{"as_of":"2026-08-06T02:33:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ff10d31f72f157243ee115bf56b9bde70bbc076e048a7591375d05246dfa982b","coverage":[{"denominator":74,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":74,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-13T20:05:32.965273Z","state":"measured"},{"denominator":74,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":74,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2604.02780/citation-record","integrity":"/paper/2604.02780/integrity","json":"/paper/2604.02780/citation-record.json","paper":"/paper/2604.02780"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2009.05669","last_updated":"2020-09-11T21:53:50Z","snapshot_observed_at":"2026-07-06T09:55:00.143468Z","submitted_at":"2020-09-11T21:53:50Z","title":"Quantifying Membership Inference Vulnerability via Generalization Gap and Other Model Metrics","version":1},"cited_work":{"arxiv_id":"2009.05669","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2009.05669","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Quantifying membership inference vulner- ability via generalization gap and other model metrics","venue":null,"work_id":"c34dd844-5410-44dd-9245-1beefb517afd","year":2009},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"cited_paper":"/paper/2009.05669","citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:29999495845eccb359b1ed0a541b04fb23df95bb4881c4ecb049fee0d34163a7","observation_id":"67321479-e0fd-4317-9233-9c5345113495","resolution":{"observed_at":"2026-05-13T20:08:12.943303Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1912.01667","last_updated":"2020-02-07T09:17:38Z","snapshot_observed_at":"2026-08-01T19:15:11.105038Z","submitted_at":"2019-12-03T20:06:49Z","title":"A Survey of Black-Box Adversarial Attacks on Computer Vision Models","version":3},"cited_work":{"arxiv_id":"1912.01667","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"1912.01667","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A survey of black-box adversarial attacks on computer vision models","venue":null,"work_id":"40e7e27c-ac97-4239-818d-b6e50056b0de","year":1912},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"cited_paper":"/paper/1912.01667","citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:adc94133bc962328d0ed4d65c4cbc54c1b7d50176c6e891d131e6002c666302a","observation_id":"b0aeb0de-2946-4d88-96c9-040507bbbf12","resolution":{"observed_at":"2026-05-13T20:08:12.939748Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Pattern recognition.Machine learning, 128(9)","venue":null,"work_id":"6f7a1970-4414-4b1e-98dd-2c7b81cea614","year":2006},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:bba7b8f98091eb2562c42838c4cfb78c4061aca988ab2a2100b6604313ab4dd5","observation_id":"93799777-5c4b-42f4-bfb5-67f2b6b9c9e4","resolution":{"observed_at":"2026-05-14T02:28:43.905453Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods","venue":null,"work_id":"4ca24ae7-ffac-4727-833c-bf222dd15165","year":2017},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:9b9abcdeb0c582504309a1a9bb5eca5139eed3ca51f2773754b5495e3e529d4d","observation_id":"87bf392b-d1c8-4d64-80c5-0061be4c63c0","resolution":{"observed_at":"2026-05-14T02:28:43.912675Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":"69901988-05c5-4d54-b947-777b85a6324c","year":2017},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:bd034e2eb7be9b055319e54d195b28614386215ebb8cc0ad382329d3ccda52da","observation_id":"3d2b519d-c918-45f1-83ad-25164ca7f1bd","resolution":{"observed_at":"2026-05-14T02:28:43.922491Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The secret sharer: Evaluating and testing unintended memorization in neural networks","venue":null,"work_id":"1a3047dd-7c7d-4c24-8fb7-710328d24ac8","year":2019},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:287b6687c28c893d0a5b7186108c66eaa084040f8e0b6f644b3320da10d74d2d","observation_id":"7e60929b-39f4-409c-a222-9922db622a35","resolution":{"observed_at":"2026-05-14T02:28:43.991405Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Membership inference attacks from first principles","venue":null,"work_id":"f0d08bd2-e16f-487e-92a1-dab729490608","year":2022},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:0d9adcae78d955eb7f08080a290ad70ac32ccfaa05fbb788055ed2e6f4cc09b5","observation_id":"ffdfef95-368a-462a-9476-280776f9b89b","resolution":{"observed_at":"2026-05-14T02:28:44.033474Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Deepdriving: Learning affordance for direct perception in autonomous driving","venue":null,"work_id":"fbc2f582-ee53-450b-b226-f41d5fb1f660","year":2015},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:bd9de09aa3314eaf802930e194a9fe45d012c594c0bd6d1e1f8f657beeffa588","observation_id":"c285cab8-fcab-45d8-82e8-90c2f7098ffa","resolution":{"observed_at":"2026-05-14T02:28:44.023245Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Gan- leaks: A taxonomy of membership inference attacks against generative models","venue":null,"work_id":"01ccfaf7-2497-4ff5-8e72-abe287603a3e","year":2020},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:2c2d1bca3dd8939a4dfeb55fdfbfa6692a49fa503f8d4caf9995009bcefee1fb","observation_id":"d0835c7e-1260-46b8-a80f-a2c2213d3500","resolution":{"observed_at":"2026-05-14T02:28:44.084652Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"When machine unlearn- ing jeopardizes privacy","venue":null,"work_id":"dda71650-6a9b-499f-b4e9-ba5ead6620e6","year":2021},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:31f37fa5907b50c0e9be41787ac3e10f5be78715aa93b60c3d29c1e469ac5677","observation_id":"0ff4f4ff-e639-4d45-9060-48166d7dc225","resolution":{"observed_at":"2026-05-14T02:28:44.095667Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adversarial robustness: From self-supervised pre-training to fine-tuning","venue":null,"work_id":"24dd53eb-1174-4da7-8f9b-5f1fefff35de","year":2020},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:1b646318ae46e8a070c500a44e60fb4ff7067511b89b1c5952aaac795ebf2563","observation_id":"8aacc043-9bb7-40cf-aced-a3f3d4958645","resolution":{"observed_at":"2026-05-14T02:28:43.946724Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Label-only membership infer- ence attacks","venue":null,"work_id":"67177e96-8850-42dd-a16f-7d9aa524298e","year":2021},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:a1c30e6cc52deb506397bd65c53cac896984e8576b2292ef4effe9f75cedc4e4","observation_id":"907df2f8-2c6c-405a-8e21-4614625d04be","resolution":{"observed_at":"2026-05-14T02:28:44.059619Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter- free attacks","venue":null,"work_id":"f87cac92-2010-46d9-87c7-dac09953d5e4","year":2020},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:4d54b409fc8239a7c6896c4a372fc60ba5ac0dc87612e659dce0229fcdb646fa","observation_id":"4b79dc43-cdcc-4edc-ad14-1c924211178f","resolution":{"observed_at":"2026-05-14T02:28:44.274085Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1810.03505","last_updated":"2018-10-02T21:20:09Z","snapshot_observed_at":"2026-07-06T07:06:44.377189Z","submitted_at":"2018-10-02T21:20:09Z","title":"CINIC-10 is not ImageNet or CIFAR-10","version":1},"cited_work":{"arxiv_id":"1810.03505","doi":null,"metadata_source":"pith","pith_arxiv_id":"1810.03505","snapshot_observed_at":"2026-07-04T06:39:38.243602Z","title":"Cinic-10 is not imagenet or cifar-10","venue":"cs.CV","work_id":"654af0a5-9ba4-4e32-9671-b45c16ff5c5d","year":2018},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"cited_paper":"/paper/1810.03505","citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:79d54b1c2c68689950056a90c6b359566437496337c53282b9ccc3a24b2f1380","observation_id":"3e2ee9c1-336f-4aac-9641-ed7e293ad209","resolution":{"observed_at":"2026-05-13T20:08:12.972460Z","resolver_source":"arxiv_id","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Imagenet: A large-scale hierarchical image database","venue":null,"work_id":"00f7309d-5eeb-407f-b362-494249a106cf","year":2009},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:acc4e40d04a7604638c8942d885699af881306f9c6a9589471ff355b5d886bb8","observation_id":"686e8eaf-e79a-42bc-83c5-fc05785699a8","resolution":{"observed_at":"2026-05-14T02:28:44.192516Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Model inversion attacks that exploit confidence information and basic countermeasures","venue":null,"work_id":"b7b8acaf-e0e2-49e7-bea6-8c4bb01dda40","year":2015},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:6da6685141c2a2668b4bf9fe9455e97273f8daadf585721103b715e5b00709a0","observation_id":"f0746bc4-e0ac-4aa1-827c-aeafcb0609a0","resolution":{"observed_at":"2026-05-14T02:28:44.139531Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Property inference attacks on fully connected neural networks using permutation invariant representations","venue":null,"work_id":"88894608-4c4a-4b5d-8316-ccf06009f2f9","year":2018},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:725c10dd741d3d6b569e028c7558d92daba2ed70d69a2aa5a7f5c73143235705","observation_id":"c57a510f-332b-469c-8881-58b6e007a5b4","resolution":{"observed_at":"2026-05-14T02:28:44.377549Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Maximum mean discrepancy test is aware of adversarial attacks","venue":null,"work_id":"7bb861f8-a339-4313-b309-a1753cf93f0d","year":null},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:af6b9fabe82f0e8b29ec4647d9452c0dadbc0d729475524a38162e3355ca40b4","observation_id":"0c69cc20-8eee-42cc-80da-9228930deb22","resolution":{"observed_at":"2026-05-14T02:28:44.198545Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Fast and reliable evaluation of adversarial robustness with minimum- margin attack","venue":null,"work_id":"0c43066a-d3ab-4a36-9408-061a138a34f2","year":2022},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:ce8d42e095aae07515ee73511fcc5fd806ae5869a6ab008b7adaa25110299349","observation_id":"030e3a9b-5dc8-4d56-acd4-56fae9ba1541","resolution":{"observed_at":"2026-05-14T02:28:44.215219Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":"1d68202f-2895-4895-8339-92ae08ea204c","year":null},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:e9679df787da02e4e7d4d80828d886b9c14ece51f4a00b54df71901856a980d2","observation_id":"389a587e-a91c-445d-8be5-ebb768dbd6f3","resolution":{"observed_at":"2026-05-14T02:28:44.402791Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1702.06280","last_updated":"2017-10-17T11:12:44Z","snapshot_observed_at":"2026-07-06T05:30:46.429084Z","submitted_at":"2017-02-21T07:03:11Z","title":"On the (Statistical) Detection of Adversarial Examples","version":2},"cited_work":{"arxiv_id":"1702.06280","doi":"10.48550/arxiv.1702.06280","metadata_source":"pith","pith_arxiv_id":"1702.06280","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"On the (Statistical) Detection of Adversarial Examples","venue":"cs.CR","work_id":"ad71759b-1d5a-48bd-b33f-e766c196278d","year":2017},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"cited_paper":"/paper/1702.06280","citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:d61816410e6cde3dcbe591f9f233b3da6d7065b61772c25d661f54f282b35b7a","observation_id":"ddadfe1a-775f-4feb-b00c-a8cf221fccbd","resolution":{"observed_at":"2026-05-13T20:08:12.947361Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Simple black-box adversarial attacks","venue":null,"work_id":"30a2622a-512d-4166-9c19-5506f1b9dfab","year":2019},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:ad6274d9554162547408e1a2bac4ac4f3035641ab212839f7a999116a1092824","observation_id":"70222f35-dde6-4228-aa9d-7e457ae9e851","resolution":{"observed_at":"2026-05-14T02:28:44.269161Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Deep residual learning for image recognition","venue":null,"work_id":"5667910d-8f69-42c0-bf49-a1c0c5de44dd","year":2016},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:596968ae7b4271a73bd2ba215913fac139185bdd4193bba550445714b9c1b74b","observation_id":"facb1943-637c-42e2-a6e1-f7bfdd860112","resolution":{"observed_at":"2026-05-14T02:28:44.264732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"afdb9bc8-fd05-4dfc-abff-bf889ac0a7f0","year":2020},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:c32eef5124dbe809583aa02571f970559729341aa3459f4c5b232377bf9a4819","observation_id":"6849b3be-7c75-475e-9438-6af5119bd625","resolution":{"observed_at":"2026-05-14T02:28:44.119216Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Resolving individuals contributing trace amounts of dna to highly complex mixtures using high-density snp genotyping microarrays.PLOS Genetics, 4:1–9","venue":null,"work_id":"e5887e24-0fa4-4f30-9831-4e3af36b50cb","year":2008},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:1966524eaf4235d5af15a98ac90970092703a61e460e896dfa7c9e40fef2721c","observation_id":"9d0166ca-c875-4264-bea2-6016983a59b1","resolution":{"observed_at":"2026-05-14T02:28:44.182710Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Scalable continuous-time diffusion framework for network inference and influence estimation","venue":null,"work_id":"bebb78fd-3cc5-4da0-a7c2-bbbcc46a5c8f","year":2024},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:885bab94943b7db5b8f1ea62e58123a0fb657ee3b7cf1ef94658b85496615bb4","observation_id":"eef14edd-7265-489c-9e75-3090babd1b6f","resolution":{"observed_at":"2026-05-14T02:28:44.006785Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Black-box adversarial attacks with limited queries and information","venue":null,"work_id":"8f8181c5-343e-4cd6-87da-bb20cd5c601f","year":2018},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:0599d782066bfe19e47c1f0f0d6ce9b34dafd813eb44ee7ca98a40d9bb0d2d2c","observation_id":"a18b961a-e1a5-4d10-9026-045edde82b8c","resolution":{"observed_at":"2026-05-14T02:28:43.934349Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Memguard: Defending against black- box membership inference attacks via adversarial examples","venue":null,"work_id":"2aa2bb4d-eec6-4fa4-8899-2dccf363aca2","year":2019},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:154c00ec9f69b389139665c0df38af6c23b86252469b0d20967a9d3d59feb151","observation_id":"e7c11f15-0c03-4ebb-bfd8-9ae80bd58033","resolution":{"observed_at":"2026-05-14T02:28:44.159522Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":"a6a09801-f6ad-4eb0-80a7-d98ee593c0b3","year":2009},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:70d2fab1df00a8d57450ce4cd6ebacc0b9ee535dc5ba8b890d1eb00528d5e69b","observation_id":"8b2255c5-8be5-4f4c-aaed-e34c236aab3f","resolution":{"observed_at":"2026-05-14T02:28:44.134342Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adver- sarial examples in the physical world","venue":null,"work_id":"9140849d-f05e-416c-b46c-9dffcb37541d","year":2017},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:38dcb4274027ce883b86141abe8c2e11ae23094394c837ebbe13e009848236c9","observation_id":"1e26bad2-befa-49f8-806c-3204300383a4","resolution":{"observed_at":"2026-05-14T02:28:44.343612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A simple unified framework for detecting out-of-distribution samples and adversarial attacks","venue":null,"work_id":"d712da03-12e6-43a5-951e-0077c498f7c1","year":2018},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:88a4fd4f7a209fb195359bde446a75241f8de31955ce5a42f043f417d6dcfd1d","observation_id":"b546ce5f-cf68-4352-8bb3-caafb7a1ba41","resolution":{"observed_at":"2026-05-14T02:28:44.126747Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Stolen memories: Leverag- ing model memorization for calibrated white-box membership inference","venue":null,"work_id":"7730ce32-4957-4d7f-ac56-cfa9930957ea","year":2020},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:10f15990fbd5b07c40a78cb87e97863f4ae8880701c26dd91a8eba865eccf657","observation_id":"f1bc0700-f816-4ef9-a8f1-0ff54ff5ccd2","resolution":{"observed_at":"2026-05-14T02:28:44.111493Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Membership in- ference attacks and defenses in classification models","venue":null,"work_id":"bbe86043-8e63-4954-8b65-c680d9d6e27c","year":null},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:3e7c30c280729631c68cc2f6db95015acdb595a0ec850447b96c728df210d285","observation_id":"4aaf8169-b6b8-4749-9166-84c8e7d67808","resolution":{"observed_at":"2026-05-14T02:28:44.221922Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adversarial examples detection in deep networks with convolutional filter statistics","venue":null,"work_id":"5f54b461-fc8c-40e0-aa22-20fb9d1602d7","year":2017},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:54e4046a043be215bdede13d7b1febec1929a0f4650ee6d4018cdfa6ee5d55a2","observation_id":"4fc15a7f-cf40-4476-a970-99969daf279d","resolution":{"observed_at":"2026-05-14T02:28:43.951337Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1608.03983","last_updated":"2017-05-03T16:28:09Z","snapshot_observed_at":"2026-07-06T05:06:55.589962Z","submitted_at":"2016-08-13T13:46:05Z","title":"SGDR: Stochastic Gradient Descent with Warm Restarts","version":5},"cited_work":{"arxiv_id":"1608.03983","doi":"10.21203/rs.3.rs-7055642/v1","metadata_source":"pith","pith_arxiv_id":"1608.03983","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"SGDR: Stochastic Gradient Descent with Warm Restarts","venue":"cs.LG","work_id":"ad476478-c5ea-495b-a454-168c504bbfcc","year":2016},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"cited_paper":"/paper/1608.03983","citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:dbe81bd1848e84c36371fe4d075c57ed5ff4150f63c9c82cb77a34871cd51675","observation_id":"01f6c749-9611-4a1b-8f8c-daedbf87ae77","resolution":{"observed_at":"2026-05-13T20:08:12.953731Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Characterizing adversarial sub- spaces using local intrinsic dimensionality","venue":null,"work_id":"87375689-34bd-4940-b316-e4cfe51d9409","year":2018},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:ae86380ef3cbba79b262f59764a4cb4a93a07db2efd85398c15fb7d813fda44b","observation_id":"589dc44c-bd06-4c94-a4c1-2385ae8bd474","resolution":{"observed_at":"2026-05-14T02:28:44.002746Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Understanding adversarial at- tacks on deep learning based medical image analysis systems","venue":null,"work_id":"96901d85-ec78-4781-b1f9-07b62f8d025f","year":2021},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:c71cf5065cc42fc16e966c8b8d284b8b10bccda7d82d7b21366f2e701f9ef03f","observation_id":"bd5d754a-cf3c-4c93-9f21-95955dc5e7c2","resolution":{"observed_at":"2026-05-14T02:28:43.979627Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Visualizing data using t-sne.Journal of machine learning research, 9 (Nov):2579–2605","venue":null,"work_id":"5873f065-3180-45e8-8fb1-40508cccceb7","year":2008},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:c3791d6324c594d655f246a28f98886303545788e0d40c10ed3f1c0d855a77c7","observation_id":"1990947f-bfd2-4c01-bc43-b1595175d403","resolution":{"observed_at":"2026-05-14T02:28:44.299897Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":"a3b2530f-01fb-4c99-bb74-baf47fd6c6bb","year":2018},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:756eb12c90637d8be4fc6e4690f8cf28d08b790db2f000f346dee1642872bef1","observation_id":"2d05d3bd-0862-4ff4-9cd1-009409c9cd6f","resolution":{"observed_at":"2026-05-14T02:28:44.256148Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Exploiting unintended feature leakage in collaborative learning","venue":null,"work_id":"40938869-8a1c-4757-8540-6b052c74baaa","year":2019},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:324fb433a1e51c0d615400440a47cf5b0810f8275b594596926466dd3625b5b8","observation_id":"babf07b3-ce7c-40ad-a574-9a964c641126","resolution":{"observed_at":"2026-05-14T02:28:44.286347Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1702.04267","last_updated":"2017-02-21T06:53:38Z","snapshot_observed_at":"2026-08-04T06:28:06.255085Z","submitted_at":"2017-02-14T15:44:26Z","title":"On Detecting Adversarial Perturbations","version":2},"cited_work":{"arxiv_id":"1702.04267","doi":"10.48550/arxiv.1702.04267","metadata_source":"pith","pith_arxiv_id":"1702.04267","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"On Detecting Adversarial Perturbations","venue":"stat.ML","work_id":"32bb86c1-99e6-43d1-828a-21cb1023654a","year":2017},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"cited_paper":"/paper/1702.04267","citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:29eeb622b0d4689bb0bf583e3bf6085ad88111e37b58f4ff386bc2c0b390b6a2","observation_id":"00a7a55e-c3db-4ec9-a8a2-676e3788e6e3","resolution":{"observed_at":"2026-05-13T20:08:12.950742Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Deep learning for healthcare: review, opportunities and challenges.Briefings in bioinformatics, 19 (6):1236–1246","venue":null,"work_id":"2abac896-affd-4775-b2fc-4084771d7104","year":2018},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:ff2e044a854df5a53338f8abdaeacd5cd10e81625520978c039a6d682970a19a","observation_id":"796a9dbe-237c-439f-92a9-409e5249ef54","resolution":{"observed_at":"2026-05-14T02:28:44.335340Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.09339","last_updated":"2020-07-18T06:21:35Z","snapshot_observed_at":"2026-08-06T02:11:03.649894Z","submitted_at":"2020-07-18T06:21:35Z","title":"ML Privacy Meter: Aiding Regulatory Compliance by Quantifying the Privacy Risks of Machine Learning","version":1},"cited_work":{"arxiv_id":"2007.09339","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2007.09339","snapshot_observed_at":"2026-06-30T19:05:00.908373Z","title":"Ml privacy meter: Aiding regulatory compliance by quantifying the privacy risks of machine learning","venue":null,"work_id":"fcb8ee13-d448-48d4-8ca0-6c1749f4e256","year":2007},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"cited_paper":"/paper/2007.09339","citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:fba0a191ce13cbbc751f09722400124336f641faf5a915215ba98cfe4d39389f","observation_id":"50115edc-a5ca-4ef1-87d8-ce5196ee949a","resolution":{"observed_at":"2026-05-13T20:08:12.957744Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Machine learning with membership privacy using adversarial regu- larization","venue":null,"work_id":"95aa797a-3d0c-4d99-afac-72b4157be83c","year":2018},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:8c1fd2b32f1ca07ce84a44ad24fda38f80173e4ce04ed07bffef70f6eb3ef3c6","observation_id":"878b4ece-e07e-456e-b8be-07045f6cc11b","resolution":{"observed_at":"2026-05-14T02:28:44.070395Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Compre- hensive privacy analysis of deep learning: Passive and active white-box inference attacks against centralized and federated learning","venue":null,"work_id":"769157ea-a158-40b5-bd6a-243121b24635","year":2019},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:ddb8aa718a125b18236ddd766031c9794b4f422a573d1dbfc1a1b93fecc5ce07","observation_id":"3562b203-a191-4a8b-bddd-b25f883ff76e","resolution":{"observed_at":"2026-05-14T02:28:44.046718Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"294ee478-4b4b-48b8-aff8-1aef161e5eae","year":2011},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:6968caf4356e618bebe9cfdda1e30687ec7b5bdd22b8c36f23df4fb06e5aa646","observation_id":"69168e7b-febf-4d84-b752-6b33cee05f70","resolution":{"observed_at":"2026-05-14T02:28:44.362621Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"2522a44e-9baa-4853-bec1-97c940301ed4","year":1933},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:1f06850465b8bc7346b552c935560de94025f8f61d84300390b86cedec6da82e","observation_id":"d4e4d04d-734a-4ccb-843b-876f13d4cdf3","resolution":{"observed_at":"2026-05-14T02:28:44.171190Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Deep neural networks are easily fooled: High confidence predictions for unrecognizable images","venue":null,"work_id":"8561e5bc-c5d6-44da-9643-eef370e66582","year":2015},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:6b60af2090d1ed2b65a2f6e95d04593396f40c7c775f55d1d9827626bc174051","observation_id":"c208672a-6baa-40d2-96f6-986a387e9433","resolution":{"observed_at":"2026-05-14T02:28:44.204311Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1709.02538","last_updated":"2018-08-21T02:54:23Z","snapshot_observed_at":"2026-08-04T10:40:26.336472Z","submitted_at":"2017-09-08T04:53:51Z","title":"DeepFense: Online Accelerated Defense Against Adversarial Deep Learning","version":4},"cited_work":{"arxiv_id":"1709.02538","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"1709.02538","snapshot_observed_at":"2026-07-04T22:59:50.548384Z","title":"Curtail: Characterizing and thwarting adversarial deep learning","venue":null,"work_id":"6e137482-0fa5-4690-9903-3189f4de23ef","year":2017},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"cited_paper":"/paper/1709.02538","citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:e03c806dc98eb128deed3418a7ae5c59044dd57d41dff224458f97fa4f7b1bae","observation_id":"8ec02745-0010-49f9-8e03-fbd3b081ddb7","resolution":{"observed_at":"2026-07-04T22:59:50.548384Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"White-box vs black- box: Bayes optimal strategies for membership inference","venue":null,"work_id":"51ddf810-d5f4-457b-aef7-10b635269a66","year":2019},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:b86ac6d6973f9aafdd110899ae50664b5f3b1ec531d923a136df42bd29f4f3e4","observation_id":"0160049a-3905-4b25-a00d-6556d3e847b7","resolution":{"observed_at":"2026-05-14T02:28:44.314786Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Ml-leaks: Model and data indepen- dent membership inference attacks and defenses on machine learning models","venue":null,"work_id":"9adaf0eb-d8c0-4b71-aabd-1ec717aab720","year":2019},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:302319591716a4f54b9631f77d4a817f68aa97025ed155985dc95e85ec93fb0f","observation_id":"13dded0c-9d99-4a51-9ff6-8ced4359d5ae","resolution":{"observed_at":"2026-05-14T02:28:44.388805Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Hats: Hardness- aware trajectory synthesis for gui agents","venue":null,"work_id":"21717347-1753-4167-a18f-7c51700de19b","year":2026},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:aec441d07d88c5fe81b353cab202c6dc732449bc7ee03e1774ffaf4997c66d1f","observation_id":"43ae76de-d0f0-401a-b461-9cf1f1051018","resolution":{"observed_at":"2026-05-14T02:28:44.153844Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Membership inference attacks against machine learning models","venue":null,"work_id":"df97295e-09f3-4ff5-85d7-26564d616208","year":null},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:4c5245c61dd99668b1519225e2f4bae88fa0e571897c54d74c26670e46bb1a15","observation_id":"1ffb1455-4d5f-45b0-8d46-1b1043ce14e8","resolution":{"observed_at":"2026-05-14T02:28:43.973592Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Machine learning models that remember too much","venue":null,"work_id":"3baba480-3b51-4284-8045-b4da99bfbf73","year":2017},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:94826d030620edb11fb952c6833e6419edbcaebc2c48a1825191e991c1e1cd2a","observation_id":"f24f1158-4dfb-49f1-b470-21faef7b68e7","resolution":{"observed_at":"2026-05-14T02:28:44.165808Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Systematic evaluation of pri- vacy risks of machine learning models","venue":null,"work_id":"b217617d-409c-4f08-8cac-33f60b392f41","year":null},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:6983da7041c7cb12a657deea2703ff90695af888094399058c83421b05a4929d","observation_id":"e91cd55c-94c9-4559-ae60-23fcc6fd7546","resolution":{"observed_at":"2026-05-14T02:28:44.228632Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Introducing a new privacy testing library in tensorflow","venue":null,"work_id":"fc3315a7-ad0d-4ea6-84ca-2c8f1be39ef4","year":2020},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:f242d6341b5d8e0825f6b57101a4222a96062c9a79c902fdf390af6f55781fcc","observation_id":"cfba3fe4-d018-47ca-9ef3-db3d617a192c","resolution":{"observed_at":"2026-05-14T02:28:44.407286Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Intriguing properties of neural networks","venue":null,"work_id":"04603a0d-3fac-4d46-a186-e1caa455dd60","year":2014},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:5e840979d201e201af48812e418a80adc03d64a6202eb94ebaefbe973859fbda","observation_id":"2a9e493a-3f21-4b5a-94c1-631405f1f5ab","resolution":{"observed_at":"2026-05-14T02:28:44.088583Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Stealing machine learning models via prediction apis","venue":null,"work_id":"5819d721-2f40-4203-bfbf-13526c239b4c","year":2016},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:d56bfb7e3178462b25ee630835859050e71e9bb0f807618315635992ab250cca","observation_id":"f739bfd6-70cc-4ff5-8773-0b8a04e55950","resolution":{"observed_at":"2026-05-14T02:28:43.942518Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The stronger the diffusion model, the easier the backdoor: Data poisoning to induce copyright breaches without adjusting finetuning pipeline","venue":null,"work_id":"3b089751-02c2-496d-8c9a-099bfb59b48e","year":2024},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:be98b232ea7942335c2e6bb91697af9556aa416e339b1d53f41cb651075856a5","observation_id":"f5d3f909-b8b6-4b76-950d-7ac2bb16b5bf","resolution":{"observed_at":"2026-05-14T02:28:43.969363Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"On the convergence and robustness of adversarial training","venue":null,"work_id":"f57fa966-ed3d-4735-8fe0-624d3aa59330","year":2019},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:21873b81f313be3ba3bd4a160e18cb396e13b1dcb6648b17ae0acbe1bcad2fb9","observation_id":"8bc308ca-dddd-4552-af2c-6b632ab8d43f","resolution":{"observed_at":"2026-05-14T02:28:44.144490Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2111.08440","last_updated":"2022-04-11T09:23:43Z","snapshot_observed_at":"2026-07-06T12:09:00.789234Z","submitted_at":"2021-11-15T12:32:20Z","title":"On the Importance of Difficulty Calibration in Membership Inference Attacks","version":2},"cited_work":{"arxiv_id":"2111.08440","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2111.08440","snapshot_observed_at":"2026-07-04T10:59:46.017653Z","title":"arXiv preprint arXiv:2111.08440 , year=","venue":null,"work_id":"286ad73c-2654-4639-b69b-e5ab43d14c8b","year":2021},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"cited_paper":"/paper/2111.08440","citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:c52e3b1179c5b57319a2165ac26a6a7493922e6430ee5d17d679cff47cbafc27","observation_id":"972c079d-e5f8-4f69-a132-87b6b3b48d56","resolution":{"observed_at":"2026-05-13T20:08:12.965253Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adversarial weight perturbation helps robust generalization","venue":null,"work_id":"17e2e522-1456-4add-aefd-4a996e9d992a","year":null},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:7972e84a439f2067024e2a2a5171b2dcd9e036aed8e959d075c630f6880d574c","observation_id":"63193b6b-c149-4b2b-b514-aac71037d812","resolution":{"observed_at":"2026-05-14T02:28:43.962107Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The human splicing code reveals new insights into the genetic determinants of disease.Science, 347(6218)","venue":null,"work_id":"22e90c60-bfab-4786-911b-459f4448b780","year":2015},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:6f2f3b525d7a10a40ba00d5fc562d835401150d33c089bba11583459c7bc3e5b","observation_id":"0d0a8588-e251-425d-91a0-b49b7374d34e","resolution":{"observed_at":"2026-05-14T02:28:44.107678Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Enhanced membership in- ference attacks against machine learning models","venue":null,"work_id":"ab18199d-1bfd-4045-ab3a-d58c52ff6dc0","year":2022},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:d8bdbff1b608dc64b4e0a4612bb391dbf8ac777a0508d4c229f2f6e79ebcca60","observation_id":"5eabb051-df34-448d-83d4-91d4781596a7","resolution":{"observed_at":"2026-05-14T02:28:44.056217Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Privacy risk in machine learning: Analyzing the connection to overfitting","venue":null,"work_id":"4a8b7473-ae66-43bc-ac1c-6c7fb9e14494","year":2018},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:e411c820340e8f44d327f4b18bda30a665899a7ade4104920ec2bc14008d90c0","observation_id":"cf47ed50-e9a4-447d-97ad-9a6d38ece5c6","resolution":{"observed_at":"2026-05-14T02:28:43.998409Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Wide residual networks","venue":null,"work_id":"0cdcd971-3710-4494-b305-eb8db64899fc","year":2016},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:44decf6fe0cf43d1affca093d14cf3fc8189dd7c611619898909a67a0a82afa0","observation_id":"7db42e3c-d85b-4345-9468-110adf8a9d89","resolution":{"observed_at":"2026-05-14T02:28:44.235008Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Low-cost high-power membership inference attacks","venue":null,"work_id":"b072f1ec-5d88-4b13-8078-8f1fa6d9bd7a","year":2024},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:a949cd6542a29f6f4f65575d71851b5a30475847ccf935507579771e0161d4ed","observation_id":"e4d0c675-b452-4e74-9d99-5c48091674c7","resolution":{"observed_at":"2026-05-14T02:28:44.243280Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Understanding deep learning (still) re- quires rethinking generalization.Communications of the ACM, 64:107–115","venue":null,"work_id":"593f0006-e6d0-42ea-8e4e-af90d5888342","year":2021},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:16970eb6add3141ce795eaaff4b40b46cb3957c39b83f5d0d6ebe8c86c15ecf7","observation_id":"520ad148-0880-49bf-902d-6b95c74722d7","resolution":{"observed_at":"2026-05-14T02:28:44.063135Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Geometry-aware instance-reweighted adversarial training","venue":null,"work_id":"0f1878ce-e3b7-4a07-97c5-230b954b7039","year":2021},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:84bc554d62853bd0a6351df7b0e2df3b01e0a91dcb85a4ee7d3aba19743a6c36","observation_id":"f3761763-f997-493c-a376-bfbcf0607d1d","resolution":{"observed_at":"2026-05-14T02:28:44.078072Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Dual-path distillation: A unified framework to improve black- box attacks","venue":null,"work_id":"bb882a10-3f56-43e9-8678-a09113ef5071","year":2020},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:3b2aea6b093d859ca3c7dfa785a4ad24c96bd0b5911812b1612a016bc3bfbdb9","observation_id":"398e9658-af6e-4919-b94a-57413f8f373a","resolution":{"observed_at":"2026-05-14T02:28:44.029235Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Instead of taking a single step of size ϵ in the direction of the gradient sign, multiple smaller steps are taken in PGD (the result is clipped by the same ϵ)","venue":null,"work_id":"8100a023-230e-4503-9de1-3d2d8b0ba7dd","year":null},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:4a0e0aa5f3676a2a2498588e9d0c5d2e151d7e494929f775974fe6c3f1ff52f5","observation_id":"90c5e056-b868-49e4-9fe8-a6c6bbad24c9","resolution":{"observed_at":"2026-05-14T02:28:44.015083Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Motivated by this, [5] replaced the CE loss with several possible choices","venue":null,"work_id":"75448ad9-acbb-4598-9793-b7e3bc8d726f","year":null},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:074f24388b2e4a8b211f9b4cfe2e2efaff3c735ea78cb3133e0d89d66c609205","observation_id":"7a7f24ef-ec85-4b1d-81aa-0e28dfad7379","resolution":{"observed_at":"2026-05-14T02:28:44.103272Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"gradient-norm collapse","venue":null,"work_id":"52c494e5-30f3-4bab-ac3d-fd1f117b97d2","year":null},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:fa7a8010833eb026732948431e73785939165f6a9b506f9adb5f84f704d6cdb4","observation_id":"fc15a005-15bd-4631-bfad-abb4ff7eac0d","resolution":{"observed_at":"2026-05-14T02:28:43.953729Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2550.3685","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Shadow Models.ForAttack R[ 64], we train 100 reference models (OUT-Models)","venue":null,"work_id":"358e8cc9-fcf7-405c-a346-0a8fd456298f","year":1948},"citing_paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-05-13T20:05:32.965273Z"},"links":{"citing_paper":"/paper/2604.02780"},"observation_digest":"sha256:7e4490e387d3a3829f85161d257d59cfebe2c337aef4416f51cb06573972db51","observation_id":"6798d632-edd9-41ec-b579-8f0e8fca874e","resolution":{"observed_at":"2026-05-13T20:08:12.968644Z","resolver_source":"arxiv_id","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2604.02780","last_updated":"2026-04-03T06:44:11Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-02T17:12:02.793471Z","submitted_at":"2026-04-03T06:44:11Z","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models"},"reference_resolution":{"displayed":74,"state_counts":{"malformed_identifier":3,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":3,"verified_exact":8,"verified_fuzzy":60},"total_outbound_references":74},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 74 of 74 outbound references and 0 inbound Pith citation observations for arXiv:2604.02780."}