{"as_of":"2026-08-11T20:50:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:db7b4fd70b8052a2fff56c328bb63ee3028e1e83bc407a6e6a39a4266da40e84","coverage":[{"denominator":196,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T21:58:41.159723Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2501.18934/citation-record","integrity":"/paper/2501.18934/integrity","json":"/paper/2501.18934/citation-record.json","paper":"/paper/2501.18934"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:39.935175Z","title":", Zhou , S","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:39.935175Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:d3a999d6e6132180e5942bd8dcf5ccebb2e70d433a736c8b0393483f6993fa33","observation_id":"2c62b16a-b40f-48b7-a621-872014f4aeb4","resolution":{"observed_at":"2026-08-09T21:58:39.935175Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:39.939375Z","title":", Azzedin , F","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:39.939375Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:707d34ab141f22dfad0854cfe5aee96ded70e02b7802c8a17dfff783920be453","observation_id":"f74035d6-3e3c-4163-8309-09e9dddd2928","resolution":{"observed_at":"2026-08-09T21:58:39.939375Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:39.942862Z","title":", Kantarcioglu , M","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:39.942862Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:d706accd1208ce9c98107c17a3fafdbf98fc1480284381552fcdca73277b262d","observation_id":"ab56e3a9-d953-4581-ab86-043ce10fd0cc","resolution":{"observed_at":"2026-08-09T21:58:39.942862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:39.946351Z","title":": Ensembles of pruned deep neural networks for accurate and privacy preservation in iot applications","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:39.946351Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:f8f564edbc14b6aac20230eb793861ae2b6a1fdf217da6f1278014dd955e5e18","observation_id":"994fdcc1-da92-46f1-91e6-eb566ccb3105","resolution":{"observed_at":"2026-08-09T21:58:39.946351Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:39.949238Z","title":", Mahmood , K","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:39.949238Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:05edadc7b41b006d73cf6c204f6e12b189f0e52c2b275d80d5a53841b9929b55","observation_id":"6b9a9bd4-0e9f-471e-a591-a3faad90b5f5","resolution":{"observed_at":"2026-08-09T21:58:39.949238Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"purl/1037666","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:46.659067Z","title":", Tao , G","venue":null,"work_id":"d21de995-6d7a-4faf-9bbb-91f6807b6539","year":2022},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:39.952738Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:48d5686b6c7f049c561b427f51b466ff65596f2402bae8e980ce1ea39b430ede","observation_id":"a9183387-3656-4a69-8b6b-50a14d244a39","resolution":{"observed_at":"2026-08-09T21:58:46.664868Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:39.956068Z","title":", Nasrabadi , N.M","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:39.956068Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:524d3b6d39c937f788f116411d75a95d62837dae065904730192594bbe33b665","observation_id":"99e88ef9-be0e-4e00-b67f-9da9e4c547ca","resolution":{"observed_at":"2026-08-09T21:58:39.956068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:39.959990Z","title":", Abrahamyan , L","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:39.959990Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:4fccb84a4346e46dcda379353a110e22f0ced76ccd39a9abb9a0c76b51fc3a7c","observation_id":"16960bba-dc25-4d59-90b3-a201d9df2476","resolution":{"observed_at":"2026-08-09T21:58:39.959990Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:39.963335Z","title":", Hayes , J","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:39.963335Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:b3d238afc481e22ccd6526fef015069aefb8bc13446d8dade2a43c1647e5f63f","observation_id":"97a9b030-ed76-4906-b2cb-0afc5d0b4a47","resolution":{"observed_at":"2026-08-09T21:58:39.963335Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:39.966443Z","title":", Jia , R","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:39.966443Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:a86489d0fbffa690eef585414f5073f21dfb38292718a224e521bb387a8e801a","observation_id":"cc62b7e5-3c58-4f6d-a30a-1419bead8655","resolution":{"observed_at":"2026-08-09T21:58:39.966443Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:39.969633Z","title":", Kahla , M","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:39.969633Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:638fce8657714b752753dc8b6ad2e76468a40b7d1aedf0dd2026b8c06f6950f1","observation_id":"22e1ca0a-b3d5-4c82-88b8-82e99e4cf00f","resolution":{"observed_at":"2026-08-09T21:58:39.969633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.12192","last_updated":"2024-06-05T10:22:00Z","snapshot_observed_at":"2026-07-06T17:18:56.465394Z","submitted_at":"2024-01-22T18:34:42Z","title":"Text Embedding Inversion Security for Multilingual Language Models","version":4},"cited_work":{"arxiv_id":"2401.12192","doi":null,"metadata_source":"pith","pith_arxiv_id":"2401.12192","snapshot_observed_at":"2026-08-09T21:58:46.410052Z","title":"Text Embedding Inversion Security for Multilingual Language Models","venue":"cs.CL","work_id":"daf5b5de-d5e3-457a-9ef9-10ad5d98eaf8","year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:39.972736Z"},"links":{"cited_paper":"/paper/2401.12192","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:15fc5b2cc1cb15b92107e1dfa0fcd361241b7f17348a05493d7624fc25799c79","observation_id":"cc1ff9ad-2610-4462-8ce6-f4ba77afc231","resolution":{"observed_at":"2026-08-09T21:58:46.429697Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:39.976315Z","title":", Meerza , S.I.A","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:39.976315Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:934204f43f5890ff5996c9c639ee816e57fe52d6c220cf160ea171e0299b74d4","observation_id":"bdccc4e6-fd02-4833-8b02-a76f8223e603","resolution":{"observed_at":"2026-08-09T21:58:39.976315Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19958","last_updated":"2023-12-22T11:29:00Z","snapshot_observed_at":"2026-07-06T16:40:47.502692Z","submitted_at":"2023-10-30T19:18:09Z","title":"PriPrune: Quantifying and Preserving Privacy in Pruned Federated Learning","version":2},"cited_work":{"arxiv_id":"2310.19958","doi":null,"metadata_source":"pith","pith_arxiv_id":"2310.19958","snapshot_observed_at":"2026-08-09T21:58:46.246976Z","title":"PriPrune: Quantifying and Preserving Privacy in Pruned Federated Learning","venue":"cs.LG","work_id":"307d0889-e14f-415c-be18-f78d2c6556be","year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:39.979755Z"},"links":{"cited_paper":"/paper/2310.19958","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:be8af9af83cb89b01bf3c9c19ea4b70073dec6de73f20f8bcb4b1b027e906c9f","observation_id":"35e07e28-10c0-4f1a-b544-864f5e827c15","resolution":{"observed_at":"2026-08-09T21:58:46.273920Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11974","last_updated":"2025-02-17T16:20:48Z","snapshot_observed_at":"2026-08-07T18:11:52.907544Z","submitted_at":"2025-02-17T16:20:48Z","title":"Image Inversion: A Survey from GANs to Diffusion and Beyond","version":1},"cited_work":{"arxiv_id":"2502.11974","doi":"10.48550/arxiv.2502.11974","metadata_source":"pith","pith_arxiv_id":"2502.11974","snapshot_observed_at":"2026-08-10T05:30:23.456663Z","title":"Image Inversion: A Survey from GANs to Diffusion and Beyond","venue":"cs.CV","work_id":"de418eac-f2f8-4b8b-9383-054c53401dc2","year":2025},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:39.982863Z"},"links":{"cited_paper":"/paper/2502.11974","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:321917955f1557a652ab33a87c546b9ac5f6071c1c24a6580f4a2ff84312d150","observation_id":"ed6ae641-9bb9-4a75-b03c-d18487ae61b7","resolution":{"observed_at":"2026-08-09T21:58:43.876525Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.031465Z","title":", Breuer , A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.031465Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:a7392a52a5ee5352783c460ca5e52a0225a1d618f552041e6aad010d87cf184f","observation_id":"b807fe88-2dfa-4954-9c28-f2c0bb8f9def","resolution":{"observed_at":"2026-08-09T21:58:40.031465Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.091919Z","title":", Dong , W","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.091919Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:f2c56b57ea5e704f28a6b9935356746fd6e923072cd7b8b58176cfac9b96e4be","observation_id":"2e58d1c9-35da-4780-a6ed-cb300c294258","resolution":{"observed_at":"2026-08-09T21:58:40.091919Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"document/1022191","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:46.160863Z","title":": Sok: Model inversion attack landscape: Taxonomy, challenges, and future roadmap","venue":null,"work_id":"f6193e0d-f7b2-479a-8ae7-1836bf1905d9","year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.125559Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:78fc5d898f4db1732ddf52362ac9cbd41ff76b08d31d9f774a42e23794647a4d","observation_id":"4700e2e5-8d73-413d-998a-57a9b850f894","resolution":{"observed_at":"2026-08-09T21:58:46.167701Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.16086","last_updated":"2025-02-22T05:19:20Z","snapshot_observed_at":"2026-08-07T17:56:58.202840Z","submitted_at":"2025-02-22T05:19:20Z","title":"Stealing Training Data from Large Language Models in Decentralized Training through Activation Inversion Attack","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.16086","snapshot_observed_at":"2026-08-09T21:58:40.192468Z","title":", Lu , L","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.192468Z"},"links":{"cited_paper":"/paper/2502.16086","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:136bdbeed054c4b281c453472366d920ea2dc712b59d984bbed819d4d4b71d80","observation_id":"49b7f45c-e54c-457a-aef2-b968b94dab59","resolution":{"observed_at":"2026-08-09T21:58:40.192468Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.276825Z","title":", Nguyen , T.P","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.276825Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:ecab4a4d7b04493e4c60c9f0551cc70e99579c264654227ca01295c23e2a7b0c","observation_id":"e06deeb2-2d78-4edc-aaf2-dbb6de65c58d","resolution":{"observed_at":"2026-08-09T21:58:40.276825Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.311975Z","title":": The Concise Encyclopedia of Statistics","venue":null,"work_id":null,"year":2008},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.311975Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:64511fda2faa12f83198fab12ad2917bc9183982db6a2f8aa77888c2d8d99c95","observation_id":"51fcef80-e3b2-4329-8625-7a89acab4baf","resolution":{"observed_at":"2026-08-09T21:58:40.311975Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.360150Z","title":", Zhang , L","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.360150Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:c99c1ff6a29692de3e4e3287c76d12255aed88035fc3a8614282e4eece944654","observation_id":"4a3345c9-e3b2-43a8-b1d7-8acd8391c094","resolution":{"observed_at":"2026-08-09T21:58:40.360150Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.02042","last_updated":"2025-06-10T04:28:04Z","snapshot_observed_at":"2026-08-02T22:59:02.497963Z","submitted_at":"2022-12-05T05:36:15Z","title":"Refiner: Data Refining against Gradient Leakage Attacks in Federated Learning","version":3},"cited_work":{"arxiv_id":"2212.02042","doi":null,"metadata_source":"pith","pith_arxiv_id":"2212.02042","snapshot_observed_at":"2026-08-09T21:58:46.083698Z","title":"Refiner: Data Refining against Gradient Leakage Attacks in Federated Learning","venue":"cs.LG","work_id":"9fa3c620-610b-47be-b382-2e3a160b5e5e","year":2022},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.382974Z"},"links":{"cited_paper":"/paper/2212.02042","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:8314832bb88c55163692bfe75e5dc2176a3c4b9156c2bd813ad1a6eac925001a","observation_id":"45ccbf5a-488f-4447-bc84-df4deba5c31b","resolution":{"observed_at":"2026-08-09T21:58:46.088049Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.401902Z","title":", Chen , B","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.401902Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:3b6b0324f08dd8594afd7bb08c57e52ca044f2a13ed42107a8bf693950c8c893","observation_id":"837beaf5-6042-4a89-8bd9-000e6aba6eb1","resolution":{"observed_at":"2026-08-09T21:58:40.401902Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.405725Z","title":", Jha , S","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.405725Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:f5360b5dc6044e435b309d9cb5897a77ca05800890a7dca1c21c9471cb3f2e1c","observation_id":"21b1b5c2-ae1f-4c49-8f50-1c328d0be977","resolution":{"observed_at":"2026-08-09T21:58:40.405725Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.408986Z","title":", Liu , Y","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.408986Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:eb2ebd29c755df3cacc3c3200596adaf3dc1abc878a6776b22f7d93f3aba9b92","observation_id":"cc5a1fde-e97e-40ee-8cec-31267de11bf2","resolution":{"observed_at":"2026-08-09T21:58:40.408986Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.412238Z","title":", Lantz , E","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.412238Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:446b9c83d1efd6efe59debaf99263ae10eb02d6bf1250cdb418cf14431be672a","observation_id":"a6d818d4-f58f-43bb-a681-3d1b49516fa1","resolution":{"observed_at":"2026-08-09T21:58:40.412238Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.415758Z","title":", Papaspyridis , K","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.415758Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:1b8c04605bd2a6c65b5d6e216790c745b95795d93cdde8a63d7baa126720d019","observation_id":"37b3d0c5-832e-46fd-b027-24f7c9bb3815","resolution":{"observed_at":"2026-08-09T21:58:40.415758Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04013","last_updated":"2024-09-11T01:09:07Z","snapshot_observed_at":"2026-08-09T17:18:01.347657Z","submitted_at":"2024-02-06T14:06:23Z","title":"Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04013","snapshot_observed_at":"2026-08-09T21:58:40.418983Z","title":", Qiu , Y","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.418983Z"},"links":{"cited_paper":"/paper/2402.04013","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:a72925ae741b5d51fd20917204c0c212c7b84adf569bf817a8170aedd6e06abb","observation_id":"39368c2e-e445-483e-a1d9-327ba021473c","resolution":{"observed_at":"2026-08-09T21:58:40.418983Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.422935Z","title":", Bauermeister , H","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.422935Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:e6870822688c4c28aa66942a0dd8eaddbad7a22b3ad119cdabd5e0a7cc7a3966","observation_id":"54b521d5-e71d-4ad5-b1f2-0b42a567f8c4","resolution":{"observed_at":"2026-08-09T21:58:40.422935Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2006.15877","last_updated":"2020-06-29T09:02:16Z","snapshot_observed_at":"2026-08-05T20:08:18.762860Z","submitted_at":"2020-06-29T09:02:16Z","title":"Reducing Risk of Model Inversion Using Privacy-Guided Training","version":1},"cited_work":{"arxiv_id":"2006.15877","doi":null,"metadata_source":"pith","pith_arxiv_id":"2006.15877","snapshot_observed_at":"2026-08-09T21:58:45.911566Z","title":"Reducing Risk of Model Inversion Using Privacy-Guided Training","venue":"cs.LG","work_id":"bf104098-5464-484d-b3e3-1c817e7ad81f","year":2020},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.426486Z"},"links":{"cited_paper":"/paper/2006.15877","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:4c2ccae0dac9897422fff90186488e36bfd01d04fae89f07f5d947369811a17f","observation_id":"e703d9b2-e967-43a4-aeb2-7944e754efc6","resolution":{"observed_at":"2026-08-09T21:58:45.915692Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.429713Z","title":", Guo , S","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.429713Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:23238fd6ab4ad3b13e3e826d884fc5779d6d9b62ec253499a67487c6136aade0","observation_id":"73aa2943-327c-4935-993d-ec5c19d63fb3","resolution":{"observed_at":"2026-08-09T21:58:40.429713Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/s10462-023-10550-z","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T05:30:23.456663Z","title":", Jiang , L","venue":"Artificial Intelligence Review","work_id":"407ebe5f-fbbe-4246-aa0e-6e1cf93a1126","year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.433417Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:47db227d9ee5f394e22f65b792b07d4c96e658bacd8b88e6d940cdd105d71da1","observation_id":"eeb79898-d56d-4a5b-ab1d-f48683fd42b9","resolution":{"observed_at":"2026-08-09T21:58:43.807735Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.437014Z","title":", Karakolios , K","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.437014Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:b62d401b606f01e38c708ddf2004533e51f1be59f496ba8bb8e4212f148c0f9b","observation_id":"41b8c593-13f1-4ca9-a188-221d5890dc35","resolution":{"observed_at":"2026-08-09T21:58:40.437014Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.439976Z","title":": Deep learning","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.439976Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:dc411d20b1bf5536d07a9187ed9684d033febc0b04b561e7a9078a8ee5365591","observation_id":"c7644f5a-b647-4dbb-8eea-3aee9d82482b","resolution":{"observed_at":"2026-08-09T21:58:40.439976Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.07187","last_updated":"2024-12-10T04:53:42Z","snapshot_observed_at":"2026-08-11T19:00:13.041729Z","submitted_at":"2024-12-10T04:53:42Z","title":"A New Federated Learning Framework Against Gradient Inversion Attacks","version":1},"cited_work":{"arxiv_id":"2412.07187","doi":"10.48550/arxiv.2412.07187","metadata_source":"pith","pith_arxiv_id":"2412.07187","snapshot_observed_at":"2026-08-10T05:30:23.456663Z","title":"A New Federated Learning Framework Against Gradient Inversion Attacks","venue":"cs.LG","work_id":"ebef375d-b8a8-4382-942a-4d7b4f2d3534","year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.443324Z"},"links":{"cited_paper":"/paper/2412.07187","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:6ebc454d6f2296eb4fe9defd9ef1266e7f65b1d28e7ef82ae380a2e7f20ed17d","observation_id":"754e0df1-75f4-40f9-bc86-180f9560b66a","resolution":{"observed_at":"2026-08-09T21:58:43.702057Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.446940Z","title":", Zhang , X","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.446940Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:8707caa3f72149be6251bf40551e7fe2a9d44a7e5f8d14926477579f79556ffb","observation_id":"8930b527-9c32-4b8d-b72a-309f907e607c","resolution":{"observed_at":"2026-08-09T21:58:40.446940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.450804Z","title":", Zhu , T","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.450804Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:8fd28c8e10635ff054b4a23560fc7ef944a057a6ac0fb548b2c545932cf04351","observation_id":"908adf6b-c15f-4479-8b5a-723b0da39d58","resolution":{"observed_at":"2026-08-09T21:58:40.450804Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.454342Z","title":", Choi , J","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.454342Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:deaa5261d1c653ddd7d1d060f3060acc7dae401fb5403aa5024041c86889d3f6","observation_id":"5b0e318c-1772-4a2b-86f1-44242ce9edb7","resolution":{"observed_at":"2026-08-09T21:58:40.454342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.457792Z","title":", Gupta , S","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.457792Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:091bd2dd7ff507b5fc4c831efe37d5095f2a9b186802f748258d187de757b74e","observation_id":"6233f848-bbcf-4ea6-b79b-c12a0d1e3cda","resolution":{"observed_at":"2026-08-09T21:58:40.457792Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.460984Z","title":", Hao , K.J","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.460984Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:8b94cedb6bae7c5200f5d2200e535add663e458e8df007c3a63f5448e42a2902","observation_id":"1cd486e2-2a74-439d-9c18-c467fd164224","resolution":{"observed_at":"2026-08-09T21:58:40.460984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20380","last_updated":"2024-05-30T18:00:03Z","snapshot_observed_at":"2026-07-06T18:22:57.400982Z","submitted_at":"2024-05-30T18:00:03Z","title":"Gradient Inversion of Federated Diffusion Models","version":1},"cited_work":{"arxiv_id":"2405.20380","doi":"10.48550/arxiv.2405.20380","metadata_source":"pith","pith_arxiv_id":"2405.20380","snapshot_observed_at":"2026-08-10T05:30:23.456663Z","title":"Gradient Inversion of Federated Diffusion Models","venue":"cs.AI","work_id":"154f2b80-b16a-4bea-9aa8-374543164075","year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.464219Z"},"links":{"cited_paper":"/paper/2405.20380","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:26daceb54d44d351344f9ce1fe747f25a3b05a8391afa80d3a224d882c67ccf5","observation_id":"96052d91-18c4-465d-99cd-242cbea1ce05","resolution":{"observed_at":"2026-08-09T21:58:43.555182Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.468207Z","title":", Mattar , M","venue":null,"work_id":null,"year":2008},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.468207Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:2ae52e6d51fd0ad50792579a3a34e0924e1bf8fe319f41857b9b66913aa60181","observation_id":"7241e251-391e-4bc5-bf22-2bce491ea87f","resolution":{"observed_at":"2026-08-09T21:58:40.468207Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.471511Z","title":", Meng , G","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.471511Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:98c48ed5e301dd18a1ba6b43b4ad1a61da58cea98933272edc933701d9c111a1","observation_id":"622d4d69-1af3-4615-94c0-0f3451f1e663","resolution":{"observed_at":"2026-08-09T21:58:40.471511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.474914Z","title":", Ramsauer , H","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.474914Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:6ef2a8694d4ff6c265153751ae7f311921e9ace62de113de2b666b23cdc7e466","observation_id":"12ad0024-2183-4d37-8bc0-0486453eb59b","resolution":{"observed_at":"2026-08-09T21:58:40.474914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.479283Z","title":": Models as personal data","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.479283Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:a286af7d023ec8647b7dfa4e0c003c0cd510d1cc4356c9286412596b066b5b45","observation_id":"fcad1b97-f907-4eb2-9118-3893cd8ad10a","resolution":{"observed_at":"2026-08-09T21:58:40.479283Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.482790Z","title":", Wang , S","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.482790Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:3f7c60f17e51af769d9904cc433b61bdf25dfab43ff7f9df8a6e223c91fc491e","observation_id":"d9710b3a-1310-4d4a-803a-a6cd8efc6839","resolution":{"observed_at":"2026-08-09T21:58:40.482790Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.10558","last_updated":"2024-04-23T09:59:42Z","snapshot_observed_at":"2026-08-10T02:39:09.731023Z","submitted_at":"2024-03-14T02:17:57Z","title":"Adaptive Hybrid Masking Strategy for Privacy-Preserving Face Recognition Against Model Inversion Attack","version":2},"cited_work":{"arxiv_id":"2403.10558","doi":null,"metadata_source":"pith","pith_arxiv_id":"2403.10558","snapshot_observed_at":"2026-08-09T21:58:45.898138Z","title":"Adaptive Hybrid Masking Strategy for Privacy-Preserving Face Recognition Against Model Inversion Attack","venue":"cs.CV","work_id":"3e452c0e-4533-4c20-a94f-3b2e6c3eb934","year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.486113Z"},"links":{"cited_paper":"/paper/2403.10558","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:e43247998e9ccfe580013b2d09f62a78d44645f5a91aa28360f955349df48b79","observation_id":"9e90680d-fc03-4316-b95a-41698c841e4a","resolution":{"observed_at":"2026-08-09T21:58:45.901763Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.539028Z","title":", Yin , H","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.539028Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:53cf579adbd5c8c6cc0649d3681225af048e0f448ebb6745aa3b3e05ef853187","observation_id":"b07005ba-4700-42da-9550-78828648712b","resolution":{"observed_at":"2026-08-09T21:58:40.539028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.590417Z","title":", Moustafa , N","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.590417Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:049efe4d51b25fe7d0fd14d76b98323c1e3852f72daa3c9553dbfbfb5f2eab36","observation_id":"a9b024e5-13ad-4889-a10b-3d3e713dfcbe","resolution":{"observed_at":"2026-08-09T21:58:40.590417Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07040","last_updated":"2024-11-04T11:08:57Z","snapshot_observed_at":"2026-07-06T17:00:16.291803Z","submitted_at":"2023-12-12T07:52:35Z","title":"Rethinking Model Inversion Attacks With Patch-Wise Reconstruction","version":2},"cited_work":{"arxiv_id":"2312.07040","doi":null,"metadata_source":"pith","pith_arxiv_id":"2312.07040","snapshot_observed_at":"2026-08-09T21:58:45.845834Z","title":"Rethinking Model Inversion Attacks With Patch-Wise Reconstruction","venue":"cs.AI","work_id":"bc8760c6-dea9-4129-ac5b-75c0491b01b7","year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.650805Z"},"links":{"cited_paper":"/paper/2312.07040","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:e78048ed51474c8f8c325df2ffe41b93ab90541cbafb873c27ad3c821cf4b7fa","observation_id":"4039cf94-434b-4d57-9d21-8487aef18ced","resolution":{"observed_at":"2026-08-09T21:58:45.887252Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.684824Z","title":", Wang , S","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.684824Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:5384037a430c1975286a435c271f9a24d67faeb64e1eb5b89088b6e9bab09cfb","observation_id":"8fcb6d0b-a5ec-4b3d-86ae-d4d8ac4b4c44","resolution":{"observed_at":"2026-08-09T21:58:40.684824Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1812.04948","last_updated":"2019-03-29T11:08:46Z","snapshot_observed_at":"2026-08-10T12:08:24.752628Z","submitted_at":"2018-12-12T13:59:43Z","title":"A Style-Based Generator Architecture for Generative Adversarial Networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1812.04948","snapshot_observed_at":"2026-08-09T21:58:40.718276Z","title":": A style-based generator architecture for generative adversarial networks","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.718276Z"},"links":{"cited_paper":"/paper/1812.04948","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:e7ee9e5b99f410772f4a176275596646dfd34d12ab24c5cac98d38fb6d9e81d1","observation_id":"91ef0606-3298-46fb-a914-1c6bc59a0f4f","resolution":{"observed_at":"2026-08-09T21:58:40.718276Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.758224Z","title":", Chen , S","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.758224Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:89965f2fc14d6a4a01157089ee8acbcb961ae9a45ed3352478179f9e2d3159f5","observation_id":"cbb8e953-9341-4b37-8de5-db432ac018aa","resolution":{"observed_at":"2026-08-09T21:58:40.758224Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.772142Z","title":", Finke , D","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.772142Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:98930276d95e12f98d182d18d272afb9a5f0e5d8cf91ef6d374d90b813d5820d","observation_id":"634fb1cf-bfa2-444a-bc7e-4df37c51e227","resolution":{"observed_at":"2026-08-09T21:58:40.772142Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.775666Z","title":", Hinton , G","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.775666Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:ddf63aec35528b094724d51d8ed008e014c407b7bd960ba7ea6363d595711d0d","observation_id":"814b8d4d-7e98-43f1-b28f-d6efb9268e92","resolution":{"observed_at":"2026-08-09T21:58:40.775666Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.779625Z","title":", Nair , V","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.779625Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:07a8a53868ac4371e60cdd671b15c7d448a1af70e7d6400f37e950ef9cc40fc1","observation_id":"813a7684-5892-4393-abd7-fe0d8eb81fe1","resolution":{"observed_at":"2026-08-09T21:58:40.779625Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.783045Z","title":", Nakamura , K","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.783045Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:38eb483872ad38ffb7da03ac2a12cb2c884a0d36d10f8a8afce4b177f6970b69","observation_id":"c7743789-e1b3-4816-9a7f-5084bea56582","resolution":{"observed_at":"2026-08-09T21:58:40.783045Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.786365Z","title":", Nakamura , K","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.786365Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:c1979c0c400f05fce65ed6f209301765b803232aaf54904325bf3c3c54e85dbf","observation_id":"796815c3-b2df-46ec-81ef-9266e91680c1","resolution":{"observed_at":"2026-08-09T21:58:40.786365Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.789350Z","title":", Ziller , A","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.789350Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:54c05ff410a8781bf15c7b6d0016c4f3eda724cd4778399a4d80d60afd68f05e","observation_id":"3d9f0e4c-2064-4566-88b2-2dfbec073f9b","resolution":{"observed_at":"2026-08-09T21:58:40.789350Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10383","last_updated":"2024-09-30T11:58:27Z","snapshot_observed_at":"2026-08-10T04:00:38.772655Z","submitted_at":"2023-10-16T13:23:54Z","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10383","snapshot_observed_at":"2026-08-09T21:58:40.792758Z","title":", Chen , Y","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.792758Z"},"links":{"cited_paper":"/paper/2310.10383","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:594b4a839f78a89246267f490a2ebb725918e2f3afe8c892c004329e364d65f7","observation_id":"2c7f2adf-d77d-4ae1-9b4e-fb51b1c9dc33","resolution":{"observed_at":"2026-08-09T21:58:40.792758Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.796575Z","title":", Dong , L","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.796575Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:68a0014dd5626ff54825bbb3897c827438c7d1d273c958da7894977172e3a074","observation_id":"e0d1f126-f7bf-4ef7-bf88-942097eed5b1","resolution":{"observed_at":"2026-08-09T21:58:40.796575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.799803Z","title":": The mnist database of handwritten digits","venue":null,"work_id":null,"year":1998},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.799803Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:82d2a3c4d7ace5a3f37e1c9bc9377757e6152f31bd3d58ab423d55c31dc16af3","observation_id":"79f697be-e919-4fd9-8e41-f556da80c9fd","resolution":{"observed_at":"2026-08-09T21:58:40.799803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.802703Z","title":", Han , S","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":64,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.802703Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:0aa8b42a2fbcf31cd9721f148bf6b69bf1666db69dd6a6ed4d1ee40512eb0e8c","observation_id":"41137713-6ae4-40b8-8cbe-421e03005d3f","resolution":{"observed_at":"2026-08-09T21:58:40.802703Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.11424","last_updated":"2024-11-21T12:22:10Z","snapshot_observed_at":"2026-08-09T02:11:07.331897Z","submitted_at":"2024-07-16T06:38:49Z","title":"Model Inversion Attacks Through Target-Specific Conditional Diffusion Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.11424","snapshot_observed_at":"2026-08-09T21:58:40.805811Z","title":", Hao , Y","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.805811Z"},"links":{"cited_paper":"/paper/2407.11424","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:6567529918d0df2738882563d504e57781dc66509b14bcebc2e9562f2ddf70bb","observation_id":"1e62e8cc-dc77-43b8-9bea-d715d926131c","resolution":{"observed_at":"2026-08-09T21:58:40.805811Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.809281Z","title":", Li , B","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.809281Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:34b68c7f7a459a9b17b54eec31478b24c59f1c3448d44a14375416197f756be9","observation_id":"19cd5e3e-4a4b-4ac5-beb9-81eecb1d5e43","resolution":{"observed_at":"2026-08-09T21:58:40.809281Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.812582Z","title":", Luo , P","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.812582Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:3b5bcba261906d209eb5fdfccc04a9c3a51b9493640f312ba1ded5cde01cfd6c","observation_id":"4ccfa74a-9b2a-4378-9b82-63bb3d5f4040","resolution":{"observed_at":"2026-08-09T21:58:40.812582Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.815988Z","title":", Li , Y","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.815988Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:dec2a89f8c05f83ad329cc22b8c36b7e22ea0611afa2876bfabfc9ca8193a7aa","observation_id":"6e792d62-5f43-4bb1-9e11-23f57015fa94","resolution":{"observed_at":"2026-08-09T21:58:40.815988Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.819644Z","title":", Rakin , A.S","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":69,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.819644Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:83115ad3c301c8dfad2015e5d9fb88d79fdfa1ec9bdbeabd79ce97ea93a762f3","observation_id":"01eacd4b-cd4a-430e-bb0d-fe12317b0213","resolution":{"observed_at":"2026-08-09T21:58:40.819644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.822987Z","title":", Shen , Y.-C","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.822987Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:2643c243d696ba7f1bd4a4a54acf94ac6fe895b98a77d57ac8b8a32e6b1da562","observation_id":"040fd639-8785-4f65-b5d3-459c2a0c3760","resolution":{"observed_at":"2026-08-09T21:58:40.822987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09478","last_updated":"2025-03-22T03:29:27Z","snapshot_observed_at":"2026-07-06T17:30:16.881701Z","submitted_at":"2024-02-13T05:06:34Z","title":"Data Reconstruction Attacks and Defenses: A Systematic Evaluation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09478","snapshot_observed_at":"2026-08-09T21:58:40.826254Z","title":", Wang , Z","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.826254Z"},"links":{"cited_paper":"/paper/2402.09478","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:83f5f6bb8bf7a4c0aa58985a13d0be666f88505b56c078297b921945e0268637","observation_id":"6a674dec-5524-475b-92f5-af47466874ff","resolution":{"observed_at":"2026-08-09T21:58:40.826254Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.829746Z","title":", Wang , D","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":72,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.829746Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:38d4d0487804f8a7ca3d6266a7078724bb9cc5bd94f3aecf15e3118ae37159fc","observation_id":"3cc22178-16e3-4fd4-a7a6-2df9faa372ea","resolution":{"observed_at":"2026-08-09T21:58:40.829746Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"document/1049174","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:45.721351Z","title":", Xue , L","venue":null,"work_id":"7b8b145a-d8bf-4726-a2b9-8a8368051962","year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.832914Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:b4ad50405f67be5adcbf9a8cd53666f650a62e2fc862ab5f0fec2cf143469ba0","observation_id":"137429e5-ae9d-4fac-ac6a-2e397f649303","resolution":{"observed_at":"2026-08-09T21:58:45.770953Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.836600Z","title":", Yu , P","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":74,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.836600Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:8309c2c300c19385fc5a9fb81e2bb35a4a53a522ad22f52e0df72c2e1032648b","observation_id":"0dd39621-1bb2-4b65-8098-3c8cee47de98","resolution":{"observed_at":"2026-08-09T21:58:40.836600Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.839747Z","title":", Yao , H","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":75,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.839747Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:fa9a9c74eb0bdbd4647c7e5acf211d647cbded8bd7eea685577581b385b85620","observation_id":"0362071c-0ba6-4bb0-ac3d-2e62df5fd8b1","resolution":{"observed_at":"2026-08-09T21:58:40.839747Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.843180Z","title":", Zhu , C","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":76,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.843180Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:2bf8bd3e04b49742cf2c0be5383bff290330999aa7557f141bb6c73439d0a0b0","observation_id":"6a8d057e-c658-4706-a73e-a06d00d5b75c","resolution":{"observed_at":"2026-08-09T21:58:40.843180Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.846698Z","title":", Zhang , J","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":77,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.846698Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:cfb55d240339183893ec4103ff293a1473ea2ad44fd4dcacd6a399a2fb63d678","observation_id":"5dddc701-f2ce-48ad-9b86-b069850df51e","resolution":{"observed_at":"2026-08-09T21:58:40.846698Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.850818Z","title":", Abolhasan , M","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":78,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.850818Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:61cf5eda66092d138367ecbf0affe24ec23b0e1161c1c0fae1a306096fe9db0d","observation_id":"f0b1feb8-dc37-4c32-aabc-5d36c4bfb0a3","resolution":{"observed_at":"2026-08-09T21:58:40.850818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.853847Z","title":", Cortez , P","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":79,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.853847Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:40995c077c1c7edc60514259247b84b94dff7615c08dce9a49080fbc028ea64d","observation_id":"33339a5d-41da-4a9f-a4ea-0cc2833e0b96","resolution":{"observed_at":"2026-08-09T21:58:40.853847Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.878081Z","title":": Threat models to machine unlearning (2024) botherref","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":80,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.878081Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:2a0835366f14a8bef3dd5a0baeb38abcde9f2285b205569c2cd633625af7cc69","observation_id":"4b11fa72-b167-49b1-9577-24b7416aff9f","resolution":{"observed_at":"2026-08-09T21:58:40.878081Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.05036","last_updated":"2023-03-09T05:00:17Z","snapshot_observed_at":"2026-07-06T15:00:28.202700Z","submitted_at":"2023-03-09T05:00:17Z","title":"Generative Model-Based Attack on Learnable Image Encryption for Privacy-Preserving Deep Learning","version":1},"cited_work":{"arxiv_id":"2303.05036","doi":"10.48550/arxiv.2303.05036","metadata_source":"pith","pith_arxiv_id":"2303.05036","snapshot_observed_at":"2026-08-10T05:30:23.456663Z","title":"Generative Model-Based Attack on Learnable Image Encryption for Privacy-Preserving Deep Learning","venue":"cs.CV","work_id":"9948ae4a-829c-44eb-803a-6c839550e668","year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":81,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.900800Z"},"links":{"cited_paper":"/paper/2303.05036","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:f78a12b733a34afd5adc89107f9324f13ead9d40977784abfa47478379a2ca65","observation_id":"03dde2e0-0973-4347-8adf-2d4947a5d89f","resolution":{"observed_at":"2026-08-09T21:58:43.397997Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.938841Z","title":", Kita , K","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":82,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.938841Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:d7a45dae284fd8b844845320043da5393b23324d3b4dad7955a50957afb3a647","observation_id":"dc611237-a89d-46ee-854a-267dbcf495bf","resolution":{"observed_at":"2026-08-09T21:58:40.938841Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:40.979527Z","title":", Song , C","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":83,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:40.979527Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:e114220acc7d02b063ace644ac465c65c4612999843b15cb5f420abf845920ef","observation_id":"d5c4e5f7-fd9a-4155-9af8-32ca161c1026","resolution":{"observed_at":"2026-08-09T21:58:40.979527Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:41.011032Z","title":", Tanaka , M","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:41.011032Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:677261f3a9d158cbe2eb11da148081be8ced6740ccb6c60621f604a52bf050ff","observation_id":"fc0b23c5-d4b1-4b26-81ef-9de67f15a89b","resolution":{"observed_at":"2026-08-09T21:58:41.011032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.13647","last_updated":"2023-11-22T19:04:04Z","snapshot_observed_at":"2026-07-06T16:51:19.405206Z","submitted_at":"2023-11-22T19:04:04Z","title":"Language Model Inversion","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.13647","snapshot_observed_at":"2026-08-09T21:58:41.076034Z","title":", Zhao , W","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":85,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:41.076034Z"},"links":{"cited_paper":"/paper/2311.13647","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:0f1fe578ab83d031fc745b8d80458b5693d3dd09cc0a1e3ca44b403223dcf152","observation_id":"593ea95e-1760-4840-b3fd-3f06abdebb2a","resolution":{"observed_at":"2026-08-09T21:58:41.076034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:41.111246Z","title":", Chandrasegaran , K","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":86,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:41.111246Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:a778b1048a987d7a828df4f17747d59f38f21fba46ec0251f189ced99d0eb76f","observation_id":"6c568b13-09fa-476b-b71b-3d1ff365a5f4","resolution":{"observed_at":"2026-08-09T21:58:41.111246Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:41.114840Z","title":", Chandrasegaran , K","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":87,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:41.114840Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:dfce4217a60ab28c91467406d0dc0cf1de7d3770dd5e4828f980fd10eda19b1e","observation_id":"1d8432e8-7a57-4d44-a7e6-d02d39410ecd","resolution":{"observed_at":"2026-08-09T21:58:41.114840Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:41.118011Z","title":": Enhancing data privacy in artificial intelligence (2024) botherref","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":88,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:41.118011Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:3504134de979a0587dee2b484c1d81ea874f47b6264c3411e92d36a42fa39ec7","observation_id":"ef837490-c5b0-489e-8900-c6e63ca0850e","resolution":{"observed_at":"2026-08-09T21:58:41.118011Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:41.121510Z","title":", Wang , T","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":89,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:41.121510Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:d1e65dc65ceed09a4b68099c6bba62a3a47763902abe380878c915e0298675d1","observation_id":"97384668-27ea-4c73-856f-0ac7ff71a16a","resolution":{"observed_at":"2026-08-09T21:58:41.121510Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"document/1043776","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:45.420181Z","title":", Wang , X","venue":null,"work_id":"095b0927-2c1b-4d8f-a644-2684b12a1056","year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":90,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:41.124860Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:adc7e154618818d7f3300b7c65c07cb18371461437182b155e0b69834ad6cf38","observation_id":"e75ccb17-b5ac-45fc-8db9-ffb9ba471ae7","resolution":{"observed_at":"2026-08-09T21:58:45.446247Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:41.128284Z","title":", Yang , W","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":91,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:41.128284Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:ed8c81ea90a4f0e6f8cc086754c657de6567456635baf53e89974a2dc005c3ae","observation_id":"758870dd-93f3-49dc-8c27-28fec264cc84","resolution":{"observed_at":"2026-08-09T21:58:41.128284Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:41.131663Z","title":", Zhang , B","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":92,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:41.131663Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:8b06ab0f88586b74d8cc1f7ab0090d3ed9fbbe91101e75f6433f21fa3f9c3d1d","observation_id":"1e5f6d45-8902-46a5-9b0b-78f280034a95","resolution":{"observed_at":"2026-08-09T21:58:41.131663Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:41.134876Z","title":", Dey , E","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":93,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:41.134876Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:05bd37905478e96e161015927732fdb298f35bd6e856742d14f3fb2719845906","observation_id":"cf7d0040-e895-4081-8131-aba3a9534224","resolution":{"observed_at":"2026-08-09T21:58:41.134876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2301.03206","last_updated":"2023-01-09T08:51:15Z","snapshot_observed_at":"2026-07-06T14:39:27.590535Z","submitted_at":"2023-01-09T08:51:15Z","title":"Introducing Model Inversion Attacks on Automatic Speaker Recognition","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2301.03206","snapshot_observed_at":"2026-08-09T21:58:41.138416Z","title":", Boenisch , F","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":94,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:41.138416Z"},"links":{"cited_paper":"/paper/2301.03206","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:3070e093369f9731a64e4e9ca56d9e8cb6d542bede51ee7980bdf0ab9f9a2c70","observation_id":"9cc709ad-da04-4075-a069-3ee7230ddbfc","resolution":{"observed_at":"2026-08-09T21:58:41.138416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"document/1074002","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:45.325522Z","title":", Chen , Y","venue":null,"work_id":"19d6cad5-c841-4ae6-a517-e11d510cab60","year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":95,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:41.142248Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:87b2e15e16cdb3345d75845e10ab13fe0482fda48dc13142ca66d8aab469e02f","observation_id":"428ef543-9180-4a45-8cf8-0a77c677f653","resolution":{"observed_at":"2026-08-09T21:58:45.330362Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.15586","last_updated":"2024-11-13T08:17:38Z","snapshot_observed_at":"2026-08-04T12:38:50.610604Z","submitted_at":"2024-05-24T14:14:24Z","title":"DAGER: Exact Gradient Inversion for Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.15586","snapshot_observed_at":"2026-08-09T21:58:41.146160Z","title":", Dimitrov , D.I","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":96,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:41.146160Z"},"links":{"cited_paper":"/paper/2405.15586","citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:3c478c59f0d8b035b3667b553179ae9856f28e30a9b44ff0fa861931f50f6dda","observation_id":"1749e37d-026a-412d-8967-09705869596d","resolution":{"observed_at":"2026-08-09T21:58:41.146160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:41.150092Z","title":", Ding , J","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":97,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:41.150092Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:080a1125f1f3b17dbc00b8d5d73cba44ae76d3e535b592e104ccba9fc589f409","observation_id":"48a83746-8abc-48e9-8915-3ed0dd07e7fd","resolution":{"observed_at":"2026-08-09T21:58:41.150092Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:41.153228Z","title":", Li , Y","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":98,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:41.153228Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:3133db921ddf5c9496a6dd30cf6baf14c317e41a45849ab8f66eda16ad36a6c3","observation_id":"f629bb3a-52ea-4c45-8f6a-cea03a9b80a0","resolution":{"observed_at":"2026-08-09T21:58:41.153228Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T21:58:41.156435Z","title":", Liu , F","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":99,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:41.156435Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:3cafd5bb43dfc2b97878cc6cd37588668c75203ba6da54bd3c157928b3dc0ce6","observation_id":"cca2dd3d-35ac-4365-bc41-ea73faf91366","resolution":{"observed_at":"2026-08-09T21:58:41.156435Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-3-031-56066-8_20","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T05:30:23.456663Z","title":", Satsangi , Y","venue":"Lecture notes in computer science","work_id":"14eda134-e128-4704-ad1d-f41743bb5418","year":2024},"citing_paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey","version":2},"reference_index":100,"source":"arxiv_source","source_observed_at":"2026-08-09T21:58:41.159723Z"},"links":{"citing_paper":"/paper/2501.18934"},"observation_digest":"sha256:4f39c49e53f40f967d63d90a667ff656f04ae1f989873983c964120789aa6fcc","observation_id":"b9137788-0ffd-4658-9cc0-7d544392c3fb","resolution":{"observed_at":"2026-08-09T21:58:43.374620Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2501.18934","last_updated":"2025-04-30T06:30:46Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T04:01:00.620289Z","submitted_at":"2025-01-31T07:32:12Z","title":"Deep Learning Model Inversion Attacks and Defenses: A Comprehensive Survey"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":83,"verified_exact":17,"verified_fuzzy":0},"total_outbound_references":196},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 100 of 196 outbound references and 0 inbound Pith citation observations for arXiv:2501.18934."}