{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:WVSDJAMZRHSY56ALL6C7CTEHBZ","short_pith_number":"pith:WVSDJAMZ","canonical_record":{"source":{"id":"2009.06228","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-09-14T07:04:02Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"d9408220ff89cff21977bbe0bacbf582ff160d4d3fba0d5e1097d21f061360a5","abstract_canon_sha256":"062b999d760e7d1cb4986104137853089de0f07604ad666cbf11b633368dab90"},"schema_version":"1.0"},"canonical_sha256":"b56434819989e58ef80b5f85f14c870e52f6b2aeebbc0a44502ed4e934ff534f","source":{"kind":"arxiv","id":"2009.06228","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.06228","created_at":"2026-07-05T01:35:06Z"},{"alias_kind":"arxiv_version","alias_value":"2009.06228v1","created_at":"2026-07-05T01:35:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.06228","created_at":"2026-07-05T01:35:06Z"},{"alias_kind":"pith_short_12","alias_value":"WVSDJAMZRHSY","created_at":"2026-07-05T01:35:06Z"},{"alias_kind":"pith_short_16","alias_value":"WVSDJAMZRHSY56AL","created_at":"2026-07-05T01:35:06Z"},{"alias_kind":"pith_short_8","alias_value":"WVSDJAMZ","created_at":"2026-07-05T01:35:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:WVSDJAMZRHSY56ALL6C7CTEHBZ","target":"record","payload":{"canonical_record":{"source":{"id":"2009.06228","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-09-14T07:04:02Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"d9408220ff89cff21977bbe0bacbf582ff160d4d3fba0d5e1097d21f061360a5","abstract_canon_sha256":"062b999d760e7d1cb4986104137853089de0f07604ad666cbf11b633368dab90"},"schema_version":"1.0"},"canonical_sha256":"b56434819989e58ef80b5f85f14c870e52f6b2aeebbc0a44502ed4e934ff534f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:35:06.429073Z","signature_b64":"+wcxJrbRyIBjRnalxaHL/+vUMwVGxUVSE+ZyKhCzgiueOjgUxbkyayDYc/maEkvP0pqG6vX8kwwsEI2uSPicAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b56434819989e58ef80b5f85f14c870e52f6b2aeebbc0a44502ed4e934ff534f","last_reissued_at":"2026-07-05T01:35:06.428646Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:35:06.428646Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2009.06228","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:35:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MXBwYfohmQis0WGO+QDAzR2I8lK15hDUpCsN3A/C1WCHq06AWvGs5IaR1K6HM11fjia3IeK/rb5PP+ci9FIIAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T21:30:42.361501Z"},"content_sha256":"40fdca367206832cb14a22c21fc9fdb353d86d63d97f6d49780e41ade395f7bf","schema_version":"1.0","event_id":"sha256:40fdca367206832cb14a22c21fc9fdb353d86d63d97f6d49780e41ade395f7bf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:WVSDJAMZRHSY56ALL6C7CTEHBZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SAPAG: A Self-Adaptive Privacy Attack From Gradients","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Caiwen Ding, Chenghong Wang, Dan Guo, Hang Liu, Jieren Deng, Sanguthevar Rajasekaran, Xianrui Meng, Yijue Wang","submitted_at":"2020-09-14T07:04:02Z","abstract_excerpt":"Distributed learning such as federated learning or collaborative learning enables model training on decentralized data from users and only collects local gradients, where data is processed close to its sources for data privacy. The nature of not centralizing the training data addresses the privacy issue of privacy-sensitive data. Recent studies show that a third party can reconstruct the true training data in the distributed machine learning system through the publicly-shared gradients. However, existing reconstruction attack frameworks lack generalizability on different Deep Neural Network (D"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.06228","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2009.06228/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:35:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"y/bFShinm0hjphrg6KjO3efK+V0FtxkPnJv3MJEKZTcG3AsSvh8JOEkddOHChmQYBJghkRsY9GDnfK2xFJfhBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T21:30:42.363288Z"},"content_sha256":"c2ad8e14b12c0f6d5416403edc2dcfb198b0700ad713ed514f5da10b1bc1d3d4","schema_version":"1.0","event_id":"sha256:c2ad8e14b12c0f6d5416403edc2dcfb198b0700ad713ed514f5da10b1bc1d3d4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WVSDJAMZRHSY56ALL6C7CTEHBZ/bundle.json","state_url":"https://pith.science/pith/WVSDJAMZRHSY56ALL6C7CTEHBZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WVSDJAMZRHSY56ALL6C7CTEHBZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T21:30:42Z","links":{"resolver":"https://pith.science/pith/WVSDJAMZRHSY56ALL6C7CTEHBZ","bundle":"https://pith.science/pith/WVSDJAMZRHSY56ALL6C7CTEHBZ/bundle.json","state":"https://pith.science/pith/WVSDJAMZRHSY56ALL6C7CTEHBZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WVSDJAMZRHSY56ALL6C7CTEHBZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:WVSDJAMZRHSY56ALL6C7CTEHBZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"062b999d760e7d1cb4986104137853089de0f07604ad666cbf11b633368dab90","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-09-14T07:04:02Z","title_canon_sha256":"d9408220ff89cff21977bbe0bacbf582ff160d4d3fba0d5e1097d21f061360a5"},"schema_version":"1.0","source":{"id":"2009.06228","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.06228","created_at":"2026-07-05T01:35:06Z"},{"alias_kind":"arxiv_version","alias_value":"2009.06228v1","created_at":"2026-07-05T01:35:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.06228","created_at":"2026-07-05T01:35:06Z"},{"alias_kind":"pith_short_12","alias_value":"WVSDJAMZRHSY","created_at":"2026-07-05T01:35:06Z"},{"alias_kind":"pith_short_16","alias_value":"WVSDJAMZRHSY56AL","created_at":"2026-07-05T01:35:06Z"},{"alias_kind":"pith_short_8","alias_value":"WVSDJAMZ","created_at":"2026-07-05T01:35:06Z"}],"graph_snapshots":[{"event_id":"sha256:c2ad8e14b12c0f6d5416403edc2dcfb198b0700ad713ed514f5da10b1bc1d3d4","target":"graph","created_at":"2026-07-05T01:35:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2009.06228/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Distributed learning such as federated learning or collaborative learning enables model training on decentralized data from users and only collects local gradients, where data is processed close to its sources for data privacy. The nature of not centralizing the training data addresses the privacy issue of privacy-sensitive data. Recent studies show that a third party can reconstruct the true training data in the distributed machine learning system through the publicly-shared gradients. However, existing reconstruction attack frameworks lack generalizability on different Deep Neural Network (D","authors_text":"Caiwen Ding, Chenghong Wang, Dan Guo, Hang Liu, Jieren Deng, Sanguthevar Rajasekaran, Xianrui Meng, Yijue Wang","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-09-14T07:04:02Z","title":"SAPAG: A Self-Adaptive Privacy Attack From Gradients"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.06228","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:40fdca367206832cb14a22c21fc9fdb353d86d63d97f6d49780e41ade395f7bf","target":"record","created_at":"2026-07-05T01:35:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"062b999d760e7d1cb4986104137853089de0f07604ad666cbf11b633368dab90","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-09-14T07:04:02Z","title_canon_sha256":"d9408220ff89cff21977bbe0bacbf582ff160d4d3fba0d5e1097d21f061360a5"},"schema_version":"1.0","source":{"id":"2009.06228","kind":"arxiv","version":1}},"canonical_sha256":"b56434819989e58ef80b5f85f14c870e52f6b2aeebbc0a44502ed4e934ff534f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b56434819989e58ef80b5f85f14c870e52f6b2aeebbc0a44502ed4e934ff534f","first_computed_at":"2026-07-05T01:35:06.428646Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:35:06.428646Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+wcxJrbRyIBjRnalxaHL/+vUMwVGxUVSE+ZyKhCzgiueOjgUxbkyayDYc/maEkvP0pqG6vX8kwwsEI2uSPicAA==","signature_status":"signed_v1","signed_at":"2026-07-05T01:35:06.429073Z","signed_message":"canonical_sha256_bytes"},"source_id":"2009.06228","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:40fdca367206832cb14a22c21fc9fdb353d86d63d97f6d49780e41ade395f7bf","sha256:c2ad8e14b12c0f6d5416403edc2dcfb198b0700ad713ed514f5da10b1bc1d3d4"],"state_sha256":"ea3e7506c1bf218ce85c1b1e1d068e85ddc3aeab1a6a3c6bbd28f7b2e60e5a99"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bwLd76sgGcyPtt90FEydw4Ctt2kxr1LlTBB8pPNt3EFbCVa+qR/egHBhqdZNhLGXBSNjsqog9CxbuFnuvfVPDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T21:30:42.370694Z","bundle_sha256":"7d7ba973ebda2fec660e89b74f98a1b1ff9053c1f4b3694a91e04267f6a93cba"}}