{"as_of":"2026-08-22T06:44:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:71488cf2954fbab2176a283ff6e783e830decf34934a671f8ad64b2a16257b2a","coverage":[{"denominator":87,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":87,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T14:01:11.124492Z","state":"measured"},{"denominator":92,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":92,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-22T06:32:14.747728+00:00","state":"measured"},{"denominator":5,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":5,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:50:01.646953Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-20T17:23:36.822895Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.18624","snapshot_observed_at":"2026-08-07T12:50:01.646953Z","title":"Membership inference attacks against vision-language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.03179","last_updated":"2025-05-29T13:17:25Z","snapshot_observed_at":"2026-08-15T10:08:46.994821Z","submitted_at":"2025-05-29T13:17:25Z","title":"Vid-SME: Membership Inference Attacks against Large Video Understanding Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T12:50:01.646953Z"},"links":{"cited_paper":"/paper/2501.18624","citing_paper":"/paper/2506.03179"},"observation_digest":"sha256:e3c09d480aa99afa14758ff8717deda0d8d343e43b24aa478d49e7c4e37914c4","observation_id":"d7f5e69c-d339-41f5-b5cc-32a5d117b1c6","resolution":{"observed_at":"2026-08-07T12:50:01.646953Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.18624","snapshot_observed_at":"2026-08-06T14:45:42.867566Z","title":"Large language model supply chain: Open problems from the security perspective","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-18T02:43:09.316106Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.867566Z"},"links":{"cited_paper":"/paper/2501.18624","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:c3a8204419ad184650e3eaef1143872d528db7d9faf0458ff3862012ae62af9e","observation_id":"2d33092b-5102-4e71-8f90-9b78061fb2d9","resolution":{"observed_at":"2026-08-06T14:45:42.867566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.18624","snapshot_observed_at":"2026-08-05T04:42:13.710665Z","title":"Membership inference attacks against vision-language models.arXiv preprint arXiv:2501.18624, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.06026","last_updated":"2025-09-07T11:58:02Z","snapshot_observed_at":"2026-08-14T09:25:17.388708Z","submitted_at":"2025-09-07T11:58:02Z","title":"DCMI: A Differential Calibration Membership Inference Attack Against Retrieval-Augmented Generation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T04:42:13.710665Z"},"links":{"cited_paper":"/paper/2501.18624","citing_paper":"/paper/2509.06026"},"observation_digest":"sha256:d76c7ee334685368ef05aba125f953886c2bdc0cb012aa4cd709857ff9448822","observation_id":"199027f0-268f-4efb-9035-71832e3f0da0","resolution":{"observed_at":"2026-08-05T04:42:13.710665Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.18624","snapshot_observed_at":"2026-08-04T19:48:48.756244Z","title":"Membership inference attacks against vision-language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.09097","last_updated":"2025-09-11T02:16:34Z","snapshot_observed_at":"2026-08-18T20:32:36.837338Z","submitted_at":"2025-09-11T02:16:34Z","title":"DP-FedLoRA: Privacy-Enhanced Federated Fine-Tuning for On-Device Large Language Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-04T19:48:48.756244Z"},"links":{"cited_paper":"/paper/2501.18624","citing_paper":"/paper/2509.09097"},"observation_digest":"sha256:8af3d740e1e55ef0ea20d003878d3385009a6a0df27847947acfb2c127c083b3","observation_id":"f678bc68-315d-4cdd-9458-32148491c934","resolution":{"observed_at":"2026-08-04T19:48:48.756244Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"cited_work":{"arxiv_id":"2501.18624","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2501.18624","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"becffe81-1ed2-4fed-968c-004e6dca80fd","year":2025},"citing_paper":{"arxiv_id":"2605.16090","last_updated":"2026-05-15T15:47:41Z","snapshot_observed_at":"2026-08-15T21:55:47.849735Z","submitted_at":"2026-05-15T15:47:41Z","title":"A Cross-Modal Prompt Injection Attack against Large Vision-Language Models with Image-Only Perturbation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-20T17:20:54.445007Z"},"links":{"cited_paper":"/paper/2501.18624","citing_paper":"/paper/2605.16090"},"observation_digest":"sha256:dff364c79aac25a76b36cf8aeaa05beda6b48ed59a0969a514d2480834d7f53b","observation_id":"0d694a12-e798-4d5c-a81c-4a709c61a0e0","resolution":{"observed_at":"2026-05-20T17:23:36.824798Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2501.18624/citation-record","integrity":"/paper/2501.18624/integrity","json":"/paper/2501.18624/citation-record.json","paper":"/paper/2501.18624"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:10.761138Z","title":"Deep learning with differential privacy","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.761138Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:00ad17f55e563cec9c0b64e9aeac4ec59af2eb930e9d02f0d926a1e1270cacde","observation_id":"9ba343e0-09fd-426e-b18b-425485947602","resolution":{"observed_at":"2026-08-10T14:01:10.761138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-17T09:58:46.058102Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-10T14:01:10.766542Z","title":"Gpt-4 technical report","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.766542Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:1394c9a3e04a48849881c9600e4ff8e1e8575585c4a6ece4d27d85fd3de4fe56","observation_id":"2c1b6bdf-fbe8-4344-a447-7d461c00b2cd","resolution":{"observed_at":"2026-08-10T14:01:10.766542Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:10.771618Z","title":"Membership privacy in microrna-based studies","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.771618Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:ade5bb56edd24b4f23d8b8fc1b8afc021d765db013e25307a2a1c6d6d63b1d39","observation_id":"9cb518b4-70a0-4c49-90d3-5d3c153096fc","resolution":{"observed_at":"2026-08-10T14:01:10.771618Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:10.775870Z","title":"walk2friends: Inferring social links from mobility profiles","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.775870Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:45160bf9a9c3a2cbfad38a542dd9093dbe0b0508bb27ee5f628a7d4eed28926d","observation_id":"28340459-d618-43cd-8dde-307a20521a0b","resolution":{"observed_at":"2026-08-10T14:01:10.775870Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:10.779991Z","title":"Machine un- learning","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.779991Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:a8b5a16e0b292d66d2aea5412d5023bbe4ea1a68dff9cca0d3c0cc233527c796","observation_id":"b8a2a974-61d8-4d1f-ade0-2f06bb4fa0b0","resolution":{"observed_at":"2026-08-10T14:01:10.779991Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:10.784346Z","title":"Membership in- ference attacks from first principles","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.784346Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:5f8103c2d687f82b655944a320577577a75c35a56e22275e097bb629962e60ff","observation_id":"ff5bf445-5fb1-4866-91f5-ea361666a1ac","resolution":{"observed_at":"2026-08-10T14:01:10.784346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:10.789178Z","title":"Quantifying memorization across neural language mod- els","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.789178Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:19bfc6157c02e40766aa5888a0bfc0e86d126253e4e6f4f503610efd7cb68e90","observation_id":"e967af74-18d5-4bc7-946a-2298728bbe47","resolution":{"observed_at":"2026-08-10T14:01:10.789178Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:10.793165Z","title":"Extracting training data from large language models","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.793165Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:19704e0fbe82d2975c52eaf27e85c0b8c61cc387d814e9ec3244df4ffb3a88c3","observation_id":"dd742361-0900-4dd7-bcfe-1e28ef06b879","resolution":{"observed_at":"2026-08-10T14:01:10.793165Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.304747Z","title":"Conceptual 12m: Pushing web-scale image-text pre-training to recognize long-tail visual con- cepts","venue":null,"work_id":"39e6b26d-8a3c-4b2e-a0e9-cdfeb4e1b974","year":2021},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.797205Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:c6141485465a084c6df42867472d97253490ba78e96bba984b7b90c78b49ed18","observation_id":"f007f0d1-0263-4205-8066-48a150c61dd9","resolution":{"observed_at":"2026-08-10T14:01:12.309746Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.290509Z","title":"Gan-leaks: A taxonomy of membership inference at- tacks against generative models","venue":null,"work_id":"7bf5386e-e2b0-4d49-a02d-0f2a6cd74982","year":2020},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.801596Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:d71146528487cf42d5eac48890755b3a480778e66d3d467e7c281dbdeb684257","observation_id":"facdb295-5020-4f35-833b-75373976011a","resolution":{"observed_at":"2026-08-10T14:01:12.295245Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.12793","last_updated":"2023-11-28T08:52:50Z","snapshot_observed_at":"2026-08-14T06:42:43.375489Z","submitted_at":"2023-11-21T18:58:11Z","title":"ShareGPT4V: Improving Large Multi-Modal Models with Better Captions","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.12793","snapshot_observed_at":"2026-08-10T14:01:10.805783Z","title":"Sharegpt4v: Improving large multi-modal models with better cap- tions","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.805783Z"},"links":{"cited_paper":"/paper/2311.12793","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:32d9367a5d2d92c21fc83291e6fcdb76e6ee145b65096dc47dc9a5e996244b33","observation_id":"6f78918e-2355-4831-b144-1673c4f68471","resolution":{"observed_at":"2026-08-10T14:01:10.805783Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.276614Z","title":"Gonzalez, Ion Sto- ica, and Eric P","venue":null,"work_id":"fbe172bb-6eec-4bae-b028-0e859e4a15db","year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.810274Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:0b90ab01c4b96c21404872303115b08d944c1ad1c88dd3034a77b7ea6c7947b2","observation_id":"6d54939c-82d4-483b-aea2-acfccf78928d","resolution":{"observed_at":"2026-08-10T14:01:12.280941Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:10.814424Z","title":"Label-only membership inference attacks","venue":null,"work_id":null,"year":1964},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.814424Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:272c4edffccdc6906753adffe529752c41d35fc2cc53e7652d1087b8d6c44435","observation_id":"e9979cbe-586c-442d-a995-b453b75c1fa6","resolution":{"observed_at":"2026-08-10T14:01:10.814424Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.06500","last_updated":"2023-06-15T08:00:18Z","snapshot_observed_at":"2026-08-13T18:58:34.541884Z","submitted_at":"2023-05-11T00:38:10Z","title":"InstructBLIP: Towards General-purpose Vision-Language Models with Instruction Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.06500","snapshot_observed_at":"2026-08-10T14:01:10.818483Z","title":"Instruct- blip: Towards general-purpose vision-language mod- els with instruction tuning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.818483Z"},"links":{"cited_paper":"/paper/2305.06500","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:6dd4b519a100968ffbeea9e351ecae110aadb4c362a840e07fca0b59810e187f","observation_id":"164ea9b5-8eaa-47eb-8468-c89341d8bf04","resolution":{"observed_at":"2026-08-10T14:01:10.818483Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.254948Z","title":"Sok: Membership inference is harder than previously thought","venue":null,"work_id":"636c34fc-33e9-4339-a6cb-4fb7e46ff3b4","year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.822640Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:61f4bb8533e214e406a10002e506e7a5e88a042e4e8e4bdffadf2ba7378b7ff5","observation_id":"9be96792-8ac3-4815-a8c9-8936b71ce144","resolution":{"observed_at":"2026-08-10T14:01:12.259027Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.241926Z","title":"Are diffusion models vulnerable to mem- bership inference attacks? In International Conference on Machine Learning, pages 8717–8730","venue":null,"work_id":"90203d44-1284-4b21-ac10-f448f872718f","year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.826744Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:9d1ba8dd81ef835358a2c73c6bc51e54d52b04e09bff924820123f2a9f9e888f","observation_id":"f86ced2f-d38e-486e-9452-3e104a478928","resolution":{"observed_at":"2026-08-10T14:01:12.246538Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07841","last_updated":"2024-09-16T13:18:23Z","snapshot_observed_at":"2026-08-16T14:19:15.347006Z","submitted_at":"2024-02-12T17:52:05Z","title":"Do Membership Inference Attacks Work on Large Language Models?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07841","snapshot_observed_at":"2026-08-10T14:01:10.830799Z","title":"Do membership inference attacks work on large language models? arXiv preprint arXiv:2402.07841, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.830799Z"},"links":{"cited_paper":"/paper/2402.07841","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:a2bc60fc51a14020a834c9db92d2370384dfe96efa51e5424348e72bb3f8b85b","observation_id":"6b53459b-c6c8-470c-befc-53e5ca51212b","resolution":{"observed_at":"2026-08-10T14:01:10.830799Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.229239Z","title":"Calibrating noise to sensitivity in pri- vate data analysis","venue":null,"work_id":"f78fb634-9fa1-44fe-8c93-a7f31f8c8dde","year":2006},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.835464Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:8aada55743dac1a4eb3b952393525a4eb2064d2c4b435226d113d18a9a0a6f07","observation_id":"b28bbe37-5686-4162-86da-28734ffe8448","resolution":{"observed_at":"2026-08-10T14:01:12.233424Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.216369Z","title":"Dataset inference for self-supervised models","venue":null,"work_id":"ce43a877-bb96-4614-80a6-bacdcd39c670","year":2022},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.839647Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:40f71a97faa169f9b86c65de3119209a19acaf59aa40b22d38794e909fe2f26b","observation_id":"e14525ff-b053-4ae7-9564-7b3b61070d61","resolution":{"observed_at":"2026-08-10T14:01:12.220533Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.203345Z","title":"Privacy in pharmacogenetics: An {End-to-End} case study of per- sonalized warfarin dosing","venue":null,"work_id":"17924e12-9695-4f21-8057-24e7df5475bc","year":2014},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.843764Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:5b4d41cbe7721891a43727cc848a8aa159eeb2db15a6c80016cb6971e0662221","observation_id":"52dcab4e-b011-44bb-9206-35e4157b0097","resolution":{"observed_at":"2026-08-10T14:01:12.207836Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6211","last_updated":"2015-03-04T01:43:31Z","snapshot_observed_at":"2026-08-14T23:50:42.566579Z","submitted_at":"2013-12-21T06:31:41Z","title":"An Empirical Investigation of Catastrophic Forgetting in Gradient-Based Neural Networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6211","snapshot_observed_at":"2026-08-10T14:01:10.847649Z","title":"An empirical investiga- tion of catastrophic forgetting in gradient-based neural networks","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.847649Z"},"links":{"cited_paper":"/paper/1312.6211","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:32f97a0ac78e2bd542f70d96f2e9d851396f6e78f494bec739811f79ae6e295d","observation_id":"37a6c616-a624-4fa8-bfc3-9cd880e577c2","resolution":{"observed_at":"2026-08-10T14:01:10.847649Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.190753Z","title":"Certified data removal from machine learning models","venue":null,"work_id":"4c9c8207-a318-4916-98c6-b08b91777822","year":2020},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.851862Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:3c15b664476fdcd4c986328dd6bdf993685c8bdced47797ee5140ad1246b57ae","observation_id":"997e5fcf-4e2e-4232-abf8-c788c6f5145f","resolution":{"observed_at":"2026-08-10T14:01:12.194735Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.18362","last_updated":"2023-10-24T14:25:53Z","snapshot_observed_at":"2026-08-22T03:13:02.484405Z","submitted_at":"2023-10-24T14:25:53Z","title":"SoK: Memorization in General-Purpose Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.18362","snapshot_observed_at":"2026-08-10T14:01:10.855939Z","title":"Sok: Memorization in general-purpose large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.855939Z"},"links":{"cited_paper":"/paper/2310.18362","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:4f226075b8394f401698d20605ead4831adefcc48c8cb04a88f72a3d8f6d6c7c","observation_id":"3497f1e6-73e0-4316-ad76-0695039078f2","resolution":{"observed_at":"2026-08-10T14:01:10.855939Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02469","last_updated":"2024-04-15T13:51:30Z","snapshot_observed_at":"2026-08-18T17:31:40.395667Z","submitted_at":"2024-03-04T20:29:51Z","title":"Vision-Language Models for Medical Report Generation and Visual Question Answering: A Review","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02469","snapshot_observed_at":"2026-08-10T14:01:10.860277Z","title":"Vision-language models for medical report generation and visual question answering: A review","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.860277Z"},"links":{"cited_paper":"/paper/2403.02469","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:cdb996097109790a5d6edebb15b92ee76f655b0df368c9d916ba8cb68e7804fb","observation_id":"88a74b03-16fe-44ea-9af8-93e70775e2a6","resolution":{"observed_at":"2026-08-10T14:01:10.860277Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.02797","last_updated":"2025-01-16T02:31:20Z","snapshot_observed_at":"2026-08-16T14:29:37.108331Z","submitted_at":"2024-01-05T13:22:12Z","title":"PeFoMed: Parameter Efficient Fine-tuning of Multimodal Large Language Models for Medical Imaging","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.02797","snapshot_observed_at":"2026-08-10T14:01:10.864437Z","title":"Pefomed: Parameter efficient fine-tuning on multimodal large language models for medical visual question answering","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.864437Z"},"links":{"cited_paper":"/paper/2401.02797","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:62d1695fa35f49217124cd8472a3fb3e7ec1d5d03efbf5e63110db660024d35b","observation_id":"746b354b-d092-4269-bf7d-77887fd794ee","resolution":{"observed_at":"2026-08-10T14:01:10.864437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.178003Z","title":"Stealing links from graph neu- ral networks","venue":null,"work_id":"f630f526-63b7-4bb6-b372-2e1d4640f3f8","year":2021},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.869744Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:b4f5133c004f0d4ece714b68eb9eda12cc4833230dc4ea22acf08970ae55c4a9","observation_id":"e8069cd5-64ff-4ef4-b1d1-71d3dd7f2c14","resolution":{"observed_at":"2026-08-10T14:01:12.182158Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.165323Z","title":"Twitter tells facial recognition trailblazer to stop using site’s photos","venue":null,"work_id":"0edc7ed9-7dd9-4772-88c5-5c2026d3af89","year":2020},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.873790Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:a61ca723ad84ebe5da881c236cee79eab81dd9cafa091640e4937dae7b7410a2","observation_id":"bc137ea3-b0a9-4149-9a54-ef271f1e6c8c","resolution":{"observed_at":"2026-08-10T14:01:12.169441Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.152419Z","title":"Monte carlo and reconstruction membership in- ference attacks against generative models","venue":null,"work_id":"d27f71ca-fb5a-4a9c-9d54-3846875c793c","year":2019},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.877879Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:4869e662294dac68e94ca6cd826f77ac3740bafd0e6589eb7ed63f98f92dcc62","observation_id":"1cec6515-de4c-4f5f-8284-6e6308525e5f","resolution":{"observed_at":"2026-08-10T14:01:12.156846Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.139261Z","title":"Does clip know my face? Journal of Artificial Intelligence Research, 80:1033–1062, 2024","venue":null,"work_id":"ae3ffcac-ddde-42d3-adc8-80dd03fd940f","year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.882049Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:12b74e490ba569ed59a4945dacd54a56db6e6a2d0bb1ab12bf1669dea3c4b13f","observation_id":"0c25e501-c1ed-44ee-8132-c644e76a6898","resolution":{"observed_at":"2026-08-10T14:01:12.143675Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.125465Z","title":"Resolving individuals contributing trace amounts of dna to highly complex mixtures using high- density snp genotyping microarrays","venue":null,"work_id":"828d8f2d-7fce-4e8e-be16-16d7fc123291","year":2008},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.886031Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:8ceff67d2ab6d204e396eaa2cfb9db783dcf1a5bb56d88d5562261ee70f1a60e","observation_id":"95e83044-d697-401e-9128-9938b6a1ea4e","resolution":{"observed_at":"2026-08-10T14:01:12.129871Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.111652Z","title":"Membership in- ference attacks against gans by leveraging over- representation regions","venue":null,"work_id":"fbe5bfca-3619-4cf6-82ca-aae428d2b572","year":2021},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.889982Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:b2f31fff7a0cbefcfd332a96a11b37c4d5b36b760ca84c5d749db5459726b529","observation_id":"30b2eb7b-e391-4487-ba40-848295d6126b","resolution":{"observed_at":"2026-08-10T14:01:12.116265Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.097904Z","title":"Defenses to membership inference attacks: A survey","venue":null,"work_id":"5bc7eaa8-72f8-4b21-a787-21d29de78365","year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.893876Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:3f9e1f94531d5d71f6c1ceb00b2b562e01e6a7b0941c8de41e81307ceda34717","observation_id":"77a27c9a-1053-4c22-a160-111353381a13","resolution":{"observed_at":"2026-08-10T14:01:12.102589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.084370Z","title":"M4i: Multi-modal models membership in- ference","venue":null,"work_id":"c61daedb-7de9-4a47-8d16-c8a154f1dfe1","year":2022},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.897913Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:679212ac501d9ac99ff827c97f4c93c23b3e699a1a5b9543e2e563d301639827","observation_id":"7b38799c-2c4e-4dfe-a730-a4791363d8b3","resolution":{"observed_at":"2026-08-10T14:01:12.088839Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.069501Z","title":"Quantify- ing and defending against privacy threats on federated knowledge graph embedding","venue":null,"work_id":"a5d9cd30-9190-4aaf-8de9-a6c983c62409","year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.902128Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:fa5e9acab6357471dad447d74f2fe46d946d2572a4378c661d7f22c37f1777b2","observation_id":"b90b26de-c78d-4296-be64-ee9026e3239e","resolution":{"observed_at":"2026-08-10T14:01:12.074353Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.054929Z","title":"Eraser: Machine unlearning in mlaas via an in- ference serving-aware approach","venue":null,"work_id":"29658560-9172-4b8e-a9f2-3441280d09e0","year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.905966Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:9c0b25ae88016081580ac562099e1956c54c8b20a5a64f0c3c1e94523b44b5fc","observation_id":"d9797564-3eff-4370-a67d-7d6a922315fc","resolution":{"observed_at":"2026-08-10T14:01:12.059357Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.12628","last_updated":"2022-10-20T05:30:43Z","snapshot_observed_at":"2026-08-17T14:09:03.289442Z","submitted_at":"2022-05-25T10:08:45Z","title":"Are Large Pre-Trained Language Models Leaking Your Personal Information?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.12628","snapshot_observed_at":"2026-08-10T14:01:10.910181Z","title":"Are large pre-trained language models leaking your per- sonal information? arXiv preprint arXiv:2205.12628, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.910181Z"},"links":{"cited_paper":"/paper/2205.12628","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:f4f4a697bcbb770aca48a3f4073e3fd7beacf40010cab3ea11cbdeb38bc0c1f2","observation_id":"6c3ad6c9-e3b6-48d1-9848-d5d00a0bb647","resolution":{"observed_at":"2026-08-10T14:01:10.910181Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.041130Z","title":"Practical blind membership inference attack via differential com- parisons","venue":null,"work_id":"18367c58-eaed-4ccc-9efe-6f55e6f1c7b3","year":2021},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.914337Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:78ef3310f786a794ca9cb7573c534496437c2950be2e62792fe811ec8f5a34d2","observation_id":"e93a7b4a-8d9e-4eda-91d4-5f2ccfb3288d","resolution":{"observed_at":"2026-08-10T14:01:12.045764Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.02103","last_updated":"2024-10-28T19:12:53Z","snapshot_observed_at":"2026-08-16T22:36:15.702695Z","submitted_at":"2024-02-03T09:55:35Z","title":"D\\'ej\\`a Vu Memorization in Vision-Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.02103","snapshot_observed_at":"2026-08-10T14:01:10.918343Z","title":"D \\’ej\\a vu memorization in vision-language mod- els","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.918343Z"},"links":{"cited_paper":"/paper/2402.02103","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:8b23b7e030279b7acb6335b90455b02907e1cfa8ab5b4bcd2101631a339b7d5b","observation_id":"52de6a3b-768e-4755-ac8c-b58018f5fc5b","resolution":{"observed_at":"2026-08-10T14:01:10.918343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.027079Z","title":"Memguard: Defend- ing against black-box membership inference attacks via adversarial examples","venue":null,"work_id":"f24dd2e0-1f51-4d65-b142-c311b614490c","year":2019},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.922594Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:83a535d661dab4a1e0bfe28bf46d09deb4d7ad200953136d6332d24eb21e44e4","observation_id":"523d065e-ee50-4dd8-ab4c-957dfaf6a4b3","resolution":{"observed_at":"2026-08-10T14:01:12.032234Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2006.05336","last_updated":"2020-06-09T15:17:21Z","snapshot_observed_at":"2026-08-19T01:13:25.770315Z","submitted_at":"2020-06-09T15:17:21Z","title":"On the Effectiveness of Regularization Against Membership Inference Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2006.05336","snapshot_observed_at":"2026-08-10T14:01:10.926497Z","title":"On the effectiveness of regularization against membership inference attacks","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.926497Z"},"links":{"cited_paper":"/paper/2006.05336","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:4e1fa29457548846647a1a503ea294e38ae6e4210e2354acfaebede18d1e6c59","observation_id":"ed0b0828-cf91-4a28-b119-1e71e27c2770","resolution":{"observed_at":"2026-08-10T14:01:10.926497Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:12.013206Z","title":"Practical membership inference at- tacks against large-scale multi-modal models: A pilot study","venue":null,"work_id":"e5690679-1414-47c5-b739-6f1df2542a93","year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.930826Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:5a086926b23dcf7fe3b0e6fe28769ae4fcdf7fc83326c6517560e33a1170f25d","observation_id":"d7313605-2dfc-4abd-975c-75b05f9ae915","resolution":{"observed_at":"2026-08-10T14:01:12.017868Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.999553Z","title":"A generalization of fisher’s z test","venue":null,"work_id":"2acdf4b6-d2c6-4fea-b0ad-da939164ed74","year":1938},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.935237Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:c0768c00ffae1b1b715d1ab9d006aefd9665e2080498ce8034c825333154125b","observation_id":"921a73c8-b7fc-4192-871a-e3121b9fe5e7","resolution":{"observed_at":"2026-08-10T14:01:12.004012Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.00890","last_updated":"2023-06-01T16:50:07Z","snapshot_observed_at":"2026-08-09T05:23:28.778360Z","submitted_at":"2023-06-01T16:50:07Z","title":"LLaVA-Med: Training a Large Language-and-Vision Assistant for Biomedicine in One Day","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.00890","snapshot_observed_at":"2026-08-10T14:01:10.939346Z","title":"Llava-med: Training a large language-and-vision assistant for biomedicine in one day","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.939346Z"},"links":{"cited_paper":"/paper/2306.00890","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:966222a1e47d70f67c8faac0a63a235de1496955700353f0a0725bfe62baa95a","observation_id":"95589058-9393-4f41-9c9d-bb0ae781d224","resolution":{"observed_at":"2026-08-10T14:01:10.939346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2002.12062","last_updated":"2021-02-03T01:43:20Z","snapshot_observed_at":"2026-08-16T02:30:43.639566Z","submitted_at":"2020-02-27T12:35:36Z","title":"Membership Inference Attacks and Defenses in Classification Models","version":3},"cited_work":{"arxiv_id":"2002.12062","doi":null,"metadata_source":"pith","pith_arxiv_id":"2002.12062","snapshot_observed_at":"2026-08-10T14:01:11.435455Z","title":"Membership Inference Attacks and Defenses in Classification Models","venue":"cs.CR","work_id":"1793c2b4-3e42-416e-9cca-616fad033db6","year":2020},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.943650Z"},"links":{"cited_paper":"/paper/2002.12062","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:6ca5f03ccedccf2901cada56ac6133d9d51aa91fbf56912653e1869bb509a5de","observation_id":"d40e5d75-a9c2-45d4-aa59-93ecff45ca74","resolution":{"observed_at":"2026-08-10T14:01:11.442172Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.14369","last_updated":"2023-10-22T17:33:19Z","snapshot_observed_at":"2026-08-16T14:49:59.917797Z","submitted_at":"2023-10-22T17:33:19Z","title":"MoPe: Model Perturbation-based Privacy Attacks on Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.14369","snapshot_observed_at":"2026-08-10T14:01:10.947909Z","title":"Mope: Model perturbation-based privacy attacks on lan- guage models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.947909Z"},"links":{"cited_paper":"/paper/2310.14369","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:2e3f02bfe6f20795d1ed115bd7a1b188d4cf50affdd6c9d6eacf461c7384f629","observation_id":"cb76d461-8ffc-4d52-85a3-36e2d81fffed","resolution":{"observed_at":"2026-08-10T14:01:10.947909Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:10.952186Z","title":"Membership leakage in label-only exposures","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.952186Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:45a3358aa6b8238c96ff245169a80fd1487b9de7247ab9b639c97e10fbf110bf","observation_id":"1b88b178-379f-4f91-b997-5f7adec830f5","resolution":{"observed_at":"2026-08-10T14:01:10.952186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13851","last_updated":"2024-02-21T14:54:30Z","snapshot_observed_at":"2026-08-16T14:16:34.445544Z","submitted_at":"2024-02-21T14:54:30Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13851","snapshot_observed_at":"2026-08-10T14:01:10.956183Z","title":"Vl- trojan: Multimodal instruction backdoor attacks against autoregressive visual language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.956183Z"},"links":{"cited_paper":"/paper/2402.13851","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:bc3c219c6eb77c78c005b794d69da2573b1c6f07d629c2d7b0e0b5b8ec48ae59","observation_id":"05ea58e2-400e-409d-b323-a41fa360a799","resolution":{"observed_at":"2026-08-10T14:01:10.956183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.976409Z","title":"Rouge: A package for automatic eval- uation of summaries","venue":null,"work_id":"dfc92eb6-7bd6-4c15-8f3c-76862c740281","year":2004},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.960464Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:a79655371a4ea8f72814ddc1f4bd5541039e79452e377d7eccd3bf42a01556b0","observation_id":"849395cd-b73f-4e87-b5b3-e9a6de09688a","resolution":{"observed_at":"2026-08-10T14:01:11.980925Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.962589Z","title":"Microsoft coco: Common ob- jects in context","venue":null,"work_id":"d301934b-f96d-4b61-a789-73d5a6ba7939","year":2014},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.964234Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:98287d8239b5730a066ce30854a7783de11cf1d46eed797e1a4a7d43b60ac037","observation_id":"0c400bd9-abd3-4583-a4c6-2efb68430a26","resolution":{"observed_at":"2026-08-10T14:01:11.966911Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:10.968634Z","title":"Visual instruction tuning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.968634Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:63bcb109423eb6d0eb0a058e9f9a115d0debfba3224e21282c77b542bf8204d8","observation_id":"e1ec6545-1bdb-4e88-a048-5d3456d44147","resolution":{"observed_at":"2026-08-10T14:01:10.968634Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.940029Z","title":"Encodermi: Membership inference against pre-trained encoders in contrastive learning","venue":null,"work_id":"f9b7a6ad-0b1f-4b1c-9e55-c2e2b78713e1","year":2021},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.972862Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:26d63606eec00af994a742365206ff0187dd34d5716418ddc60996bdd341f673","observation_id":"2f095742-22a6-49d0-b2c6-fd27068df902","resolution":{"observed_at":"2026-08-10T14:01:11.944538Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.925946Z","title":"Arondight: Red teaming large vision language models with auto-generated multi- modal jailbreak prompts","venue":null,"work_id":"cd03d0dc-bd58-4f41-a1b9-ad2e63772568","year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.977066Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:3a5d527f52449cefabc87698153e0a44925ee630086088973381cff948998e7c","observation_id":"e4a87d24-6f39-460b-a788-db0f1fd2be25","resolution":{"observed_at":"2026-08-10T14:01:11.930364Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.07291","last_updated":"2026-04-07T15:03:29Z","snapshot_observed_at":"2026-07-06T19:00:27.086920Z","submitted_at":"2024-08-14T04:49:30Z","title":"Evaluating LLM-based Personal Information Extraction and Countermeasures","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.07291","snapshot_observed_at":"2026-08-10T14:01:10.981083Z","title":"Evaluating large language model based personal information extraction and countermeasures","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.981083Z"},"links":{"cited_paper":"/paper/2408.07291","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:2be46edf2439ce21d9a7112d059fc3e5901e09a5fe71a4f1a6257a3890bfb363","observation_id":"d8e8a10f-88db-4b63-af37-97ee59e09325","resolution":{"observed_at":"2026-08-10T14:01:10.981083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09136","last_updated":"2017-12-25T22:23:28Z","snapshot_observed_at":"2026-08-14T20:00:12.211184Z","submitted_at":"2017-12-25T22:23:28Z","title":"Towards Measuring Membership Privacy","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09136","snapshot_observed_at":"2026-08-10T14:01:10.985169Z","title":"Towards measuring membership privacy.arXiv preprint arXiv:1712.09136, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.985169Z"},"links":{"cited_paper":"/paper/1712.09136","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:041ca2c45acb4eefc0757415a88633602115d19375f9e57bc104af1993cb0bc0","observation_id":"d1ad026e-c021-4e8f-a5c5-5c23720162f5","resolution":{"observed_at":"2026-08-10T14:01:10.985169Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1802.04889","last_updated":"2018-02-13T23:05:05Z","snapshot_observed_at":"2026-08-14T19:46:08.923996Z","submitted_at":"2018-02-13T23:05:05Z","title":"Understanding Membership Inferences on Well-Generalized Learning Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.04889","snapshot_observed_at":"2026-08-10T14:01:10.989436Z","title":"Understanding membership inferences on well-generalized learning models","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.989436Z"},"links":{"cited_paper":"/paper/1802.04889","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:93072f4c0040a96a42a02882c197d24622e00328c86d1f1fffa888280158dc09","observation_id":"35e7d30d-656b-45fe-9480-e93c1f33d015","resolution":{"observed_at":"2026-08-10T14:01:10.989436Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.911799Z","title":"Ana- lyzing leakage of personally identifiable information in language models","venue":null,"work_id":"05f8bab0-ea9d-4d14-9cd7-58c4a261cc4e","year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.993578Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:d5f17df9fb5655b70afd53edaf9b2c67cf32b03e1177c7bbd95f04671111c0cc","observation_id":"02e1627a-80e8-4083-bf4c-b4e92e9a1826","resolution":{"observed_at":"2026-08-10T14:01:11.916424Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.897907Z","title":"Dataset inference: Ownership resolution in ma- chine learning","venue":null,"work_id":"6f2c9da8-1fe6-46a2-83e6-631420a094b0","year":2022},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:10.997563Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:1d0b13d601dd0273664412f8a784b6f8ef25e57c4b4da89a9d631afaebf73462","observation_id":"53982e15-ee1a-4d75-82ab-ef3e60cf10c3","resolution":{"observed_at":"2026-08-10T14:01:11.902191Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.883250Z","title":"Membership inference attacks against language models via neighbourhood compari- son","venue":null,"work_id":"d5af4450-9baa-4b30-bd7b-3d46dbaf775d","year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.001997Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:bc7e32155f97621973f040d1e5a966424eacd20cf15798caef01ed33168ef374","observation_id":"29833318-87e6-4bcd-8b55-0a8432e51a83","resolution":{"observed_at":"2026-08-10T14:01:11.888583Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.869225Z","title":"An empirical analysis of memorization in fine-tuned autore- gressive language models","venue":null,"work_id":"a072c94c-c29b-42cd-97e4-fdd262b4d923","year":2022},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.006174Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:dc8642a804cb48b0a7e5e1ece2d90ba175955efc3ab11b5c56cc31b6f19cdb0c","observation_id":"4ab94bec-28ff-43e3-a94e-b9b3db55f165","resolution":{"observed_at":"2026-08-10T14:01:11.873585Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17035","last_updated":"2023-11-28T18:47:03Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-11-28T18:47:03Z","title":"Scalable Extraction of Training Data from (Production) Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.17035","snapshot_observed_at":"2026-08-10T14:01:11.010347Z","title":"Scalable extraction of training data from (production) language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.010347Z"},"links":{"cited_paper":"/paper/2311.17035","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:d1a6f4f7e5f9fa067bec3bebbdeff058aadb5da64fda36da13ea9786d23e074b","observation_id":"9042a39d-d600-4b6d-abf2-717b5e0f6e52","resolution":{"observed_at":"2026-08-10T14:01:11.010347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.855723Z","title":"Open ai embedding api","venue":null,"work_id":"593b9e86-8084-4be0-803c-e913fc5cfc24","year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.014735Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:1aa36dbe137b50b7e2d9ab5fd65f7a8374ee65b6d871f310900f5b6efb0b0b69","observation_id":"ab5e8c62-1a8b-49c9-83b1-8495b626e674","resolution":{"observed_at":"2026-08-10T14:01:11.860197Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.842068Z","title":"Im2text: Describing images using 1 million cap- tioned photographs","venue":null,"work_id":"7f002efc-ea48-45dd-baba-4e1d6d1bdca5","year":2011},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.018801Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:658eafe818147f6debdc2312dad66ed4e9188c79c97260c13fb9aa6ac643c371","observation_id":"dd6b0ef9-21d9-486e-83e5-2f68df244980","resolution":{"observed_at":"2026-08-10T14:01:11.846689Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.828558Z","title":"Knock knock, who’s there? membership inference on aggregate location data","venue":null,"work_id":"2f8b5cb4-3c23-4f11-b340-d7000b9a40a9","year":2018},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.022874Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:6c9cc970772dc3da285043ed852d0c0fb85eba3b15717e4f473c289b6f5fd4b6","observation_id":"bc0e7fd1-bae8-47f2-a51c-f36f49ce72a7","resolution":{"observed_at":"2026-08-10T14:01:11.833127Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.814665Z","title":"Measuring membership privacy on ag- gregate location time-series","venue":null,"work_id":"d949d2a3-3adc-4dff-921c-1a51bdd3e0ab","year":2020},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.026927Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:17de897ea544de3819b54e344ca92e7134fa7fe860fd4f20ca38aa2893b21335","observation_id":"1c449078-a3f4-438b-ac24-feebd0a72226","resolution":{"observed_at":"2026-08-10T14:01:11.819384Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.031201Z","title":"Visual adversarial examples jailbreak aligned large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.031201Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:fce9a860ecadc88ef4bf2976a057ba5322e8932a8c33eb3d932cff2e143e75ae","observation_id":"42c9ca42-a57c-4f18-b061-1867e9b84844","resolution":{"observed_at":"2026-08-10T14:01:11.031201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.035776Z","title":"Learning transferable visual models from natural lan- guage supervision","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.035776Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:225609d939118a1a7391160f1b1e13eec340d45f8a310cc164a5a4ac29d28f46","observation_id":"cd0ea2ec-6735-41de-8883-4dd652ee39f2","resolution":{"observed_at":"2026-08-10T14:01:11.035776Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.782334Z","title":"Ml- leaks: Model and data independent membership infer- ence attacks and defenses on machine learning mod- els","venue":null,"work_id":"b2195033-303c-4d5b-84df-4eb02487cc4c","year":2019},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.040020Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:2f8cc38cd49b65f43a3b437df6f759714ccf8ea40b8476e58226b5a62ee8cafe","observation_id":"3a0f8110-a9f9-4586-8771-56a5ae84f2fc","resolution":{"observed_at":"2026-08-10T14:01:11.787243Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2111.02114","last_updated":"2021-11-03T10:16:39Z","snapshot_observed_at":"2026-08-02T08:12:49.547570Z","submitted_at":"2021-11-03T10:16:39Z","title":"LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.02114","snapshot_observed_at":"2026-08-10T14:01:11.044190Z","title":"Laion-400m: Open dataset of clip- filtered 400 million image-text pairs","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.044190Z"},"links":{"cited_paper":"/paper/2111.02114","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:3405b6b2c7a374b72aac9fe5a5eab6e8bb2fced43969df2488fd3857aa0eb5fc","observation_id":"f491cee3-acc0-4b8f-a7f7-c8aae7ec0b77","resolution":{"observed_at":"2026-08-10T14:01:11.044190Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.048868Z","title":"Detecting pretraining data from large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.048868Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:2dcd4b1c3150b2bf3ee27050eabd77c082adca02cecbdda20f7be3f3ca046fca","observation_id":"005d0641-89fa-4e6e-8469-16d575723033","resolution":{"observed_at":"2026-08-10T14:01:11.048868Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.052984Z","title":"Membership inference attacks against machine learning models","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.052984Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:8114ced812c00048fd6920e3b5b6087c3d7cba70618c27fe77f9daa04f557922","observation_id":"830850a9-690e-4e0a-8b8c-6df54d5a2414","resolution":{"observed_at":"2026-08-10T14:01:11.052984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.750840Z","title":"Mpnet: Masked and permuted pre-training for lan- guage understanding","venue":null,"work_id":"cb5d0cb3-c6ef-4e82-8204-0ee9256859f8","year":2020},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.057150Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:db51850dcff4976e86634d29f497fc265fed19046db9640dd66ba3f3dd291c4d","observation_id":"07f4124c-7805-4c3b-8c49-c463fa9a6871","resolution":{"observed_at":"2026-08-10T14:01:11.755386Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.735682Z","title":"Dropout: a simple way to prevent neural networks from overfitting","venue":null,"work_id":"eaef5b1b-5b84-46a3-b3ad-5febfd6d69f3","year":1929},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.061258Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:ea6d0917e4be69ae1585c60f973752365cd909e34fa3abed583db60a4bcac87d","observation_id":"660b10bb-3c3f-4ca1-9f8c-cac44a76f904","resolution":{"observed_at":"2026-08-10T14:01:11.740779Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.10529","last_updated":"2024-08-24T13:28:45Z","snapshot_observed_at":"2026-08-19T00:13:44.027367Z","submitted_at":"2024-05-17T04:19:19Z","title":"Safeguarding Vision-Language Models Against Patched Visual Prompt Injectors","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.10529","snapshot_observed_at":"2026-08-10T14:01:11.065106Z","title":"Safeguarding vision- language models against patched visual prompt injectors","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.065106Z"},"links":{"cited_paper":"/paper/2405.10529","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:3e47b177fcaa8ac39f75bd1be41712dfeaf61c861888d0abc43386b1a18acdd8","observation_id":"23098299-e94f-49f2-9de4-091fb54db9d4","resolution":{"observed_at":"2026-08-10T14:01:11.065106Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.069560Z","title":"Imgtrojan: Jailbreaking vision-language mod- els with one image","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.069560Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:382c0c5b0d54366909d923e0c9e6b2493ac81a1a7365023a3670510fa9d15926","observation_id":"7213d567-4355-47ae-b617-7b955c243cb9","resolution":{"observed_at":"2026-08-10T14:01:11.069560Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.721181Z","title":"Demonstration of an adversarial attack against a multimodal vision language model for pathol- ogy imaging","venue":null,"work_id":"486f3313-f17f-45ab-8bf9-80322f5d6a18","year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.073656Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:8562b6cb06b0ccbc8b9070db213e8942e9f99dabbc3765cf06bd2e8049c479cd","observation_id":"746d8217-6750-4ea0-acda-11c2cc653b55","resolution":{"observed_at":"2026-08-10T14:01:11.725649Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13971","last_updated":"2023-02-27T17:11:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-02-27T17:11:15Z","title":"LLaMA: Open and Efficient Foundation Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13971","snapshot_observed_at":"2026-08-10T14:01:11.077785Z","title":"Llama: Open and efficient foundation language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.077785Z"},"links":{"cited_paper":"/paper/2302.13971","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:ea59b09c58adb4f6a7f0d185105df0afc0611be98246c2efb64873cb03d0867a","observation_id":"2f0a80c6-f6ef-442d-9f52-7d7a6da7c594","resolution":{"observed_at":"2026-08-10T14:01:11.077785Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.707366Z","title":"Effects of differential privacy and data skewness on membership inference vulnerabil- ity","venue":null,"work_id":"0889ed0c-4fe9-4c50-ac9f-3325e46a60f8","year":2019},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.082292Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:253cdcb8c6c698ad3d236fd468964d8476a501a470fc3ae5e8acb97a4c5396aa","observation_id":"32ca5979-6f6b-4136-bd27-4ad232325602","resolution":{"observed_at":"2026-08-10T14:01:11.711933Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1807.09173","last_updated":"2019-02-01T18:05:24Z","snapshot_observed_at":"2026-08-14T18:57:55.922944Z","submitted_at":"2018-06-28T16:50:18Z","title":"Towards Demystifying Membership Inference Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1807.09173","snapshot_observed_at":"2026-08-10T14:01:11.086487Z","title":"Towards demystifying membership inference attacks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.086487Z"},"links":{"cited_paper":"/paper/1807.09173","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:a4ea6ead9db57365db76e141adac1926cb699bd228fc0f6eaee1ba29434cd689","observation_id":"34688fc2-5f11-4ec7-9861-09185af59f13","resolution":{"observed_at":"2026-08-10T14:01:11.086487Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.693755Z","title":"Show and tell: A neural image caption generator","venue":null,"work_id":"29f6dd9c-818f-4652-ab0a-c25b845c2c95","year":2015},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.090679Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:0b92badba6bf2dab77dca980da4bf9aa2dfa4d623a6aefd1ade779f6c2df2387","observation_id":"6414a779-83a7-43a3-8190-eddb39d20883","resolution":{"observed_at":"2026-08-10T14:01:11.697885Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.03079","last_updated":"2024-02-04T08:23:04Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-11-06T13:04:39Z","title":"CogVLM: Visual Expert for Pretrained Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.03079","snapshot_observed_at":"2026-08-10T14:01:11.094765Z","title":"Cogvlm: Visual expert for pretrained lan- guage models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.094765Z"},"links":{"cited_paper":"/paper/2311.03079","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:72033d53ef186f5569e627f8ea348f8872a9e6be8c627fb59fd567efd06cbac1","observation_id":"552eab35-d5bf-4d44-9fa3-3c97d50748a0","resolution":{"observed_at":"2026-08-10T14:01:11.094765Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.08603","last_updated":"2024-12-30T15:08:23Z","snapshot_observed_at":"2026-08-19T05:51:42.599132Z","submitted_at":"2024-05-14T13:42:05Z","title":"A Comprehensive Survey of Large Language Models and Multimodal Large Language Models in Medicine","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.08603","snapshot_observed_at":"2026-08-10T14:01:11.099203Z","title":"A comprehensive survey of large language models and multimodal large language models in medicine","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.099203Z"},"links":{"cited_paper":"/paper/2405.08603","citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:2a6753867007796a22b40d2ae35774ad6b431a2434a805d9c64425766733cd1c","observation_id":"587a1136-f867-4fe1-acde-83d2e38326db","resolution":{"observed_at":"2026-08-10T14:01:11.099203Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.679471Z","title":"Shadowcast: Stealthy data poisoning attacks against vision-language models","venue":null,"work_id":"d154c5cb-fee4-4c4c-a4c3-777159d65013","year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.103790Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:a7865f850b4beca8bee2e2ba28c641706ad8cd0a02bb6010b40db350ee6f246d","observation_id":"0353bd72-6696-47bc-ab24-c88c0723a63b","resolution":{"observed_at":"2026-08-10T14:01:11.684422Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.665827Z","title":"En- hanced membership inference attacks against ma- chine learning models","venue":null,"work_id":"f617a9cd-e023-4cdd-8101-707d6b703dd7","year":2022},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.107843Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:5d8affff2db183644bacf22ca9e2f281f306c3b8fce8a73a702e9e8fbaa2dc22","observation_id":"88524d74-84ad-4023-afd9-a0ec558421ff","resolution":{"observed_at":"2026-08-10T14:01:11.670335Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.112040Z","title":"Privacy risk in machine learning: An- alyzing the connection to overfitting","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.112040Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:645e6361a8d49c3e2d997491c3359420c6906e303aaf629cbfefc7f417d4128c","observation_id":"ce013d91-76cd-466e-a091-bee4c63ef185","resolution":{"observed_at":"2026-08-10T14:01:11.112040Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.642300Z","title":"Vlattack: Multimodal adversarial attacks on vision-language tasks via pre-trained models","venue":null,"work_id":"06aa0881-4d89-48dd-9865-1e070827fd17","year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.116258Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:2249a6eef2859146bbd61082fc144e27bea36db68fc2b85e4beb825e5c07c8db","observation_id":"df28dfb4-3d2e-484a-8b6b-ae2da1d1668a","resolution":{"observed_at":"2026-08-10T14:01:11.647129Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.628429Z","title":"Uni- versal adversarial perturbations for vision-language pre-trained models","venue":null,"work_id":"bc9d2f6f-da0a-4a91-9c3a-a2578d5620f4","year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.120387Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:195a66591b18c19ac66e599f02f968a567d265beac8fe3e2303105453a58e1d1","observation_id":"f648d797-9870-4b70-a2ae-6669cbaf6001","resolution":{"observed_at":"2026-08-10T14:01:11.632940Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T14:01:11.614627Z","title":"Minigpt-4: Enhancing vision- language understanding with advanced large language models","venue":null,"work_id":"932ecb2f-2186-4455-9790-c32d3ae8fd84","year":2024},"citing_paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models","version":2},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-10T14:01:11.124492Z"},"links":{"citing_paper":"/paper/2501.18624"},"observation_digest":"sha256:ca7400ffbe807579c33d86ea67dc33d45f9dc31f725a97679292bac06be7660e","observation_id":"bc5f8ca1-f790-4c71-a40d-fb5e6e74f81e","resolution":{"observed_at":"2026-08-10T14:01:11.619327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2501.18624","last_updated":"2025-02-07T05:11:54Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-15T09:43:30.688135Z","submitted_at":"2025-01-27T05:44:58Z","title":"Membership Inference Attacks Against Vision-Language Models"},"reference_resolution":{"displayed":87,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":40,"verified_exact":1,"verified_fuzzy":46},"total_outbound_references":87},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"thesis":"As of 22 August 2026, this Paper Citation Record lists 87 of 87 outbound references and 5 inbound Pith citation observations for arXiv:2501.18624."}