{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:ZWVTJ2GX2C5LPJUIVCT5ZBGOJN","short_pith_number":"pith:ZWVTJ2GX","schema_version":"1.0","canonical_sha256":"cdab34e8d7d0bab7a688a8a7dc84ce4b649bd03e23260de7588216e50961d16b","source":{"kind":"arxiv","id":"2502.00760","version":1},"attestation_state":"computed","paper":{"title":"Privacy Preserving Properties of Vision Classifiers","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Amit Sethi, Pirzada Suhail","submitted_at":"2025-02-02T11:50:00Z","abstract_excerpt":"Vision classifiers are often trained on proprietary datasets containing sensitive information, yet the models themselves are frequently shared openly under the privacy-preserving assumption. Although these models are assumed to protect sensitive information in their training data, the extent to which this assumption holds for different architectures remains unexplored. This assumption is challenged by inversion attacks which attempt to reconstruct training data from model weights, exposing significant privacy vulnerabilities. In this study, we systematically evaluate the privacy-preserving pro"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2502.00760","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-02T11:50:00Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"00aa93945a1f2857cc2a33192494d7865ddc0f8b04121af0701f0acc77d49104","abstract_canon_sha256":"5fbebf6f20f70a0c3b50a797768fa985ccc0e126181cc5ca02abaa231d338978"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:08:38.162168Z","signature_b64":"P9SAe8mbBYtXPTJX7ivAsC8av4v7zvQbXkQmrocTVWdcwlfNk+zWxPgf0Q1AVZcJ6eZLsMFLRt7rMB8k5KLUDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cdab34e8d7d0bab7a688a8a7dc84ce4b649bd03e23260de7588216e50961d16b","last_reissued_at":"2026-07-05T10:08:38.161759Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:08:38.161759Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Privacy Preserving Properties of Vision Classifiers","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Amit Sethi, Pirzada Suhail","submitted_at":"2025-02-02T11:50:00Z","abstract_excerpt":"Vision classifiers are often trained on proprietary datasets containing sensitive information, yet the models themselves are frequently shared openly under the privacy-preserving assumption. Although these models are assumed to protect sensitive information in their training data, the extent to which this assumption holds for different architectures remains unexplored. This assumption is challenged by inversion attacks which attempt to reconstruct training data from model weights, exposing significant privacy vulnerabilities. In this study, we systematically evaluate the privacy-preserving pro"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.00760","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.00760/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2502.00760","created_at":"2026-07-05T10:08:38.161816+00:00"},{"alias_kind":"arxiv_version","alias_value":"2502.00760v1","created_at":"2026-07-05T10:08:38.161816+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.00760","created_at":"2026-07-05T10:08:38.161816+00:00"},{"alias_kind":"pith_short_12","alias_value":"ZWVTJ2GX2C5L","created_at":"2026-07-05T10:08:38.161816+00:00"},{"alias_kind":"pith_short_16","alias_value":"ZWVTJ2GX2C5LPJUI","created_at":"2026-07-05T10:08:38.161816+00:00"},{"alias_kind":"pith_short_8","alias_value":"ZWVTJ2GX","created_at":"2026-07-05T10:08:38.161816+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/ZWVTJ2GX2C5LPJUIVCT5ZBGOJN","json":"https://pith.science/pith/ZWVTJ2GX2C5LPJUIVCT5ZBGOJN.json","graph_json":"https://pith.science/api/pith-number/ZWVTJ2GX2C5LPJUIVCT5ZBGOJN/graph.json","events_json":"https://pith.science/api/pith-number/ZWVTJ2GX2C5LPJUIVCT5ZBGOJN/events.json","paper":"https://pith.science/paper/ZWVTJ2GX"},"agent_actions":{"view_html":"https://pith.science/pith/ZWVTJ2GX2C5LPJUIVCT5ZBGOJN","download_json":"https://pith.science/pith/ZWVTJ2GX2C5LPJUIVCT5ZBGOJN.json","view_paper":"https://pith.science/paper/ZWVTJ2GX","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2502.00760&json=true","fetch_graph":"https://pith.science/api/pith-number/ZWVTJ2GX2C5LPJUIVCT5ZBGOJN/graph.json","fetch_events":"https://pith.science/api/pith-number/ZWVTJ2GX2C5LPJUIVCT5ZBGOJN/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/ZWVTJ2GX2C5LPJUIVCT5ZBGOJN/action/timestamp_anchor","attest_storage":"https://pith.science/pith/ZWVTJ2GX2C5LPJUIVCT5ZBGOJN/action/storage_attestation","attest_author":"https://pith.science/pith/ZWVTJ2GX2C5LPJUIVCT5ZBGOJN/action/author_attestation","sign_citation":"https://pith.science/pith/ZWVTJ2GX2C5LPJUIVCT5ZBGOJN/action/citation_signature","submit_replication":"https://pith.science/pith/ZWVTJ2GX2C5LPJUIVCT5ZBGOJN/action/replication_record"}},"created_at":"2026-07-05T10:08:38.161816+00:00","updated_at":"2026-07-05T10:08:38.161816+00:00"}