{"as_of":"2026-08-07T12:14:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:3576e59b41b80d084e7fdff12d68ebc1957eeb95ccce1adedd05108be52f9f77","coverage":[{"denominator":53,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":53,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:32:45.584830Z","state":"measured"},{"denominator":53,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":53,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.17292/citation-record","integrity":"/paper/2506.17292/integrity","json":"/paper/2506.17292/citation-record.json","paper":"/paper/2506.17292"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:41.295318Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.295318Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:f883893c02ab8ddab6b4801d4f4c62e566ad200830614a375db4c5ff33933a23","observation_id":"b63d244e-60b1-4be8-bd52-f60307e2f9b0","resolution":{"observed_at":"2026-08-07T00:32:41.295318Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:51.268152Z","title":null,"venue":null,"work_id":"47808508-64ef-4fea-9646-5b1221cf8646","year":2019},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.345257Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:7d90244be11ce59e94b635fd8591bff9ded5fc62cf13ddb77830e37d3c7f0860","observation_id":"30b7ed9c-2b54-4da5-a006-518004356298","resolution":{"observed_at":"2026-08-07T00:32:51.309995Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:51.205613Z","title":"Exploring homomorphic encryption and differential privacy techniques towards secure federated learning paradigm","venue":null,"work_id":"e2a03d72-bf67-4ae8-b4f3-06bb423c2f8e","year":2023},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.436146Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:2ada4418eb79495b9e1478efb66cb122d821d8b3bd26cbcc29a689ea8bbc8628","observation_id":"96a6e618-8e37-47d7-8c25-a6088519dcc5","resolution":{"observed_at":"2026-08-07T00:32:51.236388Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:51.092360Z","title":"Foundations of data science","venue":null,"work_id":"0f94a65f-994e-494c-9372-6d0f47ed3f4d","year":2020},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.501782Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:d5c30e955fdaa392515abba42edc8d41ff457f24d1d041e073a5e5e6694a7cd7","observation_id":"a383c1a7-4496-4c30-a531-955bab4041f4","resolution":{"observed_at":"2026-08-07T00:32:51.133286Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:50.940047Z","title":"B., Patel, S., Ramage, D., Segal, A., and Seth, K","venue":null,"work_id":"65f79c2c-fc15-493e-b4f3-e8f00054ae3d","year":2017},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.547868Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:15a51cd47a2b03327d8f605d80474a5d3fb8f6ede210ffbabe14d10a7e1d7d2c","observation_id":"8d670ea4-961a-4c6a-914e-d7395bb3f204","resolution":{"observed_at":"2026-08-07T00:32:51.025949Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:41.636447Z","title":"Efficient intent detection with dual sentence encoders","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.636447Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:a14473afdfa09e7d0cf9b54b76a0912643ababf812853dc0ec62ce3ea0abf089","observation_id":"a044f75f-bb8d-474b-a40f-c7efff7c7acc","resolution":{"observed_at":"2026-08-07T00:32:41.636447Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"gov/3369100","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:45.846929Z","title":"H., and Shi, X","venue":null,"work_id":"d93f5a77-8517-4d80-ad50-e94d06a7f59f","year":2021},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.724616Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:dd4fc39b7a03e7a13c7860eec18fe0cdd62e3c639153ca4a1e0a6a151f6f30e1","observation_id":"a947bb99-4d0f-4232-8984-f91b60621759","resolution":{"observed_at":"2026-08-07T00:32:45.975266Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:41.813856Z","title":"Imagenet: A large-scale hierarchical image database","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.813856Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:43fccb3a869bb9ffb2514740d5bf1f57a1b80507e31d46f573bf88d174fbb522","observation_id":"1fd05d75-0132-4b86-9beb-afc7e5e431f0","resolution":{"observed_at":"2026-08-07T00:32:41.813856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:41.903383Z","title":"Bert: Pre-training of deep bidirectional transformers for language understanding","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.903383Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:a7714ee5ed070634006dffa2f2cb5b2194b6a76f913c4999f3b2519096a15446","observation_id":"535bf414-1e1c-4fd5-8799-85a758722e36","resolution":{"observed_at":"2026-08-07T00:32:41.903383Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:50.813531Z","title":"Collecting telemetry data privately","venue":null,"work_id":"81fdc89b-26dd-4ce7-98ee-6156a3961910","year":2017},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.983410Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:03a39b7ce5c3d2707a4bbcafed5598e45eb8575cb315b6be8178906a001f90dc","observation_id":"cf57e84e-6225-4c08-9db2-eb71bf9da771","resolution":{"observed_at":"2026-08-07T00:32:50.866840Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:42.058619Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.058619Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:6dbdcc971f99ef9359133768cf07f8e453cb0ccea2349bc6019e55d775ae0757","observation_id":"1be347a5-5701-47cc-9cab-5db1846d47ab","resolution":{"observed_at":"2026-08-07T00:32:42.058619Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:50.673901Z","title":"Differential privacy","venue":null,"work_id":"bc82aca7-1b84-42c7-90d6-b8ca0efe60c3","year":2006},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.115460Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:2df016477614fc358874727f3eb510146174e7556eb7291024478f3ea85a1e27","observation_id":"76ea1494-c9a9-4e3a-9b13-46c39f4297eb","resolution":{"observed_at":"2026-08-07T00:32:50.750162Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:42.160340Z","title":"The algorithmic foundations of differential privacy","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.160340Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:23bb5792f9f6336bab465684bf0a2982f10db2c146cd68aa8d8cc148c1ac0039","observation_id":"a311b7fe-c3ff-4a95-bf10-b0b69508aa94","resolution":{"observed_at":"2026-08-07T00:32:42.160340Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:50.576256Z","title":"Rappor: Randomized aggregatable privacy-preserving ordinal response","venue":null,"work_id":"04ac834e-b87b-46ad-898f-5dfa6ce6c2ea","year":2014},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.218666Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:fc511bde17b83d4261c4a0051db350a426ff98869495e1f48c921f85188ede6d","observation_id":"cbecfa21-2e4f-4778-bc29-05c44e8bc830","resolution":{"observed_at":"2026-08-07T00:32:50.605374Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04013","last_updated":"2024-09-11T01:09:07Z","snapshot_observed_at":"2026-08-06T00:21:03.479353Z","submitted_at":"2024-02-06T14:06:23Z","title":"Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04013","snapshot_observed_at":"2026-08-07T00:32:42.237738Z","title":"Privacy leakage on dnns: A survey of model inversion attacks and defenses","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.237738Z"},"links":{"cited_paper":"/paper/2402.04013","citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:3fdb3164d7efc92bcc065aeb63c5e796ff214a237c558d5a86d6e6b95bedd15c","observation_id":"c1178347-abde-41a3-8194-8cdb9a697f4d","resolution":{"observed_at":"2026-08-07T00:32:42.237738Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:50.435199Z","title":"Secure aggregation is insecure: Category inference attack on federated learning","venue":null,"work_id":"11d3206f-c544-4514-af83-7d77398e80da","year":2021},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.283265Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:d0d6e7f1f2ad07ec03c7e993487b135d79481adaf16e23d54cd7ccb39adc0534","observation_id":"fa8c5945-b901-435f-aa46-19a07f5a819d","resolution":{"observed_at":"2026-08-07T00:32:50.520762Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:42.368305Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.368305Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:344f9a7ad4c4aabe3454acc9acb4b3bfaf4ba8c56105c9eb572c51fa17e893c4","observation_id":"4268ebc9-a63e-471d-8bc3-f75c6455d7ac","resolution":{"observed_at":"2026-08-07T00:32:42.368305Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:50.337651Z","title":"J., yelong shen, Wallis, P., Allen-Zhu, Z., Li, Y., Wang, S., Wang, L., and Chen, W","venue":null,"work_id":"c28c827d-6996-4103-9322-12fcbefc51ac","year":2022},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.416367Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:1cb41d6d95fcf3102adbc13f43d9f3d09b2515b8d628fec1bdc75cbcd938d72d","observation_id":"1b4381c3-dba0-4964-8a7a-91d13c02eb86","resolution":{"observed_at":"2026-08-07T00:32:50.395103Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:50.212913Z","title":"S., and Zhang, X","venue":null,"work_id":"f11db5c7-f3b2-44fc-ace9-61b4e89b27df","year":2022},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.464513Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:18ea157262caf432a35eacf6267d7ef474e8e16feae42799c573dd584f734605","observation_id":"704c0fb4-3b46-48b1-92a2-f17af31c92ec","resolution":{"observed_at":"2026-08-07T00:32:50.261200Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:50.096488Z","title":"D., Chen, A., Shila, D","venue":null,"work_id":"6144f392-2753-43c1-b4d2-04fa3f014396","year":2022},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.531786Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:5e6ba8065d1f150dd199190f67b29bd8523e21e1b9881276c5a8a0a0418ca0f3","observation_id":"f2fa99b4-eaf3-4f6b-a1c2-6257e6ee6fb6","resolution":{"observed_at":"2026-08-07T00:32:50.142120Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:50.007351Z","title":"E., Qureshi, M","venue":null,"work_id":"4ab21938-eb3e-45da-8263-66d4574d28d3","year":2023},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.582895Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:927d7e4f99d165ebab06358b2d28b19bccc392e5807c2de424fe5e56eb3d4f14","observation_id":"a5bddb48-f8ed-4f5d-9153-f68bb56b2960","resolution":{"observed_at":"2026-08-07T00:32:50.053521Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:42.616722Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.616722Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:264b8aff82c8e72acffa6879ff511f2008230683ad39aded5cf6cfb0b62ee32e","observation_id":"ef2fe66c-3cb2-4d81-ac91-36bc889d2305","resolution":{"observed_at":"2026-08-07T00:32:42.616722Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:42.670253Z","title":null,"venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.670253Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:67305054fea1f6bff6ad2c538e51a8b3e3c1b535583515ae7b86344497a290ee","observation_id":"8c798d3b-3845-44ff-ada5-464a4f82643a","resolution":{"observed_at":"2026-08-07T00:32:42.670253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:42.760831Z","title":"The power of scale for parameter-efficient prompt tuning","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.760831Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:dbcf1b122dcb8089ecddd97b97769d475e08f5d07adc75eaedb303bc50253353","observation_id":"b684985e-5661-4583-b145-f6330d616c2d","resolution":{"observed_at":"2026-08-07T00:32:42.760831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:49.851706Z","title":"Tear: Exploring temporal evolution of adversarial robustness for membership inference attacks against federated learning","venue":null,"work_id":"df4e00be-bfda-4838-b6a2-6b35cf72f09c","year":2023},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.827923Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:be254fa1d0b9f82b65276547ab868efca480a9f7c57663c6a54d0fdf72fa9d58","observation_id":"a75144ff-bea3-49e2-9734-60b4319ed8cc","resolution":{"observed_at":"2026-08-07T00:32:49.909387Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1907.11692","last_updated":"2019-07-26T17:48:29Z","snapshot_observed_at":"2026-07-31T22:31:37.910868Z","submitted_at":"2019-07-26T17:48:29Z","title":"RoBERTa: A Robustly Optimized BERT Pretraining Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1907.11692","snapshot_observed_at":"2026-08-07T00:32:42.900416Z","title":"Roberta: A robustly optimized bert pretraining approach","venue":null,"work_id":null,"year":1907},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.900416Z"},"links":{"cited_paper":"/paper/1907.11692","citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:92a569c9f20c38a7b753cd3c3a8883b2ac087989b6be7642694057956acbdc68","observation_id":"3b9fad98-4afa-47f5-a37b-b6a552bd24e6","resolution":{"observed_at":"2026-08-07T00:32:42.900416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:49.736271Z","title":"Towards differentially private text representations","venue":null,"work_id":"ac1a55a4-1571-4fb8-810b-b09ce3194d0d","year":2020},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.013883Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:fc272d6382c72a7c63053900f3c3eef92bc612946fc8656a24ce370d7dea4ee0","observation_id":"0e6a2885-bce5-4810-9744-bf07e5276b81","resolution":{"observed_at":"2026-08-07T00:32:49.764112Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:49.602750Z","title":"Flamingo: Multi-round single-server secure aggregation with applications to private federated learning","venue":null,"work_id":"f45293ae-4e67-4704-adfa-c29ed7a837cc","year":2023},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.178074Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:6fa712896aa612919845e5b3f08d9616d8dc76410ac3aac159d851274b100bd1","observation_id":"99f7a5a7-7540-4eae-b7b7-272ea8c0478a","resolution":{"observed_at":"2026-08-07T00:32:49.661175Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:49.532546Z","title":"E., Pham, P","venue":null,"work_id":"9a19f303-87b5-431b-bd89-5f14456371f0","year":2011},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.301799Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:1bbbbfa13ec948eef357698f15c24bcfb34e22d5e7c80be99661ef1c214f64c9","observation_id":"26ccae03-3879-4c8b-9c6d-d06abcc2bc5e","resolution":{"observed_at":"2026-08-07T00:32:49.568031Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:43.418592Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.418592Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:325b3dfae3e54e408e5819330e523417f21fdc9ee9602e18e7ef93decac941c2","observation_id":"ecd54d75-1bf4-4280-9502-e4dc801b200d","resolution":{"observed_at":"2026-08-07T00:32:43.418592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:49.390374Z","title":"Comprehensive privacy analysis of deep learning: Passive and active white-box inference attacks against centralized and federated learning","venue":null,"work_id":"83ff50ce-fbc1-4a27-95a8-9ab0b132ae21","year":2019},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.461896Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:adac615fff5823ac6d1848530b07d56b30217e8ef72145952357fb5da02753a8","observation_id":"1e6fbc39-66f3-46dc-900d-8824101ccca8","resolution":{"observed_at":"2026-08-07T00:32:49.451134Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:49.273093Z","title":"Secure aggregation is not private against membership inference attacks","venue":null,"work_id":"583b7fc3-7425-4867-95af-c2a058cd2dae","year":2024},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.588356Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:4a05f697b88d3425593d57486a21d31ed3b8928f3ea9d373793497b29d2204d6","observation_id":"efebd92f-f958-4e47-b916-51f083a6a95c","resolution":{"observed_at":"2026-08-07T00:32:49.311296Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:49.144875Z","title":"and Thai, M","venue":null,"work_id":"fbedc5e2-0e24-4c71-a16a-02666e68c1fd","year":2023},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.642705Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:89a3b17d498be9c8467abacbfcd1c3e54c5da077827d505553b17dd995515959","observation_id":"afe9f804-5b61-4490-9376-db6d4d2c3706","resolution":{"observed_at":"2026-08-07T00:32:49.201330Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:49.010176Z","title":"N., and Thai, M","venue":null,"work_id":"9d680b33-ad73-45fe-aa08-cab325b3a554","year":2022},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.754465Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:9c4cd0fe354c2d0ff5efb3550f2806ad715f93a996e57cd25294769c4bb3a1af","observation_id":"57200496-e657-4a0b-ac1f-20869059dc45","resolution":{"observed_at":"2026-08-07T00:32:49.073426Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:48.867130Z","title":null,"venue":null,"work_id":"45a150b1-be53-471c-8579-0898986bbc08","year":2023},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.829373Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:e7a9f1d6f1165c3c175d9d9a3b8675ab7bac592f578d84e46aa7d5536494aca3","observation_id":"1743dbf4-c815-4356-8cac-25ffbb8d919c","resolution":{"observed_at":"2026-08-07T00:32:48.925140Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:48.738476Z","title":"Fedshe: privacy preserving and efficient federated learning with adaptive segmented ckks homomorphic encryption","venue":null,"work_id":"064d992a-6a33-4dae-ba89-867001c98fcc","year":2024},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.918184Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:6bcc1e414284cc90e046a0fead8d6692564b7c8c372c90509e84b6aa1b76acaa","observation_id":"1f4db638-f2fc-4989-8bcb-3023c8251a14","resolution":{"observed_at":"2026-08-07T00:32:48.798805Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:48.650337Z","title":"Eluding secure aggregation in federated learning via model inconsistency","venue":null,"work_id":"bb4e532b-ff65-44f4-a7ee-18e8794babe6","year":2022},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.999599Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:a6c5bb8861cc143a35630e69ac74ecb9633a61f25f4ff370de16a46198c2bc58","observation_id":"b4a57790-43b9-440d-b428-d4dbe6f84558","resolution":{"observed_at":"2026-08-07T00:32:48.694211Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:48.541481Z","title":"Natural language understanding with privacy-preserving bert","venue":null,"work_id":"a17c6cf4-ae1e-447b-bec3-0035cc725080","year":2021},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:44.098494Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:1b94d49e276519c2076c0fea4a97042c6eb3f07a46b255527705b2b0e9adb340","observation_id":"424cf353-01e2-4043-a272-7e24401031a4","resolution":{"observed_at":"2026-08-07T00:32:48.609022Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:44.242551Z","title":"Improving language understanding by generative pre-training","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:44.242551Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:2a383236434e599e3270f342039feeb8eed54b58ffb861058f30347101f4c8d6","observation_id":"ffc07769-c597-4d4c-994c-1609e1d29a61","resolution":{"observed_at":"2026-08-07T00:32:44.242551Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:48.450987Z","title":"K., Klambauer, G., Brandstetter, J., and Hochreiter, S","venue":null,"work_id":"204a0745-15ce-4d6f-890f-d50cfbd4e15a","year":2021},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:44.320033Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:375e89b80e6f10f9c501cba52b76fa9e5b63da472db952d06da7ab4991f17cd7","observation_id":"00b32616-d511-43a7-b162-7580d79d10d6","resolution":{"observed_at":"2026-08-07T00:32:48.491774Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:48.254761Z","title":"img2vec, 2021","venue":null,"work_id":"9f1465a6-974b-4c36-899e-1b74f90fa14f","year":2021},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:44.429596Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:0dd4a2b35b86cfcfa698e078a4c3c9d357513f1177270c1f2e31064b92ed0430","observation_id":"6b35da60-9cf1-4cdb-bc68-b5674d94505f","resolution":{"observed_at":"2026-08-07T00:32:48.350679Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1910.01108","last_updated":"2020-03-01T02:57:50Z","snapshot_observed_at":"2026-08-03T03:32:02.223426Z","submitted_at":"2019-10-02T17:56:28Z","title":"DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lighter","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.01108","snapshot_observed_at":"2026-08-07T00:32:44.538396Z","title":"Distilbert, a distilled version of bert: smaller, faster, cheaper and lighter","venue":null,"work_id":null,"year":1910},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:44.538396Z"},"links":{"cited_paper":"/paper/1910.01108","citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:994ea08a16d1d58cbad00c1ce4e2ea83ce4cc204cb0ca1972fe8dd578bac16f0","observation_id":"fcdad153-7736-45bf-8654-d9f8383eb993","resolution":{"observed_at":"2026-08-07T00:32:44.538396Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:48.086745Z","title":"T., Huang, Y.-H., Wu, J., and Chen, Y.-S","venue":null,"work_id":"3d68eb83-269d-4f1e-888b-90ccefd7d5ed","year":2018},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:44.623139Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:e8130e803e75645af0e9bdffcddd7128b5d0dfd7bb3b7841729f7978a33042df","observation_id":"85262b3c-5518-489d-9289-fca15a15cc2b","resolution":{"observed_at":"2026-08-07T00:32:48.171905Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:47.832827Z","title":"Membership inference attacks against machine learning models","venue":null,"work_id":"d8f3753b-c5ea-4df8-83c6-0dbd2841009d","year":2017},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:44.681895Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:a6fc118d4891e86fccaf4d484cf60ebc2ea3863e2c9ece7b0434ae39f430fd0a","observation_id":"0c27b38b-7042-4bcc-848f-be3d8fc4c85c","resolution":{"observed_at":"2026-08-07T00:32:47.946852Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:47.598316Z","title":"T., et al","venue":null,"work_id":"a762a6de-9ba7-469d-bb56-c06c6fb47cf9","year":2024},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:44.825563Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:91bea711fde52ec3e7b3d62450fb8f5ce8ad3ea76e53d459480ee9037e0169be","observation_id":"b158093d-3885-408d-bdde-b53982d42c7d","resolution":{"observed_at":"2026-08-07T00:32:47.726016Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:47.396889Z","title":"A comprehensive survey on local differential privacy toward data statistics and analysis","venue":null,"work_id":"f4aa587a-ded1-4f1b-a3e8-f255d4777e19","year":2020},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:44.929273Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:4199d840caceed7a41f0be38e70bf3faae419c12438da44e814cc71992d1ee72","observation_id":"23dcdf69-4d59-4feb-b403-c2947cff31ea","resolution":{"observed_at":"2026-08-07T00:32:47.491279Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:47.105783Z","title":null,"venue":null,"work_id":"bd07ae87-aa2f-407d-b8bb-02c2f2883288","year":1965},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:45.021504Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:f07d2bc53f2e2b9ff653f8285066e4b749bab7c10bcc1241bfed68f93ead45b8","observation_id":"526515d7-fdbb-49f9-aa6d-4dfdbf837156","resolution":{"observed_at":"2026-08-07T00:32:47.240630Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:46.869272Z","title":"Gradient leakage attacks in federated learning: Research frontiers, taxonomy and future directions","venue":null,"work_id":"450741b2-39ff-442b-bb33-ebb250e8b94e","year":2023},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:45.134932Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:690ff3712380623cd8aae634695b39f5b92bdafb9f422c4ffb0ecd2fb0be288a","observation_id":"51eb94a7-df57-42f8-8c13-2883201af85f","resolution":{"observed_at":"2026-08-07T00:32:46.994372Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.15010","last_updated":"2023-11-30T14:57:30Z","snapshot_observed_at":"2026-07-06T16:52:15.355330Z","submitted_at":"2023-11-25T12:33:54Z","title":"Adapter is All You Need for Tuning Visual Tasks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.15010","snapshot_observed_at":"2026-08-07T00:32:45.224807Z","title":"Adapter is all you need for tuning visual tasks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:45.224807Z"},"links":{"cited_paper":"/paper/2311.15010","citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:3c336df51ea39f1af43deb7ca309aaf8d66284962a785644ae2399ebea199bb2","observation_id":"607df934-fad6-4357-a1de-631c66c9c8b2","resolution":{"observed_at":"2026-08-07T00:32:45.224807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:46.623607Z","title":null,"venue":null,"work_id":"16f9f5b8-e7d5-4ffb-9895-f3f0cf3f03ea","year":2021},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:45.299425Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:fe206946618618c18389d22d8d232b39dde70b07250e111e027c4126256eac03","observation_id":"3c91f7b4-d800-4bdb-9d88-f774ae90f01a","resolution":{"observed_at":"2026-08-07T00:32:46.746980Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:46.397196Z","title":"B., Goldberg, Y., and Ravfogel, S","venue":null,"work_id":"dd4b04d6-f372-4d42-a0dc-47c553ad6c82","year":2022},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:45.415323Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:0bdd6e200b3ea488a430fd9b5fdc25488ce09e79f1083eb19faafc3748d0328b","observation_id":"0e70b17b-70e0-45d9-aec3-6938d6892d70","resolution":{"observed_at":"2026-08-07T00:32:46.503409Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:46.116193Z","title":"Gan enhanced membership inference: A passive local attack in federated learning","venue":null,"work_id":"97264dfb-4d2f-4513-96d6-be07deb62080","year":2020},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:45.496807Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:f506253ac9f20f534d8397ecf41e02e29c17a1d460f06eec15a7bdf36cb815b7","observation_id":"c7c6547f-6d18-4040-ac37-a384ee5f73fa","resolution":{"observed_at":"2026-08-07T00:32:46.241658Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:45.584830Z","title":"Character-level convolutional networks for text classification","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:45.584830Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:a0de483d21de8c3f20fc1326c3d5db421fe074b8b2b55d48dfc2446ec4a12e1c","observation_id":"9fdfced0-b937-45a9-aaac-30fd46ee8e89","resolution":{"observed_at":"2026-08-07T00:32:45.584830Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T00:21:56.721545Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models"},"reference_resolution":{"displayed":53,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":21,"verified_exact":1,"verified_fuzzy":31},"total_outbound_references":53},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 53 of 53 outbound references and 0 inbound Pith citation observations for arXiv:2506.17292."}