{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:WXHLK6UKH4YQRPEOR6LMDRK6Q5","short_pith_number":"pith:WXHLK6UK","canonical_record":{"source":{"id":"2002.02061","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-02-06T01:47:08Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"c8703bb70bf2dc5d3a6b50f997a6a21d33a289acfdcdfffe5e2d3bab39337235","abstract_canon_sha256":"7faf6941f67e8df2f4d2effb6400914df22cfe2463572754a5bf3e822c85cc2a"},"schema_version":"1.0"},"canonical_sha256":"b5ceb57a8a3f3108bc8e8f96c1c55e877216055c5b33d705168b62856290837a","source":{"kind":"arxiv","id":"2002.02061","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.02061","created_at":"2026-07-05T01:08:27Z"},{"alias_kind":"arxiv_version","alias_value":"2002.02061v3","created_at":"2026-07-05T01:08:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.02061","created_at":"2026-07-05T01:08:27Z"},{"alias_kind":"pith_short_12","alias_value":"WXHLK6UKH4YQ","created_at":"2026-07-05T01:08:27Z"},{"alias_kind":"pith_short_16","alias_value":"WXHLK6UKH4YQRPEO","created_at":"2026-07-05T01:08:27Z"},{"alias_kind":"pith_short_8","alias_value":"WXHLK6UK","created_at":"2026-07-05T01:08:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:WXHLK6UKH4YQRPEOR6LMDRK6Q5","target":"record","payload":{"canonical_record":{"source":{"id":"2002.02061","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-02-06T01:47:08Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"c8703bb70bf2dc5d3a6b50f997a6a21d33a289acfdcdfffe5e2d3bab39337235","abstract_canon_sha256":"7faf6941f67e8df2f4d2effb6400914df22cfe2463572754a5bf3e822c85cc2a"},"schema_version":"1.0"},"canonical_sha256":"b5ceb57a8a3f3108bc8e8f96c1c55e877216055c5b33d705168b62856290837a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:08:27.451541Z","signature_b64":"I7KxPT1sGNH6xSTn4/wSFsg0t2mMoNeSzOwW5Ovymh4VajkRTQ2uwosg6igceUDFHR8J6TSZTmv+Ga1cmyOBAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b5ceb57a8a3f3108bc8e8f96c1c55e877216055c5b33d705168b62856290837a","last_reissued_at":"2026-07-05T01:08:27.451061Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:08:27.451061Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2002.02061","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:08:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bDo1WCf7CpQB86SD07vpJ0VXRCnjtcItXQMW3Q3AjQ5mZaNvzQbCgtWnpw1gukQ5eb4oiP71U0v5W1LnQmQfAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T21:28:59.412405Z"},"content_sha256":"6a50414650cd4966144afcb764ed8b2bf7ad13e776a4e946779bf16f0ca70b13","schema_version":"1.0","event_id":"sha256:6a50414650cd4966144afcb764ed8b2bf7ad13e776a4e946779bf16f0ca70b13"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:WXHLK6UKH4YQRPEOR6LMDRK6Q5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Mitigating Query-Flooding Parameter Duplication Attack on Regression Models with High-Dimensional Gaussian Mechanism","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Haonan Yan, Hui Li, Hui Zhu, Wenhai Sun, Xiaoguang Li, Zelei Cheng","submitted_at":"2020-02-06T01:47:08Z","abstract_excerpt":"Public intelligent services enabled by machine learning algorithms are vulnerable to model extraction attacks that can steal confidential information of the learning models through public queries. Differential privacy (DP) has been considered a promising technique to mitigate this attack. However, we find that the vulnerability persists when regression models are being protected by current DP solutions. We show that the adversary can launch a query-flooding parameter duplication (QPD) attack to infer the model information by repeated queries.\n  To defend against the QPD attack on logistic and "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.02061","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2002.02061/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:08:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mD2JNMsbbNTJ000dYrMXF2DI1vC0AX0fnz6v6I9RgBnd63tCeN2G10oE7tIqN6XWOLRdX8Q8yOJb+w7Y4WuxCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T21:28:59.412899Z"},"content_sha256":"103fa59f5444b596e4e31b49dbb66897184967ed40839c12f70a035ee97829c9","schema_version":"1.0","event_id":"sha256:103fa59f5444b596e4e31b49dbb66897184967ed40839c12f70a035ee97829c9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WXHLK6UKH4YQRPEOR6LMDRK6Q5/bundle.json","state_url":"https://pith.science/pith/WXHLK6UKH4YQRPEOR6LMDRK6Q5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WXHLK6UKH4YQRPEOR6LMDRK6Q5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T21:28:59Z","links":{"resolver":"https://pith.science/pith/WXHLK6UKH4YQRPEOR6LMDRK6Q5","bundle":"https://pith.science/pith/WXHLK6UKH4YQRPEOR6LMDRK6Q5/bundle.json","state":"https://pith.science/pith/WXHLK6UKH4YQRPEOR6LMDRK6Q5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WXHLK6UKH4YQRPEOR6LMDRK6Q5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:WXHLK6UKH4YQRPEOR6LMDRK6Q5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7faf6941f67e8df2f4d2effb6400914df22cfe2463572754a5bf3e822c85cc2a","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-02-06T01:47:08Z","title_canon_sha256":"c8703bb70bf2dc5d3a6b50f997a6a21d33a289acfdcdfffe5e2d3bab39337235"},"schema_version":"1.0","source":{"id":"2002.02061","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.02061","created_at":"2026-07-05T01:08:27Z"},{"alias_kind":"arxiv_version","alias_value":"2002.02061v3","created_at":"2026-07-05T01:08:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.02061","created_at":"2026-07-05T01:08:27Z"},{"alias_kind":"pith_short_12","alias_value":"WXHLK6UKH4YQ","created_at":"2026-07-05T01:08:27Z"},{"alias_kind":"pith_short_16","alias_value":"WXHLK6UKH4YQRPEO","created_at":"2026-07-05T01:08:27Z"},{"alias_kind":"pith_short_8","alias_value":"WXHLK6UK","created_at":"2026-07-05T01:08:27Z"}],"graph_snapshots":[{"event_id":"sha256:103fa59f5444b596e4e31b49dbb66897184967ed40839c12f70a035ee97829c9","target":"graph","created_at":"2026-07-05T01:08:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2002.02061/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Public intelligent services enabled by machine learning algorithms are vulnerable to model extraction attacks that can steal confidential information of the learning models through public queries. Differential privacy (DP) has been considered a promising technique to mitigate this attack. However, we find that the vulnerability persists when regression models are being protected by current DP solutions. We show that the adversary can launch a query-flooding parameter duplication (QPD) attack to infer the model information by repeated queries.\n  To defend against the QPD attack on logistic and ","authors_text":"Haonan Yan, Hui Li, Hui Zhu, Wenhai Sun, Xiaoguang Li, Zelei Cheng","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-02-06T01:47:08Z","title":"Mitigating Query-Flooding Parameter Duplication Attack on Regression Models with High-Dimensional Gaussian Mechanism"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.02061","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6a50414650cd4966144afcb764ed8b2bf7ad13e776a4e946779bf16f0ca70b13","target":"record","created_at":"2026-07-05T01:08:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7faf6941f67e8df2f4d2effb6400914df22cfe2463572754a5bf3e822c85cc2a","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-02-06T01:47:08Z","title_canon_sha256":"c8703bb70bf2dc5d3a6b50f997a6a21d33a289acfdcdfffe5e2d3bab39337235"},"schema_version":"1.0","source":{"id":"2002.02061","kind":"arxiv","version":3}},"canonical_sha256":"b5ceb57a8a3f3108bc8e8f96c1c55e877216055c5b33d705168b62856290837a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b5ceb57a8a3f3108bc8e8f96c1c55e877216055c5b33d705168b62856290837a","first_computed_at":"2026-07-05T01:08:27.451061Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:08:27.451061Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"I7KxPT1sGNH6xSTn4/wSFsg0t2mMoNeSzOwW5Ovymh4VajkRTQ2uwosg6igceUDFHR8J6TSZTmv+Ga1cmyOBAw==","signature_status":"signed_v1","signed_at":"2026-07-05T01:08:27.451541Z","signed_message":"canonical_sha256_bytes"},"source_id":"2002.02061","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6a50414650cd4966144afcb764ed8b2bf7ad13e776a4e946779bf16f0ca70b13","sha256:103fa59f5444b596e4e31b49dbb66897184967ed40839c12f70a035ee97829c9"],"state_sha256":"44fad61583732f3e07c969b508b1b0bdc4265550bbf5af10ef53b7181f29fcd5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HIQXOLaxxk9coP+QyuTimaYr4XqdUvve4QCO/9LkScQAXRbclM7zweUp51wY+8ZpwFCP/GuIKgv4BzEjXZ/fDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T21:28:59.417320Z","bundle_sha256":"62a898cd552d61c4295a2a56b98a4955cb6cc3f6f0656147ff5407b4b2d9412a"}}