{"as_of":"2026-08-18T20:58:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a93070d75fe035051e8f8ca564efee9b8947001f5ab74aa414e988ffba5c0005","coverage":[{"denominator":53,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":53,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:32:45.584830Z","state":"measured"},{"denominator":53,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":53,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.17292/citation-record","integrity":"/paper/2506.17292/integrity","json":"/paper/2506.17292/citation-record.json","paper":"/paper/2506.17292"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:41.295318Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.295318Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:52666138cb446e52b6a6b06774db58f59ecdad4cdf36f1bdf6a1426bdb437f70","observation_id":"b63d244e-60b1-4be8-bd52-f60307e2f9b0","resolution":{"observed_at":"2026-08-07T00:32:41.295318Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:51.268152Z","title":null,"venue":null,"work_id":"47808508-64ef-4fea-9646-5b1221cf8646","year":2019},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.345257Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:1fde135448c06232f2af8758abb06b422ac4fa58346f582827d32850a33832a6","observation_id":"30b7ed9c-2b54-4da5-a006-518004356298","resolution":{"observed_at":"2026-08-07T00:32:51.309995Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:51.205613Z","title":"Exploring homomorphic encryption and differential privacy techniques towards secure federated learning paradigm","venue":null,"work_id":"e2a03d72-bf67-4ae8-b4f3-06bb423c2f8e","year":2023},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.436146Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:042b52eb8ba8e93353a1c08331867af9e0ff460e703db28d1455b94367fb985c","observation_id":"96a6e618-8e37-47d7-8c25-a6088519dcc5","resolution":{"observed_at":"2026-08-07T00:32:51.236388Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:51.092360Z","title":"Foundations of data science","venue":null,"work_id":"0f94a65f-994e-494c-9372-6d0f47ed3f4d","year":2020},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.501782Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:c8af35fe368987cdfd50bac5948d3562d2e0e86b64318c8e54287ed81acdc188","observation_id":"a383c1a7-4496-4c30-a531-955bab4041f4","resolution":{"observed_at":"2026-08-07T00:32:51.133286Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:50.940047Z","title":"B., Patel, S., Ramage, D., Segal, A., and Seth, K","venue":null,"work_id":"65f79c2c-fc15-493e-b4f3-e8f00054ae3d","year":2017},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.547868Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:02e3597254d958e93133a7241bf90e06ce671f0078b487b028c7b653adee30e1","observation_id":"8d670ea4-961a-4c6a-914e-d7395bb3f204","resolution":{"observed_at":"2026-08-07T00:32:51.025949Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:41.636447Z","title":"Efficient intent detection with dual sentence encoders","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.636447Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:d1fe44d2b5a22c0398113f5b063fb1e3f46b37d79dee2b6a59361aef419c01c3","observation_id":"a044f75f-bb8d-474b-a40f-c7efff7c7acc","resolution":{"observed_at":"2026-08-07T00:32:41.636447Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"gov/3369100","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:45.846929Z","title":"H., and Shi, X","venue":null,"work_id":"d93f5a77-8517-4d80-ad50-e94d06a7f59f","year":2021},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.724616Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:fc1773a2833b0a640d887999fcc302e1c3255623003305962ba2982bd44d5a2f","observation_id":"a947bb99-4d0f-4232-8984-f91b60621759","resolution":{"observed_at":"2026-08-07T00:32:45.975266Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:41.813856Z","title":"Imagenet: A large-scale hierarchical image database","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.813856Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:b2b627decacdb89385f341dcaa939f291132a4c4f811369e6a1cb2784f678772","observation_id":"1fd05d75-0132-4b86-9beb-afc7e5e431f0","resolution":{"observed_at":"2026-08-07T00:32:41.813856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:41.903383Z","title":"Bert: Pre-training of deep bidirectional transformers for language understanding","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.903383Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:26cdbde9112dfc68e3b11989bca6a238f74d0e243a2d4fff90ed3c6d3eb5f888","observation_id":"535bf414-1e1c-4fd5-8799-85a758722e36","resolution":{"observed_at":"2026-08-07T00:32:41.903383Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:50.813531Z","title":"Collecting telemetry data privately","venue":null,"work_id":"81fdc89b-26dd-4ce7-98ee-6156a3961910","year":2017},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:41.983410Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:c26a74be8ba3cf845b0df5a37e310e1dc0081ce431947f551bc076f644d0b267","observation_id":"cf57e84e-6225-4c08-9db2-eb71bf9da771","resolution":{"observed_at":"2026-08-07T00:32:50.866840Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:42.058619Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.058619Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:2d091b8bb1f7a873ce7c3f5fca35870162f489246938f3dd0be75c32e377225e","observation_id":"1be347a5-5701-47cc-9cab-5db1846d47ab","resolution":{"observed_at":"2026-08-07T00:32:42.058619Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:50.673901Z","title":"Differential privacy","venue":null,"work_id":"bc82aca7-1b84-42c7-90d6-b8ca0efe60c3","year":2006},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.115460Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:d7f0dd4fc4976a2a89423f1822e9df50469c5cb51332e8aed7247d4a4c3525bf","observation_id":"76ea1494-c9a9-4e3a-9b13-46c39f4297eb","resolution":{"observed_at":"2026-08-07T00:32:50.750162Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:42.160340Z","title":"The algorithmic foundations of differential privacy","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.160340Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:affb7a9bca6c32bfc62fe6d8a75318cba90337332b1c0cbbd81d68386283daf9","observation_id":"a311b7fe-c3ff-4a95-bf10-b0b69508aa94","resolution":{"observed_at":"2026-08-07T00:32:42.160340Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:50.576256Z","title":"Rappor: Randomized aggregatable privacy-preserving ordinal response","venue":null,"work_id":"04ac834e-b87b-46ad-898f-5dfa6ce6c2ea","year":2014},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.218666Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:eda645e2ffc0a1bc4b09098c5c306865044f9cc4db2f4994b811c151c33b9b9f","observation_id":"cbecfa21-2e4f-4778-bc29-05c44e8bc830","resolution":{"observed_at":"2026-08-07T00:32:50.605374Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04013","last_updated":"2024-09-11T01:09:07Z","snapshot_observed_at":"2026-08-16T14:21:00.628189Z","submitted_at":"2024-02-06T14:06:23Z","title":"Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04013","snapshot_observed_at":"2026-08-07T00:32:42.237738Z","title":"Privacy leakage on dnns: A survey of model inversion attacks and defenses","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.237738Z"},"links":{"cited_paper":"/paper/2402.04013","citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:1d59125c52da119b1eb3bb3b881164ff90f9e63dfd75925b38193b9bce8ac95e","observation_id":"c1178347-abde-41a3-8194-8cdb9a697f4d","resolution":{"observed_at":"2026-08-07T00:32:42.237738Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:50.435199Z","title":"Secure aggregation is insecure: Category inference attack on federated learning","venue":null,"work_id":"11d3206f-c544-4514-af83-7d77398e80da","year":2021},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.283265Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:fee5ebacb61995c15a69a9a3a961d9863b09408c748820e201b537e46e7388bb","observation_id":"fa8c5945-b901-435f-aa46-19a07f5a819d","resolution":{"observed_at":"2026-08-07T00:32:50.520762Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:42.368305Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.368305Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:4d6737cdacfa964215b5e3de155e8fbd79aa2b4de29fb69e0cb4489a243d19d0","observation_id":"4268ebc9-a63e-471d-8bc3-f75c6455d7ac","resolution":{"observed_at":"2026-08-07T00:32:42.368305Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:50.337651Z","title":"J., yelong shen, Wallis, P., Allen-Zhu, Z., Li, Y., Wang, S., Wang, L., and Chen, W","venue":null,"work_id":"c28c827d-6996-4103-9322-12fcbefc51ac","year":2022},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.416367Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:7fa7b444a9a36549f067f833807d7cffe6c4953ddbc823cf4539a566891984e0","observation_id":"1b4381c3-dba0-4964-8a7a-91d13c02eb86","resolution":{"observed_at":"2026-08-07T00:32:50.395103Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:50.212913Z","title":"S., and Zhang, X","venue":null,"work_id":"f11db5c7-f3b2-44fc-ace9-61b4e89b27df","year":2022},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.464513Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:1b1f941c9330b59e77485ea6778bdef25dca5be06fe255b10f2a92b4af8c9935","observation_id":"704c0fb4-3b46-48b1-92a2-f17af31c92ec","resolution":{"observed_at":"2026-08-07T00:32:50.261200Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:50.096488Z","title":"D., Chen, A., Shila, D","venue":null,"work_id":"6144f392-2753-43c1-b4d2-04fa3f014396","year":2022},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.531786Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:efc6a6c633ceb1ada6fb98b6ae170e0596601972ee1494892b1c74368b987f15","observation_id":"f2fa99b4-eaf3-4f6b-a1c2-6257e6ee6fb6","resolution":{"observed_at":"2026-08-07T00:32:50.142120Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:50.007351Z","title":"E., Qureshi, M","venue":null,"work_id":"4ab21938-eb3e-45da-8263-66d4574d28d3","year":2023},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.582895Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:54db9f3e1532f24d6cf1cb4d953caae1977484632f8845d131dfa6b6ed6d702c","observation_id":"a5bddb48-f8ed-4f5d-9153-f68bb56b2960","resolution":{"observed_at":"2026-08-07T00:32:50.053521Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:42.616722Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.616722Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:9cdebfed0e5a5e36e65795513c845a6c733cc115334bccdb8f0e2ad8a2bd6a00","observation_id":"ef2fe66c-3cb2-4d81-ac91-36bc889d2305","resolution":{"observed_at":"2026-08-07T00:32:42.616722Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:42.670253Z","title":null,"venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.670253Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:efa0d1d67eb9d63569a0e558b4677d15d2f369510278450720d108a46fe85840","observation_id":"8c798d3b-3845-44ff-ada5-464a4f82643a","resolution":{"observed_at":"2026-08-07T00:32:42.670253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:42.760831Z","title":"The power of scale for parameter-efficient prompt tuning","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.760831Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:d68c76e43d1ce88a75f0287bee8c4794d8f73f0300ef9614e0f1694b427d6647","observation_id":"b684985e-5661-4583-b145-f6330d616c2d","resolution":{"observed_at":"2026-08-07T00:32:42.760831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:49.851706Z","title":"Tear: Exploring temporal evolution of adversarial robustness for membership inference attacks against federated learning","venue":null,"work_id":"df4e00be-bfda-4838-b6a2-6b35cf72f09c","year":2023},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.827923Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:5c056e102b77f22996c85eebea5d0304d2424ad751aa932ee3c1e18f9d501177","observation_id":"a75144ff-bea3-49e2-9734-60b4319ed8cc","resolution":{"observed_at":"2026-08-07T00:32:49.909387Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1907.11692","last_updated":"2019-07-26T17:48:29Z","snapshot_observed_at":"2026-08-16T14:33:50.657682Z","submitted_at":"2019-07-26T17:48:29Z","title":"RoBERTa: A Robustly Optimized BERT Pretraining Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1907.11692","snapshot_observed_at":"2026-08-07T00:32:42.900416Z","title":"Roberta: A robustly optimized bert pretraining approach","venue":null,"work_id":null,"year":1907},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:42.900416Z"},"links":{"cited_paper":"/paper/1907.11692","citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:6b8c7ede509cb9d70b1d21d5d3f4a1394f73f271b85be39377e2fa4977be9a8d","observation_id":"3b9fad98-4afa-47f5-a37b-b6a552bd24e6","resolution":{"observed_at":"2026-08-07T00:32:42.900416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:49.736271Z","title":"Towards differentially private text representations","venue":null,"work_id":"ac1a55a4-1571-4fb8-810b-b09ce3194d0d","year":2020},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.013883Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:190412e63f61cb166a2bd511d31565c4906fe3eb1edde505d7518cddc5b4396a","observation_id":"0e6a2885-bce5-4810-9744-bf07e5276b81","resolution":{"observed_at":"2026-08-07T00:32:49.764112Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:49.602750Z","title":"Flamingo: Multi-round single-server secure aggregation with applications to private federated learning","venue":null,"work_id":"f45293ae-4e67-4704-adfa-c29ed7a837cc","year":2023},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.178074Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:d8ecfc32edb56e472d71d2bdf448221e132545fc77affddb244614acdff8f4e2","observation_id":"99f7a5a7-7540-4eae-b7b7-272ea8c0478a","resolution":{"observed_at":"2026-08-07T00:32:49.661175Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:49.532546Z","title":"E., Pham, P","venue":null,"work_id":"9a19f303-87b5-431b-bd89-5f14456371f0","year":2011},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.301799Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:cc3ddbefe3dbcba53d5f5407d38eadd5cfdd8a6b18bd12621c7e54001ab69047","observation_id":"26ccae03-3879-4c8b-9c6d-d06abcc2bc5e","resolution":{"observed_at":"2026-08-07T00:32:49.568031Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:43.418592Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.418592Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:cfd858891da8c49608fcc178e7dc26221586695551bdd0c3ce5de5f598a6670c","observation_id":"ecd54d75-1bf4-4280-9502-e4dc801b200d","resolution":{"observed_at":"2026-08-07T00:32:43.418592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:49.390374Z","title":"Comprehensive privacy analysis of deep learning: Passive and active white-box inference attacks against centralized and federated learning","venue":null,"work_id":"83ff50ce-fbc1-4a27-95a8-9ab0b132ae21","year":2019},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.461896Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:8de3d30de15c772b708588ab57372cd9c15823f7bdbfa014071a5510625ed624","observation_id":"1e6fbc39-66f3-46dc-900d-8824101ccca8","resolution":{"observed_at":"2026-08-07T00:32:49.451134Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:49.273093Z","title":"Secure aggregation is not private against membership inference attacks","venue":null,"work_id":"583b7fc3-7425-4867-95af-c2a058cd2dae","year":2024},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.588356Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:b6eb188b43b0aeff74ef2ee7be0bceba10f78177bbee4a7ead050cc6ef3a188e","observation_id":"efebd92f-f958-4e47-b916-51f083a6a95c","resolution":{"observed_at":"2026-08-07T00:32:49.311296Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:49.144875Z","title":"and Thai, M","venue":null,"work_id":"fbedc5e2-0e24-4c71-a16a-02666e68c1fd","year":2023},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.642705Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:890fbe961182bd43c5306334f103371c6dd943072323042e5d7ecaea5ad76aac","observation_id":"afe9f804-5b61-4490-9376-db6d4d2c3706","resolution":{"observed_at":"2026-08-07T00:32:49.201330Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:49.010176Z","title":"N., and Thai, M","venue":null,"work_id":"9d680b33-ad73-45fe-aa08-cab325b3a554","year":2022},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.754465Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:83603760e6d8e89ef65c15ed47a745fad8e7a57f5da2721b1fbb4ad2418da975","observation_id":"57200496-e657-4a0b-ac1f-20869059dc45","resolution":{"observed_at":"2026-08-07T00:32:49.073426Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:48.867130Z","title":null,"venue":null,"work_id":"45a150b1-be53-471c-8579-0898986bbc08","year":2023},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.829373Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:a63cf130877e49cac64607e0bc482758e593b749c5e78241d0437516cc0da1a3","observation_id":"1743dbf4-c815-4356-8cac-25ffbb8d919c","resolution":{"observed_at":"2026-08-07T00:32:48.925140Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:48.738476Z","title":"Fedshe: privacy preserving and efficient federated learning with adaptive segmented ckks homomorphic encryption","venue":null,"work_id":"064d992a-6a33-4dae-ba89-867001c98fcc","year":2024},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.918184Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:f5a6bdde83629b138bf1cfb8c8358e3d0a1e1863cfe8db60812d0b6fdbf048b6","observation_id":"1f4db638-f2fc-4989-8bcb-3023c8251a14","resolution":{"observed_at":"2026-08-07T00:32:48.798805Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:48.650337Z","title":"Eluding secure aggregation in federated learning via model inconsistency","venue":null,"work_id":"bb4e532b-ff65-44f4-a7ee-18e8794babe6","year":2022},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:43.999599Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:e44857db1cdfe89ca7662bb2e42a3c425587e1487ae7c344ed001417670704ea","observation_id":"b4a57790-43b9-440d-b428-d4dbe6f84558","resolution":{"observed_at":"2026-08-07T00:32:48.694211Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:48.541481Z","title":"Natural language understanding with privacy-preserving bert","venue":null,"work_id":"a17c6cf4-ae1e-447b-bec3-0035cc725080","year":2021},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:44.098494Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:179d70d7faf23c75629b9bec88ccce5ce7e7f7b1ea7598bb454391bccc3277da","observation_id":"424cf353-01e2-4043-a272-7e24401031a4","resolution":{"observed_at":"2026-08-07T00:32:48.609022Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:44.242551Z","title":"Improving language understanding by generative pre-training","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:44.242551Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:b0ff2450f9704027a1b2689e79d6d74490479738d6976c2ea076947fa7a6e507","observation_id":"ffc07769-c597-4d4c-994c-1609e1d29a61","resolution":{"observed_at":"2026-08-07T00:32:44.242551Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:48.450987Z","title":"K., Klambauer, G., Brandstetter, J., and Hochreiter, S","venue":null,"work_id":"204a0745-15ce-4d6f-890f-d50cfbd4e15a","year":2021},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:44.320033Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:33d9535d9959399134aa516a6cc0506273d256d08efbf38dbdb9eee96818d50f","observation_id":"00b32616-d511-43a7-b162-7580d79d10d6","resolution":{"observed_at":"2026-08-07T00:32:48.491774Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:48.254761Z","title":"img2vec, 2021","venue":null,"work_id":"9f1465a6-974b-4c36-899e-1b74f90fa14f","year":2021},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:44.429596Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:76e962e5b48f7a5695fdaefef15a55519edc15f3af609af60536c59ebb721b04","observation_id":"6b35da60-9cf1-4cdb-bc68-b5674d94505f","resolution":{"observed_at":"2026-08-07T00:32:48.350679Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1910.01108","last_updated":"2020-03-01T02:57:50Z","snapshot_observed_at":"2026-08-07T19:07:36.327251Z","submitted_at":"2019-10-02T17:56:28Z","title":"DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lighter","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.01108","snapshot_observed_at":"2026-08-07T00:32:44.538396Z","title":"Distilbert, a distilled version of bert: smaller, faster, cheaper and lighter","venue":null,"work_id":null,"year":1910},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:44.538396Z"},"links":{"cited_paper":"/paper/1910.01108","citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:c65af6d05b374b66d6b000b7ebb51a1ef424098c28517d959e68d7f07ca6c6c8","observation_id":"fcdad153-7736-45bf-8654-d9f8383eb993","resolution":{"observed_at":"2026-08-07T00:32:44.538396Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:48.086745Z","title":"T., Huang, Y.-H., Wu, J., and Chen, Y.-S","venue":null,"work_id":"3d68eb83-269d-4f1e-888b-90ccefd7d5ed","year":2018},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:44.623139Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:27efc72dd9b16d380109946471b190eb1902abed73fba460b907e261fe574dc6","observation_id":"85262b3c-5518-489d-9289-fca15a15cc2b","resolution":{"observed_at":"2026-08-07T00:32:48.171905Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:47.832827Z","title":"Membership inference attacks against machine learning models","venue":null,"work_id":"d8f3753b-c5ea-4df8-83c6-0dbd2841009d","year":2017},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:44.681895Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:a61dc2ecef67d0e3f812b7ceec6bee02fb4438ef83df5d61154c9fcc7d5908f3","observation_id":"0c27b38b-7042-4bcc-848f-be3d8fc4c85c","resolution":{"observed_at":"2026-08-07T00:32:47.946852Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:47.598316Z","title":"T., et al","venue":null,"work_id":"a762a6de-9ba7-469d-bb56-c06c6fb47cf9","year":2024},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:44.825563Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:57e8be9ce2c201391b29961860723e0214c10a3d06ef275fd7f02f94c93b71e4","observation_id":"b158093d-3885-408d-bdde-b53982d42c7d","resolution":{"observed_at":"2026-08-07T00:32:47.726016Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:47.396889Z","title":"A comprehensive survey on local differential privacy toward data statistics and analysis","venue":null,"work_id":"f4aa587a-ded1-4f1b-a3e8-f255d4777e19","year":2020},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:44.929273Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:0a982f55793f94f316e563211104f7383ff82eea494395b3b018d62d6d7f6cd3","observation_id":"23dcdf69-4d59-4feb-b403-c2947cff31ea","resolution":{"observed_at":"2026-08-07T00:32:47.491279Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:47.105783Z","title":null,"venue":null,"work_id":"bd07ae87-aa2f-407d-b8bb-02c2f2883288","year":1965},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:45.021504Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:60b8039d022d9a3843601fbd6d46fdcc930c19116d933aa40db88fecbb761fff","observation_id":"526515d7-fdbb-49f9-aa6d-4dfdbf837156","resolution":{"observed_at":"2026-08-07T00:32:47.240630Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:46.869272Z","title":"Gradient leakage attacks in federated learning: Research frontiers, taxonomy and future directions","venue":null,"work_id":"450741b2-39ff-442b-bb33-ebb250e8b94e","year":2023},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:45.134932Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:cdfc800bf6bd0726229635499c2c2a9040a6d5b8135ba0bf4d1b86c2435cf82d","observation_id":"51eb94a7-df57-42f8-8c13-2883201af85f","resolution":{"observed_at":"2026-08-07T00:32:46.994372Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.15010","last_updated":"2023-11-30T14:57:30Z","snapshot_observed_at":"2026-08-18T08:27:14.000021Z","submitted_at":"2023-11-25T12:33:54Z","title":"Adapter is All You Need for Tuning Visual Tasks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.15010","snapshot_observed_at":"2026-08-07T00:32:45.224807Z","title":"Adapter is all you need for tuning visual tasks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:45.224807Z"},"links":{"cited_paper":"/paper/2311.15010","citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:a71f9a5a46ff000681b449859ba592eac95000d878471a7723d6235406f0439d","observation_id":"607df934-fad6-4357-a1de-631c66c9c8b2","resolution":{"observed_at":"2026-08-07T00:32:45.224807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:46.623607Z","title":null,"venue":null,"work_id":"16f9f5b8-e7d5-4ffb-9895-f3f0cf3f03ea","year":2021},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:45.299425Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:3121ca7f27464cac7b30620d04ce345dda8a33b8b7932882020fffd6fb9f04f9","observation_id":"3c91f7b4-d800-4bdb-9d88-f774ae90f01a","resolution":{"observed_at":"2026-08-07T00:32:46.746980Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:46.397196Z","title":"B., Goldberg, Y., and Ravfogel, S","venue":null,"work_id":"dd4b04d6-f372-4d42-a0dc-47c553ad6c82","year":2022},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:45.415323Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:f6bff026d216c2f5a6f9eed11bab95b54b5876844bae471ad6d1b2992ebc032e","observation_id":"0e70b17b-70e0-45d9-aec3-6938d6892d70","resolution":{"observed_at":"2026-08-07T00:32:46.503409Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:46.116193Z","title":"Gan enhanced membership inference: A passive local attack in federated learning","venue":null,"work_id":"97264dfb-4d2f-4513-96d6-be07deb62080","year":2020},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:45.496807Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:7b53da650c73c2f2300fd91d1e9ae1dca1771b2f95193af5dd37445a7403d1e3","observation_id":"c7c6547f-6d18-4040-ac37-a384ee5f73fa","resolution":{"observed_at":"2026-08-07T00:32:46.241658Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:32:45.584830Z","title":"Character-level convolutional networks for text classification","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models","version":2},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-07T00:32:45.584830Z"},"links":{"citing_paper":"/paper/2506.17292"},"observation_digest":"sha256:5896e89ad3a0c420dae24276892ec30ea1223b431eda910d527ec8348d1bb304","observation_id":"9fdfced0-b937-45a9-aaac-30fd46ee8e89","resolution":{"observed_at":"2026-08-07T00:32:45.584830Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.17292","last_updated":"2025-08-01T03:56:30Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T00:46:07.307685Z","submitted_at":"2025-06-16T21:48:11Z","title":"Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models"},"reference_resolution":{"displayed":53,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":21,"verified_exact":1,"verified_fuzzy":31},"total_outbound_references":53},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 53 of 53 outbound references and 0 inbound Pith citation observations for arXiv:2506.17292."}