{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:WO7IFRMGWMVTMIDQQIUVIV2JTG","short_pith_number":"pith:WO7IFRMG","canonical_record":{"source":{"id":"2105.13929","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-05-28T15:47:44Z","cross_cats_sorted":[],"title_canon_sha256":"ce9138b2442b42b4d3e8b7eade795585e8ee328478fbef5a7af48e88991d7887","abstract_canon_sha256":"d3f21611d062c99095579947dcf21e6fafcd619a06af6d9ff65a692b9c2e37ab"},"schema_version":"1.0"},"canonical_sha256":"b3be82c586b32b362070822954574999a729cd0eeb9f85f613383d5e9f7a3b40","source":{"kind":"arxiv","id":"2105.13929","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.13929","created_at":"2026-07-05T04:42:54Z"},{"alias_kind":"arxiv_version","alias_value":"2105.13929v3","created_at":"2026-07-05T04:42:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.13929","created_at":"2026-07-05T04:42:54Z"},{"alias_kind":"pith_short_12","alias_value":"WO7IFRMGWMVT","created_at":"2026-07-05T04:42:54Z"},{"alias_kind":"pith_short_16","alias_value":"WO7IFRMGWMVTMIDQ","created_at":"2026-07-05T04:42:54Z"},{"alias_kind":"pith_short_8","alias_value":"WO7IFRMG","created_at":"2026-07-05T04:42:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:WO7IFRMGWMVTMIDQQIUVIV2JTG","target":"record","payload":{"canonical_record":{"source":{"id":"2105.13929","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-05-28T15:47:44Z","cross_cats_sorted":[],"title_canon_sha256":"ce9138b2442b42b4d3e8b7eade795585e8ee328478fbef5a7af48e88991d7887","abstract_canon_sha256":"d3f21611d062c99095579947dcf21e6fafcd619a06af6d9ff65a692b9c2e37ab"},"schema_version":"1.0"},"canonical_sha256":"b3be82c586b32b362070822954574999a729cd0eeb9f85f613383d5e9f7a3b40","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:42:54.691740Z","signature_b64":"7K2ambNqiIucP+YlfA0ipNSPgpKOROXF0rhAz7np3nOa6jf6M/aA6hwaGOi3cWgxjIzoRjbVSFzbQWjQlu5LAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b3be82c586b32b362070822954574999a729cd0eeb9f85f613383d5e9f7a3b40","last_reissued_at":"2026-07-05T04:42:54.691261Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:42:54.691261Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2105.13929","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:42:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wz0EiF3ZivWHYDkirbJ+/u0ITQ3XAm+fAJsIODnBNZtgAe8tCS6GOPKndNcAcp4YWQN/rUbBXBlHg56KwbUaCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T17:55:43.636061Z"},"content_sha256":"a2ac2003e7c9bcf2d7e2d96171139a54572f35a50c7898095ec2d6fb17763479","schema_version":"1.0","event_id":"sha256:a2ac2003e7c9bcf2d7e2d96171139a54572f35a50c7898095ec2d6fb17763479"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:WO7IFRMGWMVTMIDQQIUVIV2JTG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Quantifying and Localizing Usable Information Leakage from Neural Network Gradients","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Anastasia Borovykh, Deniz G\\\"und\\\"uz, Fan Mo, Hamed Haddadi, Mohammad Malekzadeh, Soteris Demetriou","submitted_at":"2021-05-28T15:47:44Z","abstract_excerpt":"In collaborative learning, clients keep their data private and communicate only the computed gradients of the deep neural network being trained on their local data. Several recent attacks show that one can still extract private information from the shared network's gradients compromising clients' privacy. In this paper, to quantify the private information leakage from gradients we adopt usable information theory. We focus on two types of private information: original information in data reconstruction attacks and latent information in attribute inference attacks. Furthermore, a sensitivity ana"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.13929","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2105.13929/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:42:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tMmVLoFgzF64tivxRTK7OTCsoq+Z7pzDl9YwEjPPCTnQoITiA0iumAzIs/FMRBizfjQEwOzevEAR3dXkotyQDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T17:55:43.636440Z"},"content_sha256":"94ccb3130454e4c82410df94f689852a336db58d3eea27976cf829c4ea112c98","schema_version":"1.0","event_id":"sha256:94ccb3130454e4c82410df94f689852a336db58d3eea27976cf829c4ea112c98"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WO7IFRMGWMVTMIDQQIUVIV2JTG/bundle.json","state_url":"https://pith.science/pith/WO7IFRMGWMVTMIDQQIUVIV2JTG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WO7IFRMGWMVTMIDQQIUVIV2JTG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T17:55:43Z","links":{"resolver":"https://pith.science/pith/WO7IFRMGWMVTMIDQQIUVIV2JTG","bundle":"https://pith.science/pith/WO7IFRMGWMVTMIDQQIUVIV2JTG/bundle.json","state":"https://pith.science/pith/WO7IFRMGWMVTMIDQQIUVIV2JTG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WO7IFRMGWMVTMIDQQIUVIV2JTG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:WO7IFRMGWMVTMIDQQIUVIV2JTG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d3f21611d062c99095579947dcf21e6fafcd619a06af6d9ff65a692b9c2e37ab","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-05-28T15:47:44Z","title_canon_sha256":"ce9138b2442b42b4d3e8b7eade795585e8ee328478fbef5a7af48e88991d7887"},"schema_version":"1.0","source":{"id":"2105.13929","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.13929","created_at":"2026-07-05T04:42:54Z"},{"alias_kind":"arxiv_version","alias_value":"2105.13929v3","created_at":"2026-07-05T04:42:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.13929","created_at":"2026-07-05T04:42:54Z"},{"alias_kind":"pith_short_12","alias_value":"WO7IFRMGWMVT","created_at":"2026-07-05T04:42:54Z"},{"alias_kind":"pith_short_16","alias_value":"WO7IFRMGWMVTMIDQ","created_at":"2026-07-05T04:42:54Z"},{"alias_kind":"pith_short_8","alias_value":"WO7IFRMG","created_at":"2026-07-05T04:42:54Z"}],"graph_snapshots":[{"event_id":"sha256:94ccb3130454e4c82410df94f689852a336db58d3eea27976cf829c4ea112c98","target":"graph","created_at":"2026-07-05T04:42:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2105.13929/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In collaborative learning, clients keep their data private and communicate only the computed gradients of the deep neural network being trained on their local data. Several recent attacks show that one can still extract private information from the shared network's gradients compromising clients' privacy. In this paper, to quantify the private information leakage from gradients we adopt usable information theory. We focus on two types of private information: original information in data reconstruction attacks and latent information in attribute inference attacks. Furthermore, a sensitivity ana","authors_text":"Anastasia Borovykh, Deniz G\\\"und\\\"uz, Fan Mo, Hamed Haddadi, Mohammad Malekzadeh, Soteris Demetriou","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-05-28T15:47:44Z","title":"Quantifying and Localizing Usable Information Leakage from Neural Network Gradients"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.13929","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a2ac2003e7c9bcf2d7e2d96171139a54572f35a50c7898095ec2d6fb17763479","target":"record","created_at":"2026-07-05T04:42:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d3f21611d062c99095579947dcf21e6fafcd619a06af6d9ff65a692b9c2e37ab","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-05-28T15:47:44Z","title_canon_sha256":"ce9138b2442b42b4d3e8b7eade795585e8ee328478fbef5a7af48e88991d7887"},"schema_version":"1.0","source":{"id":"2105.13929","kind":"arxiv","version":3}},"canonical_sha256":"b3be82c586b32b362070822954574999a729cd0eeb9f85f613383d5e9f7a3b40","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b3be82c586b32b362070822954574999a729cd0eeb9f85f613383d5e9f7a3b40","first_computed_at":"2026-07-05T04:42:54.691261Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:42:54.691261Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7K2ambNqiIucP+YlfA0ipNSPgpKOROXF0rhAz7np3nOa6jf6M/aA6hwaGOi3cWgxjIzoRjbVSFzbQWjQlu5LAg==","signature_status":"signed_v1","signed_at":"2026-07-05T04:42:54.691740Z","signed_message":"canonical_sha256_bytes"},"source_id":"2105.13929","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a2ac2003e7c9bcf2d7e2d96171139a54572f35a50c7898095ec2d6fb17763479","sha256:94ccb3130454e4c82410df94f689852a336db58d3eea27976cf829c4ea112c98"],"state_sha256":"bcc7c47ce7cf69d7b466c18e813a02f5b5e9f676db55b3b40fb9725b6472909c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"d1s7m0vTy4HZSRUlLfzbhojJIQ1XIlGFktHLOQ9lCdmY6CkhGp5n5b+EdlYKAdvm9kMHhO8z5wb5kRx+RIleCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T17:55:43.639081Z","bundle_sha256":"cd2a5a928685c7cc6f2efb1dc6d3f23326552c2af54b34982675f3f289a07148"}}