{"as_of":"2026-08-23T11:12:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:548a2443686c9974899a31b760b1e6831a78942731367bcf640ca323e89dd969","coverage":[{"denominator":50,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":50,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T16:29:55.476378Z","state":"measured"},{"denominator":50,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":50,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-23T06:30:58.430688+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2509.05265/citation-record","integrity":"/paper/2509.05265/integrity","json":"/paper/2509.05265/citation-record.json","paper":"/paper/2509.05265"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1811.03604","last_updated":"2019-02-28T21:07:51Z","snapshot_observed_at":"2026-08-15T21:55:07.573045Z","submitted_at":"2018-11-08T18:37:03Z","title":"Federated Learning for Mobile Keyboard Prediction","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.03604","snapshot_observed_at":"2026-08-15T16:29:54.873306Z","title":"Federated learning for mobile keyboard prediction,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:54.873306Z"},"links":{"cited_paper":"/paper/1811.03604","citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:0780badb46b7514b8376b21cc9295c68bf84dde9ce06f0a63354c1988374ebc0","observation_id":"68c5294c-c067-4504-93c0-4cfe43c4a8d4","resolution":{"observed_at":"2026-08-15T16:29:54.873306Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:57.815138Z","title":"Multi- institutional deep learning modeling without sharing patient data: A feasibility study on brain tumor segmentation,","venue":null,"work_id":"2d2e2767-d3e3-4d32-ba1a-eccd005920af","year":2019},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:54.883918Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:c66ca32b4d5f53c9f3e46a1dbd798b4cbe1b605ff3b1bf3c4063966a126cf113","observation_id":"854cdc1f-3341-4614-9fad-3f782d21d2c5","resolution":{"observed_at":"2026-08-15T16:29:57.823560Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3677127","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:55.575541Z","title":"A profit-maximizing data marketplace with differentially private federated learning under price competition,","venue":null,"work_id":"f42a1103-3bea-4645-949d-452762263340","year":2024},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:54.916480Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:dfdc95d5c5f2e04701c318ba2934e16899ab2899bfd55c2752ee1622a56d8464","observation_id":"4bfc7fc9-4951-429d-ae61-708afe169de6","resolution":{"observed_at":"2026-08-15T16:29:55.592457Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:57.775957Z","title":"Federatedscope: A flexible federated learning platform for heterogeneity,","venue":null,"work_id":"a7897015-1f0c-4162-8172-619c5f635d1c","year":null},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:54.947146Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:f8d72d8228c13b9f0a8caecb64ff918e52fa128816b622209c65d95129c3e742","observation_id":"980fe430-2e83-4618-b726-2884035a4376","resolution":{"observed_at":"2026-08-15T16:29:57.789310Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:54.961508Z","title":"Comprehensive privacy analysis of deep learning: Passive and active white-box inference attacks against centralized and federated learning,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:54.961508Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:49206761214351b24ae0de2697bace24b9ef72cf87446c831402261faf181602","observation_id":"165cd97c-1bcb-4979-88a1-15882d4dafe8","resolution":{"observed_at":"2026-08-15T16:29:54.961508Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:57.718030Z","title":"Maskcrypt: Federated learning with selective ho- momorphic encryption,","venue":null,"work_id":"32a05c9c-8371-4684-800b-fc8e0e4edc69","year":2025},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:54.972081Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:c60f83e4f35ab5175deb6457f8608213070e4d9e2b9bbc49fc16beaefb1ec310","observation_id":"72196bd5-450b-4de5-99c7-04c3fe64c2d3","resolution":{"observed_at":"2026-08-15T16:29:57.727913Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:57.684674Z","title":"One parameter de- fense—defending against data inference attacks via differential privacy,","venue":null,"work_id":"0c738f70-6e81-4270-b493-304bf876f29d","year":2022},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:54.981827Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:3159a15c019891f6694d294d1dc181aa2b3b822851235975206457310060d0d7","observation_id":"38ec5d90-b061-4de1-b203-cb406134e7a0","resolution":{"observed_at":"2026-08-15T16:29:57.695237Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:54.992358Z","title":"Uldp-fl: Federated learning with across-silo user-level differential privacy,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:54.992358Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:9edb92f4d1e7319b744cad3f860257df9770ef5eabd40323ba11b25c69b22cb4","observation_id":"6e408d62-aee7-4e29-8fa8-9badf5241fa2","resolution":{"observed_at":"2026-08-15T16:29:54.992358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2021.30569","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:56.240277Z","title":"User-Level Privacy-Preserving Federated Learning: Analysis and Performance Optimization ,","venue":null,"work_id":"7d3832c4-cf41-4062-ae43-761c54d1cdab","year":2022},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.004593Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:1fc45a129139a3b5632fa37a6ba4e4859740989004f4891dc34a72738cb02b1f","observation_id":"04ee1e9e-94dc-4949-88b0-be1348613e7a","resolution":{"observed_at":"2026-08-15T16:29:56.257680Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:57.644756Z","title":"Local and central differential privacy for robustness and privacy in federated learning,","venue":null,"work_id":"a107ad39-e3b8-4afb-bcee-9c2dbcbe25e8","year":2022},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.010796Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:9e105ff6c7ce3f24ae28c95df9ad3fec2a6f96a170bcc5ec9066ddb43c701ad6","observation_id":"b309055c-ee1a-4a80-8c2a-a7f942756a22","resolution":{"observed_at":"2026-08-15T16:29:57.655436Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:57.613021Z","title":"PrivateFL: Accurate, differentially private federated learning via personalized data transformation,","venue":null,"work_id":"240045fc-c32b-4eb0-ad56-2149233a1fc3","year":2023},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.038925Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:17595816d0b685ea1e6d0331d16d598ca025bd5fdc2cdd375926863a0b60e3bb","observation_id":"bee2cd00-9de8-4f3c-8821-5ea6b191a469","resolution":{"observed_at":"2026-08-15T16:29:57.622469Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:55.046301Z","title":"Ldp-fl: Practical private aggregation in federated learning with local differential privacy,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.046301Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:1ea4815e659237ccbdb7ae99409e2a12f2c81111d7c9e1f784f7e0300290b2c0","observation_id":"40e96662-335d-4bb6-9763-0d20e79eda4b","resolution":{"observed_at":"2026-08-15T16:29:55.046301Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:55.062200Z","title":"Deep learning with differential privacy,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.062200Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:0ac53cbc1e27ca0a6849999c860ac8718ae635d904aabbd0126c5cb612ae5c5a","observation_id":"220e54e5-f6df-4ce7-b74c-5f098977de56","resolution":{"observed_at":"2026-08-15T16:29:55.062200Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:57.590016Z","title":"Data poisoning attacks against federated learning systems,","venue":null,"work_id":"04067bb0-03a6-496f-b5cc-cc28d05da2c3","year":2020},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.076315Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:8a72f3ad79d275eb1bace7e9a229f8386643383ee2038d95dcb92a56130d8fd2","observation_id":"d7e9b50e-0820-4e01-8a75-806d2433bd4a","resolution":{"observed_at":"2026-08-15T16:29:57.597410Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:57.554536Z","title":"A novel data poisoning attack in federated learning based on inverted loss function,","venue":null,"work_id":"20f3f024-2145-44a3-b674-d4a48b0385f6","year":2023},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.091407Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:c48e281d9e37da10a08656b914f084165e2b895fb9b90138ba404c0769308730","observation_id":"1ad91923-36ec-4300-8163-b9fee592257c","resolution":{"observed_at":"2026-08-15T16:29:57.564866Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:57.529419Z","title":"Gan-driven data poisoning attacks and their mitiga- tion in federated learning systems,","venue":null,"work_id":"948b995b-af19-4c80-919e-b93208dd5e44","year":2023},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.104612Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:778d7a0d354971d768034c7174065571ea19123a7b5925f1baa719ca69e1ee4b","observation_id":"a8db9458-5214-43c4-a670-86858036bb85","resolution":{"observed_at":"2026-08-15T16:29:57.537771Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1911.07963","last_updated":"2019-12-02T19:00:11Z","snapshot_observed_at":"2026-08-17T17:57:37.740446Z","submitted_at":"2019-11-18T21:25:03Z","title":"Can You Really Backdoor Federated Learning?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1911.07963","snapshot_observed_at":"2026-08-15T16:29:55.114237Z","title":"Can you really backdoor federated learning?","venue":null,"work_id":null,"year":1911},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.114237Z"},"links":{"cited_paper":"/paper/1911.07963","citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:01df11ec1c62110c58e8a6d9bd55524d93059c7c00b347b80546675bbb99237a","observation_id":"22c421eb-ae85-4907-ac42-d9f66d0eb784","resolution":{"observed_at":"2026-08-15T16:29:55.114237Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:55.122597Z","title":"How to backdoor federated learning,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.122597Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:6447245f4ac203a1bc8f5865749cea08fba9914c171926bc74f1b7c153827cad","observation_id":"6714f4ed-c1dc-4a82-8d21-4c29e9611947","resolution":{"observed_at":"2026-08-15T16:29:55.122597Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:57.459107Z","title":"Data poisoning attacks to local differential privacy protocols,","venue":null,"work_id":"863a20e9-4e0e-4004-990e-c534f55589c3","year":2021},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.132484Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:eeb72cb4ed93d636856483eee6d9cc19686a4994476f4f8b636dccddbffe3698","observation_id":"194db805-537e-4453-9b20-bb92b42f64d7","resolution":{"observed_at":"2026-08-15T16:29:57.467165Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:55.141507Z","title":"Data poisoning attacks to locally differentially private frequent itemset mining protocols,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.141507Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:df8bcb080bb46578e8b49f682a9c5012ecb0045296595a1232b2320a095fc4ff","observation_id":"78667e30-2d6e-476f-b0c4-258f470e2aae","resolution":{"observed_at":"2026-08-15T16:29:55.141507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:57.433120Z","title":"Poisoning attacks to local differential privacy protocols for Key-Value data,","venue":null,"work_id":"d78eef49-b20e-4edb-8d0f-92b5abb3a984","year":2022},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.151435Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:00546d3fe9345157b0ec39df25ff1aa56b118017f21753da76a0dd2fc5209a66","observation_id":"3062e7f5-f617-468d-ab9d-3264aa3fcf8c","resolution":{"observed_at":"2026-08-15T16:29:57.442571Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.14376","last_updated":"2025-09-10T09:47:49Z","snapshot_observed_at":"2026-08-22T03:26:15.917629Z","submitted_at":"2022-10-25T22:55:08Z","title":"Robustness of Locally Differentially Private Graph Analysis Against Poisoning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.14376","snapshot_observed_at":"2026-08-15T16:29:55.159295Z","title":"Robustness of locally differentially private graph analysis against poisoning,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.159295Z"},"links":{"cited_paper":"/paper/2210.14376","citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:f71b6e75d7b92ec72253f6a57a11ba941ed203b4ffc6734320f4e6146bf1c284","observation_id":"19bda5e4-0c97-4be0-b9c7-7f0e26c06277","resolution":{"observed_at":"2026-08-15T16:29:55.159295Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:57.370149Z","title":"Data Poisoning Attacks to Local Differential Privacy Protocols for Graphs ,","venue":null,"work_id":"27bb6dd4-125e-4b1c-a139-a3feb92493eb","year":2025},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.169335Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:e3af492b6f4d067c2ae6b2ff9ac50af3ef5383b05ca51fbffcf541d6abaf624f","observation_id":"ae5156ca-b208-4b26-994f-9b481855eefc","resolution":{"observed_at":"2026-08-15T16:29:57.378562Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:55.215091Z","title":"Ma- chine learning with adversaries: Byzantine tolerant gradient descent,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.215091Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:88170f06a1de70524caffa14752509def56057ea22219577e7a2b337a3c4ab04","observation_id":"467488a1-cfb8-4292-9f84-f5160886bb1e","resolution":{"observed_at":"2026-08-15T16:29:55.215091Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:55.225992Z","title":"Byzantine-robust dis- tributed learning: Towards optimal statistical rates,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.225992Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:42296c61d288fa2ef6b4537454736714c0a85dffe7b0d9218cf3055b51a883c6","observation_id":"a7a85bbd-08fb-447c-be95-1a424e4a7e9b","resolution":{"observed_at":"2026-08-15T16:29:55.225992Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:55.239040Z","title":"Communication-Efficient Learning of Deep Networks from Decentralized Data,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.239040Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:22b0560da355cab0e6940987140b07a1538a8e80f7c689a224d56011ca501fd0","observation_id":"95b8d05c-490e-4d64-ac31-5e7e803fd352","resolution":{"observed_at":"2026-08-15T16:29:55.239040Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:55.250105Z","title":"Rappor: Randomized aggregatable privacy-preserving ordinal response,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.250105Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:7385f7aae59ebfb02a94f22afc00ff0c4f50e3652cbac951ac2d0acc5fca137b","observation_id":"b300c650-e868-419e-a064-50235ffb6f08","resolution":{"observed_at":"2026-08-15T16:29:55.250105Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:57.242857Z","title":"Data poisoning attacks to local differential privacy protocols,","venue":null,"work_id":"2e056d19-b96c-4490-b351-cc40a3ff5077","year":2021},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.262146Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:ad76be0ee0ec2d52810c46abb64f7161a01a7f55fbd49bdf1ef237cff0748fbe","observation_id":"2d131cbc-a2d3-4c1e-ad21-50a443f500eb","resolution":{"observed_at":"2026-08-15T16:29:57.258834Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:57.213440Z","title":"Fine-grained poisoning attack to local differential privacy protocols for mean and variance estimation,","venue":null,"work_id":"d2f128f8-1356-4196-8783-9d8a6e14497f","year":2023},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.268830Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:1005198ae7581773f99f93e016c0f93e5ec51fe64a35f5f3a0d7d065faf2ef14","observation_id":"f7d1ba17-8b18-4e5f-bc40-13da9551c514","resolution":{"observed_at":"2026-08-15T16:29:57.223046Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:57.169975Z","title":"Back to the drawing board: A critical evaluation of poisoning attacks on production federated learning,","venue":null,"work_id":"bc1e0ca4-e749-4a2d-af9f-594d840e18da","year":2022},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.277418Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:96dc274739eb44205aa0cc7898b4f352ae02205aa41818720e6b89495b5bbf4c","observation_id":"c9273886-f1b0-4124-a594-d4f2001e2514","resolution":{"observed_at":"2026-08-15T16:29:57.185174Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:55.285317Z","title":"Gradient-based learning applied to document recognition,","venue":null,"work_id":null,"year":1998},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.285317Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:32daf5b00501e9ad595ab26e32408c635d70c88f59609e7699e11dcc1c212c93","observation_id":"d45d9a50-07c7-4a82-8290-60ad81f06438","resolution":{"observed_at":"2026-08-15T16:29:55.285317Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.07747","last_updated":"2017-09-15T21:29:49Z","snapshot_observed_at":"2026-08-13T15:13:33.081929Z","submitted_at":"2017-08-25T14:01:29Z","title":"Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.07747","snapshot_observed_at":"2026-08-15T16:29:55.298717Z","title":"Fashion-mnist: a novel image dataset for benchmarking machine learning algorithms,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.298717Z"},"links":{"cited_paper":"/paper/1708.07747","citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:79d45bd9cf290358c59433736155ab06862c28aa3ca742b05d032196997298a9","observation_id":"fea78c60-810c-4654-83bc-0e4cd401c1b2","resolution":{"observed_at":"2026-08-15T16:29:55.298717Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:55.305354Z","title":"Learning multiple layers of features from tiny images,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.305354Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:4ccd20cc8b279e2e0e849d19b9a78d4a697887a58e3e19a014c8a64e8df19df7","observation_id":"dbc394c4-1a95-46db-8a92-840c4a4b138d","resolution":{"observed_at":"2026-08-15T16:29:55.305354Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:57.042489Z","title":"Vgg-s: Improved small sample image recog- nition model based on vgg16,","venue":null,"work_id":"df2d7876-0e23-4de5-be93-5483db661057","year":2021},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.335660Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:4c22d0de35beedb740fa42d1a42120f88dae57b4061d391aba52e43a4e5d25d2","observation_id":"bf4a86e1-2a5e-49b3-b3c1-1ff867a506d4","resolution":{"observed_at":"2026-08-15T16:29:57.053176Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:55.346551Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.346551Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:2cfd17f9ff5c9fdd47e2743eeec5f59a8084ca5209b2567ad27fe90bbe3e7a99","observation_id":"1919d2e0-3a60-48a7-bf90-75baa2f05530","resolution":{"observed_at":"2026-08-15T16:29:55.346551Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2109.12298","last_updated":"2022-08-22T20:24:50Z","snapshot_observed_at":"2026-08-19T03:28:59.817992Z","submitted_at":"2021-09-25T07:10:54Z","title":"Opacus: User-Friendly Differential Privacy Library in PyTorch","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2109.12298","snapshot_observed_at":"2026-08-15T16:29:55.357247Z","title":"Opacus: User-friendly differential privacy library in PyTorch,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.357247Z"},"links":{"cited_paper":"/paper/2109.12298","citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:8dcb9dee73aea15d4506cb71a34f2da1eeb0cfa30832bc55a46aecfa96ac7fbf","observation_id":"f0c769f1-01bf-45c3-9513-cbd21a02f3d2","resolution":{"observed_at":"2026-08-15T16:29:55.357247Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:56.975660Z","title":"Robust Aggregation for Federated Learning,","venue":null,"work_id":"fa79c096-3713-4a45-a811-99f4060a0407","year":2022},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.372067Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:e871fab8f1bc49d2f56e6f61303855249957d8cb16469208ecade26edbdd7755","observation_id":"70977deb-a286-4366-8997-d32838b77200","resolution":{"observed_at":"2026-08-15T16:29:56.987075Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:55.381131Z","title":"Practical differentially private and byzantine-resilient federated learning,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.381131Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:8a69bfe8ac7ca9ae1ff3147873535d7aef6c4dd83c4c448a1400f5c11ec5d406","observation_id":"a68dd6f4-7de4-451b-84da-62731c03448e","resolution":{"observed_at":"2026-08-15T16:29:55.381131Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:55.389327Z","title":"Local differential privacy for federated learning","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.389327Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:6239b9c8ca5ae64daafaeb2f4d49d0891e1905f6eaa12742f107c9724787314a","observation_id":"79946ac2-633a-4dfb-a9bb-abc15f74c7a1","resolution":{"observed_at":"2026-08-15T16:29:55.389327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:55.399887Z","title":"Deep model poisoning attack on federated learning,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.399887Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:0dfae127d42fcc3a8b9a0151701d888c34a4abaec216f9cbb81663d7c95469d5","observation_id":"a20947ed-b72d-4356-a356-765837336d4d","resolution":{"observed_at":"2026-08-15T16:29:55.399887Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:56.916222Z","title":"Mpaf: Model poisoning attacks to federated learning based on fake clients,","venue":null,"work_id":"a8a191af-2640-4660-9884-90801ba5da65","year":2022},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.410121Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:8ac20489d2ed14fa1ddf63598974ebe0b4ba950c5a92d0f7bac2f6052cbbd93f","observation_id":"6dfbc3fa-f544-4c6f-aa74-678b076efa5e","resolution":{"observed_at":"2026-08-15T16:29:56.924610Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:56.881735Z","title":"Fedrecattack: Model poisoning attack to federated recommendation,","venue":null,"work_id":"2d76d48f-e311-4e00-8189-d67e0f6cdab1","year":2022},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.424252Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:0e534ecf3350b47d499e3c03e0073d2a913e53d40cdc8b6adc62d3a28b88fa20","observation_id":"dac607da-2015-48d2-9f36-0b1a65652ebe","resolution":{"observed_at":"2026-08-15T16:29:56.891685Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:56.840018Z","title":"Model poisoning attacks to federated learning via multi-round consistency,","venue":null,"work_id":"89873d5c-02ae-4263-a43a-39c46d278189","year":2025},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.433983Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:995e0e9cf972d06a052405af7ab900be4035a20f254b02ffd3d64db949a51763","observation_id":"df2a484d-4f62-4b57-84bf-98f4eedbcefc","resolution":{"observed_at":"2026-08-15T16:29:56.860779Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:56.807597Z","title":"Robfl: Robust federated learning via feature center separation and malicious center detection,","venue":null,"work_id":"99629367-0bd2-4b5b-ab58-8dc416e283f3","year":2024},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.446066Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:23489b0a507bdc5e349e185355d478307e64de52a47849759a859508e651cfe7","observation_id":"c6d57caa-4652-45fd-be4e-a0b7305fa119","resolution":{"observed_at":"2026-08-15T16:29:56.815902Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:56.777011Z","title":"Privacy and robustness in federated learning: Attacks and defenses,","venue":null,"work_id":"0eca6e0c-4db4-4a4f-99f7-9758bc186736","year":2022},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.454266Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:d1f55e801d8d6a5398b8a6c1e3c97977e8b7142492e0fea9e1b3b24120c9ce3f","observation_id":"8b210150-341c-4218-a33c-dad7ac8030d6","resolution":{"observed_at":"2026-08-15T16:29:56.785452Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:56.740198Z","title":"Dp-gsgld: A bayesian optimizer inspired by differential privacy defending against privacy leakage in federated learning,","venue":null,"work_id":"b29093b1-34b5-4275-8b2b-71f956d20d9b","year":2024},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.463449Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:091d0ead61c456db7c7acf983ca0656f66c7201687589cdea0170e756ce20358","observation_id":"540f2138-fb52-458a-af24-c14c239d804f","resolution":{"observed_at":"2026-08-15T16:29:56.759471Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:56.663630Z","title":"Ldprecover: Recovering frequencies from poisoning attacks against local differential privacy,","venue":null,"work_id":"ffdb47c5-163e-44c5-a05d-40c4a6e76dbe","year":2024},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.476378Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:e3eb2b787130ba7bec5504e40847d5cda217cee26aea1413a1c72d7c01dec766","observation_id":"99d1746b-0084-45e1-aedd-4b0dc081c000","resolution":{"observed_at":"2026-08-15T16:29:56.675935Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:55.196196Z","title":"Available: https://doi.ieeecomputersociety.org/10.1109/ ICDE65448.2025.00079","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":1000,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.196196Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:9dd3002966b784a6ee77f31d6c93a71f7f13c98eb3e6fe6add66134bad5630d9","observation_id":"cf5410bc-17ab-48f4-938d-6815958dddca","resolution":{"observed_at":"2026-08-15T16:29:55.196196Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:55.317565Z","title":"Available: https://api.semanticscholar.org/CorpusID: 18268744","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":2009,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:55.317565Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:ced455b7bca47ecb3fc27ccd25ef62635a6683b058abab466e923e57c1e0b6f1","observation_id":"86805676-7eed-48f9-8445-cceb0d6682aa","resolution":{"observed_at":"2026-08-15T16:29:55.317565Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T16:29:54.954243Z","title":"Available: https://doi.org/10.14778/3579075.3579081","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-15T16:29:54.954243Z"},"links":{"citing_paper":"/paper/2509.05265"},"observation_digest":"sha256:260a9290ae68fc9bfcfc4f77cf3263bf6175d6e0f1b92a29dae84cf5c0a781ad","observation_id":"d276ed95-21cc-4544-9d35-9860e7186aa1","resolution":{"observed_at":"2026-08-15T16:29:54.954243Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2509.05265","last_updated":"2025-09-05T17:23:03Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-21T03:02:36.250049Z","submitted_at":"2025-09-05T17:23:03Z","title":"On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy"},"reference_resolution":{"displayed":50,"state_counts":{"malformed_identifier":1,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":23,"verified_exact":1,"verified_fuzzy":24},"total_outbound_references":50},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"thesis":"As of 23 August 2026, this Paper Citation Record lists 50 of 50 outbound references and 0 inbound Pith citation observations for arXiv:2509.05265."}