{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:YJQH34A6PZW2JQQBCQZ7C65EH4","short_pith_number":"pith:YJQH34A6","canonical_record":{"source":{"id":"2011.12505","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-11-25T03:56:54Z","cross_cats_sorted":[],"title_canon_sha256":"fb0ecd8bff94946ae8fc7f5d48d77119c07489ad57cf33c87e49d484d563cc1f","abstract_canon_sha256":"880952485b7bc14ab504ee475bf89e9d0a0306d23ac1a0567c4cd837e44fd9e4"},"schema_version":"1.0"},"canonical_sha256":"c2607df01e7e6da4c2011433f17ba43f3d568af07333ceb3edc41d455bbe03ea","source":{"kind":"arxiv","id":"2011.12505","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2011.12505","created_at":"2026-07-05T02:26:52Z"},{"alias_kind":"arxiv_version","alias_value":"2011.12505v2","created_at":"2026-07-05T02:26:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2011.12505","created_at":"2026-07-05T02:26:52Z"},{"alias_kind":"pith_short_12","alias_value":"YJQH34A6PZW2","created_at":"2026-07-05T02:26:52Z"},{"alias_kind":"pith_short_16","alias_value":"YJQH34A6PZW2JQQB","created_at":"2026-07-05T02:26:52Z"},{"alias_kind":"pith_short_8","alias_value":"YJQH34A6","created_at":"2026-07-05T02:26:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:YJQH34A6PZW2JQQBCQZ7C65EH4","target":"record","payload":{"canonical_record":{"source":{"id":"2011.12505","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-11-25T03:56:54Z","cross_cats_sorted":[],"title_canon_sha256":"fb0ecd8bff94946ae8fc7f5d48d77119c07489ad57cf33c87e49d484d563cc1f","abstract_canon_sha256":"880952485b7bc14ab504ee475bf89e9d0a0306d23ac1a0567c4cd837e44fd9e4"},"schema_version":"1.0"},"canonical_sha256":"c2607df01e7e6da4c2011433f17ba43f3d568af07333ceb3edc41d455bbe03ea","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:26:52.398067Z","signature_b64":"xsOCrAew1ZrjDKcFDvPYa5lcJ3ypeHshXyaCapMy2oyBQDmAE3APNKfv1UQN92AVZOMvuyEp4ly7XSITTWZeAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c2607df01e7e6da4c2011433f17ba43f3d568af07333ceb3edc41d455bbe03ea","last_reissued_at":"2026-07-05T02:26:52.397648Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:26:52.397648Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2011.12505","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:26:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iEwEmrrwx+MAzbeebd8zmxITK7vWcRRpKl3d0hPSLArRjQ7cCqUFz7C5KAB8Ne9hkXIIQI0LnnBDd8sni21gAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T02:27:35.929249Z"},"content_sha256":"78c612f20037caf5dfa3e72863ccc8ab3ccfb223bb4c2eb2de6780ba7c0546bd","schema_version":"1.0","event_id":"sha256:78c612f20037caf5dfa3e72863ccc8ab3ccfb223bb4c2eb2de6780ba7c0546bd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:YJQH34A6PZW2JQQBCQZ7C65EH4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Privacy-preserving Collaborative Learning with Automatic Transformation Search","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Han Qiu, Shangwei Guo, Tianwei Zhang, Wei Gao, Yang Liu, Yonggang Wen","submitted_at":"2020-11-25T03:56:54Z","abstract_excerpt":"Collaborative learning has gained great popularity due to its benefit of data privacy protection: participants can jointly train a Deep Learning model without sharing their training sets. However, recent works discovered that an adversary can fully recover the sensitive training samples from the shared gradients. Such reconstruction attacks pose severe threats to collaborative learning. Hence, effective mitigation solutions are urgently desired.\n  In this paper, we propose to leverage data augmentation to defeat reconstruction attacks: by preprocessing sensitive images with carefully-selected "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2011.12505","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2011.12505/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:26:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PJDUTlyUE3Le4LQfyc51dMk4UfcRBIZgF3cFvdKDErWfJRYdXGvlOT7Xb/5fihfkZpTnVs4tP5FAdXd73+tzDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T02:27:35.929758Z"},"content_sha256":"83025ee8f94a2b84d7929cbef73ffa8046e450151a3471d233be6bd40c0c8114","schema_version":"1.0","event_id":"sha256:83025ee8f94a2b84d7929cbef73ffa8046e450151a3471d233be6bd40c0c8114"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YJQH34A6PZW2JQQBCQZ7C65EH4/bundle.json","state_url":"https://pith.science/pith/YJQH34A6PZW2JQQBCQZ7C65EH4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YJQH34A6PZW2JQQBCQZ7C65EH4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T02:27:35Z","links":{"resolver":"https://pith.science/pith/YJQH34A6PZW2JQQBCQZ7C65EH4","bundle":"https://pith.science/pith/YJQH34A6PZW2JQQBCQZ7C65EH4/bundle.json","state":"https://pith.science/pith/YJQH34A6PZW2JQQBCQZ7C65EH4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YJQH34A6PZW2JQQBCQZ7C65EH4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:YJQH34A6PZW2JQQBCQZ7C65EH4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"880952485b7bc14ab504ee475bf89e9d0a0306d23ac1a0567c4cd837e44fd9e4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-11-25T03:56:54Z","title_canon_sha256":"fb0ecd8bff94946ae8fc7f5d48d77119c07489ad57cf33c87e49d484d563cc1f"},"schema_version":"1.0","source":{"id":"2011.12505","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2011.12505","created_at":"2026-07-05T02:26:52Z"},{"alias_kind":"arxiv_version","alias_value":"2011.12505v2","created_at":"2026-07-05T02:26:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2011.12505","created_at":"2026-07-05T02:26:52Z"},{"alias_kind":"pith_short_12","alias_value":"YJQH34A6PZW2","created_at":"2026-07-05T02:26:52Z"},{"alias_kind":"pith_short_16","alias_value":"YJQH34A6PZW2JQQB","created_at":"2026-07-05T02:26:52Z"},{"alias_kind":"pith_short_8","alias_value":"YJQH34A6","created_at":"2026-07-05T02:26:52Z"}],"graph_snapshots":[{"event_id":"sha256:83025ee8f94a2b84d7929cbef73ffa8046e450151a3471d233be6bd40c0c8114","target":"graph","created_at":"2026-07-05T02:26:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2011.12505/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Collaborative learning has gained great popularity due to its benefit of data privacy protection: participants can jointly train a Deep Learning model without sharing their training sets. However, recent works discovered that an adversary can fully recover the sensitive training samples from the shared gradients. Such reconstruction attacks pose severe threats to collaborative learning. Hence, effective mitigation solutions are urgently desired.\n  In this paper, we propose to leverage data augmentation to defeat reconstruction attacks: by preprocessing sensitive images with carefully-selected ","authors_text":"Han Qiu, Shangwei Guo, Tianwei Zhang, Wei Gao, Yang Liu, Yonggang Wen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-11-25T03:56:54Z","title":"Privacy-preserving Collaborative Learning with Automatic Transformation Search"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2011.12505","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:78c612f20037caf5dfa3e72863ccc8ab3ccfb223bb4c2eb2de6780ba7c0546bd","target":"record","created_at":"2026-07-05T02:26:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"880952485b7bc14ab504ee475bf89e9d0a0306d23ac1a0567c4cd837e44fd9e4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-11-25T03:56:54Z","title_canon_sha256":"fb0ecd8bff94946ae8fc7f5d48d77119c07489ad57cf33c87e49d484d563cc1f"},"schema_version":"1.0","source":{"id":"2011.12505","kind":"arxiv","version":2}},"canonical_sha256":"c2607df01e7e6da4c2011433f17ba43f3d568af07333ceb3edc41d455bbe03ea","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c2607df01e7e6da4c2011433f17ba43f3d568af07333ceb3edc41d455bbe03ea","first_computed_at":"2026-07-05T02:26:52.397648Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:26:52.397648Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xsOCrAew1ZrjDKcFDvPYa5lcJ3ypeHshXyaCapMy2oyBQDmAE3APNKfv1UQN92AVZOMvuyEp4ly7XSITTWZeAA==","signature_status":"signed_v1","signed_at":"2026-07-05T02:26:52.398067Z","signed_message":"canonical_sha256_bytes"},"source_id":"2011.12505","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:78c612f20037caf5dfa3e72863ccc8ab3ccfb223bb4c2eb2de6780ba7c0546bd","sha256:83025ee8f94a2b84d7929cbef73ffa8046e450151a3471d233be6bd40c0c8114"],"state_sha256":"249bb4805420c98529187975cf762b54f3f9263f064b6afc1f3d706ccbb6311c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"V9rdaNPcZYMI76Nn3dk4WFRKcJW4SL6e/gnkp+QyX7CrnL5w23KgK/htxVbAr2FypG6vQbmhu9eF8oyhIEPMCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T02:27:35.933867Z","bundle_sha256":"91f6002e942e75da0e98e0d50b7617d6e82f4a0ed692d29be59bb7443c58b5de"}}