{"as_of":"2026-08-08T01:13:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:28d75caf7318d945f591ce3b912a36240a2e10a7468aa8d3b6b3d4ef0b91e602","coverage":[{"denominator":65,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":65,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T11:29:49.140988Z","state":"measured"},{"denominator":70,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":70,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":5,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":5,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T22:23:07.680268Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-13T01:47:04.386257Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.02362","snapshot_observed_at":"2026-08-06T22:23:07.680268Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:07.680268Z"},"links":{"cited_paper":"/paper/2506.02362","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:54521f24c02b16e5104e537b7c74cf2ba55eafa6f4d96b6cf1a782c3fd9bc303","observation_id":"2915912e-4524-4069-9543-c9c1df610d22","resolution":{"observed_at":"2026-08-06T22:23:07.680268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.02362","snapshot_observed_at":"2026-08-05T18:12:37.034350Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.034350Z"},"links":{"cited_paper":"/paper/2506.02362","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:6db53d5b75656bedcd5aee20b2b42fa5d79d39d24b5d2229c7bd7b7085b70b7f","observation_id":"ca490b50-3be2-4d14-98ef-3e15920dd554","resolution":{"observed_at":"2026-08-05T18:12:37.034350Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.02362","snapshot_observed_at":"2026-08-05T15:39:56.130610Z","title":"Misleader: Defending against model extraction with ensembles of distilled models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-05T20:44:03.841741Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":182,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:56.130610Z"},"links":{"cited_paper":"/paper/2506.02362","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:519009aa6d87bf751ed86963385fecb395b2b403389739768201d4c8a6146f65","observation_id":"5da6b5f7-7453-4261-b633-fd1d64dc03b0","resolution":{"observed_at":"2026-08-05T15:39:56.130610Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"cited_work":{"arxiv_id":"2506.02362","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.02362","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Misleader: Defending against model extraction with ensembles of distilled models","venue":null,"work_id":"d88b0632-6089-4e74-92d5-591745a63c52","year":2025},"citing_paper":{"arxiv_id":"2605.11301","last_updated":"2026-05-11T22:42:12Z","snapshot_observed_at":"2026-07-06T23:23:11.928199Z","submitted_at":"2026-05-11T22:42:12Z","title":"LatentRouter: Can We Choose the Right Multimodal Model Before Seeing Its Answer?","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-13T01:42:54.802658Z"},"links":{"cited_paper":"/paper/2506.02362","citing_paper":"/paper/2605.11301"},"observation_digest":"sha256:a507104f897938d69534e0aff3c68f4ed6ca188e1eaab56d381f9cd74c638fa7","observation_id":"beefe17b-0f1a-4e24-8930-e80ff25bc258","resolution":{"observed_at":"2026-05-13T01:47:04.388649Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.02362","snapshot_observed_at":"2026-08-01T23:20:43.484131Z","title":"Misleader: Defending against model extraction with ensembles of distilled models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15467","last_updated":"2026-07-16T21:33:37Z","snapshot_observed_at":"2026-08-06T15:56:21.552313Z","submitted_at":"2026-07-16T21:33:37Z","title":"ADS-C: Antidistillation Sampling for Classification","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-01T23:20:43.484131Z"},"links":{"cited_paper":"/paper/2506.02362","citing_paper":"/paper/2607.15467"},"observation_digest":"sha256:6001a5ecd8c5a739df14b9f629a2e2a8d5b9b65801c478c941d3d9da83c8cfba","observation_id":"9dde8944-2c60-4c02-844d-c0fd23468225","resolution":{"observed_at":"2026-08-01T23:20:43.484131Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2506.02362/citation-record","integrity":"/paper/2506.02362/integrity","json":"/paper/2506.02362/citation-record.json","paper":"/paper/2506.02362"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:55.378187Z","title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring","venue":null,"work_id":"c15f8a00-dac9-4b3e-8f84-0a219ba3a69c","year":2018},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:42.954810Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:a0f7d5c361d6497f2bdd3f5e0c4ac175291f62f996dce2a6d7ba0a3179794da6","observation_id":"96c75794-e6be-4f5f-ab25-f440b4922437","resolution":{"observed_at":"2026-08-07T11:29:55.383335Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:55.361487Z","title":"Backpropagation and stochastic gradient descent method.Neurocomputing, 5(4-5):185–196, 1993","venue":null,"work_id":"d0423e82-e9fb-415f-8a59-5f3ce77ac0f5","year":1993},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:43.005028Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:e5bf224cb4319ff07b1a8b6994a8e13e1925c8e006021e399c80bf6f707ef0a3","observation_id":"be2e1a90-1d5f-4fd9-9a63-0f39a787d654","resolution":{"observed_at":"2026-08-07T11:29:55.367144Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:43.068897Z","title":"Knowledge distillation: A good teacher is patient and consistent","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:43.068897Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:afce0360bfa17d2168e89faae480dfeddc878af38022e69a0a6e4da9a89538be","observation_id":"4bf8f852-8f14-4a77-b99b-b19f53f8c588","resolution":{"observed_at":"2026-08-07T11:29:43.068897Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:55.336044Z","title":"Data sharing and interoperability: Fostering in- novation and competition through apis.Computer Law & Security Review, 35(5):105314, 2019","venue":null,"work_id":"98951afc-512c-487e-a9f0-ced6321de618","year":2019},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:43.149923Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:321101f4a15b8579f8eb97f3c7fc85da5ead02f44173ebc383f82943dba6bf75","observation_id":"8a5c073c-aa9a-4c3e-9684-cd0e2b2b7c20","resolution":{"observed_at":"2026-08-07T11:29:55.341246Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.16693","last_updated":"2025-03-20T20:25:32Z","snapshot_observed_at":"2026-08-07T16:48:02.770787Z","submitted_at":"2025-03-20T20:25:32Z","title":"ATOM: A Framework of Detecting Query-Based Model Extraction Attacks for Graph Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.16693","snapshot_observed_at":"2026-08-07T11:29:43.246771Z","title":"Atom: A framework of detecting query-based model extraction attacks for graph neural networks.arXiv preprint arXiv:2503.16693, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:43.246771Z"},"links":{"cited_paper":"/paper/2503.16693","citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:b09cc0081b71e65d6fd6f195d03e2e29ef1a786287851271d6b4ef188cdbe11c","observation_id":"a3d4e200-4019-494e-8d89-8ced57857a80","resolution":{"observed_at":"2026-08-07T11:29:43.246771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:43.346168Z","title":"The mnist database of handwritten digit images for machine learning research [best of the web].IEEE signal processing magazine, 29(6):141–142, 2012","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:43.346168Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:f4bee57806ed3b98829d3ead6b55516109c06a45c386d4f3464269472b13b5e8","observation_id":"0ea5740c-d6ed-43a8-9d60-590fb24db916","resolution":{"observed_at":"2026-08-07T11:29:43.346168Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:55.308474Z","title":"Simon and Schuster, 2024","venue":null,"work_id":"ffb12459-0592-46c0-86b0-45cd2621a6f6","year":2024},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:43.393700Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:1a6cecd43785642538fa3cd0dcfbc51aa6798182dd9681ab51b6d7c25418ef95","observation_id":"8bde58b8-d2d0-4209-9809-52ee97f3304c","resolution":{"observed_at":"2026-08-07T11:29:55.314420Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:55.291134Z","title":"An optimized intelligent open-source mlaas framework for user-friendly clustering and anomaly detection.The Journal of Supercomputing, 80(18):26658–26684, 2024","venue":null,"work_id":"a3723f63-88a8-4760-994b-6b18e48b1cdf","year":2024},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:43.442394Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:bca91dd439c853903af7fcf624fb5541cc44482b1fd75828e6eaf6015053b382","observation_id":"41cd6786-0211-476e-93c5-9e4226f9f477","resolution":{"observed_at":"2026-08-07T11:29:55.296348Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:55.274652Z","title":"Efficient knowledge distillation from an ensemble of teachers","venue":null,"work_id":"79342df6-4153-4e31-ad6a-78f1b21c03ad","year":2017},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:43.508645Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:6af434d8cd4a16e2c078483bd6b943d768d7c441002af35179f877739b59e9a1","observation_id":"fc6d3599-e8f9-4b43-985f-8551e58340d4","resolution":{"observed_at":"2026-08-07T11:29:55.280408Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:55.258117Z","title":"Model extraction attacks and defenses on cloud-based machine learning models.IEEE Communications Magazine, 58(12):83–89, 2021","venue":null,"work_id":"35cba0d4-edca-4a2b-bb0f-b051d5162c12","year":2021},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:43.600457Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:a2e19d7d048fa670fbd537e772a6911193e1f51f1a73a2c7bc2979a9ccbae853","observation_id":"08e040c4-6dc7-4d73-9c5b-57430b1014a3","resolution":{"observed_at":"2026-08-07T11:29:55.263164Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:55.241573Z","title":"Machine learning as a service (mlaas)—an enterprise perspective","venue":null,"work_id":"40e4da5c-5ee3-4498-ab73-7b27628c7f7e","year":2022},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:43.671344Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:5e5a230f3f3f262250ed2172e304ed9217244fb652533176f447f7b9012189f1","observation_id":"f16855de-899f-425e-8ec3-eda7369586a2","resolution":{"observed_at":"2026-08-07T11:29:55.246872Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:55.224204Z","title":"A realistic model extraction attack against graph neural networks.Knowledge-Based Systems, 300:112144, 2024","venue":null,"work_id":"2e626c9d-c029-4788-b17a-2f3ed104ddc1","year":2024},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:43.747845Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:9c7388d8236325b5183226cdff397d916b1e81d78ff4c40e160b8d2e6a3462dd","observation_id":"6092f782-cd91-4955-acd6-94fdf7de893d","resolution":{"observed_at":"2026-08-07T11:29:55.230260Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2412.16114","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:49.495976Z","title":"The content moderator’s dilemma: Removal of toxic content and distortions to online discourse.arXiv preprint arXiv:2412.16114, 2024","venue":null,"work_id":"b7b4c685-7531-4d26-89f2-c0eec3d10bf5","year":2024},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:43.823410Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:e122a60f757b49797163bbb7b02cbe9176c4b1589e045abfc8e4eab34e9889a9","observation_id":"191e257e-35d0-42db-89c6-516d0d3adc49","resolution":{"observed_at":"2026-08-07T11:29:49.617476Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:43.878264Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:43.878264Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:80c7031141194ef48db12dfbbd6f62830bf735cb1a3753fd9b9f16e6664b443e","observation_id":"bea71f1e-f0d2-4ac2-ba6b-2269554dde38","resolution":{"observed_at":"2026-08-07T11:29:43.878264Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:55.197016Z","title":"Protecting intellectual property of language generation apis with lexical watermark","venue":null,"work_id":"75a544dd-914e-4dff-9d85-4b6fe374195e","year":2022},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:43.933632Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:6b13841c96bf0403d6a4c572424ba4e96664d06d45f53896e88eeff9359fba3e","observation_id":"360b649d-826d-47d2-93d2-9288587b41ed","resolution":{"observed_at":"2026-08-07T11:29:55.202338Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1503.02531","last_updated":"2015-03-09T15:44:49Z","snapshot_observed_at":"2026-07-06T04:11:24.157003Z","submitted_at":"2015-03-09T15:44:49Z","title":"Distilling the Knowledge in a Neural Network","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1503.02531","snapshot_observed_at":"2026-08-07T11:29:44.014750Z","title":"Distilling the knowledge in a neural network","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:44.014750Z"},"links":{"cited_paper":"/paper/1503.02531","citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:d0197ef41e50a0e305731cfe59fb56792a3caf8f3d10d2b43828d0dbc276f1fe","observation_id":"237dbdeb-8571-40fd-bd3b-d76d7054ec25","resolution":{"observed_at":"2026-08-07T11:29:44.014750Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:55.177984Z","title":"Learning to learn from apis: Black-box data-free meta-learning","venue":null,"work_id":"cdf11c99-0a09-4ce1-8e11-03f94636de2e","year":2023},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:44.069042Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:c7b9729430eeaf6e90f3f5fe11a744d0fab458a0e6b9252c8c209963b28bf664","observation_id":"30a2ff01-83d9-4c90-a8f9-89c8f82635fd","resolution":{"observed_at":"2026-08-07T11:29:55.184692Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:44.142842Z","title":"Densely connected convolutional networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:44.142842Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:73df0f17be15f9e3081cc870fcf5dac8d5f6aaef700d7bfa67e6b5cb0a83b874","observation_id":"a0eb8dd1-8ebe-4440-98b0-1f1accb9c403","resolution":{"observed_at":"2026-08-07T11:29:44.142842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:55.149242Z","title":"High accuracy and high fidelity extraction of neural networks","venue":null,"work_id":"1bbbd350-608d-44a8-b591-082b0f2a4615","year":2020},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:44.212973Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:233d3697489f8547fe3b7957a196e0392ba5852c9d297b7be5865c824dfa055e","observation_id":"1ee8aefd-9dfe-4e30-ada2-4bdd7f01e201","resolution":{"observed_at":"2026-08-07T11:29:55.154429Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:55.133036Z","title":"A comprehensive defense framework against model extraction attacks.IEEE Transactions on Dependable and Secure Computing, 21(2):685–700, 2023","venue":null,"work_id":"3a81bcf8-10bb-436f-ae06-6edab92766e0","year":2023},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:44.290721Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:3a8edef1663d72d253871f1f42de53e9a72e2d590cee223bb0c458aa61fe7d31","observation_id":"808ccce3-1d0b-4dc7-b312-c9530357ddec","resolution":{"observed_at":"2026-08-07T11:29:55.138246Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:55.058122Z","title":"Prada: protecting against dnn model stealing attacks","venue":null,"work_id":"7352ca34-3643-4f1e-9eb2-651ca4f15496","year":2019},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:44.362445Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:ec40c18829ba879f4a347203e22ea80063940d9ad85c0a43968579384cc5dc23","observation_id":"81706863-f513-4aba-a4f3-f4af169e4e8b","resolution":{"observed_at":"2026-08-07T11:29:55.104879Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:54.883115Z","title":"Maze: Data-free model stealing attack using zeroth-order gradient estimation","venue":null,"work_id":"4a761550-5f22-4dce-a4ee-5117c23c7997","year":2021},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:44.428306Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:85c3d79f7dae7ed8074adbbcd972dff6cc948bb9ff42517d261ad0029f4af2c5","observation_id":"1beb6478-54f6-405c-9fa9-a0152c35184b","resolution":{"observed_at":"2026-08-07T11:29:54.977984Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:54.727447Z","title":"Protecting dnns from theft using an ensemble of diverse models","venue":null,"work_id":"e89f95d3-5fb7-47a2-a648-d04de63c5c77","year":2021},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:44.522479Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:cba907d5b2e2abc11729453e7185cdd7ac721baab5e26df8b031c2f0417ef644","observation_id":"5f09adf9-dcb7-4d48-9041-4598d94e609c","resolution":{"observed_at":"2026-08-07T11:29:54.798480Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:44.591416Z","title":"Defending against model stealing attacks with adaptive misinformation","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:44.591416Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:644950af9d6e4a1245017b4a119d2dadb79e09d546db4695d6c4cd1583acc95e","observation_id":"3955441e-2fd8-43a1-90d3-71bf3e8bf34e","resolution":{"observed_at":"2026-08-07T11:29:44.591416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:54.606311Z","title":"Model extraction warning in mlaas paradigm","venue":null,"work_id":"2e506e4c-2932-4b9d-ba6f-ecc4e38c4519","year":2018},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:44.638468Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:215de4c44d2bcfa4e9a79bdad2fe08aed4b22f7638cc5e95ffd291fe7ca205b9","observation_id":"88cf8439-7dd9-4013-997b-8cee12db35d0","resolution":{"observed_at":"2026-08-07T11:29:54.641699Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1810.09957","last_updated":"2018-10-08T04:30:44Z","snapshot_observed_at":"2026-08-04T04:20:13.256802Z","submitted_at":"2018-10-08T04:30:44Z","title":"NSML: Meet the MLaaS platform with a real-world case study","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.09957","snapshot_observed_at":"2026-08-07T11:29:44.746123Z","title":"Nsml: Meet the mlaas platform with a real-world case study.arXiv preprint arXiv:1810.09957, 2018","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:44.746123Z"},"links":{"cited_paper":"/paper/1810.09957","citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:367b8b88a17bc3eac1517f4a697aa5b9e97d693367860a073dd7aca13719ff56","observation_id":"6618bcec-d434-4885-996c-5257588e200a","resolution":{"observed_at":"2026-08-07T11:29:44.746123Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:44.852634Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:44.852634Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:fbac5ae3b4626ae6ec4c10c875789dba76dcc2954548aa70ee7f43be76bda861","observation_id":"73a7fe6d-21f5-4f2f-a3b8-5414edb419ed","resolution":{"observed_at":"2026-08-07T11:29:44.852634Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:54.463268Z","title":"An ensemble approach for classification and prediction of diabetes mellitus using soft voting classifier.International Journal of Cognitive Computing in Engineering, 2:40–46, 2021","venue":null,"work_id":"338311b3-5db9-46e4-a9f3-b4d511636a07","year":2021},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:44.946695Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:516c5d8e72fb60e3e2d94a3812c451ae721b3747d6059fc7ac9128d6ed3067f6","observation_id":"fe4c7ba1-a2ba-4621-beaf-3968cc1f29ae","resolution":{"observed_at":"2026-08-07T11:29:54.518261Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:54.326410Z","title":"Defending against model extraction attacks with physical unclonable function.Information Sciences, 628:196–207, 2023","venue":null,"work_id":"08d4d6f8-016b-4494-9bf0-a482c6bf03a8","year":2023},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:45.005236Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:0e6cc5ce9c2c250e5bfe65f5f31cdb21b01379257a5a56c1bacef884264a5cd0","observation_id":"f5cddcb3-116c-4e84-ba76-b0d8c9c1f670","resolution":{"observed_at":"2026-08-07T11:29:54.362252Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:54.194203Z","title":"PhD thesis, Nanyang Technological University, 2025","venue":null,"work_id":"3d6cec5e-b285-409a-9df3-085b2d2f0909","year":2025},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:45.136130Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:8fba6da389a0ca3c7d1aea100a531fbb5d9dfa4863cbc1bf595e6e73c893359a","observation_id":"d443e543-093d-48c1-ad5e-cad525dc2094","resolution":{"observed_at":"2026-08-07T11:29:54.240412Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:54.094757Z","title":"Defending against model extraction attacks with ood feature learning and decision boundary confusion.Computers & Security, 136:103563, 2024","venue":null,"work_id":"240b08eb-5e80-4bbb-81ee-2ccf8847c3f2","year":2024},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:45.251316Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:54e8597f653e1a392b0f220d63383ee47dbd843957b379859be298ef0c1eb79d","observation_id":"bd4ea582-1b84-450d-a09c-38891304ff16","resolution":{"observed_at":"2026-08-07T11:29:54.115666Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:45.383709Z","title":"Model extraction attacks revisited","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:45.383709Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:269897f3822593de0b77c317a5d90b0769929898b7e5691d7d7f4b3359be8b9c","observation_id":"43951b68-0877-4be8-875a-76f137355351","resolution":{"observed_at":"2026-08-07T11:29:45.383709Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:53.920404Z","title":"Quda: Query-limited data-free model extraction","venue":null,"work_id":"ee5f4cc5-bd99-4c93-ade2-20df0516d9e6","year":2023},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:45.461472Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:92a19ff7fab2e132bfcef60182fca7b1a7f25b481de6089101699867f6909993","observation_id":"8baa84a2-ce0d-4bb3-b2e8-0f4f0f62093d","resolution":{"observed_at":"2026-08-07T11:29:54.057746Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:53.625432Z","title":"Model extraction attack and defense on deep generative models","venue":null,"work_id":"ced7f8dd-6efd-4232-87a5-bcdd96912e95","year":2022},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:45.555517Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:b04f98c9220138bc101a8722ce8b6f0ec1cfb4e11ea73adc37deb7abe77a54a0","observation_id":"4f23fa17-4653-46b4-b192-46ce5dd9a5b8","resolution":{"observed_at":"2026-08-07T11:29:53.771059Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1608.03983","last_updated":"2017-05-03T16:28:09Z","snapshot_observed_at":"2026-07-06T05:06:55.589962Z","submitted_at":"2016-08-13T13:46:05Z","title":"SGDR: Stochastic Gradient Descent with Warm Restarts","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.03983","snapshot_observed_at":"2026-08-07T11:29:45.638448Z","title":"Sgdr: Stochastic gradient descent with warm restarts.arXiv preprint arXiv:1608.03983, 2016","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:45.638448Z"},"links":{"cited_paper":"/paper/1608.03983","citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:b80e1eb954244dd679ecf660604a1824a3f5dba61d685a57f8380f0e57f176b1","observation_id":"cb1dd927-8bca-4b6d-b6dc-237b57b43496","resolution":{"observed_at":"2026-08-07T11:29:45.638448Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:53.287321Z","title":"Dynamic neural fortresses: An adaptive shield for model extraction defense","venue":null,"work_id":"3ba7d3ef-7081-4b2c-9512-54bb8f0b9c7a","year":null},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:45.719862Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:dcc2d57cdb5407fdb1b061a88ccd809211dbbec230313c9db844c58125fc4624","observation_id":"f562e1f9-6a63-46ce-9c48-6ee40a31722e","resolution":{"observed_at":"2026-08-07T11:29:53.456411Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.10706","last_updated":"2021-04-21T18:12:18Z","snapshot_observed_at":"2026-08-06T05:28:32.913878Z","submitted_at":"2021-04-21T18:12:18Z","title":"Dataset Inference: Ownership Resolution in Machine Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.10706","snapshot_observed_at":"2026-08-07T11:29:45.809923Z","title":"Dataset inference: Ownership resolution in machine learning.arXiv preprint arXiv:2104.10706, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:45.809923Z"},"links":{"cited_paper":"/paper/2104.10706","citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:dc8953e8c527c16d9f9e5562b50997750a3fc5345a32c3685fc17dfebbe434d2","observation_id":"f0bec78b-5abf-4f04-b142-b25cbf44dff8","resolution":{"observed_at":"2026-08-07T11:29:45.809923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:45.889360Z","title":"How to steer your adversary: Targeted and efficient model stealing defenses with gradient redirection","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:45.889360Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:f3a9f998dcc72d644de2d4e5241b144e0f94c32935266b57b1fdcdc3308c0b66","observation_id":"9674f173-d260-4e28-aa78-1212ee20ce3b","resolution":{"observed_at":"2026-08-07T11:29:45.889360Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1710.03740","last_updated":"2018-02-15T20:04:02Z","snapshot_observed_at":"2026-07-06T06:03:37.247241Z","submitted_at":"2017-10-10T17:42:04Z","title":"Mixed Precision Training","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.03740","snapshot_observed_at":"2026-08-07T11:29:45.960731Z","title":"Mixed precision training.arXiv preprint arXiv:1710.03740, 2017","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:45.960731Z"},"links":{"cited_paper":"/paper/1710.03740","citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:054bf656bf44b3f00cd7b5ebd195603841ba4ac38dade7e38f2abac7d27c402b","observation_id":"38841a3d-9dc2-47e3-98bf-60f0746a90df","resolution":{"observed_at":"2026-08-07T11:29:45.960731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:52.924440Z","title":"Megex: Data-free model extraction attack against gradient-based explainable ai","venue":null,"work_id":"fd28edeb-1a1a-42c0-85f9-44ef93c937ef","year":2024},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:46.061903Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:4766d05ab02fcd3c87b029ac85ebafc4e8c36657f7d3c6af9814833f81dbd03a","observation_id":"07a5608d-af51-4df9-a12d-4e48c60259e5","resolution":{"observed_at":"2026-08-07T11:29:53.111340Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:52.707035Z","title":"The MIT Press, 2nd edition, 2018","venue":null,"work_id":"2f5189d2-ee02-47d7-9ff3-d31398d0b462","year":2018},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:46.157255Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:aae4a68505f9e90c426a7dc5382ea39fdd7579dfb24b52b56ae768b1a041a3d9","observation_id":"dc245ebc-7ae6-4888-8f4f-737b6e094c16","resolution":{"observed_at":"2026-08-07T11:29:52.781143Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:52.660015Z","title":"PhD thesis, Technische Universität Wien, 2023","venue":null,"work_id":"90fcbd92-a0f9-49f0-a947-12dbed972ec8","year":2023},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:46.294026Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:f7cfff8a414bc958911cefa0b7557e8bd37a446ed26012e4878187fd29e6fdf1","observation_id":"a7bd935f-e061-422c-baf9-b48e639436c0","resolution":{"observed_at":"2026-08-07T11:29:52.694587Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:46.405187Z","title":"Knockoff nets: Stealing functionality of black-box models","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:46.405187Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:cb1d6e78b0da7c3c67bd95c41f34d439bbc5dd6545ebcc1c563264f5cc94c9a2","observation_id":"022aa366-53cd-474e-bf7d-bcf7dc2eccb7","resolution":{"observed_at":"2026-08-07T11:29:46.405187Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1906.10908","last_updated":"2020-03-03T10:51:12Z","snapshot_observed_at":"2026-08-07T17:53:53.891684Z","submitted_at":"2019-06-26T08:32:37Z","title":"Prediction Poisoning: Towards Defenses Against DNN Model Stealing Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.10908","snapshot_observed_at":"2026-08-07T11:29:46.552480Z","title":"Prediction poisoning: Towards defenses against dnn model stealing attacks.arXiv preprint arXiv:1906.10908, 2019","venue":null,"work_id":null,"year":1906},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:46.552480Z"},"links":{"cited_paper":"/paper/1906.10908","citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:598488087af6d3f448b8405af1c7e1787d5353ad6355805ea3a825fb8cf65e63","observation_id":"65aca9c0-a9e8-4ee8-93e7-fbd27e69b3f9","resolution":{"observed_at":"2026-08-07T11:29:46.552480Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:52.497006Z","title":"Mod- elshield: Adaptive and robust watermark against model extraction attack.IEEE Transactions on Information Forensics and Security, 2025","venue":null,"work_id":"170e7fb5-4979-40e7-a194-b3e482aca529","year":2025},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:46.696929Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:23ccf87b8be18c0aadca328e06586520d116d77306964507d16871d76fd814c9","observation_id":"08f13667-6af2-48e7-91f2-ac6a2f8a4025","resolution":{"observed_at":"2026-08-07T11:29:52.574431Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:46.841381Z","title":"Practical black-box attacks against machine learning","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:46.841381Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:ce8b32abd4ba5d234af043ae68bef94b1ec857c9bf6806c2fff574787cad93bc","observation_id":"ce321895-d395-4e4c-b557-f5a060d3255c","resolution":{"observed_at":"2026-08-07T11:29:46.841381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:46.989656Z","title":"Relational knowledge distillation","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:46.989656Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:db5344efac2adb65c90372eefac70c225c35042274ce61b20005c27e3c198f08","observation_id":"7f57c3fd-0138-41fa-abc5-525e67ddcc6a","resolution":{"observed_at":"2026-08-07T11:29:46.989656Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:47.088565Z","title":"Automatic differentiation in pytorch","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:47.088565Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:26574b1e533b556f4487943e0da13e96a35003b01b93ffc5b3ff48ca3bce8268","observation_id":"2b2e1da6-907e-46ba-896e-e8e6c79b96b5","resolution":{"observed_at":"2026-08-07T11:29:47.088565Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:52.351128Z","title":"Mlaas: Machine learning as a service","venue":null,"work_id":"ed5e0378-048e-43d6-bffb-1f681e73d949","year":2015},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:47.213201Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:e68a7045c44c9dfb06c7ba11e1b95eff52011822f754ce604b6a0d9418a20c99","observation_id":"87d3db77-060a-4b57-9b4e-8a27b012886f","resolution":{"observed_at":"2026-08-07T11:29:52.399547Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:52.254024Z","title":"Privacy as intellectual property.Stan","venue":null,"work_id":"b998b3fd-6059-4d87-87cd-89dddfa9424a","year":1999},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:47.318207Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:25626e9a55f00fc43bf6cd0ed5914d8687de50d76d50b2063115bb41480f4b91","observation_id":"3d91047b-bac6-4082-b95e-6827687c079d","resolution":{"observed_at":"2026-08-07T11:29:52.283298Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:47.448509Z","title":"Mobilenetv2: Inverted residuals and linear bottlenecks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:47.448509Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:5453cebd5088396d7356e8f807144c91b946b3a413efad8ad7bcc1827f117d50","observation_id":"779fd938-78b7-4503-9b3a-c3251d6657c5","resolution":{"observed_at":"2026-08-07T11:29:47.448509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:52.124318Z","title":"Towards data-free model stealing in a hard label setting","venue":null,"work_id":"423c24ab-8d61-4d3a-bde5-f72d35573a91","year":2022},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:47.570190Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:62e52c3bc9e2c2e0c042bfc0e622dade2693c668949e08c485c772858f670660","observation_id":"a09ea711-c052-4ca0-8b65-5901ecb25f93","resolution":{"observed_at":"2026-08-07T11:29:52.180612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:51.994359Z","title":"On efficient training of large-scale deep learning models.ACM Computing Surveys, 57(3):1–36, 2024","venue":null,"work_id":"8aa87d88-3679-4a56-af26-74d336d4526a","year":2024},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:47.719993Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:cdcce8cbd466db08add9cf95698199c6e7a9be784707ef652a10ffc42fd061aa","observation_id":"97d8357e-3a61-4bce-9494-d1e8cfce3c1b","resolution":{"observed_at":"2026-08-07T11:29:52.049503Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:51.852986Z","title":"Does knowledge distillation really work?Advances in neural information processing systems, 34:6906–6919, 2021","venue":null,"work_id":"24288f59-6ef4-454e-b0a6-760ad1af8f26","year":2021},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:47.833373Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:7774e7f97376a86225507f4d7248961314a59bf24fab12f55d0ebdcd913085de","observation_id":"b18395a2-b178-42ae-8fd0-71d2ddbe7b94","resolution":{"observed_at":"2026-08-07T11:29:51.910024Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:51.752221Z","title":"Deep neural network watermarking against model extraction attack","venue":null,"work_id":"626c6722-9d6c-4046-80b9-5e9a4d43306a","year":2023},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:47.959813Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:95fac451c6a036b62de4cb2ca1b9cd91ec04ac009c76295ff9c572f35e7eb02d","observation_id":"06f032f6-7550-46ff-9bd2-eb488b2f58e1","resolution":{"observed_at":"2026-08-07T11:29:51.789268Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:48.095902Z","title":"Stealing machine learning models via prediction {APIs}","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:48.095902Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:a3d5e0bf8fc958c7c427b9033035c8cf912319e0f6056b309162087332d4841b","observation_id":"2f0e70fb-0d69-4c23-b134-697abad43b61","resolution":{"observed_at":"2026-08-07T11:29:48.095902Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:51.610044Z","title":"Data-free model extraction","venue":null,"work_id":"6ae52030-a4dc-4802-8138-1a81471e92c4","year":2021},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:48.219035Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:af7288c897a2cf7f065fd01f143ca3b2ed5837404d4181a9922afd3c44ff20d6","observation_id":"387f2316-fb70-4fc0-8316-a6da1a7e13cd","resolution":{"observed_at":"2026-08-07T11:29:51.686598Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:51.502503Z","title":"Defending against data-free model extraction by distributionally robust defensive training.Advances in Neural Information Processing Systems, 36:624–637, 2023","venue":null,"work_id":"935ad437-3ba5-46d7-891f-47841adafe9f","year":2023},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:48.352974Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:851d5c5bc4ca7bb4866bf70b5e6d0e29b874f0a7b9c3f58400988ff212dd7366","observation_id":"a178aa32-a927-43d1-ab26-826f99153f87","resolution":{"observed_at":"2026-08-07T11:29:51.551622Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:51.366415Z","title":"Defense against model extraction attack by bayesian active watermarking","venue":null,"work_id":"e96cc408-2d30-408d-ac2e-04bd64de62c4","year":2024},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:48.477286Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:a71bd4dca291be0e13f7e87053c4831e8d5fcb10c2e3ebcbaa702bd44fcad95a","observation_id":"72d6f83c-071d-4f74-8ba8-dc106a336bab","resolution":{"observed_at":"2026-08-07T11:29:51.438230Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:51.140319Z","title":"Zero-shot knowledge distillation from a decision-based black-box model","venue":null,"work_id":"d1189945-914c-406f-8208-706c91358deb","year":2021},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:48.592992Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:4dd34c3be28355d9e4875ce1647a9ea823de7bf5944602dce13a1d4054af2163","observation_id":"d288470e-414c-40f5-b4d6-14a0f1fe3c22","resolution":{"observed_at":"2026-08-07T11:29:51.249330Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:50.854291Z","title":"Towards explainable model extraction attacks.International Journal of Intelligent Systems, 37(11):9936–9956, 2022","venue":null,"work_id":"7fd18a84-7fd8-433d-9ad8-a1c77c62089b","year":2022},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:48.703182Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:8110645dff57e4ebe4ac4d491a68972cc9dc4bc59c6381589d1b06994aec0a38","observation_id":"db6c8b70-d670-4426-876a-7ddccb2326e4","resolution":{"observed_at":"2026-08-07T11:29:50.989219Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:50.617457Z","title":null,"venue":null,"work_id":"5ddf1d7f-c50d-41fe-b5f3-86f40302da1e","year":2023},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:48.807008Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:6a7b70ab08395b40db53a94fedda63206d350063aff74dcf11f7e87f9dc4657a","observation_id":"89442633-a36a-4eca-9d97-d71fc9a0d943","resolution":{"observed_at":"2026-08-07T11:29:50.736835Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:50.341697Z","title":"Mlmodelci: An automatic cloud platform for efficient mlaas","venue":null,"work_id":"d2fa3c34-b5a2-4961-9ba9-f4cac01ab63b","year":2020},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:48.932249Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:7fc274ffc8a67a3a7783264fce812f0769680178141ee2ce913e66eedd83eb76","observation_id":"19462489-82c2-446b-b2c6-93d1cfabf697","resolution":{"observed_at":"2026-08-07T11:29:50.456875Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:50.105358Z","title":"Minimizing maximum model discrepancy for transferable black-box targeted attacks","venue":null,"work_id":"8b86085c-7e2d-4ed8-a11e-10147a37c07e","year":2023},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:49.030538Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:8d57fc32636cd81f93415280d65c961628bb872f204a13aa9bb268d9a59020de","observation_id":"261f865e-79f2-4b58-b2d9-217bf6e21583","resolution":{"observed_at":"2026-08-07T11:29:50.234183Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:29:49.762119Z","title":"A survey of model extraction attacks and defenses in distributed computing environments, 2025","venue":null,"work_id":"3477b826-058f-4aec-b768-363bbeabe00b","year":2025},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:49.140988Z"},"links":{"citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:52e61b1ca0e6640e7b4d911856df271aeb260b3ce94d41e090d2480daa3dca44","observation_id":"80f696c6-adf2-4d0a-be40-44fff395ddd4","resolution":{"observed_at":"2026-08-07T11:29:49.864470Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models"},"reference_resolution":{"displayed":65,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":22,"verified_exact":1,"verified_fuzzy":42},"total_outbound_references":65},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 65 of 65 outbound references and 5 inbound Pith citation observations for arXiv:2506.02362."}