Paper Citation Record · LEDGER

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference

As of 14 August 2026, this Paper Citation Record lists 31 of 31 outbound references and 2 inbound Pith citation observations for arXiv:1908.11229.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
1908.11229 v1

Coverage vector

measured 31 of 31 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-14T10:30:08.648244Z

measured 33 of 33 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-14T06:32:32.682623+00:00

measured 2 of 2 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-07T12:35:40.029754Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-06-29T08:43:15.825857Z

Reference resolution

31 of 31 outbound references displayed

verified exact0
verified fuzzy17
unresolved14
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 0957be20-58ed-4562-a8b5-b9aa78570320 · outbound

This paper cites write newline.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference write newline

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-14T10:30:08.354022Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6a05f1c8-434d-4f17-8776-438dec8285bc · outbound

This paper cites write newline.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference write newline

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-14T10:30:08.361882Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6b09c77b-4949-441c-9ca1-3697419260db · outbound

This paper cites Deep learning with differential privacy.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Deep learning with differential privacy

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T10:30:09.442130Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation fa3bffa1-6964-4b0a-9c5d-0bafc77e1277 · outbound

This paper cites Hacking smart machines with smarter ones: How to extract meaningful data from machine learning classifiers.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Hacking smart machines with smarter ones: How to extract meaningful data from machine learning classifiers

Reference 4

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T10:30:09.411948Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 97471b4e-7671-41e8-a3aa-4c2807841bac · outbound

This paper cites Algorithmic stability for adaptive data analysis.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Algorithmic stability for adaptive data analysis

Reference 5

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T10:30:09.377785Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 6d54a6be-aa86-4fe5-97e6-d433b6f16a65 · outbound

This paper cites an unresolved cited work.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Unresolved cited work

Reference 6

Resolution: unresolved; raw_fallback, observed 2026-08-14T10:30:09.350098Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 29b80a11-7d3b-49b1-a689-1146d2d89352 · outbound

This paper cites Unsupervised learning by predicting noise.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Unsupervised learning by predicting noise

Reference 7

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T10:30:09.328124Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation db908132-f099-4523-b642-bf551955db76 · outbound

This paper cites The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-14T10:30:08.405951Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f6695b80-44bf-432a-b2d4-29adabb5e218 · outbound

This paper cites Imagenet: A large-scale hierarchical image database.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Imagenet: A large-scale hierarchical image database

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-14T10:30:08.416336Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f44231fa-6e13-41d2-84f7-96bea7d0c356 · outbound

This paper cites Discriminative unsupervised feature learning with convolutional neural networks.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Discriminative unsupervised feature learning with convolutional neural networks

Reference 10

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T10:30:09.285438Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation ad3011a8-2a28-4846-a65a-978ceb7ea459 · outbound

This paper cites Calibrating noise to sensitivity in private data analysis.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Calibrating noise to sensitivity in private data analysis

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-14T10:30:08.431023Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 32a35aa9-8718-411b-9197-a53c6cb17531 · outbound

This paper cites Robust traceability from trace amounts.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Robust traceability from trace amounts

Reference 12

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T10:30:09.223305Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 42b5e9c1-7eb5-426f-a0d1-fbc8f9fd2cad · outbound

This paper cites LOGAN: Membership Inference Attacks Against Generative Models.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference LOGAN: Membership Inference Attacks Against Generative Models

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-14T10:30:08.446697Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a245571a-48a3-4d51-8685-3d3145ec676b · outbound

This paper cites Deep residual learning for image recognition.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Deep residual learning for image recognition

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-14T10:30:08.454545Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 35c46d46-3465-4e47-894d-9e851ae63177 · outbound

This paper cites Understanding black-box predictions via influence functions.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Understanding black-box predictions via influence functions

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-14T10:30:08.462552Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1cf97d53-2410-460c-bb3c-fa93f264d7be · outbound

This paper cites Kanwal, Tegan Maharaj, Emmanuel Bengio, Asja Fischer, Aaron Courville, Simon Lacoste-Julien, and Yoshua Bengio.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Kanwal, Tegan Maharaj, Emmanuel Bengio, Asja Fischer, Aaron Courville, Simon Lacoste-Julien, and Yoshua Bengio

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T10:30:09.163211Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 6e3ca034-dd75-42ca-9cd8-e03f58f88b55 · outbound

This paper cites Kullback.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Kullback

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T10:30:09.144666Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 0ebb03ac-eb83-4c4f-915b-a9bdc62b57a3 · outbound

This paper cites Understanding Membership Inferences on Well-Generalized Learning Models.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Understanding Membership Inferences on Well-Generalized Learning Models

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-14T10:30:08.496351Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 98337d35-9466-4839-a78f-f69d2297ba49 · outbound

This paper cites an unresolved cited work.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Unresolved cited work

Reference 19

Resolution: unresolved; raw_fallback, observed 2026-08-14T10:30:09.126423Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 4f6bc398-819d-40fc-9089-ca064768e229 · outbound

This paper cites Learning in a Large Function Space: Privacy-Preserving Mechanisms for SVM Learning.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Learning in a Large Function Space: Privacy-Preserving Mechanisms for SVM Learning

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-14T10:30:08.536578Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c30ca6c6-7b70-410b-8c69-db618311caab · outbound

This paper cites Berg, and Li Fei-Fei.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Berg, and Li Fei-Fei

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T10:30:09.106609Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 7bc2c9aa-97e8-4e10-97c3-426e96bef57f · outbound

This paper cites Ml-leaks: Model and data independent membership inference attacks and defenses on machine learning models.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Ml-leaks: Model and data independent membership inference attacks and defenses on machine learning models

Reference 22

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T10:30:09.080582Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 48723d33-e9a7-4e08-af84-ff638b5971b8 · outbound

This paper cites Jordan, and Eran Halperin.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Jordan, and Eran Halperin

Reference 23

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T10:30:09.057813Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation f8c207bc-6f1d-4600-ba06-123dbf00df9c · outbound

This paper cites Membership inference attacks against machine learning models.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Membership inference attacks against machine learning models

Reference 24

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T10:30:09.026741Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 3df3de20-a3e8-4088-b07e-9c7eb190f32a · outbound

This paper cites Very deep convolutional networks for large-scale image recognition.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Very deep convolutional networks for large-scale image recognition

Reference 25

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T10:30:09.000845Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation d859ff4b-52c3-4cfb-98f5-95c2662dc269 · outbound

This paper cites an unresolved cited work.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Unresolved cited work

Reference 26

Resolution: unresolved; raw_fallback, observed 2026-08-14T10:30:08.964642Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 0abcc303-106c-4d17-88ae-f9b1863726a6 · outbound

This paper cites Privacy for free: Posterior sampling and stochastic gradient monte carlo.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Privacy for free: Posterior sampling and stochastic gradient monte carlo

Reference 27

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T10:30:08.936172Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 019ff87a-28ce-4ed1-b41a-cc2e9685f00b · outbound

This paper cites On-average KL -privacy and its equivalence to generalization for max-entropy mechanisms.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference On-average KL -privacy and its equivalence to generalization for max-entropy mechanisms

Reference 28

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T10:30:08.914047Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 25eab06c-f8bc-4a93-b92a-eae9f3365199 · outbound

This paper cites Bayesian learning via stochastic gradient langevin dynamics.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Bayesian learning via stochastic gradient langevin dynamics

Reference 29

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T10:30:08.893047Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 0a92229c-e83f-457f-ae47-410dd048232f · outbound

This paper cites Privacy risk in machine learning: Analyzing the connection to overfitting.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Privacy risk in machine learning: Analyzing the connection to overfitting

Reference 30

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T10:30:08.868081Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation f12b6d76-e65a-4c8a-bcdd-90cac9fa0e26 · outbound

This paper cites Understanding deep learning requires rethinking generalization.

White-box vs Black-box: Bayes Optimal Strategies for Membership Inference Understanding deep learning requires rethinking generalization

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-14T10:30:08.648244Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

Observation b145047f-1305-4242-bd70-5f36b364841a · inbound

How much do language models memorize? cites this paper.

How much do language models memorize? White-box vs Black-box: Bayes Optimal Strategies for Membership Inference

Reference 44

Resolution: unresolved; no resolver link, observed 2026-08-07T12:35:40.029754Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c1bffa79-388b-49ee-8365-10fea1ebf28c · inbound

idSCD: Identifying Training Datasets through Semantic Correlation Descriptors cites this paper.

idSCD: Identifying Training Datasets through Semantic Correlation Descriptors White-box vs Black-box: Bayes Optimal Strategies for Membership Inference

Reference 39

Resolution: verified exact; arxiv_id, observed 2026-06-29T08:43:15.827298Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.