{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:ZAEWOGH7H3M7MF2MVYJ3KHSMSP","short_pith_number":"pith:ZAEWOGH7","canonical_record":{"source":{"id":"2308.12143","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-08-23T14:00:58Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"title_canon_sha256":"a1c7dddc7de5ba366cf1e88bad37ac6e37c6373900e2151e9f21a4cc3d080234","abstract_canon_sha256":"5c4823e106e5e8f30865efd7c842aaf0b4c20167d5779f0510638b28305cf6df"},"schema_version":"1.0"},"canonical_sha256":"c8096718ff3ed9f6174cae13b51e4c93d9a4a2146f6575a5bb07cf902f4de371","source":{"kind":"arxiv","id":"2308.12143","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.12143","created_at":"2026-07-05T09:54:00Z"},{"alias_kind":"arxiv_version","alias_value":"2308.12143v5","created_at":"2026-07-05T09:54:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.12143","created_at":"2026-07-05T09:54:00Z"},{"alias_kind":"pith_short_12","alias_value":"ZAEWOGH7H3M7","created_at":"2026-07-05T09:54:00Z"},{"alias_kind":"pith_short_16","alias_value":"ZAEWOGH7H3M7MF2M","created_at":"2026-07-05T09:54:00Z"},{"alias_kind":"pith_short_8","alias_value":"ZAEWOGH7","created_at":"2026-07-05T09:54:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:ZAEWOGH7H3M7MF2MVYJ3KHSMSP","target":"record","payload":{"canonical_record":{"source":{"id":"2308.12143","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-08-23T14:00:58Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"title_canon_sha256":"a1c7dddc7de5ba366cf1e88bad37ac6e37c6373900e2151e9f21a4cc3d080234","abstract_canon_sha256":"5c4823e106e5e8f30865efd7c842aaf0b4c20167d5779f0510638b28305cf6df"},"schema_version":"1.0"},"canonical_sha256":"c8096718ff3ed9f6174cae13b51e4c93d9a4a2146f6575a5bb07cf902f4de371","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:54:00.095613Z","signature_b64":"bTY3jY5apS4jLTjwTfdTX1qALkZ/OSx6E5TOb1L8QZGSn4lWiZThZU0n9liboRMaqWI1ET5/nW58MrkslK/CDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c8096718ff3ed9f6174cae13b51e4c93d9a4a2146f6575a5bb07cf902f4de371","last_reissued_at":"2026-07-05T09:54:00.095135Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:54:00.095135Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2308.12143","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:54:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6LMXHWhBOw3lxLx2l0daSP5AM6ymQco0uZYIhrFanPJaP/yF+zhH+yetkJ+HopEL/v6JnVG/QPpk/1WsHVv4Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T21:14:49.313111Z"},"content_sha256":"cf095d035fcf8e5aaf4fef081f4852fefdb689b21ff3588f5c03cc034664c304","schema_version":"1.0","event_id":"sha256:cf095d035fcf8e5aaf4fef081f4852fefdb689b21ff3588f5c03cc034664c304"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:ZAEWOGH7H3M7MF2MVYJ3KHSMSP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Probabilistic Fluctuation based Membership Inference Attack for Diffusion Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Chen Gao, Huandong Wang, Liyuan Zhang, Tao Jiang, Wenjie Fu, Yong Li","submitted_at":"2023-08-23T14:00:58Z","abstract_excerpt":"Membership Inference Attack (MIA) identifies whether a record exists in a machine learning model's training set by querying the model. MIAs on the classic classification models have been well-studied, and recent works have started to explore how to transplant MIA onto generative models. Our investigation indicates that existing MIAs designed for generative models mainly depend on the overfitting in target models. However, overfitting can be avoided by employing various regularization techniques, whereas existing MIAs demonstrate poor performance in practice. Unlike overfitting, memorization is"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.12143","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2308.12143/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:54:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/Of0wiPDl7q1a1tLGTa6qDzIG19xxHkm8xO/KldM2PwFR4VO2FGQafIswzG+790mSgxwJ62jGEifk9stqLvjCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T21:14:49.313881Z"},"content_sha256":"648159b0116b7d2b5cd05d8197bdb169a7db8d1a37e974242c3522e855c3c5d3","schema_version":"1.0","event_id":"sha256:648159b0116b7d2b5cd05d8197bdb169a7db8d1a37e974242c3522e855c3c5d3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZAEWOGH7H3M7MF2MVYJ3KHSMSP/bundle.json","state_url":"https://pith.science/pith/ZAEWOGH7H3M7MF2MVYJ3KHSMSP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZAEWOGH7H3M7MF2MVYJ3KHSMSP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T21:14:49Z","links":{"resolver":"https://pith.science/pith/ZAEWOGH7H3M7MF2MVYJ3KHSMSP","bundle":"https://pith.science/pith/ZAEWOGH7H3M7MF2MVYJ3KHSMSP/bundle.json","state":"https://pith.science/pith/ZAEWOGH7H3M7MF2MVYJ3KHSMSP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZAEWOGH7H3M7MF2MVYJ3KHSMSP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:ZAEWOGH7H3M7MF2MVYJ3KHSMSP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5c4823e106e5e8f30865efd7c842aaf0b4c20167d5779f0510638b28305cf6df","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-08-23T14:00:58Z","title_canon_sha256":"a1c7dddc7de5ba366cf1e88bad37ac6e37c6373900e2151e9f21a4cc3d080234"},"schema_version":"1.0","source":{"id":"2308.12143","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.12143","created_at":"2026-07-05T09:54:00Z"},{"alias_kind":"arxiv_version","alias_value":"2308.12143v5","created_at":"2026-07-05T09:54:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.12143","created_at":"2026-07-05T09:54:00Z"},{"alias_kind":"pith_short_12","alias_value":"ZAEWOGH7H3M7","created_at":"2026-07-05T09:54:00Z"},{"alias_kind":"pith_short_16","alias_value":"ZAEWOGH7H3M7MF2M","created_at":"2026-07-05T09:54:00Z"},{"alias_kind":"pith_short_8","alias_value":"ZAEWOGH7","created_at":"2026-07-05T09:54:00Z"}],"graph_snapshots":[{"event_id":"sha256:648159b0116b7d2b5cd05d8197bdb169a7db8d1a37e974242c3522e855c3c5d3","target":"graph","created_at":"2026-07-05T09:54:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2308.12143/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Membership Inference Attack (MIA) identifies whether a record exists in a machine learning model's training set by querying the model. MIAs on the classic classification models have been well-studied, and recent works have started to explore how to transplant MIA onto generative models. Our investigation indicates that existing MIAs designed for generative models mainly depend on the overfitting in target models. However, overfitting can be avoided by employing various regularization techniques, whereas existing MIAs demonstrate poor performance in practice. Unlike overfitting, memorization is","authors_text":"Chen Gao, Huandong Wang, Liyuan Zhang, Tao Jiang, Wenjie Fu, Yong Li","cross_cats":["cs.AI","cs.CR","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-08-23T14:00:58Z","title":"A Probabilistic Fluctuation based Membership Inference Attack for Diffusion Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.12143","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cf095d035fcf8e5aaf4fef081f4852fefdb689b21ff3588f5c03cc034664c304","target":"record","created_at":"2026-07-05T09:54:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5c4823e106e5e8f30865efd7c842aaf0b4c20167d5779f0510638b28305cf6df","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-08-23T14:00:58Z","title_canon_sha256":"a1c7dddc7de5ba366cf1e88bad37ac6e37c6373900e2151e9f21a4cc3d080234"},"schema_version":"1.0","source":{"id":"2308.12143","kind":"arxiv","version":5}},"canonical_sha256":"c8096718ff3ed9f6174cae13b51e4c93d9a4a2146f6575a5bb07cf902f4de371","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c8096718ff3ed9f6174cae13b51e4c93d9a4a2146f6575a5bb07cf902f4de371","first_computed_at":"2026-07-05T09:54:00.095135Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:54:00.095135Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bTY3jY5apS4jLTjwTfdTX1qALkZ/OSx6E5TOb1L8QZGSn4lWiZThZU0n9liboRMaqWI1ET5/nW58MrkslK/CDg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:54:00.095613Z","signed_message":"canonical_sha256_bytes"},"source_id":"2308.12143","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cf095d035fcf8e5aaf4fef081f4852fefdb689b21ff3588f5c03cc034664c304","sha256:648159b0116b7d2b5cd05d8197bdb169a7db8d1a37e974242c3522e855c3c5d3"],"state_sha256":"4551a01dacd6880c71a52085953c718bad840ab1a3fe3b70d48fb37c303769d1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"X0fAF6Wv72w8we9dTm15Zh2Mj93MgPjlk+eMIbc/cXuq0FTEWYmtpqoTXY/q254Pq6wP8td0R/5R8mXweIFbDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T21:14:49.395457Z","bundle_sha256":"7967a22c966a1cbb029f9b1aaf8e77ac18f1c66a165fdfe220fb19ebf4b89ff2"}}