{"as_of":"2026-08-08T11:48:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:266b0b057b9ed683041d20b8b4274ae01321454c3a87caa2a36ccc483913502a","coverage":[{"denominator":78,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":78,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:29:46.802174Z","state":"measured"},{"denominator":78,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":78,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.07888/citation-record","integrity":"/paper/2506.07888/integrity","json":"/paper/2506.07888/citation-record.json","paper":"/paper/2506.07888"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.807216Z","title":"Deep Learning with Differential Privacy","venue":null,"work_id":"ba5b2c5d-ed29-478c-bbd0-4b5a777bf924","year":2016},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.109204Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:cce39fca20039ef495d08609d4564caacb540dba45d2717343819d740e4b00ba","observation_id":"3c79436b-bfe3-4b9f-b3f5-136e4fbe6fcd","resolution":{"observed_at":"2026-08-07T05:29:47.810910Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.794912Z","title":"Mancini, Angelo Spog- nardi, Antonio Villani, Domenico Vitali, and Giovanni Felici","venue":null,"work_id":"b3694a0b-bede-4b4d-9644-9e56193b52b0","year":2015},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.173978Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:a11b31b3b6efb01a54b734e7f9f8d3fb14a0f03465680cdf1975f38775d14e39","observation_id":"979e2b53-c79c-4d93-a315-fd6ead3a9482","resolution":{"observed_at":"2026-08-07T05:29:47.798868Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.782664Z","title":"Re- constructing Training Data with Informed Adversaries","venue":null,"work_id":"d25b8e36-97f2-4d98-a4ff-b5b2737e5f68","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.238259Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:c8071f84b32d8e5f5617180477e0d061ef7f50c617c4dae51f044ebd7d10057f","observation_id":"1cc5f7d2-d856-40c5-95cb-0ce5f85dd2b1","resolution":{"observed_at":"2026-08-07T05:29:47.786542Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.770588Z","title":"Semi-supervised Learning with Constraints for Person Identification in Multimedia Data","venue":null,"work_id":"4d8e7162-fab0-48f4-b342-7eac710f0ea4","year":2013},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.309162Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:5b06fb3630fe8287bc83474f3b793282e13677a21a5dbd49ba42ca7f8850d7fe","observation_id":"4dc7bd38-7150-4d4b-ac41-5d335c0b1f2f","resolution":{"observed_at":"2026-08-07T05:29:47.774277Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.758431Z","title":null,"venue":null,"work_id":"9b8eac1d-b486-4eee-a6c4-575d1259f9fd","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.380962Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:cebb743724dd9f25063356f95f89ab292ffe4ee4e0f566fd3789fbe37c9a4369","observation_id":"3b1d8bcf-c05e-4c5d-863d-a2b15e3b1671","resolution":{"observed_at":"2026-08-07T05:29:47.762153Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:43.445314Z","title":"Membership Inference Attacks From First Principles","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.445314Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:9e840a04f42b8b23d3aa580bc6f7956eda28054f576a818dfe24a8ed90088049","observation_id":"3e6bad9b-8772-425e-9d84-4c9f1cb1b76d","resolution":{"observed_at":"2026-08-07T05:29:43.445314Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.724055Z","title":"The Privacy Onion Effect: Memorization is Relative","venue":null,"work_id":"3efe2899-5282-4223-9f50-dbaedb5ea953","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.621279Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:f57afa080c2b48211e07c966d74ad33d093a6cab5ba6b683556ee7ae485ebf4f","observation_id":"7c73456d-aa9e-441e-af35-ac3d16a45460","resolution":{"observed_at":"2026-08-07T05:29:47.727927Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.712004Z","title":"Brown, Dawn Song, Úl- far Erlingsson, Alina Oprea, and Colin Raffel","venue":null,"work_id":"9c81ff74-4342-4e2f-b296-5f17b4b98302","year":2021},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.692697Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:cac12c05007d0368e614d0cd44c437b1dd8828c416f22cbaaf34a67ab2274a8c","observation_id":"df33a80b-3e8f-400b-b470-ae210a0e866c","resolution":{"observed_at":"2026-08-07T05:29:47.715793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.699401Z","title":"Big Data Analysis for Financial Risk Management.Journal of Big Data,","venue":null,"work_id":"31ab0c93-c333-49a0-94d6-d695f9f794ef","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.769179Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:02db2ca7360703fbd3a7a68888b3ef7c4daf9103cfed09ee2ca877d64258059a","observation_id":"62bf33e6-f478-4102-b102-3ea611748f02","resolution":{"observed_at":"2026-08-07T05:29:47.703323Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.687620Z","title":null,"venue":null,"work_id":"08c7e4cd-ae51-43f5-aa86-667df03bfebe","year":1935},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.834586Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:51fa324c2cddc2b3fda0650cfd561aab398c049413d1a902897131aac5cd2da0","observation_id":"fbff1e25-b06e-409e-8f28-705d0a3bed8b","resolution":{"observed_at":"2026-08-07T05:29:47.691269Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.674702Z","title":"Knowledge-Enriched Distributional Model Inversion Attacks","venue":null,"work_id":"29ee9920-d688-4100-898a-976fcdf60d08","year":2021},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.923428Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:388d7ac3cb4dd04a4359be1ff1ef1d50df4a606ddfb7df285c190c3cbd28e5af","observation_id":"e1aab644-f1b9-41d7-835c-2b2dde976575","resolution":{"observed_at":"2026-08-07T05:29:47.678773Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:43.981950Z","title":"Choquette Choo, Florian Tramèr, Nicholas Carlini, and Nicolas Papernot","venue":null,"work_id":null,"year":1964},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.981950Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:a62f519071fc2415817ff436ebd702461368fd476fe5097db0a93429d0a481de","observation_id":"8c8c5c48-f978-4b0f-9218-2ad8a532c273","resolution":{"observed_at":"2026-08-07T05:29:43.981950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1812.01718","last_updated":"2018-12-03T12:37:31Z","snapshot_observed_at":"2026-07-06T07:19:11.957225Z","submitted_at":"2018-12-03T12:37:31Z","title":"Deep Learning for Classical Japanese Literature","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1812.01718","snapshot_observed_at":"2026-08-07T05:29:44.024512Z","title":"Deep Learning for Classical Japanese Literature.CoRR abs/1812.01718, 2018","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.024512Z"},"links":{"cited_paper":"/paper/1812.01718","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:7bdcaa828dc36d99a357e99c9eacd5fea7fb5e5482b07f1fdf68ba12836387d4","observation_id":"2afd35c2-ddba-49fa-859f-9bbbdc5f2bab","resolution":{"observed_at":"2026-08-07T05:29:44.024512Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.653886Z","title":"On the Privacy Risk of In-context Learning","venue":null,"work_id":"98933a4a-e5c3-4e51-9f6a-fc5feda96bda","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.095071Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:7e58563aff3a77b2afa230358a086f3a80b462449564ee9832b8584a00ac6bd2","observation_id":"ba12333f-1af2-4d92-a058-6740f314123c","resolution":{"observed_at":"2026-08-07T05:29:47.657891Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.642353Z","title":"Now Publishers Inc., 2014","venue":null,"work_id":"4eb9f7f4-d3d4-4931-8377-f11d6f691254","year":2014},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.164224Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:5559ee6f30d1f85b36816abb27fadde7c6fe60ce3b4f9ee9cdbdac381f4e0ad9","observation_id":"c309c963-3e4a-4496-b5ec-6664a12abbb9","resolution":{"observed_at":"2026-08-07T05:29:47.645855Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.629489Z","title":"Does Learning Require Memoriza- tion? A Short Tale about a Long Tail","venue":null,"work_id":"b444b44a-5db3-4bc7-98a4-12d7aea27fcc","year":2020},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.233053Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:d21617d81df83df37eadbe7eb262ae0c51608c67dc727a49ed5f5a5cf45cade4","observation_id":"a45e222c-d563-4b50-9f8a-abe6e20c5a3e","resolution":{"observed_at":"2026-08-07T05:29:47.633205Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.617371Z","title":"Model Inversion Attacks that Exploit Confidence Infor- mation and Basic Countermeasures","venue":null,"work_id":"b2ccff01-c779-4315-bdfe-d0dbbb892d2a","year":2015},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.288378Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:2f530ae36d31c25727ca30d8154302a2bede309c3efcde765fda862d9e9fe149","observation_id":"7297b00b-5742-4082-b07e-1d8eaf9a7410","resolution":{"observed_at":"2026-08-07T05:29:47.620983Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.605569Z","title":"Gunter, and Nikita Borisov","venue":null,"work_id":"73bbd43f-24a5-4008-964e-41548b77d665","year":2018},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.324903Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:a3fc989cd5a8a9e6481935da3073b2dc56a1180beda7979c4fd939cac01fad16","observation_id":"e5e6ccf1-4180-454e-bd9f-9584288aed24","resolution":{"observed_at":"2026-08-07T05:29:47.609383Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.593246Z","title":"Generative Adversar- ial Nets","venue":null,"work_id":"66eaad1d-e1b8-4aac-914e-0b083e1fb860","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.369576Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:652b5743142daa76f6f971b30de6bc2411b7b1e190490295ded25aa9fa2a26d6","observation_id":"5da7b13c-166f-4546-9068-c900a28c3cdc","resolution":{"observed_at":"2026-08-07T05:29:47.597030Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.580654Z","title":"Reconstructing Training Data from Trained Neural Networks","venue":null,"work_id":"80cb5899-4570-42d7-abf7-07815c097bb0","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.430846Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:92564aaffb71a3641cec4f40f990951ff476f404ec21f8b035f685660fea0d51","observation_id":"0a5b657c-6f76-41ec-9db4-e3629f525499","resolution":{"observed_at":"2026-08-07T05:29:47.584680Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1506.02626","last_updated":"2015-10-30T23:29:27Z","snapshot_observed_at":"2026-07-06T04:20:15.965140Z","submitted_at":"2015-06-08T19:28:43Z","title":"Learning both Weights and Connections for Efficient Neural Networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1506.02626","snapshot_observed_at":"2026-08-07T05:29:44.495660Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.495660Z"},"links":{"cited_paper":"/paper/1506.02626","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:ed17620b4bf938cd32e72a0bad2e78f2c62e10d74cf314a4a97799e808bec0ed","observation_id":"04b4ed3f-87f3-4e2f-9691-54f2582e33d6","resolution":{"observed_at":"2026-08-07T05:29:44.495660Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.568655Z","title":"Girshick","venue":null,"work_id":"2e747e48-7122-4f7e-a238-fc92dd16a22d","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.544386Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:00327b081d1c33f1a786faf5b50d48cc336b482d03b3be72ed5a4abf4f0ca9bc","observation_id":"66ed6ca7-6ca8-47c6-91cd-1a7691174d0b","resolution":{"observed_at":"2026-08-07T05:29:47.572624Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.557069Z","title":"Deep Residual Learning for Image Recognition","venue":null,"work_id":"722f78a9-c5b1-443e-ae36-1ad6c767e26d","year":2016},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.633710Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:6db544c6db418e28cd5dde0b7575b0d349f0f162af599c2ce8ec36ced3fcc299","observation_id":"8098df40-4af7-4735-9f7a-2b9eb45c7839","resolution":{"observed_at":"2026-08-07T05:29:47.560679Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2208.10445","last_updated":"2022-08-22T17:00:53Z","snapshot_observed_at":"2026-07-06T13:44:15.000595Z","submitted_at":"2022-08-22T17:00:53Z","title":"Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2208.10445","snapshot_observed_at":"2026-08-07T05:29:44.731810Z","title":"Membership-Doctor: Comprehensive As- sessment of Membership Inference Against Machine Learning Models.CoRR abs/2208.10445, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.731810Z"},"links":{"cited_paper":"/paper/2208.10445","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:790a90ca17cc9c51db5f79a8b9bbca7bfa924f0f9af2c7c4eb769ac00e383acf","observation_id":"86394da0-62b0-4764-a1eb-8f105416169a","resolution":{"observed_at":"2026-08-07T05:29:44.731810Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.05429","last_updated":"2021-02-10T13:51:54Z","snapshot_observed_at":"2026-07-06T10:40:12.004776Z","submitted_at":"2021-02-10T13:51:54Z","title":"Node-Level Membership Inference Attacks Against Graph Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.05429","snapshot_observed_at":"2026-08-07T05:29:44.818943Z","title":"Node-Level Membership Infer- ence Attacks Against Graph Neural Networks.CoRR abs/2102.05429, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.818943Z"},"links":{"cited_paper":"/paper/2102.05429","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:b5942f65d82292fbb602ade3707d8ff0f7d2a4e23d2deb26dfa4efdbc54ec2ee","observation_id":"cfc79789-f4bb-4b94-9f66-d40cd7bba558","resolution":{"observed_at":"2026-08-07T05:29:44.818943Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.545169Z","title":null,"venue":null,"work_id":"5069f341-1fc7-4096-9751-84d7cab6cd82","year":2021},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.897673Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:ff8c5aa282350e9583c078d2f975bc3c5159214ff878b8489854bdc912bb1a8e","observation_id":"70d0569b-b6bc-458e-b561-ce27845438ad","resolution":{"observed_at":"2026-08-07T05:29:47.548837Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.531796Z","title":"A Style- Based Generator Architecture for Generative Adversar- ial Networks","venue":null,"work_id":"3dfcaa22-1097-4157-b0dc-b88dcffe7144","year":2019},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.950737Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:209f8a21cd275a85e029a413595684c55dcee5b8f6212e6cb7ff4e82d8f93a64","observation_id":"dc898baa-bf41-4eb0-95b9-8bb1849b379e","resolution":{"observed_at":"2026-08-07T05:29:47.536034Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.518497Z","title":"Kingma and Prafulla Dhariwal","venue":null,"work_id":"dc23df85-16de-4709-b92f-4c2f24332b45","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.013270Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:77420ba6bfc61c65d601d058033f1f8add7f789425ea13bc6389b8c10c4b7aa7","observation_id":"b0c87287-cfbd-4c45-b4d5-a84831dea12f","resolution":{"observed_at":"2026-08-07T05:29:47.522087Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.505161Z","title":"Application of Machine Learning in Disease Prediction","venue":null,"work_id":"2080d6e4-5fc5-4340-9820-c9c07a64bba8","year":2018},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.090780Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:124cd69c9b7316fa3b4feb4a5c7a4d14d0749eb8a5f37e7eea79c6ef5b52a43a","observation_id":"61db44ef-2aa6-43de-8630-17f099337abf","resolution":{"observed_at":"2026-08-07T05:29:47.509260Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.15098","last_updated":"2024-07-21T09:11:08Z","snapshot_observed_at":"2026-08-08T07:36:52.040518Z","submitted_at":"2024-07-21T09:11:08Z","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","version":1},"cited_work":{"arxiv_id":"2407.15098","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.15098","snapshot_observed_at":"2026-08-07T05:29:46.922478Z","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","venue":"cs.CR","work_id":"a8b28784-4233-4370-8fa6-f9320f32b926","year":2024},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.165297Z"},"links":{"cited_paper":"/paper/2407.15098","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:74062b6488df80f7bfa8cea89b05a23f2c35c208a971f335af4d28f995edb3e5","observation_id":"8f9892e0-316a-4d96-ba17-59c6662f5f7c","resolution":{"observed_at":"2026-08-07T05:29:46.927187Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.06825","last_updated":"2024-08-13T11:34:28Z","snapshot_observed_at":"2026-07-06T19:00:09.034268Z","submitted_at":"2024-08-13T11:34:28Z","title":"Membership Inference Attack Against Masked Image Modeling","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.06825","snapshot_observed_at":"2026-08-07T05:29:45.214592Z","title":"Mem- bership Inference Attack Against Masked Image Mod- eling.CoRR abs/2408.06825, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.214592Z"},"links":{"cited_paper":"/paper/2408.06825","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:5b8b78b1626a3e8b20858cbc15b7e25237fcc2204b58b469e60dc302f4d998cb","observation_id":"3603e8f9-a366-4fe2-8a50-1838cec781a5","resolution":{"observed_at":"2026-08-07T05:29:45.214592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.492473Z","title":"Auditing Membership Leak- ages of Multi-Exit Networks","venue":null,"work_id":"9dea3940-c75d-4a54-a59a-1d0fc1c06ac2","year":1917},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.268266Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:e67a723030f4a9b996bb90dfd3e09d1960fb24357e4555aa6b0fe22fc661cb34","observation_id":"55645e1a-2149-4397-a608-075aff3141f5","resolution":{"observed_at":"2026-08-07T05:29:47.496464Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.479520Z","title":"Membership Leakage in Label-Only Exposures","venue":null,"work_id":"9f3edb7a-b839-4874-9480-2a002e0d01a6","year":2021},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.311917Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:448ec89f71d44c017650acde2c2d6e3f3084b53a7814ede452c4af62e3b95e95","observation_id":"d67a73e6-9135-4c25-baae-0771a6893e02","resolution":{"observed_at":"2026-08-07T05:29:47.483615Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.466590Z","title":"PreCurious: How Innocent Pre-Trained Language Models Turn into Privacy Traps","venue":null,"work_id":"4f1435b9-aaa8-4cf5-b2d0-5be2af3674a2","year":2024},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.465647Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:bf8f5f7a3bad41bab8d553f40f2873ede4ff38c0e0dfe12b9c82ac91cb08a323","observation_id":"0d0472b8-3962-4aa4-9857-2dba432ec828","resolution":{"observed_at":"2026-08-07T05:29:47.470727Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.454073Z","title":"Membership Inference Attacks by Exploit- ing Loss Trajectory","venue":null,"work_id":"04881068-831e-43a8-9175-092b01101db4","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.679597Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:00d25ea9b5d1e0b21236905583105c804921d269985b0b5d224dbb0a68bc9a50","observation_id":"53b706b4-24ab-4c93-85b8-1fa830ad8941","resolution":{"observed_at":"2026-08-07T05:29:47.457921Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:45.770032Z","title":"ML-Doctor: Holis- tic Risk Assessment of Inference Attacks Against Ma- chine Learning Models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.770032Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:c61b81277c664fc5b0d89e23872de1154a0525034ff4ff55e12c50482c1176a6","observation_id":"5e131a78-157b-4ac3-81c6-bcf6a48d5295","resolution":{"observed_at":"2026-08-07T05:29:45.770032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.432083Z","title":"Swin Transformer: Hierarchical Vision Transformer using Shifted Windows","venue":null,"work_id":"5a3f7c8c-f480-45d6-b9ca-fd60be6133b6","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.803867Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:1e80a837e8111e572a95d4ae9cee6406d02bd4ac3bc69b3f9cdfcc9dfd15a79b","observation_id":"bf3ae38b-b45b-4e2a-9ce5-4403b7f9939d","resolution":{"observed_at":"2026-08-07T05:29:47.436068Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.419632Z","title":"Deep Learning Face Attributes in the Wild","venue":null,"work_id":"65cdcb44-6fb1-4071-80a5-b3046c0d751f","year":2015},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.856515Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:0d2fb2e3a71c2f6c79b66f44779e9e0d7b0f911ec58ee96108e8d552fe13bfdd","observation_id":"70daacd1-7b29-43bf-81ba-bfdc17a030a5","resolution":{"observed_at":"2026-08-07T05:29:47.423351Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.408636Z","title":"Maas, Raymond E","venue":null,"work_id":"af283a64-a0c7-49f2-8a71-1e87eff53964","year":2011},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.936722Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:37bd48bb2e4bb0afd469dc015063cfaa5aa1800816eeb09274f94a0a3116ca75","observation_id":"e770d152-aa32-4d7a-98f3-9ebb0afdd254","resolution":{"observed_at":"2026-08-07T05:29:47.412031Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.397085Z","title":"Property Inference from Poisoning","venue":null,"work_id":"d67ded38-e924-427f-bfb7-2af85a47b03c","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.067131Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:673eaf03650c5efe089eb0f3e1e828592c2a7cacded66cac75ada53ba8b67e12","observation_id":"d6ce811a-30f4-425f-a9c9-7af4031225af","resolution":{"observed_at":"2026-08-07T05:29:47.400482Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.385234Z","title":"Exploiting Unintended Feature Leakage in Collaborative Learning","venue":null,"work_id":"4f93653e-d0cf-4930-a1b6-75744c5de0ce","year":2019},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.233222Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:28749a98669857e9e531a0ee2cfaf39600a83c27e64baf931a419f0682485082","observation_id":"23223836-6284-4cca-b6ee-6600cecb0d94","resolution":{"observed_at":"2026-08-07T05:29:47.388976Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.373342Z","title":"Morris, V olodymyr Kuleshov, Vitaly Shmatikov, and Alexander M","venue":null,"work_id":"979cda00-85ee-4a2c-8ba3-0277ad277397","year":2023},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.493719Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:0bd848ee53b99ddd6579097de44e4f28e7f7e337daad2a87d94098692c1d8e70","observation_id":"7afe6df3-a4c6-4852-834d-438951a44a48","resolution":{"observed_at":"2026-08-07T05:29:47.377218Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.361808Z","title":"Scalable Private Learning with PATE","venue":null,"work_id":"2bcf26b4-45a1-4890-9585-c7857e09fc9d","year":2018},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.668864Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:bf7375797ba39a719ac5b03d918ad08ad5345310f5483576f6e30f71bf26f937","observation_id":"921a4570-3186-4813-a22e-2740c45b43c5","resolution":{"observed_at":"2026-08-07T05:29:47.365298Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.349087Z","title":"Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learn- ing","venue":null,"work_id":"a1f67afc-95e1-40c2-aee9-8625022a2ad3","year":2020},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.677951Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:cc032a17f98d82fedae7013803c457fb6d9d6e1cf2564ea0a0be2a0a0e5e9652","observation_id":"41af8f64-63ab-4247-bfa2-8345d60b3a96","resolution":{"observed_at":"2026-08-07T05:29:47.353278Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.337405Z","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","venue":null,"work_id":"09159c3c-41d4-4a48-bbcb-c50518e27920","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.682289Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:5dcfaf4bd84aa4a40737a79390c4da7fdd24a9ca32046dbfaabca7022c3a98aa","observation_id":"e232197a-22bd-49bb-851e-275644cdf797","resolution":{"observed_at":"2026-08-07T05:29:47.341259Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.325964Z","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","venue":null,"work_id":"5ae3ebc1-e6b9-4639-8f39-fe4db201c9e7","year":2019},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.685981Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:6d40f37af6667c3f9421ec79c458d865802497fab56ee646ae1e015ec66fa4bb","observation_id":"b3f8fc92-35c5-446b-bd8a-60b686533299","resolution":{"observed_at":"2026-08-07T05:29:47.329714Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.314598Z","title":"Howard, Menglong Zhu, Andrey Zhmoginov, and Liang-Chieh Chen","venue":null,"work_id":"0b17e28a-4c3d-4a59-a07e-8106b1b0ac09","year":2018},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.690197Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:b3d29885917ad19338f6f59b631b94ea909b555273982640dd84f8c75690402f","observation_id":"a7aa1a3e-0ad3-42b7-9936-dd4ef72f0729","resolution":{"observed_at":"2026-08-07T05:29:47.318256Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2204.11022","last_updated":"2022-04-23T08:44:51Z","snapshot_observed_at":"2026-07-06T13:03:04.132154Z","submitted_at":"2022-04-23T08:44:51Z","title":"Towards Data-Free Model Stealing in a Hard Label Setting","version":1},"cited_work":{"arxiv_id":"2204.11022","doi":null,"metadata_source":"pith","pith_arxiv_id":"2204.11022","snapshot_observed_at":"2026-08-07T05:29:46.884455Z","title":"Towards Data-Free Model Stealing in a Hard Label Setting","venue":"cs.CR","work_id":"7fff778e-d656-4070-bd7f-73c4fd794b77","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.694207Z"},"links":{"cited_paper":"/paper/2204.11022","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:4ad64a9d7c88eb2d004faca7b01055ef5798725010bad5a288671cf374f9e7b5","observation_id":"3ee1ca2a-ae2d-4d70-8bf4-17b1c4eec126","resolution":{"observed_at":"2026-08-07T05:29:46.890451Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.303053Z","title":"Membership Inference Attacks Against Machine Learning Models","venue":null,"work_id":"68414467-8f7d-4b72-98c9-999ffc817885","year":2017},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.698218Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:1eeefe2de4aa6113b4077146b9db7d2e8fbf41852d609c9d73cea626331be752","observation_id":"01287b36-e695-4b16-b695-badbe07f7426","resolution":{"observed_at":"2026-08-07T05:29:47.306654Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.291836Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recog- nition","venue":null,"work_id":"12ff8bcf-0b48-4b7d-ad5c-55fb18d5b3d4","year":2015},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.702365Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:88bb968048ecccf5c2043e69b488413593211d5da9bd28053b19185bdfd05b7d","observation_id":"e331c2e8-57a7-45c5-80bc-55989561abe6","resolution":{"observed_at":"2026-08-07T05:29:47.295421Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.280384Z","title":"Manning, Andrew Y","venue":null,"work_id":"1637b65e-3184-411b-9c17-fc4b7cd4fa32","year":2013},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.706400Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:50ff86fdbf04bd1ec9b6b69098e15840b0535afe1f0254b8a5ef522bde6ea995","observation_id":"eecad57e-a8ea-4db4-98f4-d158ab5f4c62","resolution":{"observed_at":"2026-08-07T05:29:47.283967Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.267553Z","title":"Machine Learning Models that Remember Too Much","venue":null,"work_id":"315003e9-421d-49df-8c70-1d6370a62b4d","year":2017},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.710377Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:b23f4e641d1e9548d5774f43411d832e0989d1298276653f2a080f0c98a106b2","observation_id":"04c74847-bb22-4422-b5a1-aca6a0e75962","resolution":{"observed_at":"2026-08-07T05:29:47.271863Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.255481Z","title":"Overlearning Reveals Sensitive Attributes","venue":null,"work_id":"ae585c5c-2081-4fa1-96a3-ffb6a99bbe44","year":2020},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.713761Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:8bf213abfd62ddcea40d59a20ff3a39038a27f08db43a5a57633b2013cf42123","observation_id":"8d74a6f5-ff48-424b-90a2-7ad01275eccd","resolution":{"observed_at":"2026-08-07T05:29:47.259059Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.242560Z","title":"Mint- Net: Building Invertible Neural Networks with Masked Convolutions","venue":null,"work_id":"fa47006c-1d07-43a8-b826-e2a7bc511a4d","year":2019},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.717803Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:423b818d931e856662a4f4852e7e8f3309ab414603550c7dc9c2e0f17aaea00d","observation_id":"5dcee604-d53f-4e71-a232-8adedeb07123","resolution":{"observed_at":"2026-08-07T05:29:47.246658Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.230671Z","title":"Plug & Play Attacks: Towards Robust and Flexible Model Inversion Attacks","venue":null,"work_id":"a0e03c72-514b-4f8a-afc8-bbab7091adbe","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.721917Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:d055e683f7a59bf5181850f28c5798a615812a05fae5ce58ca6445527083abfe","observation_id":"200bc917-d6ff-41cc-a044-9db89972df41","resolution":{"observed_at":"2026-08-07T05:29:47.234267Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2109.06024","last_updated":"2022-07-05T13:54:26Z","snapshot_observed_at":"2026-08-08T07:01:53.498689Z","submitted_at":"2021-09-13T14:54:39Z","title":"Formalizing and Estimating Distribution Inference Risks","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2109.06024","snapshot_observed_at":"2026-08-07T05:29:46.725458Z","title":"Formalizing and Estimating Distribution Inference Risks.CoRR abs/2109.06024, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.725458Z"},"links":{"cited_paper":"/paper/2109.06024","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:bf0e44de31cb5da2ad15335d30106351892a87a630a4ebbd1084eec14968c9ac","observation_id":"b8618376-17eb-4222-b60c-303d2c84d7a2","resolution":{"observed_at":"2026-08-07T05:29:46.725458Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1503.02406","last_updated":"2015-03-09T09:39:41Z","snapshot_observed_at":"2026-07-06T04:11:22.270946Z","submitted_at":"2015-03-09T09:39:41Z","title":"Deep Learning and the Information Bottleneck Principle","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1503.02406","snapshot_observed_at":"2026-08-07T05:29:46.729143Z","title":"Deep Learn- ing and the Information Bottleneck Principle.CoRR abs/1503.02406, 2015","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.729143Z"},"links":{"cited_paper":"/paper/1503.02406","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:9c14c9421296255e1b38861e500842a9f24d1b852f36503d0dfffc92d9dce8ea","observation_id":"9d776156-fa83-4592-b844-d5e31beba898","resolution":{"observed_at":"2026-08-07T05:29:46.729143Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.217616Z","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","venue":null,"work_id":"36f0c835-2a9e-44ca-9a79-a5e25b47134d","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.733319Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:06f9af981d4b7224dca11df59ac0fd5f93bc136d6128ad0bab6c3435c2ed6205","observation_id":"b26fc7a5-7e21-4e32-80bc-b705faa369db","resolution":{"observed_at":"2026-08-07T05:29:47.221695Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.204734Z","title":"Re- iter, and Thomas Ristenpart","venue":null,"work_id":"cb9ed010-6e2f-4dde-9995-492f25288df5","year":2016},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.737087Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:08283ee4d4ce6e11a893bf2c4c1735c01978b08c1e0be791302a7986effe0157","observation_id":"86a6777e-858d-4b85-932b-3955b025b613","resolution":{"observed_at":"2026-08-07T05:29:47.208245Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.192612Z","title":"Walls, and Nicolas Papernot","venue":null,"work_id":"614d07e9-fac1-4649-a6ae-6538a25f024b","year":2021},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.740577Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:1bf1e12a4bcd7ed04bd5f08f28aa436a2b6abe6dbf104d320556e3e18a3e7f41","observation_id":"1812357a-5033-40e4-803f-5293c53c0aee","resolution":{"observed_at":"2026-08-07T05:29:47.196289Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.179074Z","title":"Zemel, and Alireza Makhzani","venue":null,"work_id":"e4147044-ac1f-40fb-9ce6-1327c8d8ab04","year":2021},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.743913Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:fc4c60c20392b999d935e60eab2516159db505879a3c26a6cb980b650816ffeb","observation_id":"2e3971f6-752e-4b89-ac16-d89a712ca552","resolution":{"observed_at":"2026-08-07T05:29:47.183681Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.165976Z","title":"Improv- ing Robustness to Model Inversion Attacks via Mu- tual Information Regularization","venue":null,"work_id":"03536b5e-b214-4cb8-881d-6b7337dec596","year":2021},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.747725Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:8142cf47a8f1f311ff1b89f03b8623830dc853f1c68a0a88f32a75455f851727","observation_id":"84a905ee-3efd-4060-b5b0-accf80d0a30c","resolution":{"observed_at":"2026-08-07T05:29:47.169990Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.151547Z","title":"Under- standing Data Importance in Machine Learning At- tacks: Does Valuable Data Pose Greater Harm? In Network and Distributed System Security Symposium (NDSS)","venue":null,"work_id":"5765b97b-c3c1-4136-9c90-7564ba3e6e55","year":2025},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.751747Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:2d8b088eeb1b11ccaa2bee16e69f2e70961c6a321664087b8a3e5d473e3341eb","observation_id":"cf42b706-c7d9-43b6-aa54-30989e38fdd3","resolution":{"observed_at":"2026-08-07T05:29:47.156303Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:46.755279Z","title":"Membership Inference Attacks Against In- Context Learning","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.755279Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:78cf1f3ead3e942cc9c12d4814f28ef5e0d78398770f43440f368b931f27ef1c","observation_id":"1b8367a0-0724-479e-9857-b5d993c9afb9","resolution":{"observed_at":"2026-08-07T05:29:46.755279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.11397","last_updated":"2023-10-17T17:03:00Z","snapshot_observed_at":"2026-07-06T16:34:35.279979Z","submitted_at":"2023-10-17T17:03:00Z","title":"Last One Standing: A Comparative Analysis of Security and Privacy of Soft Prompt Tuning, LoRA, and In-Context Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.11397","snapshot_observed_at":"2026-08-07T05:29:46.758808Z","title":"Last One Standing: A Com- parative Analysis of Security and Privacy of Soft 17 Prompt Tuning, LoRA, and In-Context Learning.CoRR abs/2310.11397, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.758808Z"},"links":{"cited_paper":"/paper/2310.11397","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:e874b9cfc022ec822bc301a4bc6d6326819c2a255385c5e5e28debad767dbf91","observation_id":"b2271098-c096-4742-9713-6fa884c4ee71","resolution":{"observed_at":"2026-08-07T05:29:46.758808Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.130295Z","title":"Privacy Backdoors: Enhancing Membership Inference through Poisoning Pre-trained Models","venue":null,"work_id":"6263fbc0-8a9a-4bfb-8fa7-7e3d4c2d9a1a","year":2024},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.762526Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:3669d7d14aa76791fda7823a4bea3ddfcb2636e07e65a444c0e2e8402e56ec7c","observation_id":"3b897dbd-0891-42eb-a582-5e661c9f9223","resolution":{"observed_at":"2026-08-07T05:29:47.134420Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.118506Z","title":"Quanti- fying Privacy Risks of Prompts in Visual Prompt Learn- ing","venue":null,"work_id":"930d40d7-6876-4587-9850-b8702ab0782f","year":2024},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.765994Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:4e52b9a0022c5052de4f015ead61d66f267af966886db643ca5548f22af1da0e","observation_id":"76ebdf57-8c20-499f-8f0c-3fc6ca7a886d","resolution":{"observed_at":"2026-08-07T05:29:47.122293Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.105781Z","title":"Neural Network Inversion in Adversarial Set- ting via Background Knowledge Alignment","venue":null,"work_id":"28754d51-aa71-4b83-9335-3c6a32babfe7","year":2019},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.769424Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:c927212bb85ac31d8c35c7db433a33d4887e5eeb78c99ad400e6cc9b72ea9203","observation_id":"06da72cb-1473-4fdf-8dce-26573c49f758","resolution":{"observed_at":"2026-08-07T05:29:47.109996Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.092776Z","title":null,"venue":null,"work_id":"f99ad529-09d3-41f7-8b88-5063cb6ea02d","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.772945Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:652a4e38fa6dcfc400fb268993f7e7ebc9e4d71ce9740a247a72e4c16577625a","observation_id":"0034e933-a0eb-4d7b-bfd5-07a5280319af","resolution":{"observed_at":"2026-08-07T05:29:47.097247Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.079498Z","title":"Alvarez, Zhizhong Li, Arun Mallya, Derek Hoiem, Niraj K","venue":null,"work_id":"dc7242aa-fd22-4978-9586-44f4ff9f3dc7","year":2020},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.776999Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:2d112e92290ec9c6bf4cdfc128d41470ebe77e8d89a0175ad57d74737053d18a","observation_id":"e7a822cf-fea4-4c83-b527-84be70096143","resolution":{"observed_at":"2026-08-07T05:29:47.083775Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.066459Z","title":"Pseudo Label- Guided Model Inversion Attack via Conditional Gen- erative Adversarial Network","venue":null,"work_id":"4d8d9175-ee8c-443c-82f7-e98849594b32","year":2023},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.780352Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:6a53f0f1b9a597aa5210b17c1a55b7373333368fdcf9d4edec51aa8b4f8dd025","observation_id":"c0aa3b18-fb79-438d-9b91-4c4016cc8bcd","resolution":{"observed_at":"2026-08-07T05:29:47.070350Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.053710Z","title":"SecretGen: Privacy Recovery on Pre-trained Models via Distribution Discrimination","venue":null,"work_id":"b8c3ddd5-4320-41dc-8011-e14f34e05efa","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.784172Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:67e43b99b4ead64dae3c204bacd4f20f9b604bc312ac011c91b46d0238e1a384","observation_id":"bdb1ffe0-16c0-47c4-923a-2777cbd2aaa3","resolution":{"observed_at":"2026-08-07T05:29:47.057613Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.028947Z","title":"Generated Distributions Are All You Need for Membership Inference Attacks Against Gen- erative Models","venue":null,"work_id":"e0161ecc-9e86-4028-b119-632d31930aac","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.791561Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:9b99a8eb807ef737d82a5e106fb46fa0ff5f17398f6980ea32dc0f26226a7564","observation_id":"e6987b72-9a73-4e1b-80e8-f7b54247851d","resolution":{"observed_at":"2026-08-07T05:29:47.032702Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.016670Z","title":"Character-level Convolutional Networks for Text Clas- sification","venue":null,"work_id":"c3e01199-084c-49d4-83c6-6b21978ba53f","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.795512Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:0f99ff62e278bda38c134b2fc2a3b72022ed4646060aca7578c95881d9f78b2a","observation_id":"8ea49ffa-0422-40a3-b058-2dac4879afcb","resolution":{"observed_at":"2026-08-07T05:29:47.020560Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.004641Z","title":"The Secret Re- vealer: Generative Model-Inversion Attacks Against Deep Neural Networks","venue":null,"work_id":"a2dbb7b9-3b1c-4405-9249-91e8005f89c7","year":2020},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.798847Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:20f56cf3f74e3f7ca45f3c96f6fd78e89f6ce62dbb9bca126e2c77616e0e0456","observation_id":"ae7453a6-9c27-4528-9966-044b0a60d8cb","resolution":{"observed_at":"2026-08-07T05:29:47.008326Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:46.992277Z","title":"poi- soned","venue":null,"work_id":"935c5887-0e7e-4401-a714-2c5706b4724a","year":2019},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.802174Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:dbf712f5fa63c0c2bb48432ba35c57dac18acf1283d9484d1734b62e817246af","observation_id":"cb9e4ac7-2997-455a-b1f1-23ea1adb44eb","resolution":{"observed_at":"2026-08-07T05:29:46.995957Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.041233Z","title":null,"venue":null,"work_id":"bdda46cc-4686-4ce1-80f4-eaed5f10022f","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":155,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.787745Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:2c5085fdcd7eef27b29f50e44c22cf44714da0af9f148e0ddb3e64c9233f19a2","observation_id":"fd56362b-8a85-46f0-859a-f0c915da2517","resolution":{"observed_at":"2026-08-07T05:29:47.044935Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.737475Z","title":"2, 3, 22","venue":null,"work_id":"0ca5edb6-52b2-4945-be07-92e955565052","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":1914,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.535897Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:581d17c598c5a2489c464e5ac44d1b8eb3e522d9be01f88d5bd6224ce6a3764f","observation_id":"94c2f764-8d88-4858-955d-1b0d7565b534","resolution":{"observed_at":"2026-08-07T05:29:47.741139Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark"},"reference_resolution":{"displayed":78,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":2,"unresolved":16,"verified_exact":2,"verified_fuzzy":57},"total_outbound_references":78},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 78 of 78 outbound references and 0 inbound Pith citation observations for arXiv:2506.07888."}