{"as_of":"2026-08-10T12:48:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2fc5f8f5e47574a77578f042957cdc6596ac4fb7bf51c49156d17de77effa9fb","coverage":[{"denominator":34,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":34,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T11:21:29.277094Z","state":"measured"},{"denominator":34,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":34,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.02711/citation-record","integrity":"/paper/2506.02711/integrity","json":"/paper/2506.02711/citation-record.json","paper":"/paper/2506.02711"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:32.646774Z","title":"Superdriverai: Towards design and implementation for end-to-end learning-based autonomous driving","venue":null,"work_id":"7f71b32b-f5f8-459e-84fd-8c777c70fa02","year":2023},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:26.576608Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:68b969ba9c41f248a5d4c772368991fd0f37e46f0a4a5dc440a1710b416ef429","observation_id":"e1787c0e-4b59-4f26-9289-7bedacb67003","resolution":{"observed_at":"2026-08-07T11:21:32.775595Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:32.345247Z","title":"Scalable membership inference attacks via quantile regression","venue":null,"work_id":"07d5b59b-6980-44ce-85d7-0ee52dbd2069","year":2024},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:26.660163Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:1a08b339052c9a1ee2975e1b94e18d03097d0cb05dfdfc4455821af09fa471ac","observation_id":"82ab584f-2277-4465-9b69-9e2ec3170ddf","resolution":{"observed_at":"2026-08-07T11:21:32.485902Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:26.757606Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:26.757606Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:ef635c7c3e178faa761140b3aadf2388bda6f227c2b68c3eff5ed67feb0b58e0","observation_id":"8c78805d-62f4-4024-98df-23f9225ba007","resolution":{"observed_at":"2026-08-07T11:21:26.757606Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:32.084737Z","title":"The secret sharer: Evaluating and testing unintended memorization in neural networks","venue":null,"work_id":"75a56549-a323-47f1-bc60-7ca61210280e","year":2019},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:26.815604Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:1eda141907c67dfa0fcd934f5283aa8feb8056a38206cc31edb0d88bd9e65dda","observation_id":"2962e0e2-ad65-4898-b73c-2487ff6544b6","resolution":{"observed_at":"2026-08-07T11:21:32.158012Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:26.902277Z","title":"Extracting training data from large language models","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:26.902277Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:4082ee1b1161bc001ac9bd84cc1edb83db2a84f4eca1859d9aa9de42a956bf22","observation_id":"8b741b13-5e8a-4207-b74e-454abb7f6fe2","resolution":{"observed_at":"2026-08-07T11:21:26.902277Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:26.973546Z","title":"Membership inference attacks from first principles","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:26.973546Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:61c21ab3d5fe57b09b2e5d8ee8e7b65bf69a47b964fe7d8bf680af2b59c0cca0","observation_id":"d09ba2fb-042f-4fe6-8e4f-ce4c4ef5ae75","resolution":{"observed_at":"2026-08-07T11:21:26.973546Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.07646","last_updated":"2023-03-06T06:28:18Z","snapshot_observed_at":"2026-08-03T19:51:05.627063Z","submitted_at":"2022-02-15T18:48:31Z","title":"Quantifying Memorization Across Neural Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.07646","snapshot_observed_at":"2026-08-07T11:21:27.043524Z","title":"Quantifying memorization across neural language models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.043524Z"},"links":{"cited_paper":"/paper/2202.07646","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:17dc936b37095c183b984c8d0e26c5cccdecc097286f87fde794f78ca3d1e0f8","observation_id":"f09e6cf1-81d8-44f6-b754-10564e897d49","resolution":{"observed_at":"2026-08-07T11:21:27.043524Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:31.807305Z","title":"Forecasting stock market crisis events using deep and statistical machine learning techniques","venue":null,"work_id":"285abb45-6062-4de5-b4c6-be3c25506c68","year":2018},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.128838Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:df7bccd90924c0b0393dd8ae2bc81a5fa6c44680add5ae8e06dee7165a5fa2b2","observation_id":"2626b60c-88cb-417c-9cb1-fb7caa0463a2","resolution":{"observed_at":"2026-08-07T11:21:31.918601Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03838","last_updated":"2024-01-16T21:06:25Z","snapshot_observed_at":"2026-08-09T15:11:14.043818Z","submitted_at":"2023-10-05T18:46:27Z","title":"Chameleon: Increasing Label-Only Membership Leakage with Adaptive Poisoning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03838","snapshot_observed_at":"2026-08-07T11:21:27.185180Z","title":"Chameleon: Increasing label-only membership leakage with adaptive poisoning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.185180Z"},"links":{"cited_paper":"/paper/2310.03838","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:2abd64608f4b5657a05f29480c34e9675d4471741cf530f95f0197aea3ece73f","observation_id":"5ffc95f0-9fe0-4ca8-916f-32195d595dd3","resolution":{"observed_at":"2026-08-07T11:21:27.185180Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:31.531799Z","title":"Hopskipjumpattack: A query-efficient decision-based attack","venue":null,"work_id":"5adbee1e-2cf7-40a6-b499-c979ffc46ba1","year":2020},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.299806Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:27beb73cfc30567a823c6a3bdbd3cdb15a72cdb89b722672517919cfd6f0da5a","observation_id":"2052be72-a05a-42fd-b833-8c7782e03fac","resolution":{"observed_at":"2026-08-07T11:21:31.669969Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:31.332980Z","title":"Amplifying membership exposure via data poisoning","venue":null,"work_id":"0a876e76-c134-4b7f-a7e7-9f5b8fa54405","year":2022},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.353339Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:45413119604d19d451c5d27a9da470184aa07a79b1d8a556203a5d359c141c2a","observation_id":"fe0fecf2-7378-433c-8686-2f50d416b620","resolution":{"observed_at":"2026-08-07T11:21:31.393409Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:27.427820Z","title":"Label- only membership inference attacks","venue":null,"work_id":null,"year":1964},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.427820Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:35e2cdd494009096d4c3528595cd92be53198ad2170334a405e74fed4767ebfd","observation_id":"2963c44b-63e9-41c3-b5bf-402b657fc3e8","resolution":{"observed_at":"2026-08-07T11:21:27.427820Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:31.072390Z","title":"Privacy side channels in machine learning systems","venue":null,"work_id":"227affe2-647e-48b0-8618-b2e6a201d4a9","year":2024},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.511666Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:f3f0528b54e85de4de6e25c19718f4bf3f6099067df319dcc80da02373284ed2","observation_id":"f6f24906-e0d7-4f5d-8c73-0aad315fe8e1","resolution":{"observed_at":"2026-08-07T11:21:31.214282Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:30.889201Z","title":"Leveraging adversarial examples to quantify membership information leakage","venue":null,"work_id":"91d50af3-2328-4063-88a5-1f97e85de9e9","year":2022},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.576558Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:df3368896810a5003f985d260b531689b2b901ae2057b2316260c932540336b7","observation_id":"49f355e1-c122-4594-b6a2-3b4803718aa8","resolution":{"observed_at":"2026-08-07T11:21:30.968902Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:30.692617Z","title":"Risk assessment for hospital readmissions: Insights from machine learning algorithms","venue":null,"work_id":"14283430-96ca-40ee-91d8-c131bd1a0c42","year":2021},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.641197Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:867c65d900f87647ea313bb7cc5cd5ad869448aa948458d1b718be69f8e6e519","observation_id":"501f2e2c-8bd8-4cdf-ba29-ade26bf496a9","resolution":{"observed_at":"2026-08-07T11:21:30.780209Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-07T11:21:27.721455Z","title":"Explaining and harnessing adversar- ial examples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.721455Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:cdb40a1f237a38291d76bb1d4ee50ab40cf8137d0e04dc706b110905bd040f82","observation_id":"8f7d50a8-3839-4be8-9762-7e5ae4cee0bf","resolution":{"observed_at":"2026-08-07T11:21:27.721455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:30.517243Z","title":"Simple black-box adversarial attacks","venue":null,"work_id":"a02929fe-9ccc-4e42-893a-10891769abde","year":2019},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.836901Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:28ae3266f1ebb641935f9065314fb4267553ba77fa7f441fee19515305f10087","observation_id":"43bc160c-fef2-41fe-87a7-9d55dc4ec032","resolution":{"observed_at":"2026-08-07T11:21:30.622004Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-07T11:21:27.908079Z","title":"Towards deep learning models resistant to adversarial attacks.arXiv preprint arXiv:1706.06083, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.908079Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:5d572492eec760007659a05b0b9eaf98183014f738a5010c7b67e2ab412fe1af","observation_id":"92d82447-3a68-4694-9abd-30f5d70b2bc4","resolution":{"observed_at":"2026-08-07T11:21:27.908079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:30.359014Z","title":"Comprehensive privacy analysis of deep learning: Passive and active white-box inference attacks against centralized and federated learning","venue":null,"work_id":"8d8c20af-9747-4a71-a084-e0be1a8bef3f","year":2019},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:27.995647Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:bc0930865f90dde6c30fa2e19cdf40a12238ac9529cb1479c5bf4072bc64aa25","observation_id":"19f67cde-ddb1-411a-b0e7-84c776dcc5ba","resolution":{"observed_at":"2026-08-07T11:21:30.422334Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17035","last_updated":"2023-11-28T18:47:03Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-11-28T18:47:03Z","title":"Scalable Extraction of Training Data from (Production) Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.17035","snapshot_observed_at":"2026-08-07T11:21:28.060151Z","title":"Scalable extraction of training data from (production) language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.060151Z"},"links":{"cited_paper":"/paper/2311.17035","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:6ab1d02fbdd30a0a5705daf29a75a37c7e6b8187f309cbc15d5867e6d17eb919","observation_id":"4c6f8a47-624c-4e20-8f30-0a45c9a1c4c9","resolution":{"observed_at":"2026-08-07T11:21:28.060151Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.17746","last_updated":"2025-05-07T18:36:12Z","snapshot_observed_at":"2026-07-06T18:36:51.761148Z","submitted_at":"2024-06-25T17:32:16Z","title":"Recite, Reconstruct, Recollect: Memorization in LMs as a Multifaceted Phenomenon","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.17746","snapshot_observed_at":"2026-08-07T11:21:28.153750Z","title":"Recite, reconstruct, recollect: Memorization in lms as a multifaceted phenomenon","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.153750Z"},"links":{"cited_paper":"/paper/2406.17746","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:acd35314cb48387997dd0567ef4644706179d109731ce5af5767395b5959e4da","observation_id":"6b9c9a84-b12e-4746-8ab4-625c4f860a33","resolution":{"observed_at":"2026-08-07T11:21:28.153750Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1806.01246","last_updated":"2018-12-14T19:39:43Z","snapshot_observed_at":"2026-08-08T03:39:28.408433Z","submitted_at":"2018-06-04T17:38:42Z","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1806.01246","snapshot_observed_at":"2026-08-07T11:21:28.225597Z","title":"Ml-leaks: Model and data independent membership inference attacks and defenses on machine learning models","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.225597Z"},"links":{"cited_paper":"/paper/1806.01246","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:5af60434bd150a7fc28a448d76d0c43f195e2634fb8699c8b31c1470e36b8594","observation_id":"dab98859-6eaa-4ba9-aa4f-5e7d5906cff2","resolution":{"observed_at":"2026-08-07T11:21:28.225597Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:30.251409Z","title":"Machine learning as an early warning system to predict financial crisis","venue":null,"work_id":"55a1fe8f-3019-4e34-bee2-962613c108ac","year":2020},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.323057Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:5969a841e389d3f7efb6d631d6c0b1861bf9655b0d441595e3dc72868724f24c","observation_id":"4197393e-a003-4c95-864b-613aa282e63b","resolution":{"observed_at":"2026-08-07T11:21:30.297603Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:28.416923Z","title":"Membership inference attacks against machine learning models","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.416923Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:c4a1b435da36c569a9cd739d678fe1d9479381abc582de5e82cf9bff174f6af4","observation_id":"487c3b25-c21d-48a1-8723-07f0dd20f1e5","resolution":{"observed_at":"2026-08-07T11:21:28.416923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:30.126720Z","title":"Systematic evaluation of privacy risks of machine learning models","venue":null,"work_id":"cb6a8e37-1329-473e-927c-a7697aea3798","year":2021},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.510923Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:cece0ef927c5c2d7a40e95c4a3d965bea1fe8b4c67070d3422d644ce626aea5a","observation_id":"373d3cdc-d5d3-4b1a-ae22-89df3d9ecb33","resolution":{"observed_at":"2026-08-07T11:21:30.182639Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:28.602654Z","title":"Privacy risks of securing machine learning models against adversarial examples","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.602654Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:6fec84da60e7ed58e1dbc560ad988311d4ba8c3c2bb4e6b3ff2d0a4df309b224","observation_id":"9e3d5234-e3e8-4de1-bf17-1588e212f934","resolution":{"observed_at":"2026-08-07T11:21:28.602654Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2402.06674","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:29.442587Z","title":"Understanding practical membership privacy of deep learning","venue":null,"work_id":"e14567e5-d6e6-4003-8eb7-50369fa67ea0","year":2024},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.698855Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:ab35aa983f8ee81f0b18774d7597938b4bb81144f523c866e3609300f932a95a","observation_id":"b1b8191f-f0d4-4ee9-bb94-a8b238cab2fa","resolution":{"observed_at":"2026-08-07T11:21:29.489880Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1704.03453","last_updated":"2017-05-23T18:14:30Z","snapshot_observed_at":"2026-08-10T02:09:23.548888Z","submitted_at":"2017-04-11T17:59:12Z","title":"The Space of Transferable Adversarial Examples","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1704.03453","snapshot_observed_at":"2026-08-07T11:21:28.817863Z","title":"The space of transferable adversarial examples","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.817863Z"},"links":{"cited_paper":"/paper/1704.03453","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:d55f20d9e3b334176d29a05fc42e067280b28e840ba36814355233bff920769b","observation_id":"7ba1fb16-7cc6-4a04-8732-5b9efe507c3b","resolution":{"observed_at":"2026-08-07T11:21:28.817863Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:29.977033Z","title":"Truth serum: Poisoning machine learning models to reveal their se- crets","venue":null,"work_id":"be267500-3da7-49bb-84b4-aba38c052155","year":2022},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.908942Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:13443daf7b04fd69dae40dd4951dbedcedd87257f199bee346f17ac29aa5214d","observation_id":"106b9f37-5a6e-4029-be1d-e59a81039090","resolution":{"observed_at":"2026-08-07T11:21:30.042193Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2111.08440","last_updated":"2022-04-11T09:23:43Z","snapshot_observed_at":"2026-07-06T12:09:00.789234Z","submitted_at":"2021-11-15T12:32:20Z","title":"On the Importance of Difficulty Calibration in Membership Inference Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.08440","snapshot_observed_at":"2026-08-07T11:21:28.996687Z","title":"On the importance of difficulty calibration in membership inference attacks","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:28.996687Z"},"links":{"cited_paper":"/paper/2111.08440","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:69ae3e5157ebc611efd0c0b161cfe1dc3f6aa83ae123ea348498f97d80859dca","observation_id":"a4eede62-8fc0-4572-95d6-c4ace18822a7","resolution":{"observed_at":"2026-08-07T11:21:28.996687Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:29.859211Z","title":"You only query once: An efficient label-only membership inference attack","venue":null,"work_id":"b7258d94-c250-4b33-8f50-facf2d1153b3","year":null},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:29.059399Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:bb8e0ecdd23d3bcb03ae44dc2dc30b954803033038c264367453515aed8d2af5","observation_id":"8c67cad9-bc14-45da-88f6-5a013cb1950d","resolution":{"observed_at":"2026-08-07T11:21:29.909376Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:29.732646Z","title":"Privacy risk in machine learning: Analyzing the connection to overfitting","venue":null,"work_id":"c4e9c903-7107-4182-bc41-e2a130319428","year":2018},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:29.129052Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:59d1a9ec13953049288c509d9bf7ff20dedc0a777b1d81cc33608783ff41bf43","observation_id":"34081adf-18b2-4977-8596-9ed6dedc701c","resolution":{"observed_at":"2026-08-07T11:21:29.782298Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:21:29.640367Z","title":"Machine learning-based vehicle intention trajectory recognition and prediction for autonomous driving","venue":null,"work_id":"6216a9ea-95c7-4f83-99a0-3748d622107a","year":2024},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:29.196502Z"},"links":{"citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:49cf70635051de155a2bd3cf9854e20fe57a90e84964ed4de02f87cbc0494a17","observation_id":"57ce36cc-1ece-4534-9032-d98bc6e42155","resolution":{"observed_at":"2026-08-07T11:21:29.672657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.03262","last_updated":"2024-06-12T09:02:47Z","snapshot_observed_at":"2026-08-09T01:42:01.147623Z","submitted_at":"2023-12-06T03:18:49Z","title":"Low-Cost High-Power Membership Inference Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.03262","snapshot_observed_at":"2026-08-07T11:21:29.277094Z","title":"Low-cost high-power membership inference attacks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T11:21:29.277094Z"},"links":{"cited_paper":"/paper/2312.03262","citing_paper":"/paper/2506.02711"},"observation_digest":"sha256:c1df39360473330af9274a537c6ff38ff774ed4039ea6d1f5602b998d866260f","observation_id":"50f9cd01-f6ce-467d-a6be-8d030bf9e15d","resolution":{"observed_at":"2026-08-07T11:21:29.277094Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.02711","last_updated":"2025-06-03T10:09:24Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T11:56:57.152719Z","submitted_at":"2025-06-03T10:09:24Z","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack"},"reference_resolution":{"displayed":34,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":16,"verified_exact":1,"verified_fuzzy":17},"total_outbound_references":34},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 34 of 34 outbound references and 0 inbound Pith citation observations for arXiv:2506.02711."}