{"as_of":"2026-08-18T03:00:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f243035cf694318561ac569f61ab358d287e46bbdd2604c2d962cca8058931c9","coverage":[{"denominator":78,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":78,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:29:46.802174Z","state":"measured"},{"denominator":78,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":78,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.07888/citation-record","integrity":"/paper/2506.07888/integrity","json":"/paper/2506.07888/citation-record.json","paper":"/paper/2506.07888"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.807216Z","title":"Deep Learning with Differential Privacy","venue":null,"work_id":"ba5b2c5d-ed29-478c-bbd0-4b5a777bf924","year":2016},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.109204Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:667ac725c7eff38165940e9aa7f3f8f8a0924c5b58c9775f1e0dce0fe51438fb","observation_id":"3c79436b-bfe3-4b9f-b3f5-136e4fbe6fcd","resolution":{"observed_at":"2026-08-07T05:29:47.810910Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.794912Z","title":"Mancini, Angelo Spog- nardi, Antonio Villani, Domenico Vitali, and Giovanni Felici","venue":null,"work_id":"b3694a0b-bede-4b4d-9644-9e56193b52b0","year":2015},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.173978Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:3d3f9a882e5b68a5fcfb89f05646f8d2245d026ea72142af062d47047515e652","observation_id":"979e2b53-c79c-4d93-a315-fd6ead3a9482","resolution":{"observed_at":"2026-08-07T05:29:47.798868Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.782664Z","title":"Re- constructing Training Data with Informed Adversaries","venue":null,"work_id":"d25b8e36-97f2-4d98-a4ff-b5b2737e5f68","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.238259Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:496889d92c7c20c82ed82581ccdfaf56664761c1d6d1f81b0ce860318493ccf0","observation_id":"1cc5f7d2-d856-40c5-95cb-0ce5f85dd2b1","resolution":{"observed_at":"2026-08-07T05:29:47.786542Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.770588Z","title":"Semi-supervised Learning with Constraints for Person Identification in Multimedia Data","venue":null,"work_id":"4d8e7162-fab0-48f4-b342-7eac710f0ea4","year":2013},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.309162Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:46786c8bfc2015d30269a8fc57388233a19f8352921ad13a97217bdf0e0ad1fe","observation_id":"4dc7bd38-7150-4d4b-ac41-5d335c0b1f2f","resolution":{"observed_at":"2026-08-07T05:29:47.774277Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.758431Z","title":null,"venue":null,"work_id":"9b8eac1d-b486-4eee-a6c4-575d1259f9fd","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.380962Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:606c653ef2857e117805847f3f65c457087e90a9aa2ea7b1264a4c8c2e124506","observation_id":"3b1d8bcf-c05e-4c5d-863d-a2b15e3b1671","resolution":{"observed_at":"2026-08-07T05:29:47.762153Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:43.445314Z","title":"Membership Inference Attacks From First Principles","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.445314Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:9e840a04f42b8b23d3aa580bc6f7956eda28054f576a818dfe24a8ed90088049","observation_id":"3e6bad9b-8772-425e-9d84-4c9f1cb1b76d","resolution":{"observed_at":"2026-08-07T05:29:43.445314Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.724055Z","title":"The Privacy Onion Effect: Memorization is Relative","venue":null,"work_id":"3efe2899-5282-4223-9f50-dbaedb5ea953","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.621279Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:f7e59cc2d7a90df6fbaf8d228ed5da6ab9362479badf6a9230fd9282f8e81be9","observation_id":"7c73456d-aa9e-441e-af35-ac3d16a45460","resolution":{"observed_at":"2026-08-07T05:29:47.727927Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.712004Z","title":"Brown, Dawn Song, Úl- far Erlingsson, Alina Oprea, and Colin Raffel","venue":null,"work_id":"9c81ff74-4342-4e2f-b296-5f17b4b98302","year":2021},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.692697Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:91a0bbf7c1b48a4f0fc44d6dabf2d6ad37954adba0b07922a5061addf5e625ee","observation_id":"df33a80b-3e8f-400b-b470-ae210a0e866c","resolution":{"observed_at":"2026-08-07T05:29:47.715793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.699401Z","title":"Big Data Analysis for Financial Risk Management.Journal of Big Data,","venue":null,"work_id":"31ab0c93-c333-49a0-94d6-d695f9f794ef","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.769179Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:6700ba09037c029175025cfa8e925b9b609acd7ba946e93ee42275be99ac518d","observation_id":"62bf33e6-f478-4102-b102-3ea611748f02","resolution":{"observed_at":"2026-08-07T05:29:47.703323Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.687620Z","title":null,"venue":null,"work_id":"08c7e4cd-ae51-43f5-aa86-667df03bfebe","year":1935},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.834586Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:2f4bf3b6a0d9f235ee8e9c6e0ba38a72e557d957762929eb82457694790fdbe1","observation_id":"fbff1e25-b06e-409e-8f28-705d0a3bed8b","resolution":{"observed_at":"2026-08-07T05:29:47.691269Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.674702Z","title":"Knowledge-Enriched Distributional Model Inversion Attacks","venue":null,"work_id":"29ee9920-d688-4100-898a-976fcdf60d08","year":2021},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.923428Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:57c0825d3219a60c0a95e83db1cf9c8e58a87d632ce582fa7889dcf2b74b04dc","observation_id":"e1aab644-f1b9-41d7-835c-2b2dde976575","resolution":{"observed_at":"2026-08-07T05:29:47.678773Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:43.981950Z","title":"Choquette Choo, Florian Tramèr, Nicholas Carlini, and Nicolas Papernot","venue":null,"work_id":null,"year":1964},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.981950Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:a62f519071fc2415817ff436ebd702461368fd476fe5097db0a93429d0a481de","observation_id":"8c8c5c48-f978-4b0f-9218-2ad8a532c273","resolution":{"observed_at":"2026-08-07T05:29:43.981950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1812.01718","last_updated":"2018-12-03T12:37:31Z","snapshot_observed_at":"2026-08-14T23:13:55.892736Z","submitted_at":"2018-12-03T12:37:31Z","title":"Deep Learning for Classical Japanese Literature","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1812.01718","snapshot_observed_at":"2026-08-07T05:29:44.024512Z","title":"Deep Learning for Classical Japanese Literature.CoRR abs/1812.01718, 2018","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.024512Z"},"links":{"cited_paper":"/paper/1812.01718","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:7618c2882990af009711517b49e4901864db01ac9b547ae4e552f24fa738df33","observation_id":"2afd35c2-ddba-49fa-859f-9bbbdc5f2bab","resolution":{"observed_at":"2026-08-07T05:29:44.024512Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.653886Z","title":"On the Privacy Risk of In-context Learning","venue":null,"work_id":"98933a4a-e5c3-4e51-9f6a-fc5feda96bda","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.095071Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:737b64f4aa7e01292140ece371ceb8dcf2d7e11a235e2264d65ccafa87a88a2c","observation_id":"ba12333f-1af2-4d92-a058-6740f314123c","resolution":{"observed_at":"2026-08-07T05:29:47.657891Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.642353Z","title":"Now Publishers Inc., 2014","venue":null,"work_id":"4eb9f7f4-d3d4-4931-8377-f11d6f691254","year":2014},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.164224Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:ba456d0c6c8c63d72893fafa9f137ce352545be8711d4bc3a8492da23e9cb2b4","observation_id":"c309c963-3e4a-4496-b5ec-6664a12abbb9","resolution":{"observed_at":"2026-08-07T05:29:47.645855Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.629489Z","title":"Does Learning Require Memoriza- tion? A Short Tale about a Long Tail","venue":null,"work_id":"b444b44a-5db3-4bc7-98a4-12d7aea27fcc","year":2020},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.233053Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:8c9a1a55803132a8b0eea9fadb85e38167c68a434c670224b588936cb7b45890","observation_id":"a45e222c-d563-4b50-9f8a-abe6e20c5a3e","resolution":{"observed_at":"2026-08-07T05:29:47.633205Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.617371Z","title":"Model Inversion Attacks that Exploit Confidence Infor- mation and Basic Countermeasures","venue":null,"work_id":"b2ccff01-c779-4315-bdfe-d0dbbb892d2a","year":2015},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.288378Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:8658f1e1cde640ff985b35f33362daba292a1d105a4ded766c0a17fb7f2f5a69","observation_id":"7297b00b-5742-4082-b07e-1d8eaf9a7410","resolution":{"observed_at":"2026-08-07T05:29:47.620983Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.605569Z","title":"Gunter, and Nikita Borisov","venue":null,"work_id":"73bbd43f-24a5-4008-964e-41548b77d665","year":2018},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.324903Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:26f4bf0ea8e6b82109f0fdf82c1bddd6cf6976d6439902abc795959db7877d7c","observation_id":"e5e6ccf1-4180-454e-bd9f-9584288aed24","resolution":{"observed_at":"2026-08-07T05:29:47.609383Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.593246Z","title":"Generative Adversar- ial Nets","venue":null,"work_id":"66eaad1d-e1b8-4aac-914e-0b083e1fb860","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.369576Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:b359423234cf26d8728f3850896892939f6fedd88bb3acb282cc8bb23ef46b2b","observation_id":"5da7b13c-166f-4546-9068-c900a28c3cdc","resolution":{"observed_at":"2026-08-07T05:29:47.597030Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.580654Z","title":"Reconstructing Training Data from Trained Neural Networks","venue":null,"work_id":"80cb5899-4570-42d7-abf7-07815c097bb0","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.430846Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:0013cb012d6a804e0fe9955ab141729040b3a48310da130eb9081243406115ae","observation_id":"0a5b657c-6f76-41ec-9db4-e3629f525499","resolution":{"observed_at":"2026-08-07T05:29:47.584680Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1506.02626","last_updated":"2015-10-30T23:29:27Z","snapshot_observed_at":"2026-08-15T13:34:24.234242Z","submitted_at":"2015-06-08T19:28:43Z","title":"Learning both Weights and Connections for Efficient Neural Networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1506.02626","snapshot_observed_at":"2026-08-07T05:29:44.495660Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.495660Z"},"links":{"cited_paper":"/paper/1506.02626","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:d40c0b44e9b530cbfae974310152cc91fd688fe0807416fbfc3bc0bdea65a35e","observation_id":"04b4ed3f-87f3-4e2f-9691-54f2582e33d6","resolution":{"observed_at":"2026-08-07T05:29:44.495660Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.568655Z","title":"Girshick","venue":null,"work_id":"2e747e48-7122-4f7e-a238-fc92dd16a22d","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.544386Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:03e184718a635656f496beb9dcc25c0bc3a6f25d7db07e5c8e3d8791cbfbe943","observation_id":"66ed6ca7-6ca8-47c6-91cd-1a7691174d0b","resolution":{"observed_at":"2026-08-07T05:29:47.572624Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.557069Z","title":"Deep Residual Learning for Image Recognition","venue":null,"work_id":"722f78a9-c5b1-443e-ae36-1ad6c767e26d","year":2016},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.633710Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:331d76cfa056c97ff9c4b8e30e2f5ae1e6b3277900e4c7c4294a6bf89aef7d42","observation_id":"8098df40-4af7-4735-9f7a-2b9eb45c7839","resolution":{"observed_at":"2026-08-07T05:29:47.560679Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2208.10445","last_updated":"2022-08-22T17:00:53Z","snapshot_observed_at":"2026-08-17T14:27:29.492435Z","submitted_at":"2022-08-22T17:00:53Z","title":"Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2208.10445","snapshot_observed_at":"2026-08-07T05:29:44.731810Z","title":"Membership-Doctor: Comprehensive As- sessment of Membership Inference Against Machine Learning Models.CoRR abs/2208.10445, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.731810Z"},"links":{"cited_paper":"/paper/2208.10445","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:e9be73451f60834b861cf46d79f6d8383acfbf778ce2b20a057be86c2e53806b","observation_id":"86394da0-62b0-4764-a1eb-8f105416169a","resolution":{"observed_at":"2026-08-07T05:29:44.731810Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.05429","last_updated":"2021-02-10T13:51:54Z","snapshot_observed_at":"2026-08-16T18:46:30.239090Z","submitted_at":"2021-02-10T13:51:54Z","title":"Node-Level Membership Inference Attacks Against Graph Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.05429","snapshot_observed_at":"2026-08-07T05:29:44.818943Z","title":"Node-Level Membership Infer- ence Attacks Against Graph Neural Networks.CoRR abs/2102.05429, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.818943Z"},"links":{"cited_paper":"/paper/2102.05429","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:620ca1c10874365a5640e16bcd44408f490f14099b8a24df35d0c7393835630a","observation_id":"cfc79789-f4bb-4b94-9f66-d40cd7bba558","resolution":{"observed_at":"2026-08-07T05:29:44.818943Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.545169Z","title":null,"venue":null,"work_id":"5069f341-1fc7-4096-9751-84d7cab6cd82","year":2021},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.897673Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:027b53ef4388f21b6c82dfa8e55045f337f869333ca20214bd28421dca968bc2","observation_id":"70d0569b-b6bc-458e-b561-ce27845438ad","resolution":{"observed_at":"2026-08-07T05:29:47.548837Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.531796Z","title":"A Style- Based Generator Architecture for Generative Adversar- ial Networks","venue":null,"work_id":"3dfcaa22-1097-4157-b0dc-b88dcffe7144","year":2019},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:44.950737Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:c93a21116438cd9a2e53d5d3109bbfd2849e449b67e6364e7b1e4379a3f57df3","observation_id":"dc898baa-bf41-4eb0-95b9-8bb1849b379e","resolution":{"observed_at":"2026-08-07T05:29:47.536034Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.518497Z","title":"Kingma and Prafulla Dhariwal","venue":null,"work_id":"dc23df85-16de-4709-b92f-4c2f24332b45","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.013270Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:a3104687966bae576d7633e8f1bfbaf92f3cf5d0ff5f5bfd0550ea809b84da42","observation_id":"b0c87287-cfbd-4c45-b4d5-a84831dea12f","resolution":{"observed_at":"2026-08-07T05:29:47.522087Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.505161Z","title":"Application of Machine Learning in Disease Prediction","venue":null,"work_id":"2080d6e4-5fc5-4340-9820-c9c07a64bba8","year":2018},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.090780Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:fdca46b7bae3c54fa93cac31215569f453cb7e68356ba114a3ec08ab1b59be56","observation_id":"61db44ef-2aa6-43de-8630-17f099337abf","resolution":{"observed_at":"2026-08-07T05:29:47.509260Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.15098","last_updated":"2024-07-21T09:11:08Z","snapshot_observed_at":"2026-08-16T13:32:24.086346Z","submitted_at":"2024-07-21T09:11:08Z","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","version":1},"cited_work":{"arxiv_id":"2407.15098","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.15098","snapshot_observed_at":"2026-08-07T05:29:46.922478Z","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","venue":"cs.CR","work_id":"a8b28784-4233-4370-8fa6-f9320f32b926","year":2024},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.165297Z"},"links":{"cited_paper":"/paper/2407.15098","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:3143fbcc344fa6309f82fb6ffa8cfb217a059b4328da323b32c3064e1574e916","observation_id":"8f9892e0-316a-4d96-ba17-59c6662f5f7c","resolution":{"observed_at":"2026-08-07T05:29:46.927187Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.06825","last_updated":"2024-08-13T11:34:28Z","snapshot_observed_at":"2026-08-16T13:26:45.761595Z","submitted_at":"2024-08-13T11:34:28Z","title":"Membership Inference Attack Against Masked Image Modeling","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.06825","snapshot_observed_at":"2026-08-07T05:29:45.214592Z","title":"Mem- bership Inference Attack Against Masked Image Mod- eling.CoRR abs/2408.06825, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.214592Z"},"links":{"cited_paper":"/paper/2408.06825","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:ff5531c23f3f1c4a23c81f26fa9e8a8275281d879f7cf66a338b4d8428b9f7b8","observation_id":"3603e8f9-a366-4fe2-8a50-1838cec781a5","resolution":{"observed_at":"2026-08-07T05:29:45.214592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.492473Z","title":"Auditing Membership Leak- ages of Multi-Exit Networks","venue":null,"work_id":"9dea3940-c75d-4a54-a59a-1d0fc1c06ac2","year":1917},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.268266Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:e21d4f0da41ce3c231800858dc86318eb3c5702147088edb3e942adf0891f687","observation_id":"55645e1a-2149-4397-a608-075aff3141f5","resolution":{"observed_at":"2026-08-07T05:29:47.496464Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.479520Z","title":"Membership Leakage in Label-Only Exposures","venue":null,"work_id":"9f3edb7a-b839-4874-9480-2a002e0d01a6","year":2021},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.311917Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:85e294e56b78d75d1ac8b04ec28718ff4f45c28dc4228cd17980d713697e740c","observation_id":"d67a73e6-9135-4c25-baae-0771a6893e02","resolution":{"observed_at":"2026-08-07T05:29:47.483615Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.466590Z","title":"PreCurious: How Innocent Pre-Trained Language Models Turn into Privacy Traps","venue":null,"work_id":"4f1435b9-aaa8-4cf5-b2d0-5be2af3674a2","year":2024},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.465647Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:85e246f60b08325be7571bee2f6f2f388a42f4527ba35a24837d72b88f0ed8f3","observation_id":"0d0472b8-3962-4aa4-9857-2dba432ec828","resolution":{"observed_at":"2026-08-07T05:29:47.470727Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.454073Z","title":"Membership Inference Attacks by Exploit- ing Loss Trajectory","venue":null,"work_id":"04881068-831e-43a8-9175-092b01101db4","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.679597Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:fd5061ed3e2fa546924a7e296dc38692af8d7e6770e1bc98c29706f1eb311e66","observation_id":"53b706b4-24ab-4c93-85b8-1fa830ad8941","resolution":{"observed_at":"2026-08-07T05:29:47.457921Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:45.770032Z","title":"ML-Doctor: Holis- tic Risk Assessment of Inference Attacks Against Ma- chine Learning Models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.770032Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:c61b81277c664fc5b0d89e23872de1154a0525034ff4ff55e12c50482c1176a6","observation_id":"5e131a78-157b-4ac3-81c6-bcf6a48d5295","resolution":{"observed_at":"2026-08-07T05:29:45.770032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.432083Z","title":"Swin Transformer: Hierarchical Vision Transformer using Shifted Windows","venue":null,"work_id":"5a3f7c8c-f480-45d6-b9ca-fd60be6133b6","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.803867Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:bbe21fbb014dd0388625c4416a99b717e6d60c113b8fb3edfbabceb12076d0a4","observation_id":"bf3ae38b-b45b-4e2a-9ce5-4403b7f9939d","resolution":{"observed_at":"2026-08-07T05:29:47.436068Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.419632Z","title":"Deep Learning Face Attributes in the Wild","venue":null,"work_id":"65cdcb44-6fb1-4071-80a5-b3046c0d751f","year":2015},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.856515Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:c289d3a7c6a58fed1bbd1db4d5381d99269686d4f07227dd40faeae6b046e9ab","observation_id":"70daacd1-7b29-43bf-81ba-bfdc17a030a5","resolution":{"observed_at":"2026-08-07T05:29:47.423351Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.408636Z","title":"Maas, Raymond E","venue":null,"work_id":"af283a64-a0c7-49f2-8a71-1e87eff53964","year":2011},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:45.936722Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:0656bbf78f5909486dd0432ebc4dbe4f05fb7de2f261e7e1b0940e026365d035","observation_id":"e770d152-aa32-4d7a-98f3-9ebb0afdd254","resolution":{"observed_at":"2026-08-07T05:29:47.412031Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.397085Z","title":"Property Inference from Poisoning","venue":null,"work_id":"d67ded38-e924-427f-bfb7-2af85a47b03c","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.067131Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:03bf6cec4dd894d91b68acc7e2f321ed0c5e5f4360dbc5d30bcb743d3e2e2f0a","observation_id":"d6ce811a-30f4-425f-a9c9-7af4031225af","resolution":{"observed_at":"2026-08-07T05:29:47.400482Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.385234Z","title":"Exploiting Unintended Feature Leakage in Collaborative Learning","venue":null,"work_id":"4f93653e-d0cf-4930-a1b6-75744c5de0ce","year":2019},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.233222Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:bd8e77b1beba1bb132e4377fceb4f2579a13162ec041738137c0e65da9b9b811","observation_id":"23223836-6284-4cca-b6ee-6600cecb0d94","resolution":{"observed_at":"2026-08-07T05:29:47.388976Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.373342Z","title":"Morris, V olodymyr Kuleshov, Vitaly Shmatikov, and Alexander M","venue":null,"work_id":"979cda00-85ee-4a2c-8ba3-0277ad277397","year":2023},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.493719Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:48ef24e95761cb8c413388854991693cafb678bc785da162ba0fe06fe6a2d58b","observation_id":"7afe6df3-a4c6-4852-834d-438951a44a48","resolution":{"observed_at":"2026-08-07T05:29:47.377218Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.361808Z","title":"Scalable Private Learning with PATE","venue":null,"work_id":"2bcf26b4-45a1-4890-9585-c7857e09fc9d","year":2018},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.668864Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:0366ce08962dd662c54b1ea347abccc78f4778d8c8c722c36708ceaf19d44b58","observation_id":"921a4570-3186-4813-a22e-2740c45b43c5","resolution":{"observed_at":"2026-08-07T05:29:47.365298Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.349087Z","title":"Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learn- ing","venue":null,"work_id":"a1f67afc-95e1-40c2-aee9-8625022a2ad3","year":2020},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.677951Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:b6c2fdac9b07362e2a69d3b45308db2485e991782ac4a412ba014803f74222d9","observation_id":"41af8f64-63ab-4247-bfa2-8345d60b3a96","resolution":{"observed_at":"2026-08-07T05:29:47.353278Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.337405Z","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","venue":null,"work_id":"09159c3c-41d4-4a48-bbcb-c50518e27920","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.682289Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:d7eb8635a99d898e587538cbdc879329c319ed21053db37fb636e4e8d70306f9","observation_id":"e232197a-22bd-49bb-851e-275644cdf797","resolution":{"observed_at":"2026-08-07T05:29:47.341259Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.325964Z","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","venue":null,"work_id":"5ae3ebc1-e6b9-4639-8f39-fe4db201c9e7","year":2019},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.685981Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:212c53d718c409ae65d01d3b950948cc79a76b0a87aea1c4d8bfc309679b7f22","observation_id":"b3f8fc92-35c5-446b-bd8a-60b686533299","resolution":{"observed_at":"2026-08-07T05:29:47.329714Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.314598Z","title":"Howard, Menglong Zhu, Andrey Zhmoginov, and Liang-Chieh Chen","venue":null,"work_id":"0b17e28a-4c3d-4a59-a07e-8106b1b0ac09","year":2018},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.690197Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:0cb40bb0300829b978d83972b9abd0beb2d6f60e1c92492f045659a73305ba16","observation_id":"a7aa1a3e-0ad3-42b7-9936-dd4ef72f0729","resolution":{"observed_at":"2026-08-07T05:29:47.318256Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2204.11022","last_updated":"2022-04-23T08:44:51Z","snapshot_observed_at":"2026-08-16T17:05:06.759310Z","submitted_at":"2022-04-23T08:44:51Z","title":"Towards Data-Free Model Stealing in a Hard Label Setting","version":1},"cited_work":{"arxiv_id":"2204.11022","doi":null,"metadata_source":"pith","pith_arxiv_id":"2204.11022","snapshot_observed_at":"2026-08-07T05:29:46.884455Z","title":"Towards Data-Free Model Stealing in a Hard Label Setting","venue":"cs.CR","work_id":"7fff778e-d656-4070-bd7f-73c4fd794b77","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.694207Z"},"links":{"cited_paper":"/paper/2204.11022","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:b95b0a048513b02a61e5bd682553aacc961323135253f136f7b39f69ab3414e9","observation_id":"3ee1ca2a-ae2d-4d70-8bf4-17b1c4eec126","resolution":{"observed_at":"2026-08-07T05:29:46.890451Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.303053Z","title":"Membership Inference Attacks Against Machine Learning Models","venue":null,"work_id":"68414467-8f7d-4b72-98c9-999ffc817885","year":2017},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.698218Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:1b2cb80f38051942b15a7842ad24c0dfa5cfb089b26d1796a283fd939bfa13dd","observation_id":"01287b36-e695-4b16-b695-badbe07f7426","resolution":{"observed_at":"2026-08-07T05:29:47.306654Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.291836Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recog- nition","venue":null,"work_id":"12ff8bcf-0b48-4b7d-ad5c-55fb18d5b3d4","year":2015},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.702365Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:89c89144d5aa8199c53e7685f87353e09e5c4590d41aa4b3665bda453fa14f29","observation_id":"e331c2e8-57a7-45c5-80bc-55989561abe6","resolution":{"observed_at":"2026-08-07T05:29:47.295421Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.280384Z","title":"Manning, Andrew Y","venue":null,"work_id":"1637b65e-3184-411b-9c17-fc4b7cd4fa32","year":2013},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.706400Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:2a5e8b2ecdf08a05b8921ebe5f8286aadbb8d33e9b223fffca03b9337c9630b2","observation_id":"eecad57e-a8ea-4db4-98f4-d158ab5f4c62","resolution":{"observed_at":"2026-08-07T05:29:47.283967Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.267553Z","title":"Machine Learning Models that Remember Too Much","venue":null,"work_id":"315003e9-421d-49df-8c70-1d6370a62b4d","year":2017},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.710377Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:b76c8ed29502bd9d3e007676425ffe9f8eaee3b5deca8b78f881cb4767d20db1","observation_id":"04c74847-bb22-4422-b5a1-aca6a0e75962","resolution":{"observed_at":"2026-08-07T05:29:47.271863Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.255481Z","title":"Overlearning Reveals Sensitive Attributes","venue":null,"work_id":"ae585c5c-2081-4fa1-96a3-ffb6a99bbe44","year":2020},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.713761Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:6d3a20ea777e6b14d4ab63b51498ef6434fef203c0ca0b0061f588794e1b12eb","observation_id":"8d74a6f5-ff48-424b-90a2-7ad01275eccd","resolution":{"observed_at":"2026-08-07T05:29:47.259059Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.242560Z","title":"Mint- Net: Building Invertible Neural Networks with Masked Convolutions","venue":null,"work_id":"fa47006c-1d07-43a8-b826-e2a7bc511a4d","year":2019},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.717803Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:f36f0bb756fc9cd59ce0123308177309eb6db7baf1e15d5198af522b5827bbd6","observation_id":"5dcee604-d53f-4e71-a232-8adedeb07123","resolution":{"observed_at":"2026-08-07T05:29:47.246658Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.230671Z","title":"Plug & Play Attacks: Towards Robust and Flexible Model Inversion Attacks","venue":null,"work_id":"a0e03c72-514b-4f8a-afc8-bbab7091adbe","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.721917Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:befeae534d98722ffe8eec7676e80f180743dae30650aa39fc284801d6ee6bc2","observation_id":"200bc917-d6ff-41cc-a044-9db89972df41","resolution":{"observed_at":"2026-08-07T05:29:47.234267Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2109.06024","last_updated":"2022-07-05T13:54:26Z","snapshot_observed_at":"2026-08-16T18:40:22.907188Z","submitted_at":"2021-09-13T14:54:39Z","title":"Formalizing and Estimating Distribution Inference Risks","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2109.06024","snapshot_observed_at":"2026-08-07T05:29:46.725458Z","title":"Formalizing and Estimating Distribution Inference Risks.CoRR abs/2109.06024, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.725458Z"},"links":{"cited_paper":"/paper/2109.06024","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:f9305cda85dedae78ab367a9e32d871b9cabe92a2ef13397d63341778bea9cad","observation_id":"b8618376-17eb-4222-b60c-303d2c84d7a2","resolution":{"observed_at":"2026-08-07T05:29:46.725458Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1503.02406","last_updated":"2015-03-09T09:39:41Z","snapshot_observed_at":"2026-08-17T00:23:29.558245Z","submitted_at":"2015-03-09T09:39:41Z","title":"Deep Learning and the Information Bottleneck Principle","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1503.02406","snapshot_observed_at":"2026-08-07T05:29:46.729143Z","title":"Deep Learn- ing and the Information Bottleneck Principle.CoRR abs/1503.02406, 2015","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.729143Z"},"links":{"cited_paper":"/paper/1503.02406","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:c0382ee30b75b3b8cc79c552c4bbfd5d7dbd9d1b6fdb8b686714a473aba743b3","observation_id":"9d776156-fa83-4592-b844-d5e31beba898","resolution":{"observed_at":"2026-08-07T05:29:46.729143Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.217616Z","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","venue":null,"work_id":"36f0c835-2a9e-44ca-9a79-a5e25b47134d","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.733319Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:5d1c453c1d1b94138144bd6aacb700e303ce9f6fcf99b9c28f775bac63e876aa","observation_id":"b26fc7a5-7e21-4e32-80bc-b705faa369db","resolution":{"observed_at":"2026-08-07T05:29:47.221695Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.204734Z","title":"Re- iter, and Thomas Ristenpart","venue":null,"work_id":"cb9ed010-6e2f-4dde-9995-492f25288df5","year":2016},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.737087Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:971b112bf264824cf0c1272d481f68447ce66b864c5d3cbe1ce2ad0217fc01cc","observation_id":"86a6777e-858d-4b85-932b-3955b025b613","resolution":{"observed_at":"2026-08-07T05:29:47.208245Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.192612Z","title":"Walls, and Nicolas Papernot","venue":null,"work_id":"614d07e9-fac1-4649-a6ae-6538a25f024b","year":2021},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.740577Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:b82e314523090e435f577e2e28008979f9d3dffdea5bf6b5f7422af0a183039f","observation_id":"1812357a-5033-40e4-803f-5293c53c0aee","resolution":{"observed_at":"2026-08-07T05:29:47.196289Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.179074Z","title":"Zemel, and Alireza Makhzani","venue":null,"work_id":"e4147044-ac1f-40fb-9ce6-1327c8d8ab04","year":2021},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.743913Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:8d0fbce27cc66e9f5077be636398e4e1e735a196b236802d251597499b8a797c","observation_id":"2e3971f6-752e-4b89-ac16-d89a712ca552","resolution":{"observed_at":"2026-08-07T05:29:47.183681Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.165976Z","title":"Improv- ing Robustness to Model Inversion Attacks via Mu- tual Information Regularization","venue":null,"work_id":"03536b5e-b214-4cb8-881d-6b7337dec596","year":2021},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.747725Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:2c0823ac16b61a13bef6fc5cbebb38c8478489c4f8f4669c3825179c2dc54f0f","observation_id":"84a905ee-3efd-4060-b5b0-accf80d0a30c","resolution":{"observed_at":"2026-08-07T05:29:47.169990Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.151547Z","title":"Under- standing Data Importance in Machine Learning At- tacks: Does Valuable Data Pose Greater Harm? In Network and Distributed System Security Symposium (NDSS)","venue":null,"work_id":"5765b97b-c3c1-4136-9c90-7564ba3e6e55","year":2025},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.751747Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:1a49a82f457197252f7f7bfd37c702c028d6422526ee742b8fbe3bf03131c444","observation_id":"cf42b706-c7d9-43b6-aa54-30989e38fdd3","resolution":{"observed_at":"2026-08-07T05:29:47.156303Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:46.755279Z","title":"Membership Inference Attacks Against In- Context Learning","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.755279Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:78cf1f3ead3e942cc9c12d4814f28ef5e0d78398770f43440f368b931f27ef1c","observation_id":"1b8367a0-0724-479e-9857-b5d993c9afb9","resolution":{"observed_at":"2026-08-07T05:29:46.755279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.11397","last_updated":"2023-10-17T17:03:00Z","snapshot_observed_at":"2026-08-16T14:51:18.876857Z","submitted_at":"2023-10-17T17:03:00Z","title":"Last One Standing: A Comparative Analysis of Security and Privacy of Soft Prompt Tuning, LoRA, and In-Context Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.11397","snapshot_observed_at":"2026-08-07T05:29:46.758808Z","title":"Last One Standing: A Com- parative Analysis of Security and Privacy of Soft 17 Prompt Tuning, LoRA, and In-Context Learning.CoRR abs/2310.11397, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.758808Z"},"links":{"cited_paper":"/paper/2310.11397","citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:1c5086304c9d98bd03c3f96650f6411837f0a7af171c1bc966771197fbf4c538","observation_id":"b2271098-c096-4742-9713-6fa884c4ee71","resolution":{"observed_at":"2026-08-07T05:29:46.758808Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.130295Z","title":"Privacy Backdoors: Enhancing Membership Inference through Poisoning Pre-trained Models","venue":null,"work_id":"6263fbc0-8a9a-4bfb-8fa7-7e3d4c2d9a1a","year":2024},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.762526Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:9d758d30bdf7ea59d33526e395a2e5cf133bfc3ed0f0d30d3d5db80c3d5e168f","observation_id":"3b897dbd-0891-42eb-a582-5e661c9f9223","resolution":{"observed_at":"2026-08-07T05:29:47.134420Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.118506Z","title":"Quanti- fying Privacy Risks of Prompts in Visual Prompt Learn- ing","venue":null,"work_id":"930d40d7-6876-4587-9850-b8702ab0782f","year":2024},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.765994Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:bd0bea559598d1c62bb8b7fe89c669724fa8b989c62f91a99c20440e148f0e43","observation_id":"76ebdf57-8c20-499f-8f0c-3fc6ca7a886d","resolution":{"observed_at":"2026-08-07T05:29:47.122293Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.105781Z","title":"Neural Network Inversion in Adversarial Set- ting via Background Knowledge Alignment","venue":null,"work_id":"28754d51-aa71-4b83-9335-3c6a32babfe7","year":2019},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.769424Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:0884deb5e891a7c39b56dad2e4eb8d7b3df52196cf821616c545085e66d3d7f0","observation_id":"06da72cb-1473-4fdf-8dce-26573c49f758","resolution":{"observed_at":"2026-08-07T05:29:47.109996Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.092776Z","title":null,"venue":null,"work_id":"f99ad529-09d3-41f7-8b88-5063cb6ea02d","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.772945Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:5c390d8e66dff0f7608a02cf41566e93e7c6298244030c1976390fcc3b2e2f79","observation_id":"0034e933-a0eb-4d7b-bfd5-07a5280319af","resolution":{"observed_at":"2026-08-07T05:29:47.097247Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.079498Z","title":"Alvarez, Zhizhong Li, Arun Mallya, Derek Hoiem, Niraj K","venue":null,"work_id":"dc7242aa-fd22-4978-9586-44f4ff9f3dc7","year":2020},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.776999Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:d5125eee379d2c0435965b69485a705f38d0162ba3cd5940bd0ed075be307f3b","observation_id":"e7a822cf-fea4-4c83-b527-84be70096143","resolution":{"observed_at":"2026-08-07T05:29:47.083775Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.066459Z","title":"Pseudo Label- Guided Model Inversion Attack via Conditional Gen- erative Adversarial Network","venue":null,"work_id":"4d8d9175-ee8c-443c-82f7-e98849594b32","year":2023},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.780352Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:dc18ccd2a0cb7254d538f8bc4f5c195d0fba11e86a7b185c85add5388ed0daca","observation_id":"c0aa3b18-fb79-438d-9b91-4c4016cc8bcd","resolution":{"observed_at":"2026-08-07T05:29:47.070350Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.053710Z","title":"SecretGen: Privacy Recovery on Pre-trained Models via Distribution Discrimination","venue":null,"work_id":"b8c3ddd5-4320-41dc-8011-e14f34e05efa","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.784172Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:20609ce45526177a2e651ae8dd5ea7f0f3046b61790e0d47894884678ab91f1e","observation_id":"bdb1ffe0-16c0-47c4-923a-2777cbd2aaa3","resolution":{"observed_at":"2026-08-07T05:29:47.057613Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.028947Z","title":"Generated Distributions Are All You Need for Membership Inference Attacks Against Gen- erative Models","venue":null,"work_id":"e0161ecc-9e86-4028-b119-632d31930aac","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.791561Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:3163c87f54eb53122fd2658c187b61afe83975a8654ff3999f9c3fa619e0f6e1","observation_id":"e6987b72-9a73-4e1b-80e8-f7b54247851d","resolution":{"observed_at":"2026-08-07T05:29:47.032702Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.016670Z","title":"Character-level Convolutional Networks for Text Clas- sification","venue":null,"work_id":"c3e01199-084c-49d4-83c6-6b21978ba53f","year":null},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.795512Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:6a1a717e1587035fe0d6ad642eb0c34ec12b7b3232acf2da6671409ace0604b2","observation_id":"8ea49ffa-0422-40a3-b058-2dac4879afcb","resolution":{"observed_at":"2026-08-07T05:29:47.020560Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.004641Z","title":"The Secret Re- vealer: Generative Model-Inversion Attacks Against Deep Neural Networks","venue":null,"work_id":"a2dbb7b9-3b1c-4405-9249-91e8005f89c7","year":2020},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.798847Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:b9efc1f62cff14d91dbc2854ddb4492bf43b3fa3048e19047ea322b2fea840b5","observation_id":"ae7453a6-9c27-4528-9966-044b0a60d8cb","resolution":{"observed_at":"2026-08-07T05:29:47.008326Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:46.992277Z","title":"poi- soned","venue":null,"work_id":"935c5887-0e7e-4401-a714-2c5706b4724a","year":2019},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.802174Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:9e6d9cdcf6306398b34af103e1f1bedf4a3a9fe4a2e5cdbb709c5cfc22360060","observation_id":"cb9e4ac7-2997-455a-b1f1-23ea1adb44eb","resolution":{"observed_at":"2026-08-07T05:29:46.995957Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.041233Z","title":null,"venue":null,"work_id":"bdda46cc-4686-4ce1-80f4-eaed5f10022f","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":155,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:46.787745Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:be4654773a5475b9f1245af84013f9fb63795e900415734ff33a5dea89a961ca","observation_id":"fd56362b-8a85-46f0-859a-f0c915da2517","resolution":{"observed_at":"2026-08-07T05:29:47.044935Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:47.737475Z","title":"2, 3, 22","venue":null,"work_id":"0ca5edb6-52b2-4945-be07-92e955565052","year":2022},"citing_paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","version":1},"reference_index":1914,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:43.535897Z"},"links":{"citing_paper":"/paper/2506.07888"},"observation_digest":"sha256:5e9066a923babb69588cf3f8b93ce36ea7f3bc7bb66f5555cd1418c2b6167cc4","observation_id":"94c2f764-8d88-4858-955d-1b0d7565b534","resolution":{"observed_at":"2026-08-07T05:29:47.741139Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.07888","last_updated":"2025-06-09T16:00:48Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T05:20:36.435565Z","submitted_at":"2025-06-09T16:00:48Z","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark"},"reference_resolution":{"displayed":78,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":2,"unresolved":16,"verified_exact":2,"verified_fuzzy":57},"total_outbound_references":78},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 78 of 78 outbound references and 0 inbound Pith citation observations for arXiv:2506.07888."}