{"as_of":"2026-08-07T15:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:77e0fe50babcd7f028fc5f8dc0e7192f1f66c459e850943556b006295cf821c4","coverage":[{"denominator":58,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":58,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T21:23:41.069355Z","state":"measured"},{"denominator":58,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":58,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.00423/citation-record","integrity":"/paper/2507.00423/integrity","json":"/paper/2507.00423/citation-record.json","paper":"/paper/2507.00423"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:54.546459Z","title":null,"venue":null,"work_id":"ba61a9dc-14c8-4ab7-a5ba-9e197c86e1ea","year":null},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:33.864961Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:95d5b6fab235e960d38ed41a310c5edb85ee11f204e66555090dc4baea8c88f1","observation_id":"b1cb6a79-3aae-4fcc-a4b1-cfd50a5ecdec","resolution":{"observed_at":"2026-08-06T21:23:54.597815Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1704.05021","last_updated":"2017-07-24T21:47:51Z","snapshot_observed_at":"2026-08-04T09:45:17.283224Z","submitted_at":"2017-04-17T16:32:02Z","title":"Sparse Communication for Distributed Gradient Descent","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1704.05021","snapshot_observed_at":"2026-08-06T21:23:33.946149Z","title":"Sparse commu- nication for distributed gradient descent","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:33.946149Z"},"links":{"cited_paper":"/paper/1704.05021","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:cd5b840dc6789c001d1b3ac05a50a0347b8d41167b1c37ccfb577c55517c8404","observation_id":"96ba4f03-96c2-4535-b186-87f63874cd2e","resolution":{"observed_at":"2026-08-06T21:23:33.946149Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:54.370317Z","title":"How to backdoor federated learning","venue":null,"work_id":"b03de1d9-58dc-409e-b9b4-f3a00dd3c538","year":2020},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:34.031967Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:04f9cf4eb54c36e370ee87ef67681bc87dd20a4ea2fb58964860a851a10d750c","observation_id":"19a16598-578f-4af3-9bd0-5ff5cefd0612","resolution":{"observed_at":"2026-08-06T21:23:54.468563Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:54.245560Z","title":"A little is enough: Circumventing defenses for distributed learning","venue":null,"work_id":"6c702cc2-1d7f-4ca0-9b1a-473ada492919","year":2019},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:34.151179Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:749d2b4d9d088cff0784215fa463cd234d4d05c0e3fc77c6a854e99d1399e31e","observation_id":"b319cac7-4bb0-4d78-acf1-6c0fcb26e26f","resolution":{"observed_at":"2026-08-06T21:23:54.297247Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:54.043684Z","title":"Analyzing federated learning through an adversarial lens","venue":null,"work_id":"de40fef8-d449-4a51-a0bf-6cd98fbaad64","year":2019},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:34.276757Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:d239d9414bd14e6e12887a2d0ca21ee00fac9d974e8f7e0f1a7a52a11dca2d54","observation_id":"7c4cbb3d-1fec-45e2-a085-00155eab1909","resolution":{"observed_at":"2026-08-06T21:23:54.114776Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:53.877479Z","title":"Poisoning attacks against support vector machines","venue":null,"work_id":"8641284e-16a8-429b-b5d5-55375ff5ce6f","year":2012},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:34.418937Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:ea8feeb98be7b1c17de2c00e1b8bb05402f56cdb7e8a7da81be4aa6723014a9b","observation_id":"64ea39b6-a431-441f-98bd-ec84f7d5d36d","resolution":{"observed_at":"2026-08-06T21:23:53.945610Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:53.719770Z","title":"Machine learning with adversaries: Byzantine tolerant gradient descent","venue":null,"work_id":"6405c114-28af-49ce-bca4-03934ca3033f","year":2017},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:34.594001Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:3d8ee217ed18d92b7fc693e36ddc837551e975ca542ed2ea4d1a89de3682a362","observation_id":"1c84e5d6-8156-425e-bddd-8022fe2d64f3","resolution":{"observed_at":"2026-08-06T21:23:53.775243Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:53.543210Z","title":"Fltrust: Byzantine-robust federated learning via trust bootstrapping","venue":null,"work_id":"003fbbbc-1f9e-4811-83e7-fb665a9f4665","year":2021},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:34.729208Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:83c152e153aa6b273fd45780b9c702e251ba848cb125cf0ebf76b40559dc23a8","observation_id":"087293d8-50f8-4615-852e-f3cf8742270b","resolution":{"observed_at":"2026-08-06T21:23:53.633187Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:53.396535Z","title":"Membership inference attacks from first principles","venue":null,"work_id":"8855f955-2b35-48b5-a241-5f6238e73af1","year":2022},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:34.865718Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:0f2cb901ab46674da3afc600b10bbde8c73f99878b778fb21902e58f0892aa6a","observation_id":"cfe68e1d-c210-4156-b4b0-cefa9f679323","resolution":{"observed_at":"2026-08-06T21:23:53.453970Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:53.076584Z","title":"Gan- leaks: A taxonomy of membership inference attacks against generative models","venue":null,"work_id":"07b25032-d592-4466-ad97-1dbc3858c62a","year":2020},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:35.026583Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:f5e7e6fab03642afc0c6c3b2d45ce74733c5bcb0179d9fb1a2bcf52ab1e6dca4","observation_id":"deca3a9f-6a53-4bc3-bf61-deddd60f842e","resolution":{"observed_at":"2026-08-06T21:23:53.277263Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:52.675853Z","title":"Label-only membership in- ference attacks","venue":null,"work_id":"20526aaf-e66b-447b-a2ba-3618473d953e","year":2021},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:35.121773Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:f64c9bb3ad30c678fcb719ea60f8e202ad03c8050097eda47cc6a3cbd685fb4e","observation_id":"8b7e60c2-0712-462b-9388-cd4fc921b09d","resolution":{"observed_at":"2026-08-06T21:23:52.855761Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:52.323908Z","title":"An analysis of single-layer networks in unsupervised feature learning","venue":null,"work_id":"45740eb0-fc3e-4f7e-a4b3-59b86019de59","year":2011},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:35.263336Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:7306c00333752eb42ba51b6ef1e44a7eb1e55b003f56444e4e37936326ed0e63","observation_id":"e761cd8d-7d44-4916-b8d6-1bbd007babdf","resolution":{"observed_at":"2026-08-06T21:23:52.462338Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:52.021734Z","title":"Differential privacy: A survey of results","venue":null,"work_id":"62f3ea5b-a435-4bc8-bf51-047e6d39d336","year":2008},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:35.413917Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:4231637bc149713e515617f2fc6fb860c0293b292bb2c347f9b8297dc0ba7721","observation_id":"88c1a28b-2de6-4482-8dd2-30d26bd8cc8f","resolution":{"observed_at":"2026-08-06T21:23:52.153401Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:51.627925Z","title":"Local model poisoning attacks to byzantine-robust federated learning","venue":null,"work_id":"c563fa7c-ec4c-4289-b430-6e279b99777a","year":2020},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:35.539251Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:0076c4d48afe6552df213cc4560cad337d51f0cd063745b7358a01c0de22d9a1","observation_id":"b0082503-c812-4a49-a74b-8ad3c94922f9","resolution":{"observed_at":"2026-08-06T21:23:51.809632Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:51.357694Z","title":"Aflguard: Byzantine-robust asynchronous federated learning","venue":null,"work_id":"c7a1fa16-da21-43b0-a679-bee0d1b1a4ba","year":2022},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:35.639735Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:cd19f6818aef2d6ea67f63a7a12f01beef74b53ae54f35a5d0e8b755bc554772","observation_id":"41f82b5a-4034-4d89-b68c-084cea7488a4","resolution":{"observed_at":"2026-08-06T21:23:51.468061Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:50.974188Z","title":"Byzantine- robust decentralized federated learning","venue":null,"work_id":"c2a40b05-4fa2-46c1-a815-90eca30ea3ed","year":2024},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:35.759607Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:63a3e64f08f18205a50954e594dbee8ce26c9523506a690a78c02bead717a8ac","observation_id":"f9f11340-3d07-43d0-a0da-52fce78c41c5","resolution":{"observed_at":"2026-08-06T21:23:51.175801Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:50.608579Z","title":"Byzantine-robust federated learning over ring-all-reduce dis- tributed computing","venue":null,"work_id":"648b38aa-94aa-49ec-9368-474f35558451","year":2025},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:35.889628Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:477646629249da0dd9a941349a08a86c4c5b9841b1cb8b05643ed17e7f40f726","observation_id":"7c95d37f-4606-4338-9e00-eb980b2f2714","resolution":{"observed_at":"2026-08-06T21:23:50.800344Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:50.278511Z","title":"Do we really need to design new byzantine-robust aggregation rules? In NDSS, 2025","venue":null,"work_id":"71241fd8-afb1-4a6d-b77d-fbeeec31039a","year":2025},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:35.998959Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:4caf5ba72fa41d6ddc82015d927a1fbf962203d07587cc8e1d04e5667c9ef217","observation_id":"d769cc9c-9649-4d2b-854a-191aac23f172","resolution":{"observed_at":"2026-08-06T21:23:50.414227Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:49.924543Z","title":"Provably robust federated reinforcement learning","venue":null,"work_id":"d9b2c069-d91a-47a9-9382-573f2ac05761","year":2025},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:36.096649Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:2ccad2fc89dff876d06c3bc9c975413d6ab2ed00c81fd950d57739c28a281ac8","observation_id":"4d700dd1-b15c-421e-b0c5-6fa353d74635","resolution":{"observed_at":"2026-08-06T21:23:50.101754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:49.707393Z","title":"Active inference against federated learning: Attacks and solutions","venue":null,"work_id":"d092d0e9-7982-416c-a404-e45791d5488b","year":2024},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:36.275569Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:f9b720bf8c58c4ff7a4bee409e8d8dcd8148c04db3579c1acab05a58c1ac4c84","observation_id":"2802a161-ae71-4818-8a88-11dc123c372d","resolution":{"observed_at":"2026-08-06T21:23:49.820290Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:49.523992Z","title":"Chal- lenges in representation learning: A report on three machine learning contests","venue":null,"work_id":"2eeb88be-8063-4c4c-9e50-bd16919ba78b","year":2013},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:36.426711Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:a2aaa78044f528e65361a389d54fd5650f1c709769c30cb4a6e7ec1c4f8bdc34","observation_id":"9d017d88-8d32-468b-899e-335fa9064416","resolution":{"observed_at":"2026-08-06T21:23:49.615070Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:49.352570Z","title":"Membership inference at- tacks on machine learning: A survey","venue":null,"work_id":"e5b610e9-1311-4a52-b493-e0d68f2a8c09","year":2022},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:36.500984Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:3d03cf36d6af7acdd2a95902b3d82ab3a4284b6a61b6b9ae000730e94633d24f","observation_id":"f879ed53-9346-432d-acf6-ab289d7f0de9","resolution":{"observed_at":"2026-08-06T21:23:49.435931Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:48.900099Z","title":"Advances and open problems in federated learn- ing","venue":null,"work_id":"e62ca21f-c224-4f36-ab28-56b3a36ee437","year":2021},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:36.671422Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:c680ee6202069dd52e7e9966429e3833e39969c340eab3594ee3648fafc67199","observation_id":"1ab2bb9a-0b7d-458d-8245-623b65464386","resolution":{"observed_at":"2026-08-06T21:23:49.113185Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:48.548823Z","title":"Maximizing the spread of influence through a social network","venue":null,"work_id":"98055c2f-fc13-4cc1-a0b2-88654d10309f","year":null},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:36.845160Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:c853e84a6f5446438db2f52a3cc01997faa13f970ed72eb5ea3be536c84104e5","observation_id":"85839bfa-ccb3-40c9-87d2-1788c97dc126","resolution":{"observed_at":"2026-08-06T21:23:48.701503Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6980","last_updated":"2017-01-30T01:27:54Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2014-12-22T13:54:29Z","title":"Adam: A Method for Stochastic Optimization","version":9},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6980","snapshot_observed_at":"2026-08-06T21:23:36.968073Z","title":"Adam: A method for stochastic opti- mization","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:36.968073Z"},"links":{"cited_paper":"/paper/1412.6980","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:dff194a0ae7818704d703b9bfa1fefaa0f29a04a992115107b6dd3d4a0c37e55","observation_id":"faabbf84-1f44-445a-8e2b-2675ab3df4d2","resolution":{"observed_at":"2026-08-06T21:23:36.968073Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1610.05492","last_updated":"2017-10-30T20:52:14Z","snapshot_observed_at":"2026-07-06T05:15:00.158639Z","submitted_at":"2016-10-18T09:11:51Z","title":"Federated Learning: Strategies for Improving Communication Efficiency","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1610.05492","snapshot_observed_at":"2026-08-06T21:23:37.105303Z","title":"Federated learning: Strategies for improving communication efficiency","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:37.105303Z"},"links":{"cited_paper":"/paper/1610.05492","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:541b0a7bcef288a53e0490d076f0d4ee236b1dff654f61ff64e9f47f2739648d","observation_id":"382ffa56-80e7-42f8-9dbe-82f6e60b5125","resolution":{"observed_at":"2026-08-06T21:23:37.105303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1610.02527","last_updated":"2016-10-08T13:25:15Z","snapshot_observed_at":"2026-07-06T05:13:51.685562Z","submitted_at":"2016-10-08T13:25:15Z","title":"Federated Optimization: Distributed Machine Learning for On-Device Intelligence","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1610.02527","snapshot_observed_at":"2026-08-06T21:23:37.230172Z","title":"Federated optimization: Distributed ma- chine learning for on-device intelligence","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:37.230172Z"},"links":{"cited_paper":"/paper/1610.02527","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:c343ec0d2f316c221bc506668440509b4ba82746347fa2addf272f8ab722c515","observation_id":"f4c6c4bf-114a-4969-b480-7ee0929e1f39","resolution":{"observed_at":"2026-08-06T21:23:37.230172Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:48.289714Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":"45540609-c090-4490-9381-83970fcd0eab","year":2009},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:37.352514Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:5901bd56451d63fd0bb459b24c2b34e6b3abcbc029d7dd0156cd2b94a6423645","observation_id":"d9977661-4565-40a8-99be-c5a050d954cb","resolution":{"observed_at":"2026-08-06T21:23:48.445630Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:47.983978Z","title":"Stolen memories: Leverag- ing model memorization for calibrated white-box member- ship inference","venue":null,"work_id":"6ea351ae-5907-4768-9499-27adbcbe10c4","year":2020},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:37.460845Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:71fabfa7a1df0a82c34d1dbd37953abf4fa338405c45beca8d3db974c7e82474","observation_id":"653baaac-5997-4290-9256-a7b3c1a63b2d","resolution":{"observed_at":"2026-08-06T21:23:48.111821Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:47.760113Z","title":"Learning to at- tack federated learning: A model-based reinforcement learn- ing attack framework","venue":null,"work_id":"09e407c4-2f1d-43dc-8c87-d16a30ee383f","year":2022},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:37.592969Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:e1683aab60f840a0928bfd7095301d95a7fea84507ebf3ba0a5c53659e2ef984","observation_id":"2a7c0316-7bf5-4da9-8528-19e58a5c8bb5","resolution":{"observed_at":"2026-08-06T21:23:47.880657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.06784","last_updated":"2024-05-10T19:22:24Z","snapshot_observed_at":"2026-07-06T18:12:51.702471Z","submitted_at":"2024-05-10T19:22:24Z","title":"Open Challenges and Opportunities in Federated Foundation Models Towards Biomedical Healthcare","version":1},"cited_work":{"arxiv_id":"2405.06784","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.06784","snapshot_observed_at":"2026-08-06T21:23:41.340161Z","title":"Open Challenges and Opportunities in Federated Foundation Models Towards Biomedical Healthcare","venue":"cs.LG","work_id":"2a348efd-07af-403d-9d3d-d0a919dc796c","year":2024},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:37.727732Z"},"links":{"cited_paper":"/paper/2405.06784","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:dfbfb192c66815fb44450e681938aef55cc17f734331ba2ec3d2e5f0696613be","observation_id":"b0aeb968-db5f-4f8a-ac57-84948f658634","resolution":{"observed_at":"2026-08-06T21:23:41.392157Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:47.483484Z","title":"Loden: Making every client in federated learning a defender against the poisoning membership infer- ence attacks","venue":null,"work_id":"1794ae72-9134-4c90-9b7f-f0c54beebf9c","year":2023},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:37.784502Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:392794a2cab40614df585a1b6a6e64b18f0ae1335863bdb9ca7de47ee29d0dfc","observation_id":"7bcc8632-c21b-47a2-af6b-2e06958e5476","resolution":{"observed_at":"2026-08-06T21:23:47.633489Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:47.214329Z","title":"Prop- erty inference from poisoning","venue":null,"work_id":"9187af6e-4b26-4e8a-91d0-7e92226f9d1e","year":2022},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:37.865903Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:85871b61d39946dd4cf432368928256b1f12ff1a67ef0656ada79a456bdfb006","observation_id":"beffa024-e20a-4dc3-88b8-391cd06553fd","resolution":{"observed_at":"2026-08-06T21:23:47.365077Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:46.904990Z","title":"Brendan McMahan, Eider Moore, Daniel Ramage, Seth Hampson, and Blaise Ag ¨uera y Arcas","venue":null,"work_id":"fdbbc772-3d41-484f-a53e-fd5e2b9cb5a2","year":2017},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:38.057589Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:4e72d894ca102b5097a99e5b6c06fd491c4c730f1880d62018c5cc24b579f6c8","observation_id":"f38006aa-2fe3-4451-a91f-06996ffc6097","resolution":{"observed_at":"2026-08-06T21:23:47.068589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:46.571796Z","title":"Towards poisoning of deep learning algorithms with back-gradient optimization","venue":null,"work_id":"87848f97-958a-4f68-9846-830d18c25126","year":2017},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:38.193278Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:20357114475faac6b637b9d7da2d4871aa8593f1bdb682150bee049dcd790412","observation_id":"adcadde4-6556-424c-a37b-f4a90aba74fd","resolution":{"observed_at":"2026-08-06T21:23:46.729207Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:46.230649Z","title":"Compre- hensive privacy analysis of deep learning: Passive and active white-box inference attacks against centralized and federated learning","venue":null,"work_id":"ed6b8795-48cd-4a7e-b32f-85cc67a51471","year":2019},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:38.277220Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:82986b3c31721c93c942d671821cde55aa9cecbfb647baf6f10ac44919023346","observation_id":"adce41fd-9a1f-42e1-aa49-4f4d911f0376","resolution":{"observed_at":"2026-08-06T21:23:46.415972Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:45.905426Z","title":"On the difficulty of member- ship inference attacks","venue":null,"work_id":"b0c6bd41-153d-4805-8488-b61999566ebd","year":2021},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:38.425847Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:7fc3720468c67c4153888e6b502c9dd8dae0fc8aeb74c81f482dd87afef6c6b7","observation_id":"5d4502bd-7e35-4ad4-916d-0fabc8bb9aef","resolution":{"observed_at":"2026-08-06T21:23:46.071049Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:45.624519Z","title":"Deepsight: Mitigating backdoor at- tacks in federated learning through deep model inspection","venue":null,"work_id":"f48d2b94-a17c-4ec5-b0bd-5d53da045d63","year":2022},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:38.560580Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:5821eed17d521de02257f7ab2d30bf86c3e3eda89d852422dfeb40c2eb11e3c8","observation_id":"4a60c254-b382-4e3e-a41a-b79f8804db18","resolution":{"observed_at":"2026-08-06T21:23:45.752884Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:45.305762Z","title":"Manipulating the byzantine: Optimizing model poisoning attacks and defenses for federated learning","venue":null,"work_id":"b99db4a5-e73f-40e2-9093-2c1fee5624a7","year":2021},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:38.696833Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:5a90bc1a96dcbb08d84fceedcf5ca41f52711b68d3a0d8bff8886352a9e67aee","observation_id":"5972613d-c5a6-4744-a7d5-e87faa376ffd","resolution":{"observed_at":"2026-08-06T21:23:45.437896Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:44.971084Z","title":"Membership inference attacks against machine learning models","venue":null,"work_id":"91af39c9-acfd-4b19-bb92-032cacb9401f","year":2017},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:38.829362Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:70f4e03fb55a883167116e909b5da778d9a752afba9cf39872a3881a7b023754","observation_id":"96b062d9-26f4-4276-b636-eeccea2c3e79","resolution":{"observed_at":"2026-08-06T21:23:45.156399Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:44.733352Z","title":"Membership inference attacks against adversarially robust deep learning models","venue":null,"work_id":"0df86e5b-eae3-4a5e-a41d-47d6b074e2bd","year":2019},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:38.921382Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:1f9ca6519c0b70308b70681ee0d71eda3a3db853d67ce35fe7a6f788ab18e362","observation_id":"d876fd69-03ba-4028-a9e2-1b96360dbd39","resolution":{"observed_at":"2026-08-06T21:23:44.831240Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:44.441544Z","title":"Privacy risks of securing machine learning models against adversarial ex- amples","venue":null,"work_id":"51e5f347-a4df-40fe-84fe-fde63b61b96e","year":2019},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:39.079949Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:a01fdf04fc0043ace873a552d63e005ce5b2bf1ce429b645816084c4e12adafe","observation_id":"7c0c72cb-e70a-42c2-b5b8-dfa4ba0876f9","resolution":{"observed_at":"2026-08-06T21:23:44.545989Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1911.07963","last_updated":"2019-12-02T19:00:11Z","snapshot_observed_at":"2026-08-06T20:09:23.048652Z","submitted_at":"2019-11-18T21:25:03Z","title":"Can You Really Backdoor Federated Learning?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1911.07963","snapshot_observed_at":"2026-08-06T21:23:39.209655Z","title":"Can you really backdoor federated learning? arXiv preprint arXiv:1911.07963, 2019","venue":null,"work_id":null,"year":1911},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:39.209655Z"},"links":{"cited_paper":"/paper/1911.07963","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:072b57e9af1d3ed09a050760311e6b22e6bcf0f0f61f7487f558978927d3ab53","observation_id":"d6d228fa-fd37-4cde-b04d-f25e670916c2","resolution":{"observed_at":"2026-08-06T21:23:39.209655Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:44.253989Z","title":"Data poisoning attacks against federated learning systems","venue":null,"work_id":"fa45c650-942f-4205-9cb7-8e6ddbd37a88","year":2020},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:39.349124Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:8b0799ab32ba407fa96008a0321a15297d8de9808b02330ce43d914bba5c92d2","observation_id":"1a09e3b1-bc0f-445c-a091-eb935dcc4895","resolution":{"observed_at":"2026-08-06T21:23:44.350521Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1807.09173","last_updated":"2019-02-01T18:05:24Z","snapshot_observed_at":"2026-07-06T06:52:00.431763Z","submitted_at":"2018-06-28T16:50:18Z","title":"Towards Demystifying Membership Inference Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1807.09173","snapshot_observed_at":"2026-08-06T21:23:39.475330Z","title":"Towards demystifying membership inference attacks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:39.475330Z"},"links":{"cited_paper":"/paper/1807.09173","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:2aeca98f562442fa7af039063dcd79a3bf162c88844bd3c1b56ebac6f268d95a","observation_id":"cffc2079-44e5-47ad-97ed-a3e271677ca4","resolution":{"observed_at":"2026-08-06T21:23:39.475330Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:43.994399Z","title":"Poisoning attacks and defenses to federated unlearning","venue":null,"work_id":"2a8ec97b-85fc-4c21-98e8-fda8ae31e271","year":null},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:39.598389Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:a070ed0c5f833bc1aaee5b965f33dfbb353764f71f27c23d8a0267bac45b1b8d","observation_id":"01c5c67b-23af-4912-b9d1-46b674bc5e1f","resolution":{"observed_at":"2026-08-06T21:23:44.108715Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01231","last_updated":"2024-04-01T16:50:54Z","snapshot_observed_at":"2026-07-06T17:54:03.923842Z","submitted_at":"2024-04-01T16:50:54Z","title":"Privacy Backdoors: Enhancing Membership Inference through Poisoning Pre-trained Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01231","snapshot_observed_at":"2026-08-06T21:23:39.710949Z","title":"Privacy back- doors: Enhancing membership inference through poisoning pre-trained models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:39.710949Z"},"links":{"cited_paper":"/paper/2404.01231","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:d3d404a88da9a487f4144397d069357cb3f333700c379236d593ec9219111fe4","observation_id":"a28e3ae1-e3bf-4518-9e47-725b547b0177","resolution":{"observed_at":"2026-08-06T21:23:39.710949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1802.10116","last_updated":"2018-03-23T20:08:04Z","snapshot_observed_at":"2026-08-04T15:04:14.642006Z","submitted_at":"2018-02-27T19:06:15Z","title":"Generalized Byzantine-tolerant SGD","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.10116","snapshot_observed_at":"2026-08-06T21:23:39.890974Z","title":"Generalized byzantine-tolerant sgd","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:39.890974Z"},"links":{"cited_paper":"/paper/1802.10116","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:c21bf71ff3d8ed243dcdb5710d8d46d55e182ca24c609f444f5c06233b374fe7","observation_id":"fd4dffde-bc5e-473e-b3b4-03728c9160dc","resolution":{"observed_at":"2026-08-06T21:23:39.890974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1805.09682","last_updated":"2018-05-23T09:25:48Z","snapshot_observed_at":"2026-07-06T06:41:00.651574Z","submitted_at":"2018-05-23T09:25:48Z","title":"Phocas: dimensional Byzantine-resilient stochastic gradient descent","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1805.09682","snapshot_observed_at":"2026-08-06T21:23:39.992673Z","title":"Phocas: dimensional byzantine-resilient stochastic gradient descent","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:39.992673Z"},"links":{"cited_paper":"/paper/1805.09682","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:145b3a8072beb059170bb30bccc611c2859bca99cb1fd6b287835e4c4c782c03","observation_id":"35635d96-f408-4c54-aa95-772f5d245a55","resolution":{"observed_at":"2026-08-06T21:23:39.992673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:43.669743Z","title":"Fe- dredefense: Defending against model poisoning attacks for federated learning using model update reconstruction error","venue":null,"work_id":"4d189606-7203-4536-af97-e1b96136aab6","year":2024},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:40.136780Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:057fed03783aa806c90f79cddef9ad9f88b1b93df55c042f2ec5426fec50feda","observation_id":"3d38569a-6c0a-4cc9-b41c-f7d0e6b99f53","resolution":{"observed_at":"2026-08-06T21:23:43.797975Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:43.407347Z","title":"Robust federated learning mitigates client-side train- ing data distribution inference attacks","venue":null,"work_id":"87ea1e83-2b71-46d0-9abc-aaffdab9391a","year":2024},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:40.265089Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:38e144a37c3489f93e29de5f894604df7f3c0d6cdc1f49ebfc4f064d24d7e759","observation_id":"01bc5592-c106-4422-9cd8-fd270fdb3208","resolution":{"observed_at":"2026-08-06T21:23:43.525781Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:43.108351Z","title":"Federated machine learning: Concept and applications","venue":null,"work_id":"94fd2f3a-1213-4580-8c85-b7331291548c","year":null},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:40.393252Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:b77735519bc977df36414748ac0d745dd9432458cf77c08e0d7f298912dafcf2","observation_id":"05a32bb4-23da-4fbb-a321-af38ef244d51","resolution":{"observed_at":"2026-08-06T21:23:43.216575Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:42.787903Z","title":"Enhanced membership in- ference attacks against machine learning models","venue":null,"work_id":"312d3b3a-ff09-44e9-ab99-a12105ee4aac","year":null},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:40.495500Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:c5bfeec76822d928a32d297f6587a9851ce939e8348516d76d9bd30a0c404705","observation_id":"86e6bcfd-61a0-42a8-9440-68afcad57c4e","resolution":{"observed_at":"2026-08-06T21:23:42.967113Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:42.548677Z","title":"Privacy risk in machine learning: Analyzing the connection to overfitting","venue":null,"work_id":"98e484c9-d641-4bce-b355-178da789dd59","year":2018},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:40.557083Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:5a034ce7808d28c0c482b3edb9303e9fd6c6549f5a48955736c5a4f26d5bbeef","observation_id":"d197e004-de7a-4757-8e44-75f23fbda67b","resolution":{"observed_at":"2026-08-06T21:23:42.701810Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:42.289131Z","title":"Byzantine-robust distributed learning: Towards op- timal statistical rates","venue":null,"work_id":"ac4c6848-35a9-4f52-9bd9-5c798d001813","year":2018},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:40.654407Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:fb5101796f85da8f304c39a50f0ebdfc4aa89c15f96f908eb58b616260dcd6b9","observation_id":"46139d39-32b7-41b0-8ec3-2d34cc18ba44","resolution":{"observed_at":"2026-08-06T21:23:42.413805Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:41.999286Z","title":"Poisoning federated recommender systems with fake users","venue":null,"work_id":"981f34ab-c45c-4346-bb17-ea586a2d4f9a","year":2024},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:40.806811Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:51a51ce3449e02c75b9a767520bdca76251ae20c206f081ee2616df41b2a764d","observation_id":"8f89a9b6-b60e-45ae-8984-52b88a5ea233","resolution":{"observed_at":"2026-08-06T21:23:42.137262Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:41.764964Z","title":"Agrevader: Poisoning membership inference against byzantine-robust federated learning","venue":null,"work_id":"5f6ba248-8e92-457e-b2f7-a9deff4398e9","year":2023},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:40.931123Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:08729dda682e21ffcbbc56ef34ec4c09c8edb87b1f8b3c2bd810e4d05d9f767e","observation_id":"69fa18d1-d3d7-4b7d-8336-de4dc57c8739","resolution":{"observed_at":"2026-08-06T21:23:41.877820Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:41.559234Z","title":"Pn−b i=b+1(θi − ω) n − 2b #2 ≤ max   ","venue":null,"work_id":"3fa22d6d-0114-4515-9aa0-a0fb511a3490","year":2024},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:41.069355Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:24cfeefbe3cd500d58a46be354601fe0a1df86b7c56ffa83c83dc13d1a049497","observation_id":"c85cf7ea-a83f-42c6-80b3-a0c90d37d49f","resolution":{"observed_at":"2026-08-06T21:23:41.626723Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T23:34:35.078100Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning"},"reference_resolution":{"displayed":58,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":10,"verified_exact":1,"verified_fuzzy":47},"total_outbound_references":58},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 58 of 58 outbound references and 0 inbound Pith citation observations for arXiv:2507.00423."}