{"as_of":"2026-08-10T10:05:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:00063c7e6b6147447b698c74d13a01af70da107b24e64898770defc274b53acd","coverage":[{"denominator":55,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":55,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T10:19:52.716421Z","state":"measured"},{"denominator":55,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":55,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2502.08151/citation-record","integrity":"/paper/2502.08151/integrity","json":"/paper/2502.08151/citation-record.json","paper":"/paper/2502.08151"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1912.04977","last_updated":"2021-03-09T03:03:49Z","snapshot_observed_at":"2026-08-06T02:25:34.414976Z","submitted_at":"2019-12-10T20:55:41Z","title":"Advances and Open Problems in Federated Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.04977","snapshot_observed_at":"2026-08-08T10:19:52.394661Z","title":"Advances and open problems in federated learning,","venue":null,"work_id":null,"year":1912},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.394661Z"},"links":{"cited_paper":"/paper/1912.04977","citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:902a83d9892173fff8ae8a769db94139740779cc02ae729ff52d8bb0deb224be","observation_id":"b078c5e2-a27c-49ce-94c0-85bebe58842b","resolution":{"observed_at":"2026-08-08T10:19:52.394661Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.414255Z","title":"Feddmc: Efficient and robust federated learning via detecting malicious clients,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.414255Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:8c6ede317a4d6c60c36860f72d174401c7d9c59bcf5e5edf631fc583c392c2c9","observation_id":"32bfc9e9-6889-4385-a76f-13b1a4303441","resolution":{"observed_at":"2026-08-08T10:19:52.414255Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.418616Z","title":"Fedproc: Prototypical contrastive federated learning on non-iid data,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.418616Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:2c720627ad4ba466062716fe6cda6ab9faf6a1ce839cd541ed0900285f480dc1","observation_id":"bb4656f5-909d-4a11-a74c-572b8934f1a1","resolution":{"observed_at":"2026-08-08T10:19:52.418616Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.483056Z","title":"Federated learning: Collaborative ma- chine learning without centralized training data,","venue":null,"work_id":"d703a25a-1925-4140-b559-dce6d0bb5326","year":2017},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.423318Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:91ced34284ea5a52f0d59e77eef0188b6c5c6ebeb4db0f6c2971eddc148f980e","observation_id":"b936fafd-69e5-4935-a379-9180c3979ee2","resolution":{"observed_at":"2026-08-08T10:19:53.487640Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.468250Z","title":"Federated evaluation and tuning for on-device personalization: System design & and applications,","venue":null,"work_id":"fcad88a5-65da-42db-a108-0ff79b1802da","year":2021},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.428052Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:6bae84cb5597f805e65b090cbb5a4c52b8d1be05ecc99ee545cb98445ab3a573","observation_id":"b4f7765b-5394-4bd9-98c0-069a424f0a52","resolution":{"observed_at":"2026-08-08T10:19:53.473042Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.432723Z","title":"Fate: An industrial grade platform for collaborative learning with data protection,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.432723Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:694eca51c6660bfeafbd73f38cbc4f1769482c499d8ab2de6f65d0a8aa4a9ce5","observation_id":"62039eda-01cd-4239-9c6a-c045bf285429","resolution":{"observed_at":"2026-08-08T10:19:52.432723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.445502Z","title":"Deep leakage from gradients,","venue":null,"work_id":"ee8a41b7-abf7-41c9-9631-141986854564","year":2019},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.437308Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:e2cc90fab870d879694d4e8a6871775ba8bdbad5e3af5cc131849527df7077f2","observation_id":"21bc9ea3-d2cd-4230-bbaf-d085e29004ec","resolution":{"observed_at":"2026-08-08T10:19:53.449904Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.432486Z","title":"Using highly compressed gradients in federated learning for data reconstruction attacks,","venue":null,"work_id":"df3730aa-a2f6-45f2-9c7c-6a79618d0009","year":2023},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.441849Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:1f1439539784800361763487bf01a11879980afb7869cbad471f1151894f1fca","observation_id":"ced6a892-cfa4-434c-9c05-21a3342a0026","resolution":{"observed_at":"2026-08-08T10:19:53.436657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.419223Z","title":"See through gradients: Image batch recovery via gradinversion,","venue":null,"work_id":"aa474119-a0b2-4e0c-9163-55416097b5fa","year":2021},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.446884Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:e0d10c871c14a58133b6686ef3c567c825fd32878fd8082a0d109b5ba7ea8bb4","observation_id":"8a120277-1be8-47b5-a97a-bebd8e1bd0b7","resolution":{"observed_at":"2026-08-08T10:19:53.423494Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.405639Z","title":"Robbing the fed: Directly obtaining private data in federated learn- ing with modified models,","venue":null,"work_id":"4b48e9b5-2831-4710-ab3b-60dab60c3bfe","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.451253Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:3be67bd6cff6d9f843c61e2f2ed66dd5700a439a9c1e5ad8e47b986598e90d9f","observation_id":"0e8d0b08-64e5-4163-afdf-f10ad1df8b62","resolution":{"observed_at":"2026-08-08T10:19:53.410153Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.391786Z","title":"When the curious abandon honesty: Federated learn- ing is not private,","venue":null,"work_id":"ee65efa0-1461-4d39-b8d8-07d2ce896cee","year":2021},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.455852Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:96b575633e696bf75704ca383d0a63ff11329ebede4ddfbd709cadea9a8b2f88","observation_id":"764b87eb-1db3-4e30-b467-20416664c422","resolution":{"observed_at":"2026-08-08T10:19:53.396389Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.377895Z","title":"A framework for evaluating gradient leakage attacks in federated learning,","venue":null,"work_id":"d25c7545-1353-4e3b-91a8-6acb0af4c8fc","year":2020},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.461240Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:58bdc6b0bd37123af0aac82872ce282b77f3ccd952144bd15b6a1667e88599f1","observation_id":"5eec396c-8b00-44f7-8c8e-077fc11d8e69","resolution":{"observed_at":"2026-08-08T10:19:53.382321Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.363867Z","title":"Eluding secure aggregation in federated learning via model inconsistency,","venue":null,"work_id":"f635da1f-b57c-4365-9106-6aea188221d2","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.465721Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:53da9059953cfab7d7f4872eff6463e2b6ccbe66cb741f6da771ee3e030e3cf8","observation_id":"477c1cb9-07d1-41ab-93ec-0b9a8dfc479e","resolution":{"observed_at":"2026-08-08T10:19:53.368408Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.349664Z","title":"Dreaming to distill: Data-free knowledge transfer via deepinversion,","venue":null,"work_id":"ffc4b5e3-20eb-4d37-b87f-5baba667bbbe","year":2020},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.469843Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:350cf5e135edf674933fbd3e44e5e05aabd88ff1e62361e529eb9b5ad7ad40eb","observation_id":"121ee932-ede8-4f32-a88a-4387abf2cfbf","resolution":{"observed_at":"2026-08-08T10:19:53.354114Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.334559Z","title":"Reconstructing individual data points in federated learning hardened with differential privacy and secure aggregation,","venue":null,"work_id":"24fe11b3-ee08-4de7-acca-5b967ff7e505","year":2023},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.474259Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:2f5e93313eb4eb2a918dd3aac0ef523299249109130411d6b450ac311978854c","observation_id":"cff1622d-f5f8-427c-b7c9-1c37cc24a634","resolution":{"observed_at":"2026-08-08T10:19:53.339645Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.320033Z","title":"Gradient inversion with generative image prior,","venue":null,"work_id":"66c87c17-a4d2-4db8-8fe3-3fcc5e5210ee","year":2021},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.478846Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:5d1805267bc46cde77f40bef6ea39e3be07f48bf6426a3c3ae12145b3f5454ca","observation_id":"6c8b37d2-9953-4a67-97f4-6dc4f8d52d30","resolution":{"observed_at":"2026-08-08T10:19:53.324408Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.306520Z","title":"Gradvit: Gradient inversion of vision transformers,","venue":null,"work_id":"d49a5957-4c14-4827-88d6-6c1b33356500","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.483684Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:b54a892e5f1c5f9921e82e6421b1c22119175064cde8997bd7ed8d64c2e988a3","observation_id":"818a3362-5165-4a5c-9ae8-4429a4509c2f","resolution":{"observed_at":"2026-08-08T10:19:53.310717Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.292079Z","title":"Analyzing user-level privacy attack against federated learning,","venue":null,"work_id":"6a22892d-ac2f-4cca-beb2-6945710d467e","year":2020},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.487852Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:3adb0928e047de4af71408c581c2a97d9e057305960a862c6440295ad30ead7e","observation_id":"73614c0b-784a-4025-a198-ae6041e6ad83","resolution":{"observed_at":"2026-08-08T10:19:53.296642Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.277777Z","title":"Cafe: Catas- trophic data leakage in vertical federated learning,","venue":null,"work_id":"4c3d3f8f-c180-429d-a459-d69890a59635","year":2021},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.492484Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:9addb56454174ce490dd7da69c0040031a8019d36194497120e892bbad1552e7","observation_id":"dd2dd6f8-9faa-4bbb-a7a0-0274e5778c46","resolution":{"observed_at":"2026-08-08T10:19:53.282396Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.263122Z","title":"R-gap: Recursive gradient attack on privacy,","venue":null,"work_id":"1d0b133e-c9b1-4e29-8652-0e2761c32ea5","year":2021},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.497106Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:ac51af316b478a67f4d5802ac89cc12422b9526733485d79938aa694627249bb","observation_id":"0a11b923-f55d-4157-a109-6c810e716bef","resolution":{"observed_at":"2026-08-08T10:19:53.267893Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.514824Z","title":"Federated learning with differential privacy: Algorithms and performance analysis,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.514824Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:8e734ede99ccacd10d45d1a26f9d90f8bb73b9f385755acd28ef9c19a588df15","observation_id":"fd6c7018-d51f-4e5b-8634-d8eb9744ef98","resolution":{"observed_at":"2026-08-08T10:19:52.514824Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.238095Z","title":"A differentially private federated learning model against poisoning attacks in edge computing,","venue":null,"work_id":"2a558841-2bb4-4b55-9ae7-5e1e2c91fa9e","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.534939Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:da88efc29853c9565d32d2af63ff7d4f5a33043f5c2ce60057e5a4d7c67b7880","observation_id":"8473a74a-167c-45ab-93c0-f35efe0e9734","resolution":{"observed_at":"2026-08-08T10:19:53.242974Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.223031Z","title":"Personalized federated learning with differential privacy,","venue":null,"work_id":"7e3b4de2-6228-46b8-9ce0-62965ff60368","year":2020},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.581155Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:785765f124e16b53ae68aec03ec5c71781a8cdda35b765e7047ee5c9c4c5e304","observation_id":"c7d5dd16-c3ef-40d7-b153-50f8ff7159bc","resolution":{"observed_at":"2026-08-08T10:19:53.228200Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.207818Z","title":"Efficient differentially private secure aggregation for federated learning via hardness of learning with errors,","venue":null,"work_id":"09131a79-42e4-4007-b6c6-92279b738be3","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.585179Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:ffa1906cb127162a73cadf4d652788cd3f885eb2fd040cd6a3c9487260a9084c","observation_id":"f6663f9d-643e-4e44-a8c1-147cf9cb39c2","resolution":{"observed_at":"2026-08-08T10:19:53.212282Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.193364Z","title":"Exploring the security boundary of data reconstruction via neuron exclusivity analysis,","venue":null,"work_id":"b0b5b96d-5d55-4cb1-80d5-e03709131abc","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.589196Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:c2546070580bdd79f37847313c497da0caeec6777d90fbdb1cf775b575b93cfd","observation_id":"fde50f1c-44ee-4471-8751-beb384d5ce8a","resolution":{"observed_at":"2026-08-08T10:19:53.197727Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.178464Z","title":"Model inversion attack by integration of deep generative models: Privacy-sensitive face generation from a face recognition system,","venue":null,"work_id":"4670253b-2ef0-4c10-8ee1-d0600303c011","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.592989Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:f12495515098100404cbeafe0b6b31995820200f379c045752f021f4d329197a","observation_id":"a8b444e1-9636-4c9d-8808-1804048c1156","resolution":{"observed_at":"2026-08-08T10:19:53.183394Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.163596Z","title":"On the inadequacy of similarity- based privacy metrics: Reconstruction attacks against","venue":null,"work_id":"c8b64125-8b9c-4e67-8882-493529919a34","year":2023},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.596958Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:dbe933a97a2b7c7ddbc2ed6074357cd79a28974146a5692233732f5f121c5ccc","observation_id":"32df23a3-96ec-4875-931d-238063741645","resolution":{"observed_at":"2026-08-08T10:19:53.168444Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.147750Z","title":"Beyond class-level privacy leakage: Breaking record-level privacy in federated learning,","venue":null,"work_id":"686f9fa3-cf2c-4349-b62e-0f532fb51689","year":2021},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.601317Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:6a97b6f413a84ed900765240629748bfd08938d556ab5ce96d7d43df9b00ce60","observation_id":"1d445d0b-535c-4e3c-815c-211a06507618","resolution":{"observed_at":"2026-08-08T10:19:53.152934Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.605511Z","title":"Generative adversarial networks,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.605511Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:82712b1862d9f873593766939af7e115de4aed05e0e5fcc84df6fd844723f0e8","observation_id":"4cfc251c-8d1c-4ca2-9d1d-2933029320dc","resolution":{"observed_at":"2026-08-08T10:19:52.605511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.120429Z","title":"Communication-Efficient Learning of Deep Networks from Decentral- ized Data,","venue":null,"work_id":"3a5d7be8-4cc1-45c2-8dac-de4f9c1a1cb3","year":2017},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.609903Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:0e6bc3ef1dc0df7e5b4692ca4d18dde7e235bb3b9d0784add3d2d4dda0734889","observation_id":"a82c2b4f-201c-4b3e-a780-6394fe45b51b","resolution":{"observed_at":"2026-08-08T10:19:53.125968Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.105220Z","title":"The algorithmic foundations of differential privacy,","venue":null,"work_id":"af076aa0-5a7f-4864-b187-324cabef6763","year":2014},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.613827Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:9e38277d569b74fb8c92214ea55a0ed8e91243a5c0bec61022592fe2d2206018","observation_id":"5ae616ab-4e25-44bd-8af7-351abbb03dec","resolution":{"observed_at":"2026-08-08T10:19:53.109715Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.090502Z","title":"Learning differ- entially private recurrent language models,","venue":null,"work_id":"6ef28874-a281-44a9-962f-caff140c43de","year":2018},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.617971Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:adee74ee0be78c02642e0b074393833dc1146a236f3fb22430c73c270f24338a","observation_id":"4a091dde-0e51-4bea-b50f-b0343edf0ca1","resolution":{"observed_at":"2026-08-08T10:19:53.095184Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.074965Z","title":"Local and central differential privacy for robustness and privacy in federated learning,","venue":null,"work_id":"8ed60db7-22dd-4fcb-a854-37001cf8d94a","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.622126Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:58d68c1cdcd31593dbcef71975af7d7a077fa64e453812f172295ce5cc9962f9","observation_id":"c44c372b-7892-4bb5-af03-f2d5ec9beb26","resolution":{"observed_at":"2026-08-08T10:19:53.079546Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.059790Z","title":"Eluding secure aggregation in federated learning via model inconsistency,","venue":null,"work_id":"26acdbb3-9558-4ae3-b3aa-9a6c295cba05","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.626297Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:4a11275dfc557b470d4c6208c7bbde7f24a8d67d6c512bcff6cb1ca09316fe58","observation_id":"98fdc36c-fa42-4df5-8808-12b29633acca","resolution":{"observed_at":"2026-08-08T10:19:53.064507Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.044808Z","title":"Inverting gradi- ents - how easy is it to break privacy in federated learning?,","venue":null,"work_id":"9ccfb0a5-623e-420e-b176-ecf33d77cc8a","year":2020},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.630766Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:00997592142354adb4fc91d9f6d776707659177ec26b60b73f9df344d4a6bbca","observation_id":"51c0ab02-c70b-43e6-87a9-9df2d12a44c7","resolution":{"observed_at":"2026-08-08T10:19:53.049793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.635121Z","title":"ImageNet Large Scale Visual Recognition Challenge,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.635121Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:f75ebb05963cc319b3df8b99f86933796efc87dda87a68aa70d1289efe04b93d","observation_id":"40f98308-aa64-4885-9310-b44515635e07","resolution":{"observed_at":"2026-08-08T10:19:52.635121Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.02643","last_updated":"2023-04-05T17:59:46Z","snapshot_observed_at":"2026-08-08T05:14:59.435033Z","submitted_at":"2023-04-05T17:59:46Z","title":"Segment Anything","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.02643","snapshot_observed_at":"2026-08-08T10:19:52.639408Z","title":"Segment anything,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.639408Z"},"links":{"cited_paper":"/paper/2304.02643","citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:040f2c42776067641ca3466ef0196a53ffde39776ec6aa95551d6fe18cbabedf","observation_id":"a550b3a6-c7a6-4c01-9be5-b261cdede390","resolution":{"observed_at":"2026-08-08T10:19:52.639408Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.08196","last_updated":"2023-05-19T16:33:03Z","snapshot_observed_at":"2026-08-09T17:26:24.629501Z","submitted_at":"2023-05-14T16:23:22Z","title":"A Comprehensive Survey on Segment Anything Model for Vision and Beyond","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.08196","snapshot_observed_at":"2026-08-08T10:19:52.644129Z","title":"A comprehensive survey on segment anything model for vision and beyond,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.644129Z"},"links":{"cited_paper":"/paper/2305.08196","citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:b49f128f80333b6688ee5d48f95d8d344d6870d1f13c44553c3531d3f78173b4","observation_id":"1ce87ea9-bc25-4025-ac36-6cede8e8d2be","resolution":{"observed_at":"2026-08-08T10:19:52.644129Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.017981Z","title":"Segment anything in medical images,","venue":null,"work_id":"5de14fff-ae47-4c31-962a-bf726540e8d4","year":2023},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.648559Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:ce7b231d528c47363d0c032e15fa5773202b20151e690dd812d578d8196bbb7b","observation_id":"da38be55-5fee-4303-8f69-e055cb097ccf","resolution":{"observed_at":"2026-08-08T10:19:53.022786Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.002044Z","title":"Segment anything in non-euclidean domains: Challenges and opportunities,","venue":null,"work_id":"6c062aa3-f834-4935-88f1-93c40b0f3c9b","year":2023},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.652523Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:06da370789115402300c8f70157a3087525f5013f546a79f2d55ddcb17c3ee8b","observation_id":"b8c42cf8-942d-4ac6-9fbc-a1af1fcf76c5","resolution":{"observed_at":"2026-08-08T10:19:53.007631Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.987509Z","title":"A generalization of the half-normal distribution with applications to lifetime data,","venue":null,"work_id":"df263608-410c-44a2-879d-357ffcf82d13","year":2008},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.656405Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:69d15ff2aaf50be5b675f8fffcec06bbd88dc0dfb50fe50a4c3e2715e6f12875","observation_id":"00c5e8cd-dbb8-4166-b4a0-d3de46427a5b","resolution":{"observed_at":"2026-08-08T10:19:52.992121Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.973500Z","title":null,"venue":null,"work_id":"bb3d8d30-fc1d-41a1-91f0-71c92ec13041","year":2005},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.660207Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:e19288c6f55478764489d4ffabbe19f5ea24d455615408762a3c022add5f1c65","observation_id":"6c655148-5fd4-4822-a2c9-fe2983434dd6","resolution":{"observed_at":"2026-08-08T10:19:52.977790Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.958689Z","title":"Foreseeing recon- struction quality of gradient inversion: An optimization perspective,","venue":null,"work_id":"2d848b7d-f39e-415c-829d-0a6cea19cebf","year":2024},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.664110Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:722c661e816f744a4c242618317cfe721d0993887afda0f4067f26246756094a","observation_id":"876510ef-07ed-44d9-946c-347680b783ec","resolution":{"observed_at":"2026-08-08T10:19:52.963424Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.668266Z","title":"Learning multiple layers of features from tiny images,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.668266Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:f38bf40ec18a28244cc54dee4899ddc1b9f09fe54426c863e31315a15583b6d4","observation_id":"3d92b254-f2a4-46db-a262-6fcef742c038","resolution":{"observed_at":"2026-08-08T10:19:52.668266Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.672118Z","title":"Caltech-256 object category dataset,","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.672118Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:1de5444c5eca8c9916df972e56568e800a7a029356ee6bde65597f094173a34b","observation_id":"0e56aac2-e1fc-4992-808f-46c762fa174b","resolution":{"observed_at":"2026-08-08T10:19:52.672118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.923108Z","title":"Automated flower classification over a large number of classes,","venue":null,"work_id":"7bf4d6d8-aeca-4ef5-9910-042223fdddcf","year":2008},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.675896Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:d17fe7dd9af19eff5e2adb4f781b5f7816308b71ba0e74da41de2c7f0906ce00","observation_id":"96cc9723-5982-45f4-8b82-8c3e1adc67af","resolution":{"observed_at":"2026-08-08T10:19:52.928273Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.680005Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.680005Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:69fdf7decbb594fc862c91ff7dfc28bc08bb1f2cbb82559abeea67e9ca99e4ff","observation_id":"6e4be033-04fc-49d1-8555-6d45b6a0ae64","resolution":{"observed_at":"2026-08-08T10:19:52.680005Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.896698Z","title":"Complex wavelet structural similarity: A new image similarity index,","venue":null,"work_id":"37c85949-9b81-4c14-aee6-e6709625a00e","year":2009},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.684283Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:fd5f66a61670ef85ef4d2247c7e358e0f7c3de1bbca4ba81914bbc72e194d3a0","observation_id":"371d56c6-d5c9-4d86-8a9f-6d01c6afa227","resolution":{"observed_at":"2026-08-08T10:19:52.901647Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.881466Z","title":"Preserving privacy and security in federated learning,","venue":null,"work_id":"b9e1d3fc-d307-4388-a649-1b10f13edf28","year":2024},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.688896Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:1b052211906e44c9e2421a0987e302094085db0d15b0528b3c67b840daf041d0","observation_id":"0d6ab166-b864-43f1-997d-e0e684aa68e6","resolution":{"observed_at":"2026-08-08T10:19:52.886044Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.866198Z","title":"L-secnet: Towards secure and lightweight deep neural network inference,","venue":null,"work_id":"75bc828a-41cc-4808-a562-12c53a27a93a","year":2023},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.693596Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:556105d20795f5bf6ae25caa95b66e4b0f9182a0a389a9c57c8a7bb42d65de90","observation_id":"330a8e03-f5b7-470d-8eb9-03afd9477929","resolution":{"observed_at":"2026-08-08T10:19:52.871024Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.851501Z","title":"A convnet for the 2020s,","venue":null,"work_id":"6019361c-f1cf-45eb-be58-c0e085b101a3","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.698162Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:19421b2460829474f392ea1008b8759bc7a6f24718be355639ce6b6ae8a44f71","observation_id":"730bb7e7-3c48-4543-bb1d-bd1d8f20cd76","resolution":{"observed_at":"2026-08-08T10:19:52.856129Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.837036Z","title":"Densely connected convolutional networks,","venue":null,"work_id":"1877a27d-924a-434b-a922-55b7ec1d22f4","year":2018},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.703017Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:1db3f0457e6c59b9c66c5a41a636a91dc0f5d271528c309dacae0c13f102472a","observation_id":"b1226d00-b548-4681-80cb-1eb83592785a","resolution":{"observed_at":"2026-08-08T10:19:52.841484Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.707539Z","title":"Efficientnet: Rethinking model scaling for convolutional neural networks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.707539Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:d1d8dcd76ab1f58f015557429034ec9c944c1770c9a3f4205f53c72edc30c3f1","observation_id":"07d54d27-0e36-4d6c-87eb-0f4b527bb3d9","resolution":{"observed_at":"2026-08-08T10:19:52.707539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.812944Z","title":"Going deeper with convolutions,","venue":null,"work_id":"5c08c916-814b-442d-a421-b819e11b09c6","year":2014},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.711915Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:8d8313baf641ae2b851e0fb17a81805d630b0552a0278e5b8ecd9eaeea9da114","observation_id":"07c8b4eb-c96b-4ce8-b894-15ba33caa9ec","resolution":{"observed_at":"2026-08-08T10:19:52.817351Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.795097Z","title":"She is currently a Senior Lecturer with the University of New South Wales, Canberra Campus, Australia","venue":null,"work_id":"f1891af6-1355-4741-855e-969e6a50e900","year":2002},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":2018,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.716421Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:ed1ac2ed80ebc845f21d128a8f407e0cd33d88d05fb1bdf704910b57b23d9b83","observation_id":"0aa55292-9fbb-4df4-9c06-8d6d90e5f769","resolution":{"observed_at":"2026-08-08T10:19:52.801935Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T08:49:13.768733Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy"},"reference_resolution":{"displayed":55,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":14,"verified_exact":0,"verified_fuzzy":40},"total_outbound_references":55},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 55 of 55 outbound references and 0 inbound Pith citation observations for arXiv:2502.08151."}