{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:XTEV33Y2EGBZHZDGISQSSMOXVA","short_pith_number":"pith:XTEV33Y2","canonical_record":{"source":{"id":"2508.06789","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-09T02:38:24Z","cross_cats_sorted":[],"title_canon_sha256":"b62d36ce3d7c3abb334e3de65a18fb4bb3a853e8dbf112ee62bde207b936b99d","abstract_canon_sha256":"e96007e643cf87c0ae506eb47fc06b3977349523b14c832e409b9d3e0a89280b"},"schema_version":"1.0"},"canonical_sha256":"bcc95def1a218393e46644a12931d7a83e4afafb29775b947585a0e551dc9ddb","source":{"kind":"arxiv","id":"2508.06789","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.06789","created_at":"2026-07-05T11:51:35Z"},{"alias_kind":"arxiv_version","alias_value":"2508.06789v1","created_at":"2026-07-05T11:51:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.06789","created_at":"2026-07-05T11:51:35Z"},{"alias_kind":"pith_short_12","alias_value":"XTEV33Y2EGBZ","created_at":"2026-07-05T11:51:35Z"},{"alias_kind":"pith_short_16","alias_value":"XTEV33Y2EGBZHZDG","created_at":"2026-07-05T11:51:35Z"},{"alias_kind":"pith_short_8","alias_value":"XTEV33Y2","created_at":"2026-07-05T11:51:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:XTEV33Y2EGBZHZDGISQSSMOXVA","target":"record","payload":{"canonical_record":{"source":{"id":"2508.06789","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-09T02:38:24Z","cross_cats_sorted":[],"title_canon_sha256":"b62d36ce3d7c3abb334e3de65a18fb4bb3a853e8dbf112ee62bde207b936b99d","abstract_canon_sha256":"e96007e643cf87c0ae506eb47fc06b3977349523b14c832e409b9d3e0a89280b"},"schema_version":"1.0"},"canonical_sha256":"bcc95def1a218393e46644a12931d7a83e4afafb29775b947585a0e551dc9ddb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:51:35.434955Z","signature_b64":"8SYy5RGuEStJkYmIbehw9fHV1OeQLPflrRaLy0vycgb0bfbVKTOGSs/lN4l3aMpauAAiVPkM+Yeg6l5XqnXJDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bcc95def1a218393e46644a12931d7a83e4afafb29775b947585a0e551dc9ddb","last_reissued_at":"2026-07-05T11:51:35.434454Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:51:35.434454Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.06789","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:51:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Co3OhVHOUnd4WspHH2S4N2R2pMODqf6LaljtOowXoATVnlZ1g0KupJ6LLARXU/3i7e3JOP6ShDocWll7nbxVCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T20:33:42.336768Z"},"content_sha256":"2b7a73d722d06f14280157af0ca771a3e8872e505a6ec87c95ef6d0633e013ea","schema_version":"1.0","event_id":"sha256:2b7a73d722d06f14280157af0ca771a3e8872e505a6ec87c95ef6d0633e013ea"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:XTEV33Y2EGBZHZDGISQSSMOXVA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Label Inference Attacks against Federated Unlearning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Dusit Niyato, Liehuang Zhu, Meng Shen, Tao Zhang, Wei Wang, Xiangyun Tang, Yajie Wang, Yijing Lin","submitted_at":"2025-08-09T02:38:24Z","abstract_excerpt":"Federated Unlearning (FU) has emerged as a promising solution to respond to the right to be forgotten of clients, by allowing clients to erase their data from global models without compromising model performance. Unfortunately, researchers find that the parameter variations of models induced by FU expose clients' data information, enabling attackers to infer the label of unlearning data, while label inference attacks against FU remain unexplored. In this paper, we introduce and analyze a new privacy threat against FU and propose a novel label inference attack, ULIA, which can infer unlearning "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.06789","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.06789/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:51:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ooTNfxQ9KtLe0Q1nsJRR20HsPTjhYiFU640hDM2HaVDyFuiXX8RjSHImleNnjZy/U8B+oIzu3YanZEA3PsCNBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T20:33:42.337108Z"},"content_sha256":"fbcdefa8dfada5aa2c6d75201ceb42afa997989fbdd8c490a549f4750e496221","schema_version":"1.0","event_id":"sha256:fbcdefa8dfada5aa2c6d75201ceb42afa997989fbdd8c490a549f4750e496221"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XTEV33Y2EGBZHZDGISQSSMOXVA/bundle.json","state_url":"https://pith.science/pith/XTEV33Y2EGBZHZDGISQSSMOXVA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XTEV33Y2EGBZHZDGISQSSMOXVA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T20:33:42Z","links":{"resolver":"https://pith.science/pith/XTEV33Y2EGBZHZDGISQSSMOXVA","bundle":"https://pith.science/pith/XTEV33Y2EGBZHZDGISQSSMOXVA/bundle.json","state":"https://pith.science/pith/XTEV33Y2EGBZHZDGISQSSMOXVA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XTEV33Y2EGBZHZDGISQSSMOXVA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:XTEV33Y2EGBZHZDGISQSSMOXVA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e96007e643cf87c0ae506eb47fc06b3977349523b14c832e409b9d3e0a89280b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-09T02:38:24Z","title_canon_sha256":"b62d36ce3d7c3abb334e3de65a18fb4bb3a853e8dbf112ee62bde207b936b99d"},"schema_version":"1.0","source":{"id":"2508.06789","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.06789","created_at":"2026-07-05T11:51:35Z"},{"alias_kind":"arxiv_version","alias_value":"2508.06789v1","created_at":"2026-07-05T11:51:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.06789","created_at":"2026-07-05T11:51:35Z"},{"alias_kind":"pith_short_12","alias_value":"XTEV33Y2EGBZ","created_at":"2026-07-05T11:51:35Z"},{"alias_kind":"pith_short_16","alias_value":"XTEV33Y2EGBZHZDG","created_at":"2026-07-05T11:51:35Z"},{"alias_kind":"pith_short_8","alias_value":"XTEV33Y2","created_at":"2026-07-05T11:51:35Z"}],"graph_snapshots":[{"event_id":"sha256:fbcdefa8dfada5aa2c6d75201ceb42afa997989fbdd8c490a549f4750e496221","target":"graph","created_at":"2026-07-05T11:51:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.06789/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated Unlearning (FU) has emerged as a promising solution to respond to the right to be forgotten of clients, by allowing clients to erase their data from global models without compromising model performance. Unfortunately, researchers find that the parameter variations of models induced by FU expose clients' data information, enabling attackers to infer the label of unlearning data, while label inference attacks against FU remain unexplored. In this paper, we introduce and analyze a new privacy threat against FU and propose a novel label inference attack, ULIA, which can infer unlearning ","authors_text":"Dusit Niyato, Liehuang Zhu, Meng Shen, Tao Zhang, Wei Wang, Xiangyun Tang, Yajie Wang, Yijing Lin","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-09T02:38:24Z","title":"Label Inference Attacks against Federated Unlearning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.06789","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2b7a73d722d06f14280157af0ca771a3e8872e505a6ec87c95ef6d0633e013ea","target":"record","created_at":"2026-07-05T11:51:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e96007e643cf87c0ae506eb47fc06b3977349523b14c832e409b9d3e0a89280b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-09T02:38:24Z","title_canon_sha256":"b62d36ce3d7c3abb334e3de65a18fb4bb3a853e8dbf112ee62bde207b936b99d"},"schema_version":"1.0","source":{"id":"2508.06789","kind":"arxiv","version":1}},"canonical_sha256":"bcc95def1a218393e46644a12931d7a83e4afafb29775b947585a0e551dc9ddb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bcc95def1a218393e46644a12931d7a83e4afafb29775b947585a0e551dc9ddb","first_computed_at":"2026-07-05T11:51:35.434454Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:51:35.434454Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8SYy5RGuEStJkYmIbehw9fHV1OeQLPflrRaLy0vycgb0bfbVKTOGSs/lN4l3aMpauAAiVPkM+Yeg6l5XqnXJDw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:51:35.434955Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.06789","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2b7a73d722d06f14280157af0ca771a3e8872e505a6ec87c95ef6d0633e013ea","sha256:fbcdefa8dfada5aa2c6d75201ceb42afa997989fbdd8c490a549f4750e496221"],"state_sha256":"dc2322cfde13aa42865fbef58963c6db4f487a69e2f6109310018861adc7ca03"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"t83htdYgKq7t8ZWawKX/BTiEyekNt+ff35L3OTXgpDjEhKvYsBIX0aM47pyUh2nqeatPFvz00E9yZVMALZR8Bg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T20:33:42.340568Z","bundle_sha256":"c9056877564be9c3f634a508adc4e457cab95d3b3a22c702f1b4c0b1bdbb0914"}}