{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:ZZG7U57QJVS7VTXHAAKE4Q5GLN","short_pith_number":"pith:ZZG7U57Q","canonical_record":{"source":{"id":"2506.07888","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-09T16:00:48Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"96e74ecf2790eaac185e05850db2b88e595f5a7d863cc9db2d92efcbad1f6874","abstract_canon_sha256":"803918c3bd43d6be931246da6c5af0549f69bd083b57cd48fcd591ebb1877317"},"schema_version":"1.0"},"canonical_sha256":"ce4dfa77f04d65facee700144e43a65b4c0006535db78944642cfd2ebdcfcae7","source":{"kind":"arxiv","id":"2506.07888","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.07888","created_at":"2026-07-05T11:18:34Z"},{"alias_kind":"arxiv_version","alias_value":"2506.07888v1","created_at":"2026-07-05T11:18:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.07888","created_at":"2026-07-05T11:18:34Z"},{"alias_kind":"pith_short_12","alias_value":"ZZG7U57QJVS7","created_at":"2026-07-05T11:18:34Z"},{"alias_kind":"pith_short_16","alias_value":"ZZG7U57QJVS7VTXH","created_at":"2026-07-05T11:18:34Z"},{"alias_kind":"pith_short_8","alias_value":"ZZG7U57Q","created_at":"2026-07-05T11:18:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:ZZG7U57QJVS7VTXHAAKE4Q5GLN","target":"record","payload":{"canonical_record":{"source":{"id":"2506.07888","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-09T16:00:48Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"96e74ecf2790eaac185e05850db2b88e595f5a7d863cc9db2d92efcbad1f6874","abstract_canon_sha256":"803918c3bd43d6be931246da6c5af0549f69bd083b57cd48fcd591ebb1877317"},"schema_version":"1.0"},"canonical_sha256":"ce4dfa77f04d65facee700144e43a65b4c0006535db78944642cfd2ebdcfcae7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:18:34.925216Z","signature_b64":"7NWhVyD87CHUNbb9spGGz/PFuml+B6RfiyBwh6MtF3Wgy8k10Oy2njRP08fMw6Xku0WzAbYZuVbSj9bNDFZYAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ce4dfa77f04d65facee700144e43a65b4c0006535db78944642cfd2ebdcfcae7","last_reissued_at":"2026-07-05T11:18:34.924731Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:18:34.924731Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.07888","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:18:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"b2W+Srbzu3sJlmSRKVfgAdeSqL02pzkRg6BzbSjiaO2G7zY8e+6H0XU/dQyOlP6DpgmT9B2IXjY8BiXjTWP7AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T08:47:54.848115Z"},"content_sha256":"3d8d81227d87693729bf2e684d61b6a32b6e9858e24b26b1acbf32568959b48b","schema_version":"1.0","event_id":"sha256:3d8d81227d87693729bf2e684d61b6a32b6e9858e24b26b1acbf32568959b48b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:ZZG7U57QJVS7VTXHAAKE4Q5GLN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Michael Backes, Rui Wen, Yang Zhang, Yiyong Liu","submitted_at":"2025-06-09T16:00:48Z","abstract_excerpt":"Data reconstruction attacks, which aim to recover the training dataset of a target model with limited access, have gained increasing attention in recent years. However, there is currently no consensus on a formal definition of data reconstruction attacks or appropriate evaluation metrics for measuring their quality. This lack of rigorous definitions and universal metrics has hindered further advancement in this field. In this paper, we address this issue in the vision domain by proposing a unified attack taxonomy and formal definitions of data reconstruction attacks. We first propose a set of "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.07888","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.07888/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:18:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7mBhlPEi7s3CEK9fUNyziwX6SSYpI3t+NIS+87BVUNnKBP9ptWWarCuDSZYPsyP7YWGPla+Bn1i7KymKjpflBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T08:47:54.848668Z"},"content_sha256":"708625e4d91d3567e507a0ef21be86975dacaebf9e8951f1e8cfc6147981cba4","schema_version":"1.0","event_id":"sha256:708625e4d91d3567e507a0ef21be86975dacaebf9e8951f1e8cfc6147981cba4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZZG7U57QJVS7VTXHAAKE4Q5GLN/bundle.json","state_url":"https://pith.science/pith/ZZG7U57QJVS7VTXHAAKE4Q5GLN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZZG7U57QJVS7VTXHAAKE4Q5GLN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T08:47:54Z","links":{"resolver":"https://pith.science/pith/ZZG7U57QJVS7VTXHAAKE4Q5GLN","bundle":"https://pith.science/pith/ZZG7U57QJVS7VTXHAAKE4Q5GLN/bundle.json","state":"https://pith.science/pith/ZZG7U57QJVS7VTXHAAKE4Q5GLN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZZG7U57QJVS7VTXHAAKE4Q5GLN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:ZZG7U57QJVS7VTXHAAKE4Q5GLN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"803918c3bd43d6be931246da6c5af0549f69bd083b57cd48fcd591ebb1877317","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-09T16:00:48Z","title_canon_sha256":"96e74ecf2790eaac185e05850db2b88e595f5a7d863cc9db2d92efcbad1f6874"},"schema_version":"1.0","source":{"id":"2506.07888","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.07888","created_at":"2026-07-05T11:18:34Z"},{"alias_kind":"arxiv_version","alias_value":"2506.07888v1","created_at":"2026-07-05T11:18:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.07888","created_at":"2026-07-05T11:18:34Z"},{"alias_kind":"pith_short_12","alias_value":"ZZG7U57QJVS7","created_at":"2026-07-05T11:18:34Z"},{"alias_kind":"pith_short_16","alias_value":"ZZG7U57QJVS7VTXH","created_at":"2026-07-05T11:18:34Z"},{"alias_kind":"pith_short_8","alias_value":"ZZG7U57Q","created_at":"2026-07-05T11:18:34Z"}],"graph_snapshots":[{"event_id":"sha256:708625e4d91d3567e507a0ef21be86975dacaebf9e8951f1e8cfc6147981cba4","target":"graph","created_at":"2026-07-05T11:18:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.07888/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Data reconstruction attacks, which aim to recover the training dataset of a target model with limited access, have gained increasing attention in recent years. However, there is currently no consensus on a formal definition of data reconstruction attacks or appropriate evaluation metrics for measuring their quality. This lack of rigorous definitions and universal metrics has hindered further advancement in this field. In this paper, we address this issue in the vision domain by proposing a unified attack taxonomy and formal definitions of data reconstruction attacks. We first propose a set of ","authors_text":"Michael Backes, Rui Wen, Yang Zhang, Yiyong Liu","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.07888","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3d8d81227d87693729bf2e684d61b6a32b6e9858e24b26b1acbf32568959b48b","target":"record","created_at":"2026-07-05T11:18:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"803918c3bd43d6be931246da6c5af0549f69bd083b57cd48fcd591ebb1877317","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-09T16:00:48Z","title_canon_sha256":"96e74ecf2790eaac185e05850db2b88e595f5a7d863cc9db2d92efcbad1f6874"},"schema_version":"1.0","source":{"id":"2506.07888","kind":"arxiv","version":1}},"canonical_sha256":"ce4dfa77f04d65facee700144e43a65b4c0006535db78944642cfd2ebdcfcae7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ce4dfa77f04d65facee700144e43a65b4c0006535db78944642cfd2ebdcfcae7","first_computed_at":"2026-07-05T11:18:34.924731Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:18:34.924731Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7NWhVyD87CHUNbb9spGGz/PFuml+B6RfiyBwh6MtF3Wgy8k10Oy2njRP08fMw6Xku0WzAbYZuVbSj9bNDFZYAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:18:34.925216Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.07888","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3d8d81227d87693729bf2e684d61b6a32b6e9858e24b26b1acbf32568959b48b","sha256:708625e4d91d3567e507a0ef21be86975dacaebf9e8951f1e8cfc6147981cba4"],"state_sha256":"39e2fc45a6c42780411a333c21c663e76e97cef35ff9d3fb5ec1cafe6726b1c6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OeohaVbovLwqh/D40T9v/uLSvGLUaszKAP7gNTpFLOonr3RMN89wxBkuY+NHYxhPTy3S7Rwk77ztOOu/sD+vBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T08:47:54.852827Z","bundle_sha256":"583e98d9918e48e8082ff29eb6cc55ba97ffb1cb37b30b6c940e4aef9c2a6cf8"}}