{"as_of":"2026-08-08T04:04:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:594b017027d220cac332f81ea2a938e7bce23495ef0be910c1024f6362c39674","coverage":[{"denominator":34,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":34,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T11:21:29.277094Z","state":"measured"},{"denominator":34,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":34,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.02711/citation-record","integrity":"/paper/2506.02711/integrity","json":"/paper/2506.02711/citation-record.json","paper":"/paper/2506.02711"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:32.646774Z","title":"Superdriverai: Towards design and implementation for end-to-end learning-based autonomous driving","venue":null,"work_id":"7f71b32b-f5f8-459e-84fd-8c777c70fa02","year":2023},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:26.576608Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:5ee131435241e20ce82d44c340476e7a5326f82c9ba9c411c3b528162d7f2118","observation_id":"e1787c0e-4b59-4f26-9289-7bedacb67003","resolution":{"observed_at":"2026-08-07T11:21:32.775595Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:32.345247Z","title":"Scalable membership inference attacks via quantile regression","venue":null,"work_id":"07d5b59b-6980-44ce-85d7-0ee52dbd2069","year":2024},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:26.660163Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:e326de05cb29dd1b6c3317f5696a896f1efe8ac374fbe749fdbd6d4aa71a73c6","observation_id":"82ab584f-2277-4465-9b69-9e2ec3170ddf","resolution":{"observed_at":"2026-08-07T11:21:32.485902Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:26.757606Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:26.757606Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:ef41acf24acdfe09eea3a5d2f3446f70417e3823fb0ea66821005c4bbafdad20","observation_id":"8c78805d-62f4-4024-98df-23f9225ba007","resolution":{"observed_at":"2026-08-07T11:21:26.757606Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:32.084737Z","title":"The secret sharer: Evaluating and testing unintended memorization in neural networks","venue":null,"work_id":"75a56549-a323-47f1-bc60-7ca61210280e","year":2019},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:26.815604Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:ca5d3bafecf42c9c02597dbd21ea6026bf5d5c9f427f90c0ae4541108d7c0bc7","observation_id":"2962e0e2-ad65-4898-b73c-2487ff6544b6","resolution":{"observed_at":"2026-08-07T11:21:32.158012Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:26.902277Z","title":"Extracting training data from large language models","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:26.902277Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:90637b86fab8c6917b46ce96610388b8bb36ba4361cc67e306e01fa3e6e14014","observation_id":"8b741b13-5e8a-4207-b74e-454abb7f6fe2","resolution":{"observed_at":"2026-08-07T11:21:26.902277Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:26.973546Z","title":"Membership inference attacks from first principles","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:26.973546Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:7d00ebfdfb978d8fd4af6892b96cbb60ee0c6a157f8f208a009f0efc86c7c5bb","observation_id":"d09ba2fb-042f-4fe6-8e4f-ce4c4ef5ae75","resolution":{"observed_at":"2026-08-07T11:21:26.973546Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.07646","last_updated":"2023-03-06T06:28:18Z","snapshot_observed_at":"2026-08-03T19:51:05.627063Z","submitted_at":"2022-02-15T18:48:31Z","title":"Quantifying Memorization Across Neural Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.07646","snapshot_observed_at":"2026-08-07T11:21:27.043524Z","title":"Quantifying memorization across neural language models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.043524Z"},"links":{"cited_paper":"/paper/2202.07646","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:1f2477bf83b15cb28eb329e226832a35a364e3bda09c5879bcc1921ed8e32bf2","observation_id":"f09e6cf1-81d8-44f6-b754-10564e897d49","resolution":{"observed_at":"2026-08-07T11:21:27.043524Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:31.807305Z","title":"Forecasting stock market crisis events using deep and statistical machine learning techniques","venue":null,"work_id":"285abb45-6062-4de5-b4c6-be3c25506c68","year":2018},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.128838Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:2b0b88c46c47cce6e5c1e148827406b73f5c37814ce911596e3475ed510919a1","observation_id":"2626b60c-88cb-417c-9cb1-fb7caa0463a2","resolution":{"observed_at":"2026-08-07T11:21:31.918601Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03838","last_updated":"2024-01-16T21:06:25Z","snapshot_observed_at":"2026-08-05T18:23:22.449253Z","submitted_at":"2023-10-05T18:46:27Z","title":"Chameleon: Increasing Label-Only Membership Leakage with Adaptive Poisoning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03838","snapshot_observed_at":"2026-08-07T11:21:27.185180Z","title":"Chameleon: Increasing label-only membership leakage with adaptive poisoning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.185180Z"},"links":{"cited_paper":"/paper/2310.03838","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:cb0d4d7260165cc02bfbcae41665567a70b93c975026bb86e13113d20ef570ba","observation_id":"5ffc95f0-9fe0-4ca8-916f-32195d595dd3","resolution":{"observed_at":"2026-08-07T11:21:27.185180Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:31.531799Z","title":"Hopskipjumpattack: A query-efficient decision-based attack","venue":null,"work_id":"5adbee1e-2cf7-40a6-b499-c979ffc46ba1","year":2020},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.299806Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:5dea6dfd11e66b17a5d7a8133b080da12dea17c5a5408ba3dc38aaaa8ff9edc2","observation_id":"2052be72-a05a-42fd-b833-8c7782e03fac","resolution":{"observed_at":"2026-08-07T11:21:31.669969Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:31.332980Z","title":"Amplifying membership exposure via data poisoning","venue":null,"work_id":"0a876e76-c134-4b7f-a7e7-9f5b8fa54405","year":2022},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.353339Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:64f96fa2fb8b185774f455894adf155cca58ed3956be1c93d24dd3b743cf560b","observation_id":"fe0fecf2-7378-433c-8686-2f50d416b620","resolution":{"observed_at":"2026-08-07T11:21:31.393409Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:27.427820Z","title":"Label- only membership inference attacks","venue":null,"work_id":null,"year":1964},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.427820Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:12349d9c5b0783d73fd5c16fd773569eba3cf72936e6a50d99bf5123987a86fe","observation_id":"2963c44b-63e9-41c3-b5bf-402b657fc3e8","resolution":{"observed_at":"2026-08-07T11:21:27.427820Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:31.072390Z","title":"Privacy side channels in machine learning systems","venue":null,"work_id":"227affe2-647e-48b0-8618-b2e6a201d4a9","year":2024},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.511666Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:e6b66e31a930411e8ead9c664484bd6ae77b0920bbeb0f8cb42eb94cb4c9c69d","observation_id":"f6f24906-e0d7-4f5d-8c73-0aad315fe8e1","resolution":{"observed_at":"2026-08-07T11:21:31.214282Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:30.889201Z","title":"Leveraging adversarial examples to quantify membership information leakage","venue":null,"work_id":"91d50af3-2328-4063-88a5-1f97e85de9e9","year":2022},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.576558Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:8259517d83cc1e4315bff1a4a7e566e5ec96730e84257d43f535b16cd0300403","observation_id":"49f355e1-c122-4594-b6a2-3b4803718aa8","resolution":{"observed_at":"2026-08-07T11:21:30.968902Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:30.692617Z","title":"Risk assessment for hospital readmissions: Insights from machine learning algorithms","venue":null,"work_id":"14283430-96ca-40ee-91d8-c131bd1a0c42","year":2021},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.641197Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:b320e428281abe7600e3d19aaefa14146aaab9649605553960321f402f596c20","observation_id":"501f2e2c-8bd8-4cdf-ba29-ade26bf496a9","resolution":{"observed_at":"2026-08-07T11:21:30.780209Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-07T11:21:27.721455Z","title":"Explaining and harnessing adversar- ial examples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.721455Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:1ac9595655f9d823d953f0421703445118c157617f962c56b906752594718d1c","observation_id":"8f7d50a8-3839-4be8-9762-7e5ae4cee0bf","resolution":{"observed_at":"2026-08-07T11:21:27.721455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:30.517243Z","title":"Simple black-box adversarial attacks","venue":null,"work_id":"a02929fe-9ccc-4e42-893a-10891769abde","year":2019},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.836901Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:60a4bfca8fa4a2b40738df3362111a5e37302fd190368328d72a00c62c1f079f","observation_id":"43bc160c-fef2-41fe-87a7-9d55dc4ec032","resolution":{"observed_at":"2026-08-07T11:21:30.622004Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-07T11:21:27.908079Z","title":"Towards deep learning models resistant to adversarial attacks.arXiv preprint arXiv:1706.06083, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.908079Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:319bde466da84d398f4f2a7acd7e87d7853bde369df167f3724e9f5fb33fe8b1","observation_id":"92d82447-3a68-4694-9abd-30f5d70b2bc4","resolution":{"observed_at":"2026-08-07T11:21:27.908079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:30.359014Z","title":"Comprehensive privacy analysis of deep learning: Passive and active white-box inference attacks against centralized and federated learning","venue":null,"work_id":"8d8c20af-9747-4a71-a084-e0be1a8bef3f","year":2019},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.995647Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:9578392eba04ac1722fbb9023bb15627d99ce1e19f121bc69d43abd206b67eb1","observation_id":"19f67cde-ddb1-411a-b0e7-84c776dcc5ba","resolution":{"observed_at":"2026-08-07T11:21:30.422334Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17035","last_updated":"2023-11-28T18:47:03Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-11-28T18:47:03Z","title":"Scalable Extraction of Training Data from (Production) Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.17035","snapshot_observed_at":"2026-08-07T11:21:28.060151Z","title":"Scalable extraction of training data from (production) language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.060151Z"},"links":{"cited_paper":"/paper/2311.17035","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:7adc9d6c250fbc087e3c43aa19a15cd678b60adba3fa42ce393799c09cd208fc","observation_id":"4c6f8a47-624c-4e20-8f30-0a45c9a1c4c9","resolution":{"observed_at":"2026-08-07T11:21:28.060151Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.17746","last_updated":"2025-05-07T18:36:12Z","snapshot_observed_at":"2026-07-06T18:36:51.761148Z","submitted_at":"2024-06-25T17:32:16Z","title":"Recite, Reconstruct, Recollect: Memorization in LMs as a Multifaceted Phenomenon","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.17746","snapshot_observed_at":"2026-08-07T11:21:28.153750Z","title":"Recite, reconstruct, recollect: Memorization in lms as a multifaceted phenomenon","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.153750Z"},"links":{"cited_paper":"/paper/2406.17746","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:98d0a7094efd5419658473ecccd1fa480af25f1cf99e6f6038a49ed1fddb5ad4","observation_id":"6b9c9a84-b12e-4746-8ab4-625c4f860a33","resolution":{"observed_at":"2026-08-07T11:21:28.153750Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1806.01246","last_updated":"2018-12-14T19:39:43Z","snapshot_observed_at":"2026-08-08T03:39:28.408433Z","submitted_at":"2018-06-04T17:38:42Z","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1806.01246","snapshot_observed_at":"2026-08-07T11:21:28.225597Z","title":"Ml-leaks: Model and data independent membership inference attacks and defenses on machine learning models","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.225597Z"},"links":{"cited_paper":"/paper/1806.01246","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:7198f0f9664cf0ce06455bf66ea01e888267c7b71e502ef5dbd051bb7a028080","observation_id":"dab98859-6eaa-4ba9-aa4f-5e7d5906cff2","resolution":{"observed_at":"2026-08-07T11:21:28.225597Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:30.251409Z","title":"Machine learning as an early warning system to predict financial crisis","venue":null,"work_id":"55a1fe8f-3019-4e34-bee2-962613c108ac","year":2020},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.323057Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:6287347277b1184a2c2b6018687b34ba180666aa13a4263218763e75b014547c","observation_id":"4197393e-a003-4c95-864b-613aa282e63b","resolution":{"observed_at":"2026-08-07T11:21:30.297603Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:28.416923Z","title":"Membership inference attacks against machine learning models","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.416923Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:243f0cf541b986a9a622c917488555462c69ca8df36e721f0ddabf65542ec2b5","observation_id":"487c3b25-c21d-48a1-8723-07f0dd20f1e5","resolution":{"observed_at":"2026-08-07T11:21:28.416923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:30.126720Z","title":"Systematic evaluation of privacy risks of machine learning models","venue":null,"work_id":"cb6a8e37-1329-473e-927c-a7697aea3798","year":2021},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.510923Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:b2117bfdc7b9522a05749088a1b65370058d23e9f40500e88f99c62aa1aedf5e","observation_id":"373d3cdc-d5d3-4b1a-ae22-89df3d9ecb33","resolution":{"observed_at":"2026-08-07T11:21:30.182639Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:28.602654Z","title":"Privacy risks of securing machine learning models against adversarial examples","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.602654Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:eb6293cc3da2c54d68eb56e30510adc05793485e5834d6786e4e0603e5fcf2bf","observation_id":"9e3d5234-e3e8-4de1-bf17-1588e212f934","resolution":{"observed_at":"2026-08-07T11:21:28.602654Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2402.06674","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:29.442587Z","title":"Understanding practical membership privacy of deep learning","venue":null,"work_id":"e14567e5-d6e6-4003-8eb7-50369fa67ea0","year":2024},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.698855Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:3c5974a2088b461c4428ec814652ce7e82e5db2019732e899d66631bafa4caa7","observation_id":"b1b8191f-f0d4-4ee9-bb94-a8b238cab2fa","resolution":{"observed_at":"2026-08-07T11:21:29.489880Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1704.03453","last_updated":"2017-05-23T18:14:30Z","snapshot_observed_at":"2026-07-06T05:37:27.385512Z","submitted_at":"2017-04-11T17:59:12Z","title":"The Space of Transferable Adversarial Examples","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1704.03453","snapshot_observed_at":"2026-08-07T11:21:28.817863Z","title":"The space of transferable adversarial examples","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.817863Z"},"links":{"cited_paper":"/paper/1704.03453","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:b67ce1abc758ad910727841094b2310f43667f603042c88cc5929aa99157a9eb","observation_id":"7ba1fb16-7cc6-4a04-8732-5b9efe507c3b","resolution":{"observed_at":"2026-08-07T11:21:28.817863Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:29.977033Z","title":"Truth serum: Poisoning machine learning models to reveal their se- crets","venue":null,"work_id":"be267500-3da7-49bb-84b4-aba38c052155","year":2022},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.908942Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:cbbb7cbc79db3d8d94068613470af252723dff98b3627215160fea46122ee461","observation_id":"106b9f37-5a6e-4029-be1d-e59a81039090","resolution":{"observed_at":"2026-08-07T11:21:30.042193Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2111.08440","last_updated":"2022-04-11T09:23:43Z","snapshot_observed_at":"2026-07-06T12:09:00.789234Z","submitted_at":"2021-11-15T12:32:20Z","title":"On the Importance of Difficulty Calibration in Membership Inference Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.08440","snapshot_observed_at":"2026-08-07T11:21:28.996687Z","title":"On the importance of difficulty calibration in membership inference attacks","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.996687Z"},"links":{"cited_paper":"/paper/2111.08440","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:003818cbfaaadb70da8dd5fb5a9d27c319c76139e6f409efee51ecd45ed96d5d","observation_id":"a4eede62-8fc0-4572-95d6-c4ace18822a7","resolution":{"observed_at":"2026-08-07T11:21:28.996687Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:29.859211Z","title":"You only query once: An efficient label-only membership inference attack","venue":null,"work_id":"b7258d94-c250-4b33-8f50-facf2d1153b3","year":null},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:29.059399Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:5e0e5bceae0fdb7ffdc885aad0f50ca301bb279f3d0d882e128c14aabfd7ff14","observation_id":"8c67cad9-bc14-45da-88f6-5a013cb1950d","resolution":{"observed_at":"2026-08-07T11:21:29.909376Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:29.732646Z","title":"Privacy risk in machine learning: Analyzing the connection to overfitting","venue":null,"work_id":"c4e9c903-7107-4182-bc41-e2a130319428","year":2018},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:29.129052Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:954f0c79d2d35719ca57dd5cd4a29d608e32489da975368cd469cc2e3cfa836f","observation_id":"34081adf-18b2-4977-8596-9ed6dedc701c","resolution":{"observed_at":"2026-08-07T11:21:29.782298Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:29.640367Z","title":"Machine learning-based vehicle intention trajectory recognition and prediction for autonomous driving","venue":null,"work_id":"6216a9ea-95c7-4f83-99a0-3748d622107a","year":2024},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:29.196502Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:41ee5359d1d6cc35d9d74501d76239de99af05c3da92e2405ea87acb4fed8179","observation_id":"57ce36cc-1ece-4534-9032-d98bc6e42155","resolution":{"observed_at":"2026-08-07T11:21:29.672657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.03262","last_updated":"2024-06-12T09:02:47Z","snapshot_observed_at":"2026-08-06T10:49:48.033035Z","submitted_at":"2023-12-06T03:18:49Z","title":"Low-Cost High-Power Membership Inference Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.03262","snapshot_observed_at":"2026-08-07T11:21:29.277094Z","title":"Low-cost high-power membership inference attacks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:29.277094Z"},"links":{"cited_paper":"/paper/2312.03262","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:2689bda02864a55e7d5fa4f6cae08ecb87e3926aafdd90f7aed202ace3823df4","observation_id":"50f9cd01-f6ce-467d-a6be-8d030bf9e15d","resolution":{"observed_at":"2026-08-07T11:21:29.277094Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T11:15:20.623978Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack"},"reference_resolution":{"displayed":34,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":16,"verified_exact":1,"verified_fuzzy":17},"total_outbound_references":34},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 34 of 34 outbound references and 0 inbound Pith citation observations for arXiv:2506.02711."}