{"as_of":"2026-08-10T15:31:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:16cc5fb07d32f38e8526958c5ccc6c5186f1e37a2d5a82b4b8e5800c8c48578c","coverage":[{"denominator":55,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":55,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T10:19:52.716421Z","state":"measured"},{"denominator":55,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":55,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2502.08151/citation-record","integrity":"/paper/2502.08151/integrity","json":"/paper/2502.08151/citation-record.json","paper":"/paper/2502.08151"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1912.04977","last_updated":"2021-03-09T03:03:49Z","snapshot_observed_at":"2026-08-06T02:25:34.414976Z","submitted_at":"2019-12-10T20:55:41Z","title":"Advances and Open Problems in Federated Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.04977","snapshot_observed_at":"2026-08-08T10:19:52.394661Z","title":"Advances and open problems in federated learning,","venue":null,"work_id":null,"year":1912},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.394661Z"},"links":{"cited_paper":"/paper/1912.04977","citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:c569cc0b59e1baf5b11ec73f5c552597692d479dba66e562a2d7369db4a0b57b","observation_id":"b078c5e2-a27c-49ce-94c0-85bebe58842b","resolution":{"observed_at":"2026-08-08T10:19:52.394661Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.414255Z","title":"Feddmc: Efficient and robust federated learning via detecting malicious clients,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.414255Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:e676f792d89b7906a4ac08e0927c0f34f04e3eb60cdf31169b8e1540f796ec0a","observation_id":"32bfc9e9-6889-4385-a76f-13b1a4303441","resolution":{"observed_at":"2026-08-08T10:19:52.414255Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.418616Z","title":"Fedproc: Prototypical contrastive federated learning on non-iid data,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.418616Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:9265f225262a176124cfda6d3c77ec0a52235fdc6d92f340d8b3a2a0491daea8","observation_id":"bb4656f5-909d-4a11-a74c-572b8934f1a1","resolution":{"observed_at":"2026-08-08T10:19:52.418616Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.483056Z","title":"Federated learning: Collaborative ma- chine learning without centralized training data,","venue":null,"work_id":"d703a25a-1925-4140-b559-dce6d0bb5326","year":2017},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.423318Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:fcb493a392eeb62516375f77b8a7d241c2dc763a80c739cb5c91e914e569641b","observation_id":"b936fafd-69e5-4935-a379-9180c3979ee2","resolution":{"observed_at":"2026-08-08T10:19:53.487640Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.468250Z","title":"Federated evaluation and tuning for on-device personalization: System design & and applications,","venue":null,"work_id":"fcad88a5-65da-42db-a108-0ff79b1802da","year":2021},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.428052Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:b38b7cd668e3f8efa31fded44f822a677bf16a5f057a0d0b212102539ec8d08f","observation_id":"b4f7765b-5394-4bd9-98c0-069a424f0a52","resolution":{"observed_at":"2026-08-08T10:19:53.473042Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.432723Z","title":"Fate: An industrial grade platform for collaborative learning with data protection,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.432723Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:dd009341076abf7d3f8697e61bb8294ff82145987e78e342836a12bd506c0cf6","observation_id":"62039eda-01cd-4239-9c6a-c045bf285429","resolution":{"observed_at":"2026-08-08T10:19:52.432723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.445502Z","title":"Deep leakage from gradients,","venue":null,"work_id":"ee8a41b7-abf7-41c9-9631-141986854564","year":2019},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.437308Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:9d94c1888fa11443d0903a4c14da8223f118c0ead4391268f63429e70ea22e8c","observation_id":"21bc9ea3-d2cd-4230-bbaf-d085e29004ec","resolution":{"observed_at":"2026-08-08T10:19:53.449904Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.432486Z","title":"Using highly compressed gradients in federated learning for data reconstruction attacks,","venue":null,"work_id":"df3730aa-a2f6-45f2-9c7c-6a79618d0009","year":2023},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.441849Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:20f2b65d15610876027830313fac0dcc770cfa739abc7a4d1f0a4c45545a8331","observation_id":"ced6a892-cfa4-434c-9c05-21a3342a0026","resolution":{"observed_at":"2026-08-08T10:19:53.436657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.419223Z","title":"See through gradients: Image batch recovery via gradinversion,","venue":null,"work_id":"aa474119-a0b2-4e0c-9163-55416097b5fa","year":2021},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.446884Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:2fc58b2438c169556850a29453fae36ca3a0e98253ec8689bc69f673c9a3dc51","observation_id":"8a120277-1be8-47b5-a97a-bebd8e1bd0b7","resolution":{"observed_at":"2026-08-08T10:19:53.423494Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.405639Z","title":"Robbing the fed: Directly obtaining private data in federated learn- ing with modified models,","venue":null,"work_id":"4b48e9b5-2831-4710-ab3b-60dab60c3bfe","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.451253Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:42b23a9c6255f9d2eca04d311cdd5e0ffa08594e658f3f300a27e3711400e0c9","observation_id":"0e8d0b08-64e5-4163-afdf-f10ad1df8b62","resolution":{"observed_at":"2026-08-08T10:19:53.410153Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.391786Z","title":"When the curious abandon honesty: Federated learn- ing is not private,","venue":null,"work_id":"ee65efa0-1461-4d39-b8d8-07d2ce896cee","year":2021},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.455852Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:83842bc9d4c419580fd2729bb476d77364203d43e8adf358ff05ff6dccaf375b","observation_id":"764b87eb-1db3-4e30-b467-20416664c422","resolution":{"observed_at":"2026-08-08T10:19:53.396389Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.377895Z","title":"A framework for evaluating gradient leakage attacks in federated learning,","venue":null,"work_id":"d25c7545-1353-4e3b-91a8-6acb0af4c8fc","year":2020},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.461240Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:2f02208c42ecf2fcd0b1c498d76cccf808c06f646d2cf0b383473efe2d81564e","observation_id":"5eec396c-8b00-44f7-8c8e-077fc11d8e69","resolution":{"observed_at":"2026-08-08T10:19:53.382321Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.363867Z","title":"Eluding secure aggregation in federated learning via model inconsistency,","venue":null,"work_id":"f635da1f-b57c-4365-9106-6aea188221d2","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.465721Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:f9a0dcec59ed4a5af163028832d554ca83847cd69ae219f2d41ae345644525d2","observation_id":"477c1cb9-07d1-41ab-93ec-0b9a8dfc479e","resolution":{"observed_at":"2026-08-08T10:19:53.368408Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.349664Z","title":"Dreaming to distill: Data-free knowledge transfer via deepinversion,","venue":null,"work_id":"ffc4b5e3-20eb-4d37-b87f-5baba667bbbe","year":2020},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.469843Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:e3eb85f86674b7b0179d86708ff8e29347c9fd902a7653bfd72442f2b6a32380","observation_id":"121ee932-ede8-4f32-a88a-4387abf2cfbf","resolution":{"observed_at":"2026-08-08T10:19:53.354114Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.334559Z","title":"Reconstructing individual data points in federated learning hardened with differential privacy and secure aggregation,","venue":null,"work_id":"24fe11b3-ee08-4de7-acca-5b967ff7e505","year":2023},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.474259Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:e69fa292141fd744bab73ae3752d0579dd969b679582b90727e7107c06245920","observation_id":"cff1622d-f5f8-427c-b7c9-1c37cc24a634","resolution":{"observed_at":"2026-08-08T10:19:53.339645Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.320033Z","title":"Gradient inversion with generative image prior,","venue":null,"work_id":"66c87c17-a4d2-4db8-8fe3-3fcc5e5210ee","year":2021},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.478846Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:d70ee5d856aff06a04a2e92df4edd377ae08e4b9b1b4facfeeac5fe9218900ab","observation_id":"6c8b37d2-9953-4a67-97f4-6dc4f8d52d30","resolution":{"observed_at":"2026-08-08T10:19:53.324408Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.306520Z","title":"Gradvit: Gradient inversion of vision transformers,","venue":null,"work_id":"d49a5957-4c14-4827-88d6-6c1b33356500","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.483684Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:fe12faa112802112e7b8eb2ecd7cdf16b36e2ffc6218cf00de53932c6cf6d48d","observation_id":"818a3362-5165-4a5c-9ae8-4429a4509c2f","resolution":{"observed_at":"2026-08-08T10:19:53.310717Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.292079Z","title":"Analyzing user-level privacy attack against federated learning,","venue":null,"work_id":"6a22892d-ac2f-4cca-beb2-6945710d467e","year":2020},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.487852Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:fadba6cbae3895fa76d8b4ce80573653c7bb43367e321c4e5b4afafd0a6d9c06","observation_id":"73614c0b-784a-4025-a198-ae6041e6ad83","resolution":{"observed_at":"2026-08-08T10:19:53.296642Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.277777Z","title":"Cafe: Catas- trophic data leakage in vertical federated learning,","venue":null,"work_id":"4c3d3f8f-c180-429d-a459-d69890a59635","year":2021},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.492484Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:0d3cc3c1013d6b87b98b95c4e99f6b91179a818cc4a59f7a12b2be0e926bbb38","observation_id":"dd2dd6f8-9faa-4bbb-a7a0-0274e5778c46","resolution":{"observed_at":"2026-08-08T10:19:53.282396Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.263122Z","title":"R-gap: Recursive gradient attack on privacy,","venue":null,"work_id":"1d0b133e-c9b1-4e29-8652-0e2761c32ea5","year":2021},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.497106Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:293d5bb09d717f3f59111290a9a1842b1bb446fbc0011fbf97676f1dce9e5c8c","observation_id":"0a11b923-f55d-4157-a109-6c810e716bef","resolution":{"observed_at":"2026-08-08T10:19:53.267893Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.514824Z","title":"Federated learning with differential privacy: Algorithms and performance analysis,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.514824Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:e226e8dd987adca23461ef5a1cd58923b6314a1a57c9a0791d41658945bf98fc","observation_id":"fd6c7018-d51f-4e5b-8634-d8eb9744ef98","resolution":{"observed_at":"2026-08-08T10:19:52.514824Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.238095Z","title":"A differentially private federated learning model against poisoning attacks in edge computing,","venue":null,"work_id":"2a558841-2bb4-4b55-9ae7-5e1e2c91fa9e","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.534939Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:b0f6d21b415631037ff189933a8e36b12a37bb6615f4e04b5b81ffdb1679bbd6","observation_id":"8473a74a-167c-45ab-93c0-f35efe0e9734","resolution":{"observed_at":"2026-08-08T10:19:53.242974Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.223031Z","title":"Personalized federated learning with differential privacy,","venue":null,"work_id":"7e3b4de2-6228-46b8-9ce0-62965ff60368","year":2020},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.581155Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:ae11309a61ee7cf28b4d4adbf1b858bb5f600fa29e248815bd02362bc98c7b00","observation_id":"c7d5dd16-c3ef-40d7-b153-50f8ff7159bc","resolution":{"observed_at":"2026-08-08T10:19:53.228200Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.207818Z","title":"Efficient differentially private secure aggregation for federated learning via hardness of learning with errors,","venue":null,"work_id":"09131a79-42e4-4007-b6c6-92279b738be3","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.585179Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:3047df4df353e750a4a471b4e113f243f191cf67e2d2a07f3bd6845a0e73c2c7","observation_id":"f6663f9d-643e-4e44-a8c1-147cf9cb39c2","resolution":{"observed_at":"2026-08-08T10:19:53.212282Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.193364Z","title":"Exploring the security boundary of data reconstruction via neuron exclusivity analysis,","venue":null,"work_id":"b0b5b96d-5d55-4cb1-80d5-e03709131abc","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.589196Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:b8d0cbfe3ed9fdc7200d9561cdf1b78ef476d49705a6bafe3e1dddc9a3f1698b","observation_id":"fde50f1c-44ee-4471-8751-beb384d5ce8a","resolution":{"observed_at":"2026-08-08T10:19:53.197727Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.178464Z","title":"Model inversion attack by integration of deep generative models: Privacy-sensitive face generation from a face recognition system,","venue":null,"work_id":"4670253b-2ef0-4c10-8ee1-d0600303c011","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.592989Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:9c0196e588131593a45922a9d6dc755bb4536ae598fd1fabdd1f9c924c90baed","observation_id":"a8b444e1-9636-4c9d-8808-1804048c1156","resolution":{"observed_at":"2026-08-08T10:19:53.183394Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.163596Z","title":"On the inadequacy of similarity- based privacy metrics: Reconstruction attacks against","venue":null,"work_id":"c8b64125-8b9c-4e67-8882-493529919a34","year":2023},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.596958Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:c3dbe16ac1b2308a11f4e099f11f0128abc3354260643e44e7355cdb4bd34bc7","observation_id":"32df23a3-96ec-4875-931d-238063741645","resolution":{"observed_at":"2026-08-08T10:19:53.168444Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.147750Z","title":"Beyond class-level privacy leakage: Breaking record-level privacy in federated learning,","venue":null,"work_id":"686f9fa3-cf2c-4349-b62e-0f532fb51689","year":2021},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.601317Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:c28ad2c7f4ab36c763498ae7724dfd27e989150f3a269f4294142bc68def0ca7","observation_id":"1d445d0b-535c-4e3c-815c-211a06507618","resolution":{"observed_at":"2026-08-08T10:19:53.152934Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.605511Z","title":"Generative adversarial networks,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.605511Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:e0bfb9765d6e894ca3e9665340d7d005cca89c632e5fb60c5f1ee46efe21c0c4","observation_id":"4cfc251c-8d1c-4ca2-9d1d-2933029320dc","resolution":{"observed_at":"2026-08-08T10:19:52.605511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.120429Z","title":"Communication-Efficient Learning of Deep Networks from Decentral- ized Data,","venue":null,"work_id":"3a5d7be8-4cc1-45c2-8dac-de4f9c1a1cb3","year":2017},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.609903Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:53bce9705eae2564da61ddcb7461af09a8cb34b5965142cbd3ab66148f42d648","observation_id":"a82c2b4f-201c-4b3e-a780-6394fe45b51b","resolution":{"observed_at":"2026-08-08T10:19:53.125968Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.105220Z","title":"The algorithmic foundations of differential privacy,","venue":null,"work_id":"af076aa0-5a7f-4864-b187-324cabef6763","year":2014},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.613827Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:89b1e0eaa121345cfe0ab6b1ddd47cb49c29694599dfb42fa48fcccc4e90f92e","observation_id":"5ae616ab-4e25-44bd-8af7-351abbb03dec","resolution":{"observed_at":"2026-08-08T10:19:53.109715Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.090502Z","title":"Learning differ- entially private recurrent language models,","venue":null,"work_id":"6ef28874-a281-44a9-962f-caff140c43de","year":2018},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.617971Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:113b3153ca1500074e8de1e6c3d37a933ff37c7344ed7d5348c0f6220bc140ad","observation_id":"4a091dde-0e51-4bea-b50f-b0343edf0ca1","resolution":{"observed_at":"2026-08-08T10:19:53.095184Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.074965Z","title":"Local and central differential privacy for robustness and privacy in federated learning,","venue":null,"work_id":"8ed60db7-22dd-4fcb-a854-37001cf8d94a","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.622126Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:ddac24e7aebb390be1e10874c516dcfc95e00fb2e891eea5f10f2a6a46083b74","observation_id":"c44c372b-7892-4bb5-af03-f2d5ec9beb26","resolution":{"observed_at":"2026-08-08T10:19:53.079546Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.059790Z","title":"Eluding secure aggregation in federated learning via model inconsistency,","venue":null,"work_id":"26acdbb3-9558-4ae3-b3aa-9a6c295cba05","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.626297Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:5407988b4f383c9ccacdd4a1f1ec624c17f44719114c3403e6d9df81c6ab33a1","observation_id":"98fdc36c-fa42-4df5-8808-12b29633acca","resolution":{"observed_at":"2026-08-08T10:19:53.064507Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.044808Z","title":"Inverting gradi- ents - how easy is it to break privacy in federated learning?,","venue":null,"work_id":"9ccfb0a5-623e-420e-b176-ecf33d77cc8a","year":2020},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.630766Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:432ae1441e0657b5b14bcaa8f879465b094f5fe2f7214d8742063eacf6288a2f","observation_id":"51c0ab02-c70b-43e6-87a9-9df2d12a44c7","resolution":{"observed_at":"2026-08-08T10:19:53.049793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.635121Z","title":"ImageNet Large Scale Visual Recognition Challenge,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.635121Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:abfc8990110f4269a520b66ce7076642d298c6fe926fcebf215ae770016d759f","observation_id":"40f98308-aa64-4885-9310-b44515635e07","resolution":{"observed_at":"2026-08-08T10:19:52.635121Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.02643","last_updated":"2023-04-05T17:59:46Z","snapshot_observed_at":"2026-08-08T05:14:59.435033Z","submitted_at":"2023-04-05T17:59:46Z","title":"Segment Anything","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.02643","snapshot_observed_at":"2026-08-08T10:19:52.639408Z","title":"Segment anything,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.639408Z"},"links":{"cited_paper":"/paper/2304.02643","citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:b4fbb8fdf8ffbfd3e5e01e8d02913d616bfd7634c4be32e79fbdb514ebd012f2","observation_id":"a550b3a6-c7a6-4c01-9be5-b261cdede390","resolution":{"observed_at":"2026-08-08T10:19:52.639408Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.08196","last_updated":"2023-05-19T16:33:03Z","snapshot_observed_at":"2026-08-09T17:26:24.629501Z","submitted_at":"2023-05-14T16:23:22Z","title":"A Comprehensive Survey on Segment Anything Model for Vision and Beyond","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.08196","snapshot_observed_at":"2026-08-08T10:19:52.644129Z","title":"A comprehensive survey on segment anything model for vision and beyond,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.644129Z"},"links":{"cited_paper":"/paper/2305.08196","citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:d96df4feb3c9a1a4e61f4e5ca57cace22bf7a5783b07f442805dcd1556cb4ae2","observation_id":"1ce87ea9-bc25-4025-ac36-6cede8e8d2be","resolution":{"observed_at":"2026-08-08T10:19:52.644129Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.017981Z","title":"Segment anything in medical images,","venue":null,"work_id":"5de14fff-ae47-4c31-962a-bf726540e8d4","year":2023},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.648559Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:bd0c848a686e88f44382c3c4d6bd00bd864dbcc53a7ce44ec4ce3a74a385745e","observation_id":"da38be55-5fee-4303-8f69-e055cb097ccf","resolution":{"observed_at":"2026-08-08T10:19:53.022786Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:53.002044Z","title":"Segment anything in non-euclidean domains: Challenges and opportunities,","venue":null,"work_id":"6c062aa3-f834-4935-88f1-93c40b0f3c9b","year":2023},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.652523Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:8d118960daeb67938f7c0597d1d553d3ac8184d610d4abfed030cb10f5845197","observation_id":"b8c42cf8-942d-4ac6-9fbc-a1af1fcf76c5","resolution":{"observed_at":"2026-08-08T10:19:53.007631Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.987509Z","title":"A generalization of the half-normal distribution with applications to lifetime data,","venue":null,"work_id":"df263608-410c-44a2-879d-357ffcf82d13","year":2008},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.656405Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:ff3871e06e320b9a430c426b2ccfd2a08749f70109b52ffeb63fa4ba7c71f93e","observation_id":"00c5e8cd-dbb8-4166-b4a0-d3de46427a5b","resolution":{"observed_at":"2026-08-08T10:19:52.992121Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.973500Z","title":null,"venue":null,"work_id":"bb3d8d30-fc1d-41a1-91f0-71c92ec13041","year":2005},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.660207Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:e7e7086e97b8cb0ea7b4fc76e7e989ec06281eb0c77f0a680dc7cb4b6532af80","observation_id":"6c655148-5fd4-4822-a2c9-fe2983434dd6","resolution":{"observed_at":"2026-08-08T10:19:52.977790Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.958689Z","title":"Foreseeing recon- struction quality of gradient inversion: An optimization perspective,","venue":null,"work_id":"2d848b7d-f39e-415c-829d-0a6cea19cebf","year":2024},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.664110Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:9b5e372d30b4718fddf3ff2b18c46f2d1bf707f461e9405b4261a6b48879b24d","observation_id":"876510ef-07ed-44d9-946c-347680b783ec","resolution":{"observed_at":"2026-08-08T10:19:52.963424Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.668266Z","title":"Learning multiple layers of features from tiny images,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.668266Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:6a2d811bb718a572d16fd180588aa3c13be52aa5b212af5e863d05ee8b7cd178","observation_id":"3d92b254-f2a4-46db-a262-6fcef742c038","resolution":{"observed_at":"2026-08-08T10:19:52.668266Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.672118Z","title":"Caltech-256 object category dataset,","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.672118Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:71e68fb2ad1f72f5e154270bf25214ad1adb213126ca1285ea3252f7c4182726","observation_id":"0e56aac2-e1fc-4992-808f-46c762fa174b","resolution":{"observed_at":"2026-08-08T10:19:52.672118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.923108Z","title":"Automated flower classification over a large number of classes,","venue":null,"work_id":"7bf4d6d8-aeca-4ef5-9910-042223fdddcf","year":2008},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.675896Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:3e5492fe64297436fd49ad1a521a311c1e1449e8aeb1cf489db731a9c3aef4ab","observation_id":"96cc9723-5982-45f4-8b82-8c3e1adc67af","resolution":{"observed_at":"2026-08-08T10:19:52.928273Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.680005Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.680005Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:ecc3af1a3a0faad24f1982cc52634b908d3f23f61d9f929f6b54b81b761880cf","observation_id":"6e4be033-04fc-49d1-8555-6d45b6a0ae64","resolution":{"observed_at":"2026-08-08T10:19:52.680005Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.896698Z","title":"Complex wavelet structural similarity: A new image similarity index,","venue":null,"work_id":"37c85949-9b81-4c14-aee6-e6709625a00e","year":2009},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.684283Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:41e367118987f745a521bfdffecab68584e8b269cf0f4e885d10e97821fa22de","observation_id":"371d56c6-d5c9-4d86-8a9f-6d01c6afa227","resolution":{"observed_at":"2026-08-08T10:19:52.901647Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.881466Z","title":"Preserving privacy and security in federated learning,","venue":null,"work_id":"b9e1d3fc-d307-4388-a649-1b10f13edf28","year":2024},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.688896Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:521f3af3d9382bf3d9045f3959e21543c0c6ea3faba9e435e464038e48310587","observation_id":"0d6ab166-b864-43f1-997d-e0e684aa68e6","resolution":{"observed_at":"2026-08-08T10:19:52.886044Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.866198Z","title":"L-secnet: Towards secure and lightweight deep neural network inference,","venue":null,"work_id":"75bc828a-41cc-4808-a562-12c53a27a93a","year":2023},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.693596Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:2e6a3850c7babdd631cf7107f60f2429d7efc62b654099a9a44733c4db001b9e","observation_id":"330a8e03-f5b7-470d-8eb9-03afd9477929","resolution":{"observed_at":"2026-08-08T10:19:52.871024Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.851501Z","title":"A convnet for the 2020s,","venue":null,"work_id":"6019361c-f1cf-45eb-be58-c0e085b101a3","year":2022},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.698162Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:9c460782246cd81a4882a331663f00d8f46bd32dd3cfb5c4f680cf412656bcff","observation_id":"730bb7e7-3c48-4543-bb1d-bd1d8f20cd76","resolution":{"observed_at":"2026-08-08T10:19:52.856129Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.837036Z","title":"Densely connected convolutional networks,","venue":null,"work_id":"1877a27d-924a-434b-a922-55b7ec1d22f4","year":2018},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.703017Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:e5f4c79a5eb576c224ba86732d1b98b309d09e2c3b6f4bc166200fb19929ba14","observation_id":"b1226d00-b548-4681-80cb-1eb83592785a","resolution":{"observed_at":"2026-08-08T10:19:52.841484Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.707539Z","title":"Efficientnet: Rethinking model scaling for convolutional neural networks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.707539Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:f134566e9772df2321de20b9f03c3cf8ba677eaa649ff935d7c8c22a085b7a23","observation_id":"07d54d27-0e36-4d6c-87eb-0f4b527bb3d9","resolution":{"observed_at":"2026-08-08T10:19:52.707539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.812944Z","title":"Going deeper with convolutions,","venue":null,"work_id":"5c08c916-814b-442d-a421-b819e11b09c6","year":2014},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.711915Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:a5666947d22a268a8c8eb4436c325aaee592e85720463c242d4642d83ab2f6d5","observation_id":"07c8b4eb-c96b-4ce8-b894-15ba33caa9ec","resolution":{"observed_at":"2026-08-08T10:19:52.817351Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T10:19:52.795097Z","title":"She is currently a Senior Lecturer with the University of New South Wales, Canberra Campus, Australia","venue":null,"work_id":"f1891af6-1355-4741-855e-969e6a50e900","year":2002},"citing_paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy","version":1},"reference_index":2018,"source":"pdf_text","source_observed_at":"2026-08-08T10:19:52.716421Z"},"links":{"citing_paper":"/paper/2502.08151"},"observation_digest":"sha256:6fd32796a6f62c4f93085fc662a7c1b1f9e4a0cb2239a83c5909383c26a6c045","observation_id":"0aa55292-9fbb-4df4-9c06-8d6d90e5f769","resolution":{"observed_at":"2026-08-08T10:19:52.801935Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2502.08151","last_updated":"2025-02-12T06:37:26Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T13:48:31.855007Z","submitted_at":"2025-02-12T06:37:26Z","title":"Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacy"},"reference_resolution":{"displayed":55,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":14,"verified_exact":0,"verified_fuzzy":40},"total_outbound_references":55},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 55 of 55 outbound references and 0 inbound Pith citation observations for arXiv:2502.08151."}