{"as_of":"2026-08-12T03:45:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5f0e0a4201a35b4947863039f4b27e9bf9e409f08c06a9ea9e7db9f1515c1852","coverage":[{"denominator":35,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":35,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T23:29:54.627782Z","state":"measured"},{"denominator":35,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":35,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2412.20456/citation-record","integrity":"/paper/2412.20456/integrity","json":"/paper/2412.20456/citation-record.json","paper":"/paper/2412.20456"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:55.224669Z","title":"The composition theorem for differential privacy,","venue":null,"work_id":"65d16f9b-a1b8-4f8d-9360-a75050e7654b","year":2015},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.500423Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:6a41ffe6539c1deaf67e10743210cadbc351deb063510fe07b6751cbc6742356","observation_id":"34493b7b-5f28-4768-8885-d2ed576592eb","resolution":{"observed_at":"2026-08-10T23:29:55.228573Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:55.213865Z","title":"Large-scale spatial-transmission models of infectious disease,","venue":null,"work_id":"b9b312df-94bc-4cd2-995e-dedd4cb1935c","year":2007},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.504670Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:96b90d06897c2004557ee1d1f439d9e47f61c2384486faa3680a76485a78e6e2","observation_id":"f6f87177-5abf-4aeb-9675-556d25a9e301","resolution":{"observed_at":"2026-08-10T23:29:55.217406Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:55.202891Z","title":"How spatial epidemiology helps understand infectious human disease transmission,","venue":null,"work_id":"5373b557-f800-4734-bd89-e19c15281502","year":2022},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.508354Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:28b6eedf699afae569552bd2c3384ab384f7c5e4e4ee462646d903f20d3dc251","observation_id":"5fbb380a-e994-4ba9-8ce8-f31d49e6d58d","resolution":{"observed_at":"2026-08-10T23:29:55.206467Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:55.193115Z","title":"Urban planning and building smart cities based on the internet of things using big data analytics,","venue":null,"work_id":"22f85c1e-2698-4714-8ce3-eb8c78536951","year":2016},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.512282Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:9082c2852fd979b61fb3da7773247e0382c627655aa692a2534d61547ed7b39d","observation_id":"ce6a49fe-ad90-4da2-853c-227e893eec3a","resolution":{"observed_at":"2026-08-10T23:29:55.196214Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:55.182041Z","title":"Protecting locations with differential privacy under temporal correlations,","venue":null,"work_id":"2a90f38c-f2a6-414d-8fc3-bd595566190b","year":2015},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.516079Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:0d1ccd9825a93fa5db609b3965fcdc7abbd21ae93336e334d9d7b84a26630db3","observation_id":"85eb9c2f-6eb9-460e-b593-81ad33d3c139","resolution":{"observed_at":"2026-08-10T23:29:55.186163Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.948590Z","title":"A zero auxiliary knowledge membership inference attack on aggregate location data,","venue":null,"work_id":"7f084f98-c0d1-417f-8e56-ddfea74f7f96","year":2024},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.519861Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:bb6ca49cbfac2c98fa096619b41d2878212a595da98d579bcb47935fee9a5085","observation_id":"f1c878c2-79c3-4388-afbe-502e08f6f207","resolution":{"observed_at":"2026-08-10T23:29:54.953829Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.523313Z","title":"Differential privacy,","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.523313Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:a7497648de7782f0f1bc015cc72109bb6640ba55aef48f9ec3f2324d4950477b","observation_id":"69a91d31-0ec3-41dc-a33e-aec6720bd981","resolution":{"observed_at":"2026-08-10T23:29:54.523313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.526892Z","title":"The algorithmic foundations of differential privacy,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.526892Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:3f1fd94af242b440c53d5a69960239a7ef0a227abbe2b6c0b41bf446995dead2","observation_id":"e0750e0e-04b9-4142-8d06-3ad7c711d318","resolution":{"observed_at":"2026-08-10T23:29:54.526892Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.920937Z","title":"Optimal noise-adding mechanism in additive differential privacy,","venue":null,"work_id":"2ec43baa-9917-4537-8f32-27ec6d0fe100","year":2019},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.530881Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:861f99973a9c89f3fdf5e45a9fefe17d8eb7a6e18acfbb91c33510e2b6edf0ad","observation_id":"1e829302-3ff3-4923-b2dd-14fba0e5ec6c","resolution":{"observed_at":"2026-08-10T23:29:54.925285Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.20068","last_updated":"2024-07-29T14:54:28Z","snapshot_observed_at":"2026-08-07T17:54:57.099399Z","submitted_at":"2024-07-29T14:54:28Z","title":"Unleash the Power of Ellipsis: Accuracy-enhanced Sparse Vector Technique with Exponential Noise","version":1},"cited_work":{"arxiv_id":"2407.20068","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.20068","snapshot_observed_at":"2026-08-10T23:29:54.708419Z","title":"Unleash the Power of Ellipsis: Accuracy-enhanced Sparse Vector Technique with Exponential Noise","venue":"cs.CR","work_id":"6af1ee27-021e-44f1-98f4-80c9b8631887","year":2024},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.534535Z"},"links":{"cited_paper":"/paper/2407.20068","citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:c7bc57c7529def43ca6c63419d5edabb452161942c7185edbdc093995164a5b4","observation_id":"828377bb-b170-43f6-87a4-53a4388ef933","resolution":{"observed_at":"2026-08-10T23:29:54.712560Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.538120Z","title":"R ´enyi differential privacy,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.538120Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:37d3f0bf94a990fc1be63aa9fc4d4abbc3cd2ab6dff286452b99c763bc7d23b6","observation_id":"ba84a40d-a779-41d9-b5a8-d196d7465f69","resolution":{"observed_at":"2026-08-10T23:29:54.538120Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.541901Z","title":"Gaussian differential privacy,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.541901Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:0c60414dd85536ae8d6ebcf021f4bfd207fc21639c948f3b5ab3bbae71e278c8","observation_id":"b1cf93ed-7649-442b-ac17-7fc1d6ec82e6","resolution":{"observed_at":"2026-08-10T23:29:54.541901Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.546105Z","title":"Membership inference attacks from first principles,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.546105Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:c7f245553506324f65a164d96ee997d2078f99462ee7864548c9fe79900e86da","observation_id":"40e47c11-b716-4a96-9137-90fa97461ddc","resolution":{"observed_at":"2026-08-10T23:29:54.546105Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.550078Z","title":"Enhanced membership inference attacks against machine learning models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.550078Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:56f7c881964c34fd5f007a8f1721d0fc945c6464d62b73651e8ca29e4a706184","observation_id":"61c92a58-b732-4a8e-a459-3674aa9d2df8","resolution":{"observed_at":"2026-08-10T23:29:54.550078Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.881876Z","title":"Knock knock, who’s there? membership inference on aggregate location data,","venue":null,"work_id":"a96fcf4d-fa7a-46ea-9659-ebd66a482ea7","year":2018},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.553979Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:3d3c19294b954197258ccae13e6863226bee334670ecefc4ab4d050b4b84aa8a","observation_id":"a5f44f22-947d-40a5-a7ac-f80946b4759d","resolution":{"observed_at":"2026-08-10T23:29:54.886226Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.869412Z","title":"Likelihood ratio tests, neyman-pearson detectors, roc curves, and sufficient statistics,","venue":null,"work_id":"6af13dc1-9b8e-4818-a217-147bbc33637b","year":2016},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.557795Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:09990f1697ad81b4bb992aaceec6865553c2302c537d758e59f322b7d159e281","observation_id":"03860d68-6afd-43d3-bfec-ffe9232ad1cd","resolution":{"observed_at":"2026-08-10T23:29:54.874269Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.857593Z","title":"Learning poisson binomial distributions,","venue":null,"work_id":"22f8d68e-ee38-4a84-a2d8-c011697e6bd6","year":2012},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.561463Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:3d22ac55bb89ebdd5c46920f5d599ad902986d81fae05c438b414f6f4bb78792","observation_id":"74d0a9b6-2805-49a8-b134-58eb8ca640c1","resolution":{"observed_at":"2026-08-10T23:29:54.861372Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.847174Z","title":"Robust traceability from trace amounts,","venue":null,"work_id":"33614cdc-6833-421f-9b79-9a29ceeda857","year":2015},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.565452Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:4aec9a7bde52a0d56a649f771b8698064ef74e8aac76801eb4958f83af7b5011","observation_id":"767f6c2f-e99a-4956-9381-f33c386b5c18","resolution":{"observed_at":"2026-08-10T23:29:54.850829Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.569340Z","title":"A multi-source dataset of urban life in the city of milan and the province of trentino,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.569340Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:29c86070c5a258a1cd383a015e0d232becff7a3cdcd2c8da9afa2bf9fee9c4bf","observation_id":"4c45c403-34b9-4490-9790-a544ef342968","resolution":{"observed_at":"2026-08-10T23:29:54.569340Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.829272Z","title":"Social Pulse - Milano,","venue":null,"work_id":"500bce64-298f-4340-87b4-12126942bd6a","year":2015},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.573523Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:c4c72862fbec2df7a801555739ebf6bf43b17e728c58f1e7b403acbca3a024e9","observation_id":"442d8379-608e-4ae9-a76a-270730f0095d","resolution":{"observed_at":"2026-08-10T23:29:54.832971Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.818312Z","title":"Collecting triangle counts with edge relationship local differential privacy,","venue":null,"work_id":"ce08e62d-ce07-4783-b066-f6b46f69b009","year":2022},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.577167Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:be5be1435934b8eb23437042556f522d4eb6ff0feac3b9b36d1139d72f291700","observation_id":"bbdfd9a4-61b5-4be2-91b6-c232296a29e3","resolution":{"observed_at":"2026-08-10T23:29:54.821978Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.807471Z","title":"Edge-protected triangle count estimation under relationship local differential privacy,","venue":null,"work_id":"113f5d1f-f526-4449-add7-934ad04cfe0f","year":2024},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.580996Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:662897b112cb043cc8962eb61790c069135ff6bc96c750a51fe97036137f1058","observation_id":"195124ea-859b-41bd-b509-609082dd1e42","resolution":{"observed_at":"2026-08-10T23:29:54.811190Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2208.14933","last_updated":"2022-08-31T16:02:26Z","snapshot_observed_at":"2026-08-04T12:53:34.051220Z","submitted_at":"2022-08-31T16:02:26Z","title":"Membership Inference Attacks by Exploiting Loss Trajectory","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2208.14933","snapshot_observed_at":"2026-08-10T23:29:54.584910Z","title":"Membership inference attacks by exploiting loss trajectory,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.584910Z"},"links":{"cited_paper":"/paper/2208.14933","citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:3a6f8c5ae39ece8d7924d1163439be0cf1873a7f10ba5ad7627b74a51daed721","observation_id":"f4ec1081-00c9-41ca-8bae-5f3c5a1fd0d3","resolution":{"observed_at":"2026-08-10T23:29:54.584910Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.797287Z","title":"Resolving individuals contributing trace amounts of dna to highly complex mixtures using high-density snp genotyping microarrays,","venue":null,"work_id":"093bc120-f500-4c6d-b6d7-e8bb46e1177a","year":2008},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.589403Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:d0568da9363ce7e502c0ca0a1b0b97ba9d3cd8f12bec40c8cf4217f896156429","observation_id":"648a5605-22b7-41c7-92c2-59b613fb3e32","resolution":{"observed_at":"2026-08-10T23:29:54.800397Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1902.07456","last_updated":"2020-04-27T10:53:40Z","snapshot_observed_at":"2026-08-08T08:59:34.522962Z","submitted_at":"2019-02-20T08:47:51Z","title":"Measuring Membership Privacy on Aggregate Location Time-Series","version":2},"cited_work":{"arxiv_id":"1902.07456","doi":null,"metadata_source":"pith","pith_arxiv_id":"1902.07456","snapshot_observed_at":"2026-08-10T23:29:54.680124Z","title":"Measuring Membership Privacy on Aggregate Location Time-Series","venue":"cs.CR","work_id":"22752450-864e-4dbd-b60b-a8189067cf3e","year":2019},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.592289Z"},"links":{"cited_paper":"/paper/1902.07456","citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:099388f32200458463cdba7b2c2452257d6305affb99f69836be2baf15defbf3","observation_id":"986c4f9c-7182-43a1-b817-d8f0ead883fd","resolution":{"observed_at":"2026-08-10T23:29:54.685966Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.596108Z","title":"Membership inference attacks against machine learning models,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.596108Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:c3b0ac1405b23920374a1959e091209b1fb4752349c02ff19e8f3d79b96615ab","observation_id":"b7193806-ad9b-41f0-8f81-7af755cc5373","resolution":{"observed_at":"2026-08-10T23:29:54.596108Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.599614Z","title":"Privacy risk in machine learning: Analyzing the connection to overfitting,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.599614Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:1887978748ac10d510e4dfabd93c5b3efdc70cc84912e4089d450c973dc26bab","observation_id":"33b666f4-d004-4d1b-bb03-b0edc1eb802b","resolution":{"observed_at":"2026-08-10T23:29:54.599614Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.775684Z","title":"Low-cost high-power membership inference attacks,","venue":null,"work_id":"002caee4-8f3a-4437-96a7-0b7b172d21cd","year":2024},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.603151Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:34aaa649ad5a48ccaf945a38d71fd268e8ef787e3943f37f4e176f12f8cdb9d4","observation_id":"203ba0f2-6979-400b-8c8e-348e22d02cd1","resolution":{"observed_at":"2026-08-10T23:29:54.778736Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1806.01246","last_updated":"2018-12-14T19:39:43Z","snapshot_observed_at":"2026-08-08T03:39:28.408433Z","submitted_at":"2018-06-04T17:38:42Z","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1806.01246","snapshot_observed_at":"2026-08-10T23:29:54.606298Z","title":"Ml-leaks: Model and data independent membership inference attacks and defenses on machine learning models,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.606298Z"},"links":{"cited_paper":"/paper/1806.01246","citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:37b18cbd8d4d1795243126df94e00d68b95939c07385814975de504287bb93b1","observation_id":"7d81b1c4-7131-48b5-950b-49340e3e676d","resolution":{"observed_at":"2026-08-10T23:29:54.606298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.766167Z","title":"A pragmatic ap- proach to membership inferences on machine learning models,","venue":null,"work_id":"1cf244f2-0263-456d-aacf-24b6e91a9e1f","year":2020},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.609864Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:a4169dd69a48ffd996f8d4cb370408e72b9d9837462e88a0b4f7c9147ca4d4e4","observation_id":"85f1bb65-d457-42bf-8d84-6a5d20e27f75","resolution":{"observed_at":"2026-08-10T23:29:54.769459Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.755605Z","title":"On the privacy risks of model explanations,","venue":null,"work_id":"068f134a-4493-4f69-bb66-a1d2a42af475","year":2021},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.613369Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:ff00c591c0051ef292cddaa06792c9d85d2271f995d58ddc3f6b89c066ac5231","observation_id":"20d07195-4d9c-494d-969d-676976ba4cbd","resolution":{"observed_at":"2026-08-10T23:29:54.759343Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.744166Z","title":"Stealing links from graph neural networks,","venue":null,"work_id":"82051104-03a5-4567-b484-6b3220b0b1da","year":2021},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.616984Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:20df45d7c127210079a079e7e3f1e049d9bfbe0c5178aed69af2e9b2049250ab","observation_id":"db6da42c-0b57-4323-aa85-2fb2be79b379","resolution":{"observed_at":"2026-08-10T23:29:54.748584Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.732112Z","title":"Inference attacks against graph neural networks,","venue":null,"work_id":"86d16ce1-65b8-4bfd-9027-abf713737af1","year":2022},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.620253Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:ad74235ffa30af841809e3fb99bc0ced881c4de33eda291e34ac2524869009dc","observation_id":"0cfc81b7-20ea-492b-850c-e43c72ebbe8d","resolution":{"observed_at":"2026-08-10T23:29:54.736618Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05784","last_updated":"2024-05-09T14:03:52Z","snapshot_observed_at":"2026-07-06T18:12:05.439027Z","submitted_at":"2024-05-09T14:03:52Z","title":"Link Stealing Attacks Against Inductive Graph Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05784","snapshot_observed_at":"2026-08-10T23:29:54.623699Z","title":"Link stealing attacks against inductive graph neural networks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.623699Z"},"links":{"cited_paper":"/paper/2405.05784","citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:1ceadfb3a6869f151e87a7bcc5c686bbf9a11e4aebf3761f10ef253d9913ad56","observation_id":"a4874f45-6361-4166-99ec-74ac8124b825","resolution":{"observed_at":"2026-08-10T23:29:54.623699Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:29:54.719915Z","title":"Systematic evaluation of privacy risks of machine learning models,","venue":null,"work_id":"4f067dad-daa7-4fc7-aaa3-5949ab8bce9d","year":2021},"citing_paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-10T23:29:54.627782Z"},"links":{"citing_paper":"/paper/2412.20456"},"observation_digest":"sha256:f75e6c844b3a11135d5d9e694cc6f4aa3cf9b5d28ea6107165075b42f5d6cb2d","observation_id":"338f8c63-20bd-4543-9fbf-12e151d33d55","resolution":{"observed_at":"2026-08-10T23:29:54.724246Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2412.20456","last_updated":"2024-12-29T12:51:34Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T23:18:56.476873Z","submitted_at":"2024-12-29T12:51:34Z","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates"},"reference_resolution":{"displayed":35,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":12,"verified_exact":2,"verified_fuzzy":20},"total_outbound_references":35},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 35 of 35 outbound references and 0 inbound Pith citation observations for arXiv:2412.20456."}