be36","target":"record","created_at":"2026-07-05T10:40:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2f111e57f0a353e354e2bcd3721aec081848ffd7ecbf0f7ee50101e6c417cd3d","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-09T09:58:35Z","title_canon_sha256":"448bf0bf0ded57ac6700598f2c188f35a54c5b53093ba46648fdf0850b54e57a"},"schema_version":"1.0","source":{"id":"2402.06289","kind":"arxiv","version":3}},"canonical_sha256":"b2d0d4c7a5195bfb97777dc521780a83ff998e517ab2c3a76983be9489256b24","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b2d0d4c7a5195bfb97777dc521780a83ff998e517ab2c3a76983be9489256b24","first_computed_at":"2026-07-05T10:40:00.049285Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:40:00.049285Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"chVnpiZfC6SjlWosZIDG3nufkbb1aige/omE8LttNobOpyMjx8Zdbr0N65c2UOJLCkuTZ/3yOY4JeQDS7rrICw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:40:00.049691Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.06289","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:88ce953bbb6a0126a8aa78fa24601bda32e954dfc4478a577f63603fd1a7be36","sha256:f6431712e25f458c230ddd6f33bc5ad5253ecc2eda269e4edb8939d45ca335a3"],"state_sha256":"3b50c5525c80710694cc11eacf886a3d08dba014d59e24a00dfdc5671c592f18"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1ClrELuSfzDfC+tuT4sG4R+INvOe70AxTLtKvN3VErTOcAc5O21rjtWc+4/HXlfAHZ5y9l5eXrjJp25Lb3oVAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T09:10:22.106474Z","bundle_sha256":"8da5e4fee5e61fd233f0aad193e6e7019e05dc9193afc9eda022c44c47895423"}}