{"as_of":"2026-08-14T22:10:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0030f8e74834442976ab2cc409467301b2e380c4cce6693b914a8f72354b58ad","coverage":[{"denominator":31,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":31,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T10:30:08.648244Z","state":"measured"},{"denominator":33,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":33,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:35:40.029754Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-29T08:43:15.825857Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.11229","snapshot_observed_at":"2026-08-07T12:35:40.029754Z","title":"White-box vs black-box: Bayes optimal strategies for membership inference, 2019","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.24832","last_updated":"2025-06-18T15:27:03Z","snapshot_observed_at":"2026-08-12T20:24:19.932218Z","submitted_at":"2025-05-30T17:34:03Z","title":"How much do language models memorize?","version":3},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:40.029754Z"},"links":{"cited_paper":"/paper/1908.11229","citing_paper":"/paper/2505.24832"},"observation_digest":"sha256:b582038411c51fa3bc6e3bc7370ae1637a75f6396dc2a71afa8fead281abe8ee","observation_id":"b145047f-1305-4242-bd70-5f36b364841a","resolution":{"observed_at":"2026-08-07T12:35:40.029754Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"cited_work":{"arxiv_id":"1908.11229","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"1908.11229","snapshot_observed_at":"2026-06-29T08:43:15.825857Z","title":"White-box vs black-box: Bayes optimal strategies for membership inference, 2019","venue":null,"work_id":"35a6c606-33ad-41ef-ac26-13ac33f5972c","year":2019},"citing_paper":{"arxiv_id":"2605.30462","last_updated":"2026-05-28T18:38:15Z","snapshot_observed_at":"2026-08-13T17:54:27.122774Z","submitted_at":"2026-05-28T18:38:15Z","title":"idSCD: Identifying Training Datasets through Semantic Correlation Descriptors","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-06-29T08:35:36.928378Z"},"links":{"cited_paper":"/paper/1908.11229","citing_paper":"/paper/2605.30462"},"observation_digest":"sha256:8d65b2296a8c95cdab5eeaa544368769d04b129506cd2d071820c0ce5e087e67","observation_id":"c1bffa79-388b-49ee-8365-10fea1ebf28c","resolution":{"observed_at":"2026-06-29T08:43:15.827298Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/1908.11229/citation-record","integrity":"/paper/1908.11229/integrity","json":"/paper/1908.11229/citation-record.json","paper":"/paper/1908.11229"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:08.354022Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.354022Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:31c40a305faf3c15ccfd5ec85d3334423e296442ed3b5d17a4af48ea2a0722de","observation_id":"0957be20-58ed-4562-a8b5-b9aa78570320","resolution":{"observed_at":"2026-08-14T10:30:08.354022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:08.361882Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.361882Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:5c463a04430a29f02e7df41d4dbfe9bdfe34e1aab4fb90f84d24e3f709dabf98","observation_id":"6a05f1c8-434d-4f17-8776-438dec8285bc","resolution":{"observed_at":"2026-08-14T10:30:08.361882Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:09.436011Z","title":"Deep learning with differential privacy","venue":null,"work_id":"b7494c14-78b9-478f-8631-81d94e616263","year":2016},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.368538Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:f5c495e93ad06a4aa277ec124289b15902cc2033c0bd08756669663e18e086a8","observation_id":"6b09c77b-4949-441c-9ca1-3697419260db","resolution":{"observed_at":"2026-08-14T10:30:09.442130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:09.401085Z","title":"Hacking smart machines with smarter ones: How to extract meaningful data from machine learning classifiers","venue":null,"work_id":"7ee5e334-aab9-4fd1-b0d8-b350137a3c97","year":2015},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.378137Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:4ac264a4e1ab8e887048c1cdef5f4f4e6f87cb6d302dd25408b0a93e97a08ecb","observation_id":"fa3bffa1-6964-4b0a-9c5d-0bafc77e1277","resolution":{"observed_at":"2026-08-14T10:30:09.411948Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:09.371484Z","title":"Algorithmic stability for adaptive data analysis","venue":null,"work_id":"3dbaddb3-c020-4b21-834c-4202e16d344a","year":2016},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.385399Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:412228b9910e05cd33d19e5ae66fd4ac837639af9adad29fc61b84910a7dcdc5","observation_id":"97471b4e-7671-41e8-a3aa-4c2807841bac","resolution":{"observed_at":"2026-08-14T10:30:09.377785Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:09.344750Z","title":null,"venue":null,"work_id":"376b56f9-d03a-49e5-b5a2-0a90fb9c80ff","year":2014},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.392199Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:2db8d5eef950baadb10ed5d94d3ec25cc53ba6bddfaeea0839108fcf06060cf5","observation_id":"6d54a6be-aa86-4fe5-97e6-d433b6f16a65","resolution":{"observed_at":"2026-08-14T10:30:09.350098Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:09.321840Z","title":"Unsupervised learning by predicting noise","venue":null,"work_id":"d33c8226-0be7-4c0c-9a78-60b89a346a20","year":2017},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.400149Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:4b1a90afc6303c4d8a9a84570e5b142fea6a24c8da220c351aba72d083f6f4e4","observation_id":"29b80a11-7d3b-49b1-a689-1146d2d89352","resolution":{"observed_at":"2026-08-14T10:30:09.328124Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1802.08232","last_updated":"2019-07-16T17:05:32Z","snapshot_observed_at":"2026-08-14T19:43:10.100538Z","submitted_at":"2018-02-22T18:42:41Z","title":"The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.08232","snapshot_observed_at":"2026-08-14T10:30:08.405951Z","title":"The secret sharer: Measuring unintended neural network memorization & extracting secrets","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.405951Z"},"links":{"cited_paper":"/paper/1802.08232","citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:76e607e5f3a9a46138e231360db2bdc8b1acabeb177f8787349079110bb003f1","observation_id":"db908132-f099-4523-b642-bf551955db76","resolution":{"observed_at":"2026-08-14T10:30:08.405951Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:08.416336Z","title":"Imagenet: A large-scale hierarchical image database","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.416336Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:f6fd22372b8d99c455bf6592aa5c0ce730365ce7c6737278d1d37e53f39374d1","observation_id":"f6695b80-44bf-432a-b2d4-29adabb5e218","resolution":{"observed_at":"2026-08-14T10:30:08.416336Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:09.273146Z","title":"Discriminative unsupervised feature learning with convolutional neural networks","venue":null,"work_id":"957b1977-0951-44eb-a3ab-297e6d7f49cb","year":2014},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.422480Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:1b314c1d17fc827ae32106a4c91c052854727ca65796cbe3e1ae5e4185f9155d","observation_id":"f44231fa-6e13-41d2-84f7-96bea7d0c356","resolution":{"observed_at":"2026-08-14T10:30:09.285438Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:08.431023Z","title":"Calibrating noise to sensitivity in private data analysis","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.431023Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:9e80b40803b13f7ac52c9206cc38e56b5113193258d5fc3a025938c4fbf3615a","observation_id":"ad3011a8-2a28-4846-a65a-978ceb7ea459","resolution":{"observed_at":"2026-08-14T10:30:08.431023Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:09.215252Z","title":"Robust traceability from trace amounts","venue":null,"work_id":"b116dfd9-9b6b-4667-bf84-ca59225ffb79","year":2015},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.438925Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:a70bfe9cc1682244f06a7c757bc32aa23c59ef134f739dfdce38fe042e2e7ff8","observation_id":"32a35aa9-8718-411b-9197-a53c6cb17531","resolution":{"observed_at":"2026-08-14T10:30:09.223305Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1705.07663","last_updated":"2018-08-21T13:24:17Z","snapshot_observed_at":"2026-08-14T20:59:08.335203Z","submitted_at":"2017-05-22T11:05:06Z","title":"LOGAN: Membership Inference Attacks Against Generative Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.07663","snapshot_observed_at":"2026-08-14T10:30:08.446697Z","title":"Logan: evaluating privacy leakage of generative models using generative adversarial networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.446697Z"},"links":{"cited_paper":"/paper/1705.07663","citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:deeb6f1678b04bf5f819ee379d8067de8c1d40b90a1a8a48b9852b43588cb24f","observation_id":"42b5e9c1-7eb5-426f-a0d1-fbc8f9fd2cad","resolution":{"observed_at":"2026-08-14T10:30:08.446697Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:08.454545Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.454545Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:451072e19f2e51036fc8d94ffa6a5a1b4eef020f561bb39101931a4302bcb9a3","observation_id":"a245571a-48a3-4d51-8685-3d3145ec676b","resolution":{"observed_at":"2026-08-14T10:30:08.454545Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:08.462552Z","title":"Understanding black-box predictions via influence functions","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.462552Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:d4baf7254ecd6eeff9824a3508d9fdc7824787d36636da2e3a0b7346fcb2f221","observation_id":"35c46d46-3465-4e47-894d-9e851ae63177","resolution":{"observed_at":"2026-08-14T10:30:08.462552Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:09.158273Z","title":"Kanwal, Tegan Maharaj, Emmanuel Bengio, Asja Fischer, Aaron Courville, Simon Lacoste-Julien, and Yoshua Bengio","venue":null,"work_id":"698549c4-e0d7-48b0-8458-d66930deaa89","year":2017},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.474619Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:3b5d0b6456c0c2817b3ed230636ff32a557b419810d08bb6fd93aec2ad1ea7bd","observation_id":"1cf97d53-2410-460c-bb3c-fa93f264d7be","resolution":{"observed_at":"2026-08-14T10:30:09.163211Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:09.137954Z","title":"Kullback","venue":null,"work_id":"cc79d7ba-e833-4bdf-8015-36d25fe3dfa3","year":1997},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.484461Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:964a7d42b3f5bbf811be4d874c73170a7a5b4c115c3c9b698c0d0f66120b2414","observation_id":"6e3ca034-dd75-42ca-9cd8-e03f58f88b55","resolution":{"observed_at":"2026-08-14T10:30:09.144666Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1802.04889","last_updated":"2018-02-13T23:05:05Z","snapshot_observed_at":"2026-08-14T19:46:08.923996Z","submitted_at":"2018-02-13T23:05:05Z","title":"Understanding Membership Inferences on Well-Generalized Learning Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.04889","snapshot_observed_at":"2026-08-14T10:30:08.496351Z","title":"Understanding membership inferences on well-generalized learning models","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.496351Z"},"links":{"cited_paper":"/paper/1802.04889","citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:8001be53145299070364fd812840c9e8873ff7130b88786ba50618f8859cb591","observation_id":"0ebb03ac-eb83-4c4f-915b-a9bdc62b57a3","resolution":{"observed_at":"2026-08-14T10:30:08.496351Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:09.121219Z","title":null,"venue":null,"work_id":"56f751dc-2dff-4cb9-beac-7ab5469d1e58","year":1992},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.523946Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:5b924a133279e838ec4997fe7e8927ea26ce2d0410dcfdb36fa4f073940dd0cc","observation_id":"98337d35-9466-4839-a78f-f69d2297ba49","resolution":{"observed_at":"2026-08-14T10:30:09.126423Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"0911.5708","last_updated":"2009-11-30T20:34:45Z","snapshot_observed_at":"2026-07-06T02:00:44.842932Z","submitted_at":"2009-11-30T20:34:45Z","title":"Learning in a Large Function Space: Privacy-Preserving Mechanisms for SVM Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"0911.5708","snapshot_observed_at":"2026-08-14T10:30:08.536578Z","title":"Learning in a large function space: Privacy-preserving mechanisms for SVM learning","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.536578Z"},"links":{"cited_paper":"/paper/0911.5708","citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:c37c76fc1ec7581f244d33c8b8e97cc644319e9586082f732df3ec9ec95c738f","observation_id":"4f6bc398-819d-40fc-9089-ca064768e229","resolution":{"observed_at":"2026-08-14T10:30:08.536578Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:09.098398Z","title":"Berg, and Li Fei-Fei","venue":null,"work_id":"13b2b42e-6dc0-4a0c-9e16-c56a89950cb9","year":2015},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.550573Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:c79b7fc9e87353b40016dadea130787c14638117f9bcd11e717b2c71d50160a4","observation_id":"c30ca6c6-7b70-410b-8c69-db618311caab","resolution":{"observed_at":"2026-08-14T10:30:09.106609Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:09.073666Z","title":"Ml-leaks: Model and data independent membership inference attacks and defenses on machine learning models","venue":null,"work_id":"fd1b9d5f-2f6f-49a2-8a09-ee23ef0222e3","year":2019},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.562318Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:8174b7ede1720a869d068073283a720973cb11f0393a6319683f7f24975d5fa6","observation_id":"7bc2c9aa-97e8-4e10-97c3-426e96bef57f","resolution":{"observed_at":"2026-08-14T10:30:09.080582Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:09.051809Z","title":"Jordan, and Eran Halperin","venue":null,"work_id":"b93ccbef-3b91-4ac3-bb71-c5e1d463046f","year":2009},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.569408Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:3b41ea370d12b52d47195a4f35f1d221d5c810dc6ab9320e9ddfcc942526a627","observation_id":"48723d33-e9a7-4e08-af84-ff638b5971b8","resolution":{"observed_at":"2026-08-14T10:30:09.057813Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:09.021137Z","title":"Membership inference attacks against machine learning models","venue":null,"work_id":"94cbd7ac-e17a-4b62-a833-e4774cda48d2","year":2017},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.577594Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:df458640d2267169deacbcc482308a7c9ca3570eb668b599ab521d5b46fa4b26","observation_id":"f8c207bc-6f1d-4600-ba06-123dbf00df9c","resolution":{"observed_at":"2026-08-14T10:30:09.026741Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:08.983380Z","title":"Very deep convolutional networks for large-scale image recognition","venue":null,"work_id":"269aaf18-c88b-403e-b84f-77df6e51758d","year":2014},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.585806Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:bd2f38b3af1f85f9b9d19b567f1ecbb436bbc776b949e4311328619d11a079ad","observation_id":"3df3de20-a3e8-4088-b07e-9c7eb190f32a","resolution":{"observed_at":"2026-08-14T10:30:09.000845Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:08.954910Z","title":null,"venue":null,"work_id":"43b4231a-afa4-4474-89e6-305ab9c4928c","year":1998},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.594525Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:76a1a887a4d05a03ac8fb8f032aa0e7dcad15ab2b95c56f9682d59f9ad058262","observation_id":"d859ff4b-52c3-4cfb-98f5-95c2662dc269","resolution":{"observed_at":"2026-08-14T10:30:08.964642Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:08.929795Z","title":"Privacy for free: Posterior sampling and stochastic gradient monte carlo","venue":null,"work_id":"306828cd-4e2e-429d-a359-e284562f8b79","year":2015},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.606071Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:823062d79d544f23335b4fc947400ebcfcd624ccce6920210698116d4c0ae453","observation_id":"0abcc303-106c-4d17-88ae-f9b1863726a6","resolution":{"observed_at":"2026-08-14T10:30:08.936172Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:08.907529Z","title":"On-average KL -privacy and its equivalence to generalization for max-entropy mechanisms","venue":null,"work_id":"607e801e-8253-4adb-8e2b-11738ea95bb1","year":2016},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.618085Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:16b1aaf6bec0f75faf40c43615d634970bb1b741bc23b7bc686905d11a1133fb","observation_id":"019ff87a-28ce-4ed1-b41a-cc2e9685f00b","resolution":{"observed_at":"2026-08-14T10:30:08.914047Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:08.886892Z","title":"Bayesian learning via stochastic gradient langevin dynamics","venue":null,"work_id":"0f1d2b20-e082-4e11-aca9-b03b7520fe5b","year":2011},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.628248Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:890db4fc1f847b1c6d5c08722e48f37a0044e9249973908734a557c694fefc58","observation_id":"25eab06c-f8bc-4a93-b92a-eae9f3365199","resolution":{"observed_at":"2026-08-14T10:30:08.893047Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:08.859142Z","title":"Privacy risk in machine learning: Analyzing the connection to overfitting","venue":null,"work_id":"a38106c3-c4a7-4e98-8844-6077775cce3e","year":2018},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.640685Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:d74c8d45329ba2779902511074c83bcc1c3801ff42121d252c616f45dfcebd38","observation_id":"0a92229c-e83f-457f-ae47-410dd048232f","resolution":{"observed_at":"2026-08-14T10:30:08.868081Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:30:08.648244Z","title":"Understanding deep learning requires rethinking generalization","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-14T10:30:08.648244Z"},"links":{"citing_paper":"/paper/1908.11229"},"observation_digest":"sha256:43b9fc3fc563cacca0225651ef9490660a8ac26dcfc7592673d409d00cbf9484","observation_id":"f12b6d76-e65a-4c8a-bcdd-90cac9fa0e26","resolution":{"observed_at":"2026-08-14T10:30:08.648244Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"1908.11229","last_updated":"2019-08-29T13:53:49Z","latest_version":1,"primary_category":"stat.ML","snapshot_observed_at":"2026-08-14T13:13:56.981720Z","submitted_at":"2019-08-29T13:53:49Z","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference"},"reference_resolution":{"displayed":31,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":14,"verified_exact":0,"verified_fuzzy":17},"total_outbound_references":31},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 31 of 31 outbound references and 2 inbound Pith citation observations for arXiv:1908.11229."}