{"as_of":"2026-08-09T09:59:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:eaf885ce7c820a6c69b93964c78dfe5eb2c763e2276cc7ed7faa2318d9246744","coverage":[{"denominator":280,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T18:12:37.318253Z","state":"measured"},{"denominator":104,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":104,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":4,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":4,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T15:39:56.125373Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-30T21:55:05.385766Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.15031","snapshot_observed_at":"2026-08-05T15:39:56.125373Z","title":"A sys- tematic survey of model extraction attacks and defenses: State-of- the-art and perspectives,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-08T08:19:58.466694Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":181,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:56.125373Z"},"links":{"cited_paper":"/paper/2508.15031","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:f637c06a356fb80b89fa4688045cab3144c53ab79e6c7a27efa49d6fa0f95d31","observation_id":"a908464a-ef73-414b-8f1c-7146162cc82b","resolution":{"observed_at":"2026-08-05T15:39:56.125373Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.15031","snapshot_observed_at":"2026-08-04T11:34:11.041770Z","title":"Z., Zhao, Y","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2510.04033","last_updated":"2026-06-22T22:02:33Z","snapshot_observed_at":"2026-08-08T07:19:32.785815Z","submitted_at":"2025-10-05T04:52:26Z","title":"A global log for medical AI","version":2},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-04T11:34:11.041770Z"},"links":{"cited_paper":"/paper/2508.15031","citing_paper":"/paper/2510.04033"},"observation_digest":"sha256:5de771aaebdbf39ba527c3909293a1c1d6a7b7a0b224f20c51dc99091b8ec41a","observation_id":"ddc7d7ee-16ea-40cb-a720-33d39e5d6ff6","resolution":{"observed_at":"2026-08-04T11:34:11.041770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"cited_work":{"arxiv_id":"2508.15031","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.15031","snapshot_observed_at":"2026-06-30T21:55:05.385766Z","title":"A systematic survey of model extraction attacks and defenses: State-of-the-art and perspectives","venue":null,"work_id":"83a18dab-7824-4090-b821-7ce6fbfef957","year":2025},"citing_paper":{"arxiv_id":"2605.12827","last_updated":"2026-05-25T19:09:13Z","snapshot_observed_at":"2026-08-02T18:28:09.446223Z","submitted_at":"2026-05-12T23:49:45Z","title":"GraphIP-Bench: How Hard Is It to Steal a Graph Neural Network, and Can We Stop It?","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-14T19:28:31.180563Z"},"links":{"cited_paper":"/paper/2508.15031","citing_paper":"/paper/2605.12827"},"observation_digest":"sha256:a7ad89134b27df354a4ba44f7e1c1cbbb664d97d227b646749ba638da6e185cc","observation_id":"4ac309ed-9c09-4b06-9fd2-1c7a4391a226","resolution":{"observed_at":"2026-05-14T19:29:23.801138Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"cited_work":{"arxiv_id":"2508.15031","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.15031","snapshot_observed_at":"2026-06-30T21:55:05.385766Z","title":"A systematic survey of model extraction attacks and defenses: State-of-the-art and perspectives","venue":null,"work_id":"83a18dab-7824-4090-b821-7ce6fbfef957","year":2025},"citing_paper":{"arxiv_id":"2605.12827","last_updated":"2026-05-25T19:09:13Z","snapshot_observed_at":"2026-08-02T18:28:09.446223Z","submitted_at":"2026-05-12T23:49:45Z","title":"GraphIP-Bench: How Hard Is It to Steal a Graph Neural Network, and Can We Stop It?","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-06-30T21:53:59.325002Z"},"links":{"cited_paper":"/paper/2508.15031","citing_paper":"/paper/2605.12827"},"observation_digest":"sha256:407c9b5193e87fb4b619360a78314a3e6df11e260d9d0eaf26fe8e152aaff766","observation_id":"1aa3cae7-9bca-4fc8-980c-0776539f40c7","resolution":{"observed_at":"2026-06-30T21:55:05.387396Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2508.15031/citation-record","integrity":"/paper/2508.15031/integrity","json":"/paper/2508.15031/citation-record.json","paper":"/paper/2508.15031"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:33.033783Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.033783Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:d2df7f1ec8989ae7fd20fea7d4c04f6e59510be00cbe57cbaeed5f0af8bc7bff","observation_id":"9cdab7a7-87b6-4485-b16d-5ec6b0aee6af","resolution":{"observed_at":"2026-08-05T18:12:33.033783Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:33.125025Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.125025Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:b4226f5ccba20724be812eecea371e4ea0a6bb78657376e3ecd08cb2761c8620","observation_id":"64ac5a4b-731f-485f-81f3-a44b91c5b660","resolution":{"observed_at":"2026-08-05T18:12:33.125025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:33.245655Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.245655Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:f2835b5434f753aafec300ed992713cf7042ba5a197373cc147e44b2f1b2b243","observation_id":"a8fcd1e3-3e44-4045-9dd2-f8332f59bbfc","resolution":{"observed_at":"2026-08-05T18:12:33.245655Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:33.319089Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.319089Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:25845538a02273982026ef7f218c3e27d7a481e44d20cae3033bb018e558b372","observation_id":"0a5a75c0-fa4d-4177-a0a2-a0a1a986fd69","resolution":{"observed_at":"2026-08-05T18:12:33.319089Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:33.450589Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.450589Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:d2c7f6fac23b8fdf489c5ab87ed6e41a4fb91e797f644b1efbf7bbbb25703950","observation_id":"0dd35598-bea5-43fb-9037-85a67e50d27a","resolution":{"observed_at":"2026-08-05T18:12:33.450589Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:33.579002Z","title":"Vasilakos","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.579002Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:638f01f95ddc3ca7d37a856d517420ca33453ae9212a5fd34be82299c267381d","observation_id":"2ccca584-2071-46d9-b000-bf061bc784d6","resolution":{"observed_at":"2026-08-05T18:12:33.579002Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2009.01884","last_updated":"2020-09-03T19:02:55Z","snapshot_observed_at":"2026-08-05T13:34:19.999796Z","submitted_at":"2020-09-03T19:02:55Z","title":"Model extraction from counterfactual explanations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2009.01884","snapshot_observed_at":"2026-08-05T18:12:33.679833Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.679833Z"},"links":{"cited_paper":"/paper/2009.01884","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:7e0dc05b26b2e3469758b8bbff4b987e9478a99bc4441a8245f2b11a3f9c75f3","observation_id":"f7ab15cd-c192-47a9-a554-1ad29e0fafb2","resolution":{"observed_at":"2026-08-05T18:12:33.679833Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:33.816678Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.816678Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:af40cb2e779b800b4e392c9ad1fd4a0dcf0cda2cbdb90f1f2792dae44e1685ab","observation_id":"63e6b722-121d-4ef4-9e73-372000093cab","resolution":{"observed_at":"2026-08-05T18:12:33.816678Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:33.900856Z","title":null,"venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.900856Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:1061eb82b4e2c35b910658884d83cb08caf37fc90011bdf27b671519167e9f12","observation_id":"8eea7fc8-a32b-440d-930a-c1a286fc950d","resolution":{"observed_at":"2026-08-05T18:12:33.900856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04931","last_updated":"2023-11-06T23:50:20Z","snapshot_observed_at":"2026-08-07T22:57:37.730778Z","submitted_at":"2023-11-06T23:50:20Z","title":"GPT4All: An Ecosystem of Open Source Compressed Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.04931","snapshot_observed_at":"2026-08-05T18:12:33.998376Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.998376Z"},"links":{"cited_paper":"/paper/2311.04931","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:f74225823428a07b0973f2563b797f2bd67306cda0599540be66c8a4886a845c","observation_id":"421516b9-8e96-4811-a2e4-6b11e81b6ce5","resolution":{"observed_at":"2026-08-05T18:12:33.998376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:34.103321Z","title":null,"venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.103321Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:e4c62344b90292c116d371f1de54a1fc13e52cd0031e7093708b4a744aad55a3","observation_id":"d204242e-8498-4cf4-b899-2c193c722dcb","resolution":{"observed_at":"2026-08-05T18:12:34.103321Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:34.197210Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.197210Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:d4fbfdeea8670e1d079ba13015d03c9f2b56c5ddcc0cc5cec5fbffde031a5b8a","observation_id":"c3b5060b-2b52-4178-90a8-f06403fdc5c7","resolution":{"observed_at":"2026-08-05T18:12:34.197210Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:34.297286Z","title":null,"venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.297286Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:f0624f3d45c67b7a0da1dce54e2e5004f7516b08d6bfaba6dc145ad28186ac69","observation_id":"ab151a41-ed34-45a2-8628-2e26aa4f503b","resolution":{"observed_at":"2026-08-05T18:12:34.297286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.04805","last_updated":"2025-01-12T06:38:05Z","snapshot_observed_at":"2026-08-04T20:39:26.598203Z","submitted_at":"2024-06-07T10:12:01Z","title":"GENIE: Watermarking Graph Neural Networks for Link Prediction","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.04805","snapshot_observed_at":"2026-08-05T18:12:34.387107Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.387107Z"},"links":{"cited_paper":"/paper/2406.04805","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:a4e60ba7bcdc3ca23793d51c34ed9d0c3acc3a3eb8712b3c4d6951abe8cdc75d","observation_id":"cbe87a27-c46b-402b-9bf4-3a589e598fe0","resolution":{"observed_at":"2026-08-05T18:12:34.387107Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05990","last_updated":"2024-05-20T14:40:03Z","snapshot_observed_at":"2026-07-06T18:12:13.931421Z","submitted_at":"2024-05-09T02:35:32Z","title":"Special Characters Attack: Toward Scalable Training Data Extraction From Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05990","snapshot_observed_at":"2026-08-05T18:12:34.457509Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.457509Z"},"links":{"cited_paper":"/paper/2405.05990","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:4c6757935a691a6cd767d68d8b431afdae8f193e35ef4d6411dbb2bdfdbb6bab","observation_id":"3c4d7eaf-5e20-4f2c-be7f-f923610e7f2c","resolution":{"observed_at":"2026-08-05T18:12:34.457509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:34.545907Z","title":null,"venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.545907Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:6ccbc9a7f0d55fd0f10d1069561a054fe8ca3c334cbf983515883c25dc414872","observation_id":"18917f3e-127b-4934-9d78-68a249e4e0f2","resolution":{"observed_at":"2026-08-05T18:12:34.545907Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:34.646269Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.646269Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:6b1a7a29f6475baad3e12f8b3e721a58c62bbf82b8dd2212a298f301410bc553","observation_id":"43a92d97-8daf-4f5c-80d5-5334133030da","resolution":{"observed_at":"2026-08-05T18:12:34.646269Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:34.736414Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.736414Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:4ec920733175be665ee779d9d6ea544cf2c5cf747a2730ed1b811b00dbe7077b","observation_id":"0f42cfe8-4b53-497b-8060-5abfe890a6c0","resolution":{"observed_at":"2026-08-05T18:12:34.736414Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:34.832862Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.832862Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:ab7e4254ceed7516b3a8188179c6b254f87dcbcf4f11abd26312ff4c01789483","observation_id":"8b7ad942-e0d5-4c18-b31c-16ae262a944e","resolution":{"observed_at":"2026-08-05T18:12:34.832862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:34.941213Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.941213Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:181f7f7080b848cdde78cb1cb1e98fd274b6044d3be14967419de40d26501525","observation_id":"2034a8e5-f5c1-41f8-a6fb-8fce3c904006","resolution":{"observed_at":"2026-08-05T18:12:34.941213Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:35.153670Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:35.153670Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:81521f9327bb97d60177dbfd72f5e8112019815fc62daf5107f78538bd55eb8c","observation_id":"d761cdb6-67b7-4df4-98c2-e66f61e3089d","resolution":{"observed_at":"2026-08-05T18:12:35.153670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:35.172135Z","title":null,"venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:35.172135Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:5e68224bdf78f83bc66572e4e459476b818697f7d4103c8eacf6a84a28871cbf","observation_id":"079c1f57-0d44-4c83-8a51-720ec20c66d6","resolution":{"observed_at":"2026-08-05T18:12:35.172135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:35.307177Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:35.307177Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:6bf0fd13838569ad486c0644a8c86718180c4fa17e673df2967caaa852d6e993","observation_id":"c7ad0299-171e-4c25-9700-86a2f84dc14a","resolution":{"observed_at":"2026-08-05T18:12:35.307177Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1109/tr.2021","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:38.605133Z","title":null,"venue":null,"work_id":"94f9ca52-39cb-4cb8-89f4-8b4621e9ad0b","year":2022},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:35.424528Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:afbcb720dd75da9a8deb9b56deeace87b7542f9df44150c48deefd6aa0837fec","observation_id":"a3c9311d-ca85-433b-8add-89516b80f17a","resolution":{"observed_at":"2026-08-05T18:12:38.609655Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:35.568851Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:35.568851Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:889a09eb446dffcad63e42dca60250c4a66c1db29e847a85e5c9f772ec856d06","observation_id":"7f12fcea-80cc-492e-bdb1-91cf8b54379a","resolution":{"observed_at":"2026-08-05T18:12:35.568851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:35.748039Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:35.748039Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:8417cba9a4ecd985f19a17ba6614768c6368183ef1d72278ddeffe09b07e6ea0","observation_id":"23780280-956e-4636-bea6-e5fa6c66fca9","resolution":{"observed_at":"2026-08-05T18:12:35.748039Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:35.991117Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:35.991117Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:9f19b2df492088f4634dc4ad6d139939004a8e342fabb4dcc2ab59abb905ab20","observation_id":"c48ce376-1fa0-4c47-822a-55e4e25407f1","resolution":{"observed_at":"2026-08-05T18:12:35.991117Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:36.075710Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.075710Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:6c262bc993ee6159c23d898d49dbdf21cf7caa83427562f3e80bb28ef333e94e","observation_id":"4180abc3-5b61-4c5c-8941-fb5703ff7aab","resolution":{"observed_at":"2026-08-05T18:12:36.075710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-07-06T17:42:33.242895Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-05T18:12:36.156283Z","title":"Feder Cooper, Katherine Lee, Matthew Jagielski, Milad Nasr, Arthur Conmy, Itay Yona, Eric Wallace, David Rolnick, and Florian Tram‘er","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.156283Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:d68d7338b35a35f273f6b2a48ccf8a888967ba97b8ac9295fdadc37c56d76b07","observation_id":"fb9fe567-86a7-4880-ac39-825b1a7a7b1f","resolution":{"observed_at":"2026-08-05T18:12:36.156283Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:36.261018Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.261018Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:3e00d43aa2227a84ca764fa6ca02c72a886c4d9e96a44f536ddb7d2e76568ffe","observation_id":"f12751f0-454c-4b99-aaa3-5c71bf4556c3","resolution":{"observed_at":"2026-08-05T18:12:36.261018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2005.12782","last_updated":"2020-07-31T09:41:41Z","snapshot_observed_at":"2026-07-06T09:23:26.901164Z","submitted_at":"2020-05-26T15:04:29Z","title":"A Protection against the Extraction of Neural Network Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.12782","snapshot_observed_at":"2026-08-05T18:12:36.406217Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.406217Z"},"links":{"cited_paper":"/paper/2005.12782","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:2a6adf3b4ec39437a0e6176a8d0a78187fde138fd09c4848d6e012fb8eab4f67","observation_id":"738ee7de-e832-4738-96f5-2d2e369a1397","resolution":{"observed_at":"2026-08-05T18:12:36.406217Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2207.13321","last_updated":"2022-07-27T06:49:39Z","snapshot_observed_at":"2026-07-06T13:35:47.057503Z","submitted_at":"2022-07-27T06:49:39Z","title":"DynaMarks: Defending Against Deep Learning Model Extraction Using Dynamic Watermarking","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2207.13321","snapshot_observed_at":"2026-08-05T18:12:36.532173Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.532173Z"},"links":{"cited_paper":"/paper/2207.13321","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:81249faf02f4a949a700e407e2af4931abba16f127a652e83a7fb6cc406e6310","observation_id":"40670c1c-329b-4802-9b1f-d11379400cad","resolution":{"observed_at":"2026-08-05T18:12:36.532173Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:36.652953Z","title":"Jha, and Songbai Yan","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.652953Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:41596d841e5df656d01c48d504ac2202da249efa644fed6c7a6d9475018fd4f3","observation_id":"e59dc092-dc02-4ab3-9e66-bc88f17cad8b","resolution":{"observed_at":"2026-08-05T18:12:36.652953Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:36.793260Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.793260Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:04563f12f79b2991c204a272cb0e2875319ed7aaf517037032546974f30cc5c0","observation_id":"4c9dcc17-ba19-41f3-bc69-63ebe30039d4","resolution":{"observed_at":"2026-08-05T18:12:36.793260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.01251","last_updated":"2024-07-01T13:01:41Z","snapshot_observed_at":"2026-08-08T17:13:16.688994Z","submitted_at":"2024-07-01T13:01:41Z","title":"QUEEN: Query Unlearning against Model Extraction","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.01251","snapshot_observed_at":"2026-08-05T18:12:36.875251Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.875251Z"},"links":{"cited_paper":"/paper/2407.01251","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:4dbf346d538735b87ad8657ce865e8c0052200d0f159f0a55281ee0695023e69","observation_id":"2c9a2bf4-9da6-40b0-8588-90821f374005","resolution":{"observed_at":"2026-08-05T18:12:36.875251Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:36.997527Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.997527Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:cb5a9e92de212983d4fb0d301c7319309cf020a1c96a5ab324b529b4b6b3d95e","observation_id":"3153007f-3236-44f5-8849-fcddcf77a726","resolution":{"observed_at":"2026-08-05T18:12:36.997527Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.004866Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.004866Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:12bbf1ae6eaee4c8d421e0506d7c1fe17e7cca3abeeb8369f579dff3115e02cf","observation_id":"3392a03f-e259-4894-8ad6-a231c8bb9e82","resolution":{"observed_at":"2026-08-05T18:12:37.004866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.010635Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.010635Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:cdc9971c2f6c47b93afe562263955647fa3125071aa85f1cef3b559ff2a25e0e","observation_id":"5698757e-cf7f-4f88-9fea-fed15bbbefb5","resolution":{"observed_at":"2026-08-05T18:12:37.010635Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.017774Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.017774Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:d9fbac6e9e70a5aba935d571bf91ec583024a155f797b8ee50f8a543ab1bf364","observation_id":"5dab1db3-fd21-40d6-94fb-76ef0ce9efca","resolution":{"observed_at":"2026-08-05T18:12:37.017774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-05T18:12:37.022736Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.022736Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:88943b4b8427ef33e8c0d9934ff319663766abd8ca65d5f6dd193bb572bab30e","observation_id":"1be1b61a-5707-4456-ab4e-d6fae919928d","resolution":{"observed_at":"2026-08-05T18:12:37.022736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.027478Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.027478Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:2c02d4977760d36fea1a56dc19ca84bddee300952d4d6ca673b3ee29cb37f04e","observation_id":"a88a023f-19c6-4cf3-9239-9417580ca7b9","resolution":{"observed_at":"2026-08-05T18:12:37.027478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-07T11:23:08.018863Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.02362","snapshot_observed_at":"2026-08-05T18:12:37.034350Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.034350Z"},"links":{"cited_paper":"/paper/2506.02362","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:6db53d5b75656bedcd5aee20b2b42fa5d79d39d24b5d2229c7bd7b7085b70b7f","observation_id":"ca490b50-3be2-4d14-98ef-3e15920dd554","resolution":{"observed_at":"2026-08-05T18:12:37.034350Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.039908Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.039908Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:ffcfb7b61c2555dedce469707eed12461bf73d2cd9e3d1b3a5eb31a8045dca17","observation_id":"ae0c6e3b-7392-427b-b706-1883f9f030fc","resolution":{"observed_at":"2026-08-05T18:12:37.039908Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.045141Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.045141Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:d195c074d651c5973752d190c849cf3985aa22a6c8b792f2b2253071f8698218","observation_id":"c8d588e9-cd88-46ef-8a36-b4566851dc8d","resolution":{"observed_at":"2026-08-05T18:12:37.045141Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.049550Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.049550Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:5b1436f9b37eea98352ee0b92a00ed253d5e359f12bbff62085ed8d4e567dcc9","observation_id":"b1778bb4-7659-4abd-b883-09d9dacf4e64","resolution":{"observed_at":"2026-08-05T18:12:37.049550Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04435","last_updated":"2025-05-31T15:35:11Z","snapshot_observed_at":"2026-08-09T09:14:01.269454Z","submitted_at":"2024-02-06T22:13:49Z","title":"PreGIP: Watermarking the Pretraining of Graph Neural Networks for Deep Intellectual Property Protection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04435","snapshot_observed_at":"2026-08-05T18:12:37.058184Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.058184Z"},"links":{"cited_paper":"/paper/2402.04435","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:81d64fc92c501f33a8bd5cec36ed2a44adacb6ae63c2e01c1589d5ccf78c1142","observation_id":"dc50a114-c6c7-466b-90a0-673c215eb9e4","resolution":{"observed_at":"2026-08-05T18:12:37.058184Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.08570","last_updated":"2023-09-27T02:10:11Z","snapshot_observed_at":"2026-08-05T06:06:56.629964Z","submitted_at":"2022-04-18T21:41:07Z","title":"A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy, Robustness, Fairness, and Explainability","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.08570","snapshot_observed_at":"2026-08-05T18:12:37.062427Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.062427Z"},"links":{"cited_paper":"/paper/2204.08570","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:89f5693b37cd4cbbfd6f275078d8712de211b180cb0ee6e3c7c8f4dbabdac892","observation_id":"e58bed36-4fec-47df-baed-8ba26fce2ac1","resolution":{"observed_at":"2026-08-05T18:12:37.062427Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.066944Z","title":"Dai, Hui Li, Tian Tian, Xin Huang, L","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.066944Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:14d3c80561de6a6e10ceeb1f63ebae6686782cdba585febb4209cbe014678228","observation_id":"7abacebf-12a5-4cd7-97bb-5d8acc89ebaf","resolution":{"observed_at":"2026-08-05T18:12:37.066944Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.070970Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.070970Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:6654048581faffea7815be41679b1e822f2513a52bbff25d43b9d62ef89951de","observation_id":"0388b137-5754-440c-8ab2-b9808ef48001","resolution":{"observed_at":"2026-08-05T18:12:37.070970Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1912.07721","last_updated":"2019-12-16T21:54:21Z","snapshot_observed_at":"2026-08-05T06:37:02.367597Z","submitted_at":"2019-12-16T21:54:21Z","title":"Adversarial Model Extraction on Graph Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.07721","snapshot_observed_at":"2026-08-05T18:12:37.075878Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.075878Z"},"links":{"cited_paper":"/paper/1912.07721","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:223c754c8e0d18170008bcc7000ef99d22b602d5766a36bf03b512a203bff9c7","observation_id":"068b43ff-4ddf-45d6-99cd-233a0c9a496e","resolution":{"observed_at":"2026-08-05T18:12:37.075878Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.081824Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.081824Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:61b809a4c5bc625746139b45d92c0389abf9dfe319c6fe5c3ec2a96e21060fb7","observation_id":"f759932f-9532-4a68-b5a6-dcc05861a74e","resolution":{"observed_at":"2026-08-05T18:12:37.081824Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.086591Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.086591Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:ed5e342b9acd3af14c25ee97f5aac82cb32ea0400a01d09cdea7837e28b759dd","observation_id":"582a528a-ad7e-47b5-a3bb-1548e3e5d104","resolution":{"observed_at":"2026-08-05T18:12:37.086591Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.091260Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.091260Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:16996686db69d99e2435fca5e03329e4f72bbdbf8184f6f005f8b8d2f94aa69b","observation_id":"bdc3a9de-1b57-42f5-a31c-c1caf7cda151","resolution":{"observed_at":"2026-08-05T18:12:37.091260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.095966Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.095966Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:2ffdbbce9928249cf44258bef71a05a863819faee6781ab21c6a0008e53e49b4","observation_id":"15bd2eb7-9f5f-41e8-a081-f5b1ca8cab9d","resolution":{"observed_at":"2026-08-05T18:12:37.095966Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1812.11720","last_updated":"2019-07-08T07:31:01Z","snapshot_observed_at":"2026-08-09T01:24:01.635034Z","submitted_at":"2018-12-31T08:19:26Z","title":"Stealing Neural Networks via Timing Side Channels","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1812.11720","snapshot_observed_at":"2026-08-05T18:12:37.104791Z","title":"Vijay Rao, and Valentina E","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.104791Z"},"links":{"cited_paper":"/paper/1812.11720","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:3588b70eb9fb5ea768a80b4365d99b63fab00e0873f7c7641a250ddb89486178","observation_id":"1222f260-f42b-45df-87bc-fa9e33c3504e","resolution":{"observed_at":"2026-08-05T18:12:37.104791Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2201.09243","last_updated":"2022-12-12T16:11:45Z","snapshot_observed_at":"2026-07-06T12:30:24.290205Z","submitted_at":"2022-01-23T12:21:28Z","title":"Increasing the Cost of Model Extraction with Calibrated Proof of Work","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2201.09243","snapshot_observed_at":"2026-08-05T18:12:37.110302Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.110302Z"},"links":{"cited_paper":"/paper/2201.09243","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:678fae6e91ae0dde422d538365359b725df49130a1eeec1bdcd8619416175d5f","observation_id":"ec2b396f-6e16-4801-b393-4c6f41826039","resolution":{"observed_at":"2026-08-05T18:12:37.110302Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.115521Z","title":null,"venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.115521Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:5d14f59c33ea9a0b0e3e084e29ee60119150673a3d2b9b7fefca484df599ba3d","observation_id":"20766c53-2b61-4b4f-841a-5af3c7833ae8","resolution":{"observed_at":"2026-08-05T18:12:37.115521Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.120124Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.120124Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:f586522e9f219db468f394e863124e62ed79c3eb5ae77a72a832affab68655ab","observation_id":"61893ec1-4347-465d-93b5-fe3c39d0a4c7","resolution":{"observed_at":"2026-08-05T18:12:37.120124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.125019Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.125019Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:ef3f06947ab741dbd9d5c902b8cf9c05b6eef049f3d7570b0e0be0eef5df02d0","observation_id":"8b6e0565-7242-4480-8c37-e16f7f1bb9b0","resolution":{"observed_at":"2026-08-05T18:12:37.125019Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.129332Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.129332Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:a2c1fe2d2a13284cf3deb451de6da91fd27bceee37423e75c401d0ed466f9733","observation_id":"9fb67af5-c0f3-4445-b3bc-62f7bc576538","resolution":{"observed_at":"2026-08-05T18:12:37.129332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.135015Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.135015Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:92026896dd7daf4eb2e26eee214d61eff828907449d6ced489c14fc6bf902bd3","observation_id":"707df676-9b29-4b13-93c6-b77dbe246312","resolution":{"observed_at":"2026-08-05T18:12:37.135015Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.140358Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.140358Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:41cd64f4e9c875862cd0fc8d2d32f61a60bf1c421d9a91ad50c69a5834570aaf","observation_id":"04a798e1-0ddc-419f-ad80-abebda2c39ef","resolution":{"observed_at":"2026-08-05T18:12:37.140358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.07557","last_updated":"2018-03-01T10:12:27Z","snapshot_observed_at":"2026-07-06T06:15:22.497001Z","submitted_at":"2017-12-20T16:28:37Z","title":"Differentially Private Federated Learning: A Client Level Perspective","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.07557","snapshot_observed_at":"2026-08-05T18:12:37.144700Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.144700Z"},"links":{"cited_paper":"/paper/1712.07557","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:416fb84e8b6ddc5978935e6a4838c0be52d170fe8987edec2217f962a0befc8c","observation_id":"07fe34b7-7032-4c4c-97a5-b938e81857e1","resolution":{"observed_at":"2026-08-05T18:12:37.144700Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.149448Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.149448Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:e494bb07eac809088e049f21ea1ee35eefe0a5a7596e6f139bfc902c2da0aa0e","observation_id":"ac011dd5-f90d-4d90-bc2e-99f006faae36","resolution":{"observed_at":"2026-08-05T18:12:37.149448Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.153611Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.153611Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:5d2ff1be72271a6d27dd744890dcfb5fb51de92f8603b91029ec75641269aad7","observation_id":"c2382c4a-186e-4c5b-a4ee-6778946e5acc","resolution":{"observed_at":"2026-08-05T18:12:37.153611Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.158033Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.158033Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:fe1eb5fa5164557f544cb02b6a6dac3ecdcd13268e9ec170695d1b434f961bad","observation_id":"cf1811aa-1136-4780-a28d-43a1184f3351","resolution":{"observed_at":"2026-08-05T18:12:37.158033Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.162210Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.162210Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:1682c2647ea2ba0b927c57d9c2a2c8cb90ea3fdacd9e7838fe14402092b79f94","observation_id":"266b1095-855e-4588-bf68-b7cbba8e8604","resolution":{"observed_at":"2026-08-05T18:12:37.162210Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16963","last_updated":"2024-06-22T02:47:24Z","snapshot_observed_at":"2026-08-08T06:54:16.807204Z","submitted_at":"2024-06-22T02:47:24Z","title":"Large Language Models for Link Stealing Attacks Against Graph Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.16963","snapshot_observed_at":"2026-08-05T18:12:37.167020Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.167020Z"},"links":{"cited_paper":"/paper/2406.16963","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:a06fd42e95f6c205c83520516f649d32a60ae34b513b596b19e160bd51e798fd","observation_id":"63af2ae5-f5c9-4ed0-a053-15f278d383f2","resolution":{"observed_at":"2026-08-05T18:12:37.167020Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.171708Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.171708Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:8bad22d8908e2cebf44141130babf520649e6db67e6d3aaae1f0fe9ef5f51aa9","observation_id":"44b422f0-4700-47c7-8e23-0e58435aceab","resolution":{"observed_at":"2026-08-05T18:12:37.171708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.176696Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.176696Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:fa004b49eedaf95db9da5ee02cfac26f82954ce30e14d5240f2fefff3a62858e","observation_id":"2336e0ab-81da-409e-96bb-192da81b698a","resolution":{"observed_at":"2026-08-05T18:12:37.176696Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.181181Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.181181Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:25415957f560981ccfada4601ba324fa06f5ef80ca0432de185b9c04a70be5ea","observation_id":"0542f469-e0ca-4fac-af39-35a30923fc52","resolution":{"observed_at":"2026-08-05T18:12:37.181181Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.185523Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.185523Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:75445deda1eee2d68b0ca24f834c0a0acbb615a7158402b1a347ff5824d07623","observation_id":"00638771-96db-40b2-ba9e-c9f19ce0bfe1","resolution":{"observed_at":"2026-08-05T18:12:37.185523Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08679","last_updated":"2024-06-07T00:13:08Z","snapshot_observed_at":"2026-07-06T17:29:39.117068Z","submitted_at":"2024-02-13T18:58:48Z","title":"COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08679","snapshot_observed_at":"2026-08-05T18:12:37.189913Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.189913Z"},"links":{"cited_paper":"/paper/2402.08679","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:36f73eac61e0fbd68df60069654c18bf4e5586e221e4d7f44ad7aed728c358da","observation_id":"7b74580c-e5aa-4de2-af2b-41a82de52755","resolution":{"observed_at":"2026-08-05T18:12:37.189913Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.18580","last_updated":"2024-03-27T13:59:21Z","snapshot_observed_at":"2026-07-06T17:51:56.621426Z","submitted_at":"2024-03-27T13:59:21Z","title":"MisGUIDE : Defense Against Data-Free Deep Learning Model Extraction","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.18580","snapshot_observed_at":"2026-08-05T18:12:37.195222Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.195222Z"},"links":{"cited_paper":"/paper/2403.18580","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:56c0268b8fd6b02837fb662b1c6285724fcd82ab9c0ba5f041bda460de98dfa2","observation_id":"6452564b-c7ae-4ad2-a37a-f1689e9f694d","resolution":{"observed_at":"2026-08-05T18:12:37.195222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2005.02131","last_updated":"2020-10-05T20:38:16Z","snapshot_observed_at":"2026-08-08T01:30:16.626747Z","submitted_at":"2020-05-05T13:22:35Z","title":"Stealing Links from Graph Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.02131","snapshot_observed_at":"2026-08-05T18:12:37.199740Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.199740Z"},"links":{"cited_paper":"/paper/2005.02131","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:c86eb5e7532fd9784930680bcaa3f0b582ea1b715d2a04cd9dfdf80086cc5309","observation_id":"d17577bc-c5ee-44d3-bf25-8763ee1fc247","resolution":{"observed_at":"2026-08-05T18:12:37.199740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2103.10013","last_updated":"2021-03-18T04:23:21Z","snapshot_observed_at":"2026-08-09T08:22:40.116436Z","submitted_at":"2021-03-18T04:23:21Z","title":"Model Extraction and Adversarial Transferability, Your BERT is Vulnerable!","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.10013","snapshot_observed_at":"2026-08-05T18:12:37.204611Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.204611Z"},"links":{"cited_paper":"/paper/2103.10013","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:167213d0d059381cb108a4a1910ef66f1072644a7092be0d986d69306d6600b8","observation_id":"b970befe-0938-4878-859a-40a246ebf522","resolution":{"observed_at":"2026-08-05T18:12:37.204611Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.210704Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.210704Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:09ae82a5cead58168b5b64a29e362d477f1e0756a3ff9fce31bb156c71d05d3e","observation_id":"ac4c5893-dc7a-4d16-b28e-e69ff3e886de","resolution":{"observed_at":"2026-08-05T18:12:37.210704Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.214904Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.214904Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:ce2ac626c6b7f2502e1d20aaf2249d6de509e940f4e369c14732efce9f822a9e","observation_id":"0ff959b0-e489-4643-b7e1-4c4edfb8c00c","resolution":{"observed_at":"2026-08-05T18:12:37.214904Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.219305Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.219305Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:0aae6a0d30eb756a683e786e5fdb0ab7404050d80728a2a7ee6419e5936d746f","observation_id":"e006d5fc-3a96-451f-8a3d-053286af8d2e","resolution":{"observed_at":"2026-08-05T18:12:37.219305Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1810.03487","last_updated":"2020-01-31T17:12:52Z","snapshot_observed_at":"2026-08-08T14:54:18.420295Z","submitted_at":"2018-10-08T14:21:46Z","title":"Security Analysis of Deep Neural Networks Operating in the Presence of Cache Side-Channel Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.03487","snapshot_observed_at":"2026-08-05T18:12:37.223579Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.223579Z"},"links":{"cited_paper":"/paper/1810.03487","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:aa9827224127ed75aef33b77bcbab8d0f4f26ed95971285b6084cccd4a2b77df","observation_id":"93fd23d1-ce0b-480a-bae5-7ca1736046fd","resolution":{"observed_at":"2026-08-05T18:12:37.223579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.228570Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.228570Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:9623e86e44dbafe534510355469dd4206d3fb2b011b1ed0a8f8dd9b7c428705a","observation_id":"6080181f-602b-48a6-b3a4-2955786926e9","resolution":{"observed_at":"2026-08-05T18:12:37.228570Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.233309Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.233309Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:a9f96e8244f084fa857f986ce5633d9165573f704ddcf813c60dd677b951286b","observation_id":"593c5cb5-286a-4cd1-b2ca-90f0311668a1","resolution":{"observed_at":"2026-08-05T18:12:37.233309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1903.03916","last_updated":"2019-03-10T03:58:18Z","snapshot_observed_at":"2026-07-06T07:38:12.821583Z","submitted_at":"2019-03-10T03:58:18Z","title":"Neural Network Model Extraction Attacks in Edge Devices by Hearing Architectural Hints","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1903.03916","snapshot_observed_at":"2026-08-05T18:12:37.238083Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.238083Z"},"links":{"cited_paper":"/paper/1903.03916","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:a4dfa8d1003a31c2c96c9b03fd2c49353a128cb8a20dd8e86f12b9c3be11730f","observation_id":"d1335607-e543-42a5-b9c5-d9b8b2479e14","resolution":{"observed_at":"2026-08-05T18:12:37.238083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.242584Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.242584Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:74e093fee88bcf0f848ccb1a11cf1756302a3fdcf701302b832c137c8baf7a90","observation_id":"4bb8d722-dead-4baf-ba81-51657a485c3e","resolution":{"observed_at":"2026-08-05T18:12:37.242584Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.248770Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.248770Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:ba8b9428595fd1165b825f3a67871d5f352ff37dc704103f6e02f5f4145156e1","observation_id":"3c3530eb-0c9d-451b-9a5c-98dbfc2fbe7d","resolution":{"observed_at":"2026-08-05T18:12:37.248770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.12628","last_updated":"2022-10-20T05:30:43Z","snapshot_observed_at":"2026-08-09T02:07:57.297497Z","submitted_at":"2022-05-25T10:08:45Z","title":"Are Large Pre-Trained Language Models Leaking Your Personal Information?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.12628","snapshot_observed_at":"2026-08-05T18:12:37.254278Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.254278Z"},"links":{"cited_paper":"/paper/2205.12628","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:20b7b226b22b515e2b606b8c812848ca56e73ab4672c3e9ed89a2e7bd6b65872","observation_id":"41f08405-c62b-45f0-bb97-b514d2d45a72","resolution":{"observed_at":"2026-08-05T18:12:37.254278Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.258746Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.258746Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:035635670541d8107e2d8257be05c61e4d8f0e81de0daf5b97ed14df1230796f","observation_id":"5784aa9c-022e-424e-9dc3-1194acf56e5c","resolution":{"observed_at":"2026-08-05T18:12:37.258746Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.263142Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.263142Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:19e9e17a0bd16b574925bdc0c465d43b4c36325b61dfc27ca4c779ecb2c1730f","observation_id":"6a989445-44cc-49a0-b628-54f23167286b","resolution":{"observed_at":"2026-08-05T18:12:37.263142Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.267316Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.267316Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:861ad466cba2cff1b07f6828e97e31e2e62743c71125d5937c50a95a62378755","observation_id":"7701e3a2-011c-48b1-8544-1f0aba4916c0","resolution":{"observed_at":"2026-08-05T18:12:37.267316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.272100Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.272100Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:3b25e3652b1d639bc6d1e57192bf1e4e490b6ae2b6665fefa74b6590a92ba34b","observation_id":"f02db8a9-8edf-4882-94b0-4de917d0bde9","resolution":{"observed_at":"2026-08-05T18:12:37.272100Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.276313Z","title":"Choquette-Choo, Varun Chandrasekaran, and Nicolas Papernot","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.276313Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:c9b8310b327cbb8f263de801a09947c47b3c2812c0290ca0d17a71cc26ec80c9","observation_id":"236e0fd5-d7ab-4fc3-b0ec-2176da0aae3a","resolution":{"observed_at":"2026-08-05T18:12:37.276313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.280732Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.280732Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:ab63027d664ba674acad8a0abfa61043af9cdf927a135536c23984da62a3410f","observation_id":"cadfdba2-9423-4459-8ddd-1d74530e8751","resolution":{"observed_at":"2026-08-05T18:12:37.280732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.285114Z","title":null,"venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.285114Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:883c3cf0d6b1ffd1158fc02fe80580daeda82c039a9c1041dc20fbcb7da8aa84","observation_id":"b9d08420-4d57-4f2e-ba9b-18aa533763d6","resolution":{"observed_at":"2026-08-05T18:12:37.285114Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.289866Z","title":"Yu, and Ming Zhang","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.289866Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:df75fede096087d8e467f47970f5a92554acdc1bc7a355405f4cf649f41aa96d","observation_id":"0f24af56-af07-4d3f-b004-91006a60eb81","resolution":{"observed_at":"2026-08-05T18:12:37.289866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.294534Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.294534Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:62e56f824e397e9b3441b27ebc77650774b4002038f969b9f2d6823075b9b1ce","observation_id":"198c6111-4ac7-4c45-8d56-04f40cae7fa3","resolution":{"observed_at":"2026-08-05T18:12:37.294534Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.299511Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.299511Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:e3b2d7bd903b93ffdf8ed64b7e9eddac45881f7329f6c746afd3773bd81193c0","observation_id":"b9ac43d8-623f-4e3e-b9a7-56440b950e6a","resolution":{"observed_at":"2026-08-05T18:12:37.299511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.303708Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.303708Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:7d574420d9098ecd87b2ea373dc1cea389db11291e57a6e485baf64af1c2bff5","observation_id":"f3d23fe2-9e13-4236-a9e1-bb89d86160d2","resolution":{"observed_at":"2026-08-05T18:12:37.303708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.308208Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.308208Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:aa9e147be1b9acbe870aafb4f324f6b3186710cbb1fa4393ddc4135318e0e69f","observation_id":"6b569508-57f2-435f-8117-1ebd0dfa8d0b","resolution":{"observed_at":"2026-08-05T18:12:37.308208Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.314049Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.314049Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:c4d8fab157180e408c99ceb41cb5d48b7887094d992c9763e874ae7164f3a363","observation_id":"8d9918fa-0294-4290-a228-ff369f983530","resolution":{"observed_at":"2026-08-05T18:12:37.314049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.318253Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.318253Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:4830154ba42a3119b5af31834791a382e8f83776d4e36213e18cf19c3942b2cf","observation_id":"734b4ab8-7198-43a1-912d-707fbea25069","resolution":{"observed_at":"2026-08-05T18:12:37.318253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T09:22:49.031430Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":2,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":97,"verified_exact":1,"verified_fuzzy":0},"total_outbound_references":280},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 100 of 280 outbound references and 4 inbound Pith citation observations for arXiv:2508.15031."}