{"as_of":"2026-08-10T13:48:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:538ca5eb4c4b5c40ec1eff7a8809a5b5fa040810ddccecb0c5ae66674e57da10","coverage":[{"denominator":101,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T22:23:15.592129Z","state":"measured"},{"denominator":107,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":107,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":7,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":7,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T19:25:28.225085Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-02T13:46:59.644121Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.22521","snapshot_observed_at":"2026-08-06T19:25:28.225085Z","title":"A survey on model extraction attacks and defenses for large language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.05649","last_updated":"2025-07-14T14:12:59Z","snapshot_observed_at":"2026-08-07T17:45:18.696744Z","submitted_at":"2025-07-08T04:01:53Z","title":"DESIGN: Encrypted GNN Inference via Server-Side Input Graph Pruning","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T19:25:28.225085Z"},"links":{"cited_paper":"/paper/2506.22521","citing_paper":"/paper/2507.05649"},"observation_digest":"sha256:793a092ed802e7cb6c265a02066e00905281a1e7bacc0d380242ae3044ac0b20","observation_id":"0899af40-fcb9-46b6-be23-5dcdf70cfccb","resolution":{"observed_at":"2026-08-06T19:25:28.225085Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.22521","snapshot_observed_at":"2026-08-05T15:39:55.309520Z","title":"A survey on model extraction attacks and defenses for large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-08T08:19:58.466694Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.309520Z"},"links":{"cited_paper":"/paper/2506.22521","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:faee1aa95a9e7725da479bed939487ed9652d013a0b876635abee7875e03d43f","observation_id":"e1f01ec2-4229-432d-baaa-1229b4fed8e9","resolution":{"observed_at":"2026-08-05T15:39:55.309520Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"cited_work":{"arxiv_id":"2506.22521","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.22521","snapshot_observed_at":"2026-07-02T13:46:59.644121Z","title":"A survey on model extraction attacks and defenses for large language models","venue":null,"work_id":"67df6c68-e39d-49d7-a74d-cb3b1afe418b","year":2025},"citing_paper":{"arxiv_id":"2604.01346","last_updated":"2026-04-06T19:07:02Z","snapshot_observed_at":"2026-08-03T08:33:40.943733Z","submitted_at":"2026-04-01T19:57:33Z","title":"Safety, Security, and Cognitive Risks in World Models","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-05-13T22:35:46.126714Z"},"links":{"cited_paper":"/paper/2506.22521","citing_paper":"/paper/2604.01346"},"observation_digest":"sha256:21f018d5543b736968db5da2d11cd314fbf925b96a40e6719acdf1bfcac17838","observation_id":"5242f9f1-cb04-4943-9899-28e1f8cc7f67","resolution":{"observed_at":"2026-05-13T22:38:22.216385Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"cited_work":{"arxiv_id":"2506.22521","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.22521","snapshot_observed_at":"2026-07-02T13:46:59.644121Z","title":"A survey on model extraction attacks and defenses for large language models","venue":null,"work_id":"67df6c68-e39d-49d7-a74d-cb3b1afe418b","year":2025},"citing_paper":{"arxiv_id":"2605.12827","last_updated":"2026-05-25T19:09:13Z","snapshot_observed_at":"2026-08-02T18:28:09.446223Z","submitted_at":"2026-05-12T23:49:45Z","title":"GraphIP-Bench: How Hard Is It to Steal a Graph Neural Network, and Can We Stop It?","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-14T19:28:31.180563Z"},"links":{"cited_paper":"/paper/2506.22521","citing_paper":"/paper/2605.12827"},"observation_digest":"sha256:42dfcb77bc70845e0e5afb174a78b3558ec00447b6ad51be1baa551812ad06fe","observation_id":"466077d7-06da-4c35-81bb-a5e36cad3810","resolution":{"observed_at":"2026-05-14T19:29:23.816144Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"cited_work":{"arxiv_id":"2506.22521","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.22521","snapshot_observed_at":"2026-07-02T13:46:59.644121Z","title":"A survey on model extraction attacks and defenses for large language models","venue":null,"work_id":"67df6c68-e39d-49d7-a74d-cb3b1afe418b","year":2025},"citing_paper":{"arxiv_id":"2605.12827","last_updated":"2026-05-25T19:09:13Z","snapshot_observed_at":"2026-08-02T18:28:09.446223Z","submitted_at":"2026-05-12T23:49:45Z","title":"GraphIP-Bench: How Hard Is It to Steal a Graph Neural Network, and Can We Stop It?","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-06-30T21:53:59.325002Z"},"links":{"cited_paper":"/paper/2506.22521","citing_paper":"/paper/2605.12827"},"observation_digest":"sha256:edd598e76b9914b79e7e48eb49ca2c3918ef9cf4471d3ca8073c6b4291085729","observation_id":"e3d7d8cf-cd30-4eee-a821-bbd96844d44e","resolution":{"observed_at":"2026-06-30T21:55:05.390154Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"cited_work":{"arxiv_id":"2506.22521","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.22521","snapshot_observed_at":"2026-07-02T13:46:59.644121Z","title":"A survey on model extraction attacks and defenses for large language models","venue":null,"work_id":"67df6c68-e39d-49d7-a74d-cb3b1afe418b","year":2025},"citing_paper":{"arxiv_id":"2605.30470","last_updated":"2026-05-28T18:41:20Z","snapshot_observed_at":"2026-08-02T00:40:58.268658Z","submitted_at":"2026-05-28T18:41:20Z","title":"Can Subgraph Explanations Be Weaponized to Steal Graph Neural Networks?","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-06-29T08:32:47.166531Z"},"links":{"cited_paper":"/paper/2506.22521","citing_paper":"/paper/2605.30470"},"observation_digest":"sha256:5e8a9adb584e69da8ff565e6b42ad7e1055d00db31420fe9be9344afb912d4fe","observation_id":"c8bbc0bb-8948-4aba-9686-78b4152238a1","resolution":{"observed_at":"2026-06-29T08:33:14.859128Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"cited_work":{"arxiv_id":"2506.22521","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.22521","snapshot_observed_at":"2026-07-02T13:46:59.644121Z","title":"A survey on model extraction attacks and defenses for large language models","venue":null,"work_id":"67df6c68-e39d-49d7-a74d-cb3b1afe418b","year":2025},"citing_paper":{"arxiv_id":"2606.05725","last_updated":"2026-06-04T05:33:49Z","snapshot_observed_at":"2026-08-07T05:54:31.269699Z","submitted_at":"2026-06-04T05:33:49Z","title":"An Embarrassingly Simple Detector for Model Extraction Attacks in Large Language Model API Traffic","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-06-28T00:59:14.347069Z"},"links":{"cited_paper":"/paper/2506.22521","citing_paper":"/paper/2606.05725"},"observation_digest":"sha256:d48ddeabb692652f14798dd2d98563388a85066ae0883f1005334d4e44dfae0e","observation_id":"aec7fd9f-2f64-4543-ac97-763dc6e5a408","resolution":{"observed_at":"2026-07-02T13:46:59.645932Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.22521/citation-record","integrity":"/paper/2506.22521/integrity","json":"/paper/2506.22521/citation-record.json","paper":"/paper/2506.22521"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-06T22:23:06.974822Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:06.974822Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:52d04b33d7674ede08214ed30b65f38e7c712051b17f8bf01cfa64f94b86c3bb","observation_id":"2398f851-d03c-4058-8452-a1542f67d4b2","resolution":{"observed_at":"2026-08-06T22:23:06.974822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.01177","last_updated":"2025-05-02T10:35:26Z","snapshot_observed_at":"2026-08-09T05:17:12.047111Z","submitted_at":"2025-05-02T10:35:26Z","title":"LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.01177","snapshot_observed_at":"2026-08-06T22:23:07.048540Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:07.048540Z"},"links":{"cited_paper":"/paper/2505.01177","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:9fbcd6d04636cd3a7c018a1cbc48650121700e0d9199f1aca77dc638735b84a8","observation_id":"75d8be74-36bd-45ba-9afb-f98696a5faa0","resolution":{"observed_at":"2026-08-06T22:23:07.048540Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.16726","last_updated":"2025-08-08T14:25:59Z","snapshot_observed_at":"2026-08-07T22:02:43.371269Z","submitted_at":"2024-09-25T08:23:37Z","title":"Formal Local Implication Between Two Neural Networks","version":2},"cited_work":{"arxiv_id":"2409.16726","doi":null,"metadata_source":"pith","pith_arxiv_id":"2409.16726","snapshot_observed_at":"2026-08-06T22:23:16.940445Z","title":"Formal Local Implication Between Two Neural Networks","venue":"cs.LG","work_id":"a9cc9fdd-19bd-4fa0-a2e7-4dafde83592c","year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:07.137150Z"},"links":{"cited_paper":"/paper/2409.16726","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:a5bc7b38a61db1252cc39570f59587e54dfbd288d375f6e3298227b488fd185b","observation_id":"b221ff90-290d-473e-b766-4c9226296313","resolution":{"observed_at":"2026-08-06T22:23:16.966996Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:07.235866Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:07.235866Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:5950418a48de919fa1cc29a83a49c28dc815f1af91d5ea13b5622a52355fbc2e","observation_id":"f7fc6fd1-0cf8-4c4c-abfc-e4f68de14a67","resolution":{"observed_at":"2026-08-06T22:23:07.235866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-10T12:12:16.686272Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-06T22:23:07.379249Z","title":"Feder Cooper, Katherine Lee, Matthew Jagielski, Milad Nasr, Arthur Conmy, Itay Yona, Eric Wallace, David Rolnick, and Florian Tram‘er","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:07.379249Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:7db0915b4ebd6b7e6f4ce85c49c61e0f0a1855af6c353d6620c912deee32ddb2","observation_id":"595b52f3-0a8b-46de-9fde-a94212a96ecb","resolution":{"observed_at":"2026-08-06T22:23:07.379249Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:07.534176Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:07.534176Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:236302bf3ea24ca636ff05bd92239bfdd6eb0ab1c4bb52078954452a8a281648","observation_id":"86195a57-c33e-4c1c-aeb3-d6275d7d8f80","resolution":{"observed_at":"2026-08-06T22:23:07.534176Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2105.10909","last_updated":"2021-12-26T14:55:54Z","snapshot_observed_at":"2026-07-06T11:11:58.263934Z","submitted_at":"2021-05-23T10:38:23Z","title":"Killing One Bird with Two Stones: Model Extraction and Attribute Inference Attacks against BERT-based APIs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2105.10909","snapshot_observed_at":"2026-08-06T22:23:07.623942Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:07.623942Z"},"links":{"cited_paper":"/paper/2105.10909","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:a1db173593c67ff4056096df3dcbe17d61667e8eafd1b7634eddc91a9116faa8","observation_id":"813c214a-7401-45b6-966f-cde9659e2794","resolution":{"observed_at":"2026-08-06T22:23:07.623942Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-09T15:19:23.285991Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.02362","snapshot_observed_at":"2026-08-06T22:23:07.680268Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:07.680268Z"},"links":{"cited_paper":"/paper/2506.02362","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:8ba7e2efcb041a6e3386eb12d41c47ae65fbc1d31d4186c12d6052b1c91d593c","observation_id":"2915912e-4524-4069-9543-c9c1df610d22","resolution":{"observed_at":"2026-08-06T22:23:07.680268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:07.745278Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:07.745278Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:77244ab9660ac9bf0a84951e35b9ee925a78602a685bc0734a3a3e7f7586fe51","observation_id":"66fd9ebb-802e-465a-a04d-4eb1bc370a6e","resolution":{"observed_at":"2026-08-06T22:23:07.745278Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:07.871673Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:07.871673Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:9e46881b4d11d90433d7a08b733e5a30649d3beaf8b0f46ec09ad80f47d8c08d","observation_id":"c2a8dc19-1ea9-42a7-8ce4-434b9a648dda","resolution":{"observed_at":"2026-08-06T22:23:07.871673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.16086","last_updated":"2025-02-22T05:19:20Z","snapshot_observed_at":"2026-08-07T17:56:58.202840Z","submitted_at":"2025-02-22T05:19:20Z","title":"Stealing Training Data from Large Language Models in Decentralized Training through Activation Inversion Attack","version":1},"cited_work":{"arxiv_id":"2502.16086","doi":null,"metadata_source":"pith","pith_arxiv_id":"2502.16086","snapshot_observed_at":"2026-08-06T22:23:16.775857Z","title":"Stealing Training Data from Large Language Models in Decentralized Training through Activation Inversion Attack","venue":"cs.CR","work_id":"411de77d-b78b-4991-8c2f-ebfae0ec3556","year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:07.990975Z"},"links":{"cited_paper":"/paper/2502.16086","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:84acc648aeb391e96d5188bb17dc8b94f7bc0f5414630549ea840eac2fd112ae","observation_id":"82c264c8-4685-4d0f-b45d-e6a6f3417981","resolution":{"observed_at":"2026-08-06T22:23:16.820213Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:08.040547Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:08.040547Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:d000b71eb3f8117fb97e79120c952856fb91153d5775e200e5e93cc7090ec772","observation_id":"9e9e71f8-d2de-47c3-bb0a-f4c105fc184e","resolution":{"observed_at":"2026-08-06T22:23:08.040547Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:08.101819Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:08.101819Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:891bc5504fe7bc2816a2dedf421a45e44d1cceeae33746aee8b09b0a04b093fb","observation_id":"494b16ce-46b0-43f1-9610-1f1e99feb159","resolution":{"observed_at":"2026-08-06T22:23:08.101819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.02622","last_updated":"2024-06-03T19:27:46Z","snapshot_observed_at":"2026-08-03T08:33:58.422749Z","submitted_at":"2024-06-03T19:27:46Z","title":"Safeguarding Large Language Models: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.02622","snapshot_observed_at":"2026-08-06T22:23:08.161276Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:08.161276Z"},"links":{"cited_paper":"/paper/2406.02622","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:438ccd7efd635a7943b0980c850daadf5042e3c6c709cc97381ff4ce1fcc1491","observation_id":"f027d4f4-8682-4088-8642-ca1e89009efc","resolution":{"observed_at":"2026-08-06T22:23:08.161276Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:08.211044Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:08.211044Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:d0f35fd70b2d5fcd40d958a15450c4a0db2ccc4e1674f3afab9433ef63093f7b","observation_id":"f64e01b3-69a4-4da3-a117-3f6fa7c8a78d","resolution":{"observed_at":"2026-08-06T22:23:08.211044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:08.281201Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:08.281201Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:307effdac685a109ec2f8e8696ccce83dfe580e1b02be47ab9f8694499af1501","observation_id":"6f50738d-bfb7-4262-9fe7-fb40f53a1637","resolution":{"observed_at":"2026-08-06T22:23:08.281201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.00473","last_updated":"2024-03-30T20:43:53Z","snapshot_observed_at":"2026-07-06T17:53:31.221833Z","submitted_at":"2024-03-30T20:43:53Z","title":"Privacy Backdoors: Stealing Data with Corrupted Pretrained Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.00473","snapshot_observed_at":"2026-08-06T22:23:08.327340Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:08.327340Z"},"links":{"cited_paper":"/paper/2404.00473","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:78e65f856d256ddebfd41f3491e4373b01c6705553a399d3db60fa890e579418","observation_id":"0c1b0d1b-33c1-4d62-86d2-06662740f358","resolution":{"observed_at":"2026-08-06T22:23:08.327340Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:08.391485Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:08.391485Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:ddefd26d220525d1e047be2c91bb986ee298b6e2a8bb6a73610487587e7e1289","observation_id":"08de176b-c3b3-455e-8ee3-0816d14c6f66","resolution":{"observed_at":"2026-08-06T22:23:08.391485Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-06T22:23:08.443923Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:08.443923Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:507d8a29402254f7e8e010d5788d579b3df77d988bcede3ab1bb630b237da9f8","observation_id":"6c18a227-d428-48ae-9285-a172b9e4dc6d","resolution":{"observed_at":"2026-08-06T22:23:08.443923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.20053","last_updated":"2024-06-28T17:05:46Z","snapshot_observed_at":"2026-08-10T06:52:25.049657Z","submitted_at":"2024-06-28T17:05:46Z","title":"Covert Malicious Finetuning: Challenges in Safeguarding LLM Adaptation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.20053","snapshot_observed_at":"2026-08-06T22:23:08.525510Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:08.525510Z"},"links":{"cited_paper":"/paper/2406.20053","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:01dac5ae9724275934af4152ac168488e3c0089e270f79d6380cc6e3c7ee0614","observation_id":"fef00b4a-a03c-461e-b9c9-0382cfbf997d","resolution":{"observed_at":"2026-08-06T22:23:08.525510Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2103.10013","last_updated":"2021-03-18T04:23:21Z","snapshot_observed_at":"2026-08-09T08:22:40.116436Z","submitted_at":"2021-03-18T04:23:21Z","title":"Model Extraction and Adversarial Transferability, Your BERT is Vulnerable!","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.10013","snapshot_observed_at":"2026-08-06T22:23:08.608293Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:08.608293Z"},"links":{"cited_paper":"/paper/2103.10013","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:e0db2b1652df376cf298405b6051b1702f1183a67a3a1f05d16502e15c16a5e6","observation_id":"d3a68d82-59ec-4310-abda-8c915c5b8367","resolution":{"observed_at":"2026-08-06T22:23:08.608293Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:08.742385Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:08.742385Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:587966818c10b8fc9f8734665ea57af5fd07e8051f80c81e82af18c2c65de17e","observation_id":"424c1ece-b40f-47e6-b862-5afefcf5c839","resolution":{"observed_at":"2026-08-06T22:23:08.742385Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.02301","last_updated":"2023-07-05T16:59:31Z","snapshot_observed_at":"2026-07-06T15:22:55.122322Z","submitted_at":"2023-05-03T17:50:56Z","title":"Distilling Step-by-Step! Outperforming Larger Language Models with Less Training Data and Smaller Model Sizes","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.02301","snapshot_observed_at":"2026-08-06T22:23:08.855007Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:08.855007Z"},"links":{"cited_paper":"/paper/2305.02301","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:f8a088940c0158e2d60ded837d364ee9cb1b47d63bad2bc56259e2bc850d6763","observation_id":"f5191ddf-4cf7-40c6-9bfc-bd44d77bee5f","resolution":{"observed_at":"2026-08-06T22:23:08.855007Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.12628","last_updated":"2022-10-20T05:30:43Z","snapshot_observed_at":"2026-08-09T02:07:57.297497Z","submitted_at":"2022-05-25T10:08:45Z","title":"Are Large Pre-Trained Language Models Leaking Your Personal Information?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.12628","snapshot_observed_at":"2026-08-06T22:23:08.974437Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:08.974437Z"},"links":{"cited_paper":"/paper/2205.12628","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:fb250140eeaaed997a267338f36d54ceff9a47157bea5a4340347e4e3fb6af6e","observation_id":"ac128d7f-af75-4c04-aaf9-9e5d4e0bc0d8","resolution":{"observed_at":"2026-08-06T22:23:08.974437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.16489","last_updated":"2024-11-25T15:31:27Z","snapshot_observed_at":"2026-07-06T19:56:39.115630Z","submitted_at":"2024-11-25T15:31:27Z","title":"O1 Replication Journey -- Part 2: Surpassing O1-preview through Simple Distillation, Big Progress or Bitter Lesson?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.16489","snapshot_observed_at":"2026-08-06T22:23:08.994979Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:08.994979Z"},"links":{"cited_paper":"/paper/2411.16489","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:5ef2e47f07d3ca4204082dd5b12fe76119616ba59156ef48bffcc558c85d8418","observation_id":"d7c69f25-f84b-4e19-b3ab-0bfb19014bd0","resolution":{"observed_at":"2026-08-06T22:23:08.994979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:09.049938Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:09.049938Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:0d3a79ae1ec2a80d8911ed62e5fff3b188f981058f04034be5db42c46424381f","observation_id":"baf3cea4-38b0-4dde-824a-fc5730258425","resolution":{"observed_at":"2026-08-06T22:23:09.049938Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1803.05961","last_updated":"2018-03-15T19:27:17Z","snapshot_observed_at":"2026-07-06T06:28:30.668960Z","submitted_at":"2018-03-15T19:27:17Z","title":"Chiron: Privacy-preserving Machine Learning as a Service","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1803.05961","snapshot_observed_at":"2026-08-06T22:23:09.090342Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:09.090342Z"},"links":{"cited_paper":"/paper/1803.05961","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:d29fd4e1932b5d8c9337fcb3c9335f9cf7b89d657b6cf6ce60e7d2f3b1f25fb4","observation_id":"52b5e293-f567-4c89-8fa1-e2535b557575","resolution":{"observed_at":"2026-08-06T22:23:09.090342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11852","last_updated":"2024-03-02T08:50:40Z","snapshot_observed_at":"2026-07-06T16:21:37.457918Z","submitted_at":"2023-09-21T07:49:55Z","title":"Knowledge Sanitization of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11852","snapshot_observed_at":"2026-08-06T22:23:09.122942Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:09.122942Z"},"links":{"cited_paper":"/paper/2309.11852","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:08099655447c2519cf9650b976552283540dcf58dd962af5a40e3682db85ab2e","observation_id":"166351fe-48a7-49b6-a850-bbd55de4b05c","resolution":{"observed_at":"2026-08-06T22:23:09.122942Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11358","last_updated":"2025-02-17T02:15:46Z","snapshot_observed_at":"2026-08-08T22:31:10.818398Z","submitted_at":"2025-02-17T02:15:46Z","title":"Mimicking the Familiar: Dynamic Command Generation for Information Theft Attacks in LLM Tool-Learning System","version":1},"cited_work":{"arxiv_id":"2502.11358","doi":null,"metadata_source":"pith","pith_arxiv_id":"2502.11358","snapshot_observed_at":"2026-08-06T22:23:16.517236Z","title":"Mimicking the Familiar: Dynamic Command Generation for Information Theft Attacks in LLM Tool-Learning System","venue":"cs.AI","work_id":"08c7645d-61fe-4a12-80ce-ee43b72b76d9","year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:09.158039Z"},"links":{"cited_paper":"/paper/2502.11358","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:ba826b4fc250bbb6f77262ec59b4d6d2844ba7545378cfd6b1af8b7665a5e513","observation_id":"37931c93-a92f-4b00-a32f-078114260d62","resolution":{"observed_at":"2026-08-06T22:23:16.589663Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:09.195004Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:09.195004Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:5a48f0bc52bafbc4af69ba64e58106579f883cf9d22fa5b38b50392050e9cafc","observation_id":"0a983116-4105-4cc3-bd06-77d4d0dc7e94","resolution":{"observed_at":"2026-08-06T22:23:09.195004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1810.09957","last_updated":"2018-10-08T04:30:44Z","snapshot_observed_at":"2026-08-04T04:20:13.256802Z","submitted_at":"2018-10-08T04:30:44Z","title":"NSML: Meet the MLaaS platform with a real-world case study","version":1},"cited_work":{"arxiv_id":"1810.09957","doi":null,"metadata_source":"pith","pith_arxiv_id":"1810.09957","snapshot_observed_at":"2026-08-06T22:23:16.358653Z","title":"NSML: Meet the MLaaS platform with a real-world case study","venue":"cs.DC","work_id":"635ffc14-82b8-4820-bcda-1581e6c50d02","year":2018},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:09.230248Z"},"links":{"cited_paper":"/paper/1810.09957","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:bcf3d671ef3c71eb79a10aed83fb6029250be94807fcaae39ea40c52d4f318f6","observation_id":"4a25376f-8341-4afb-92af-933af82310b5","resolution":{"observed_at":"2026-08-06T22:23:16.450478Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:09.270226Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:09.270226Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:0d8e2959d05737c299af3e44aaffb4ffd934632dba15692b610513dd1313d2dd","observation_id":"3b7fa80b-7d16-43e4-a1bd-2c51d1e7a372","resolution":{"observed_at":"2026-08-06T22:23:09.270226Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:09.303247Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:09.303247Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:929dec9f3a03ff003507f55c282728cd8e7d193cc11a4f58e7dd4ec1f5036719","observation_id":"bb03acb5-ef52-4b46-8ded-a2611c494c83","resolution":{"observed_at":"2026-08-06T22:23:09.303247Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12619","last_updated":"2025-02-17T03:28:20Z","snapshot_observed_at":"2026-08-05T14:06:18.055329Z","submitted_at":"2025-01-22T03:57:52Z","title":"Quantification of Large Language Model Distillation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12619","snapshot_observed_at":"2026-08-06T22:23:09.334313Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:09.334313Z"},"links":{"cited_paper":"/paper/2501.12619","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:7e99b06874312ecaacb8a7e63a151e0cb6d062b058797cbde5a5916f240a3eca","observation_id":"5f78bc3e-263f-4284-9726-c9c35b640d6b","resolution":{"observed_at":"2026-08-06T22:23:09.334313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.13624","last_updated":"2023-11-22T09:58:01Z","snapshot_observed_at":"2026-07-06T16:51:15.252642Z","submitted_at":"2023-11-22T09:58:01Z","title":"A Theoretical Insight into Attack and Defense of Gradient Leakage in Transformer","version":1},"cited_work":{"arxiv_id":"2311.13624","doi":null,"metadata_source":"pith","pith_arxiv_id":"2311.13624","snapshot_observed_at":"2026-08-06T22:23:16.057090Z","title":"A Theoretical Insight into Attack and Defense of Gradient Leakage in Transformer","venue":"cs.LG","work_id":"4b7799a7-a5e3-443b-9d47-854f28161f53","year":2023},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:09.395783Z"},"links":{"cited_paper":"/paper/2311.13624","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:7c916cad325b88f1cd3b12e282d146481e86ad4aaff3cdb809710390cffc38bd","observation_id":"49a2934e-3e88-4691-af76-f080bb4b94aa","resolution":{"observed_at":"2026-08-06T22:23:16.180666Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.12787","last_updated":"2024-09-06T04:30:50Z","snapshot_observed_at":"2026-08-10T00:34:44.862111Z","submitted_at":"2024-08-23T01:37:29Z","title":"LLM-PBE: Assessing Data Privacy in Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.12787","snapshot_observed_at":"2026-08-06T22:23:09.451168Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:09.451168Z"},"links":{"cited_paper":"/paper/2408.12787","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:9e59dfbfb21a99a3d811c5b931676e768aff9677585e169493cc22e1b688233f","observation_id":"6bcdc331-7bb6-4574-8b97-f54af23d00f6","resolution":{"observed_at":"2026-08-06T22:23:09.451168Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:09.543289Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:09.543289Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:996f016333976f9e8cccc159707b3b2fdd2175cb53a2da42e1974ea1d57510f7","observation_id":"575c6901-7d5c-4db3-8fcf-477b3b45c935","resolution":{"observed_at":"2026-08-06T22:23:09.543289Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13903","last_updated":"2026-04-27T01:53:46Z","snapshot_observed_at":"2026-07-06T19:35:35.229351Z","submitted_at":"2024-10-16T08:14:24Z","title":"CoreGuard: Safeguarding Foundational Capabilities of LLMs Against Model Stealing in Edge Deployment","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13903","snapshot_observed_at":"2026-08-06T22:23:09.641598Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:09.641598Z"},"links":{"cited_paper":"/paper/2410.13903","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:09a86e6c93e505891a06895da1ffc76ab782049c231db600288a577853864b7c","observation_id":"a7cc71d8-d58f-4172-ab3d-18e0744cdbcd","resolution":{"observed_at":"2026-08-06T22:23:09.641598Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.02416","last_updated":"2025-02-12T14:52:56Z","snapshot_observed_at":"2026-08-07T07:19:45.931364Z","submitted_at":"2024-08-05T12:20:39Z","title":"Why Are My Prompts Leaked? Unraveling Prompt Extraction Threats in Customized Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.02416","snapshot_observed_at":"2026-08-06T22:23:09.752446Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:09.752446Z"},"links":{"cited_paper":"/paper/2408.02416","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:9bfa5b2a7bbb473827fa67a55b436add376bd1dc8b148ae6f8cf635ea9b4ae6c","observation_id":"414498dc-713b-4933-89a7-c561d909e403","resolution":{"observed_at":"2026-08-06T22:23:09.752446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:09.858187Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:09.858187Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:9d1198d28b1cfbfd34e7ce3e3f3c693a783d1c1325c6dd0f30dfefd12a36fe71","observation_id":"35101cee-74c0-4ece-9014-a692e50bcf58","resolution":{"observed_at":"2026-08-06T22:23:09.858187Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:09.989598Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:09.989598Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:c548f81ee943e106a730e8de12c925f397d7f34e1bd3c29badde33cf0a20a621","observation_id":"cdc67eb1-ba8a-4767-aa08-aa845c08991d","resolution":{"observed_at":"2026-08-06T22:23:09.989598Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:10.203179Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:10.203179Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:ff257cd9d07d9a37f4c7cdc7036760424e03ddd83b2967876f9cb48fb070e2d8","observation_id":"3fab3d04-a375-4120-8cc8-2a9b22dff6ce","resolution":{"observed_at":"2026-08-06T22:23:10.203179Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:10.359508Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:10.359508Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:2ba4604b386e20a75cdefcdb948825f531a8740eaeae9f221cc7210b0d63591c","observation_id":"a0f10463-8501-40b1-90ce-9e08b01b0baa","resolution":{"observed_at":"2026-08-06T22:23:10.359508Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05206","snapshot_observed_at":"2026-08-06T22:23:10.476651Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:10.476651Z"},"links":{"cited_paper":"/paper/2502.05206","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:5d3502de5d68b05dcb6c39b8e734c48cccf20931e6650cf1216b81bb2ed8c3a0","observation_id":"c6dd6641-807f-4a9d-9a1e-c28e1c7bf46c","resolution":{"observed_at":"2026-08-06T22:23:10.476651Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:10.574602Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:10.574602Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:5683644c7ec6af115b5b0fac0f4658389b7bd2c63cd366c9eb1f223219b6dd9b","observation_id":"b665780f-8ac9-40ed-bf5f-9c4d257f5c1a","resolution":{"observed_at":"2026-08-06T22:23:10.574602Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:10.688202Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:10.688202Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:37e689b5c722de6461ed39f175fa5f2ee72ab22fc159d81c332843aaabe95a47","observation_id":"e4d1c035-f36c-4bd1-ae46-aca0a3daf627","resolution":{"observed_at":"2026-08-06T22:23:10.688202Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:10.764964Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:10.764964Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:3cb4bd61059e9d6c1ad5b8e2442984e4c49c389f0a137c5971a6f0983a4d782c","observation_id":"83a9c812-9659-4f11-8582-cc1bd739ba40","resolution":{"observed_at":"2026-08-06T22:23:10.764964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:20.521586Z","title":null,"venue":null,"work_id":"ef8de0ad-2b83-43d6-aeeb-f3f2d455627c","year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:10.877217Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:10b597d5e6bbb85d7a54c23750fcddb4e1f62052d9df8f8a8da94071c17856c0","observation_id":"8e17d5d8-c715-4b20-b1f7-5e23f2a13a4c","resolution":{"observed_at":"2026-08-06T22:23:20.593814Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:20.339097Z","title":null,"venue":null,"work_id":"f067c99d-2978-461b-9c23-781286c1ff03","year":null},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:10.954315Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:49f026c677c277c09ea78f7a35cbdbca7f2748a0b81dc8af9443c43466fa3892","observation_id":"2ba1a20e-cdaa-4a6e-8313-6fe1e0a201cf","resolution":{"observed_at":"2026-08-06T22:23:20.421495Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2203.13920","last_updated":"2022-03-25T21:47:59Z","snapshot_observed_at":"2026-08-09T04:42:47.315303Z","submitted_at":"2022-03-25T21:47:59Z","title":"Canary Extraction in Natural Language Understanding Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.13920","snapshot_observed_at":"2026-08-06T22:23:11.112248Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:11.112248Z"},"links":{"cited_paper":"/paper/2203.13920","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:ba6faf6ec195eb184e9e3ffafa7bd3e65b98b3f11580af549afbf5b4a54b520a","observation_id":"6d2b8218-9c5c-45b9-95ee-1ac0e47184dd","resolution":{"observed_at":"2026-08-06T22:23:11.112248Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17410","last_updated":"2023-09-29T17:12:43Z","snapshot_observed_at":"2026-07-06T16:25:38.571377Z","submitted_at":"2023-09-29T17:12:43Z","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.17410","snapshot_observed_at":"2026-08-06T22:23:11.236791Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:11.236791Z"},"links":{"cited_paper":"/paper/2309.17410","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:1af86345fdf8c070a26be0d47690a16b9c3e532d0e596a143d2c0f5fdfc02886","observation_id":"fb9729dd-18f4-4716-b14a-cbe114419238","resolution":{"observed_at":"2026-08-06T22:23:11.236791Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-06T22:23:11.340897Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:11.340897Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:30772ad0b4fd4b2005b776ece6be91ebb7658df2cc632ee0cef87f46b1941ffb","observation_id":"58f12026-5f11-4583-a23b-dd7e3e07971c","resolution":{"observed_at":"2026-08-06T22:23:11.340897Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:20.177522Z","title":"IEEE Transactions on Information Forensics and Security (2025)","venue":null,"work_id":"f6c192af-1509-40f5-a39f-79a517ba051e","year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:11.027554Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:8f0d1324a3f5427275ae28e3edc56d315626b58b5186cb2013f3fd1fe52b7456","observation_id":"cf148e82-01b7-4ab0-9655-3bebba2d0d99","resolution":{"observed_at":"2026-08-06T22:23:20.249055Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.18982","last_updated":"2024-10-08T15:13:01Z","snapshot_observed_at":"2026-07-06T19:39:15.025945Z","submitted_at":"2024-10-08T15:13:01Z","title":"O1 Replication Journey: A Strategic Progress Report -- Part 1","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.18982","snapshot_observed_at":"2026-08-06T22:23:11.516566Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:11.516566Z"},"links":{"cited_paper":"/paper/2410.18982","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:28b4f0bb48dcd15622c72bfdc08b0cdb6c86474dfed3b02b6e2c5dde8921d8b2","observation_id":"ee4f3b3a-defe-405c-883d-5f473e192fab","resolution":{"observed_at":"2026-08-06T22:23:11.516566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:19.830470Z","title":null,"venue":null,"work_id":"fb393dc1-01cb-41c5-ba6a-d56a83e378df","year":2022},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:11.609665Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:ba3bfaa638b955f47c6085fe9c7e6bc840b4d27204086700df062d2445e4963e","observation_id":"1904113c-5053-440e-9d00-83043e14b14d","resolution":{"observed_at":"2026-08-06T22:23:19.914269Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:19.672971Z","title":null,"venue":null,"work_id":"4a2d857a-64a8-47b3-b3c3-3e2a2f840647","year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:11.716447Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:393ac61d332833a2939141f95190beb2d8664fc3c62d436012370d5ddacf749b","observation_id":"796ee537-196b-43ac-9b04-5bacd9595e75","resolution":{"observed_at":"2026-08-06T22:23:19.740096Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:20.008915Z","title":null,"venue":null,"work_id":"cfed27b5-a6a8-4320-9d5c-8e1eafbcbb13","year":2020},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:11.441164Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:196078050fb2491bfe530c351c95f11ca35c3aede7499f1e3565782be272957f","observation_id":"4733a219-78ad-4ea1-b9c4-0a7870d30ff9","resolution":{"observed_at":"2026-08-06T22:23:20.089179Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:11.921402Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:11.921402Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:08eb87c486a093bdc83a5defbbd2da096af2b941f4351cc7b20e61a66f982410","observation_id":"63f4b6cd-de1b-40b3-8df2-48e9f87b9622","resolution":{"observed_at":"2026-08-06T22:23:11.921402Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:19.387705Z","title":null,"venue":null,"work_id":"2249719f-2f75-4f8f-bffb-6cb0a21e3548","year":2023},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:11.996447Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:46a76ce019f5def74027df82b69fea92134fec09e6448625a0824828d0d6234d","observation_id":"9825971f-2c92-4fc7-91c0-eb14489348fc","resolution":{"observed_at":"2026-08-06T22:23:19.444138Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12959","last_updated":"2024-02-20T12:25:26Z","snapshot_observed_at":"2026-08-05T12:59:16.120686Z","submitted_at":"2024-02-20T12:25:26Z","title":"Prompt Stealing Attacks Against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.12959","snapshot_observed_at":"2026-08-06T22:23:12.077506Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:12.077506Z"},"links":{"cited_paper":"/paper/2402.12959","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:fef4353067a1b1137859e7702a522b864aa9c1a8efa6020a004810a871950346","observation_id":"0f32f5e9-9f53-4110-9218-1a606c87f3a8","resolution":{"observed_at":"2026-08-06T22:23:12.077506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:19.523812Z","title":null,"venue":null,"work_id":"9c1f6b30-eecd-4645-9b37-dc42918be6dd","year":2019},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:11.826019Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:323a41c6c88a8fbd2e93f91374a4a46f14ddc139f88183f47ba79536088c3462","observation_id":"cd27cffd-28f9-4678-8d23-d1d3259bb9b8","resolution":{"observed_at":"2026-08-06T22:23:19.594263Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.18588","last_updated":"2024-10-24T09:37:23Z","snapshot_observed_at":"2026-08-06T23:55:57.757679Z","submitted_at":"2024-10-24T09:37:23Z","title":"Knowledge Distillation Using Frontier Open-source LLMs: Generalizability and the Role of Synthetic Data","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.18588","snapshot_observed_at":"2026-08-06T22:23:12.214721Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:12.214721Z"},"links":{"cited_paper":"/paper/2410.18588","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:acf36af110b70c5bc0ec72d7b58e3a93078c95fdb192e83b873abe3424531e8c","observation_id":"1fb8c34e-e8ac-4233-ae90-20fd0df7c25d","resolution":{"observed_at":"2026-08-06T22:23:12.214721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.11805","last_updated":"2025-05-09T21:04:06Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-19T02:39:27Z","title":"Gemini: A Family of Highly Capable Multimodal Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.11805","snapshot_observed_at":"2026-08-06T22:23:12.333002Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:12.333002Z"},"links":{"cited_paper":"/paper/2312.11805","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:5ecb10c9385f523547fb269a2cd497ad2bf1f4150f49f61b041b2af2ec792c6a","observation_id":"9b7ebe0c-ef73-4c7b-ad1a-ebf5e3388578","resolution":{"observed_at":"2026-08-06T22:23:12.333002Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.11007","last_updated":"2024-06-16T16:43:58Z","snapshot_observed_at":"2026-08-08T11:16:53.898017Z","submitted_at":"2024-06-16T16:43:58Z","title":"Threat Modelling and Risk Analysis for Large Language Model (LLM)-Powered Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.11007","snapshot_observed_at":"2026-08-06T22:23:12.456490Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:12.456490Z"},"links":{"cited_paper":"/paper/2406.11007","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:fff388db63508ecb3cea1f1a54717912db40d143c07069d4fe3a1fabb0601648","observation_id":"fdcf7902-4e76-457c-ba98-f3bbea9fdd5a","resolution":{"observed_at":"2026-08-06T22:23:12.456490Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:19.240913Z","title":null,"venue":null,"work_id":"48d942a9-6587-4986-8d1b-2d00def0335d","year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:12.154329Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:6c009ab5272243d453770f05271cec8229f8f4615909da1726735511ead2c145","observation_id":"334dbff6-1446-4092-a5c5-0d15da67b47a","resolution":{"observed_at":"2026-08-06T22:23:19.307669Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:18.893976Z","title":null,"venue":null,"work_id":"7e810d92-ad4a-4039-815d-2552760a8787","year":null},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:12.738012Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:e2d4a2a39171c3efcb1b89a66f22ff38278fc04bd3fab7216bf6e29210c87581","observation_id":"df4d7e6e-6d66-415b-8b9e-9a6e591a1f1e","resolution":{"observed_at":"2026-08-06T22:23:18.970842Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17012","last_updated":"2024-07-15T02:37:09Z","snapshot_observed_at":"2026-07-06T17:35:49.280235Z","submitted_at":"2024-02-26T20:41:50Z","title":"Pandora's White-Box: Precise Training Data Detection and Extraction in Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.17012","snapshot_observed_at":"2026-08-06T22:23:12.946067Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:12.946067Z"},"links":{"cited_paper":"/paper/2402.17012","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:2613a4b5b87c6901f5c980a0c1dc57373a3c4d4667655350e14952894fc153e8","observation_id":"d419727c-1a53-4ce0-8e7a-c0807b2676e7","resolution":{"observed_at":"2026-08-06T22:23:12.946067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:18.680148Z","title":null,"venue":null,"work_id":"b8dc6744-45a6-4c1e-ad34-86abc44f9016","year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:13.087252Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:8a95d7c029631cd1b725c6e260552d386ca567fb5d2aff2cd2ccf6e62108bd3d","observation_id":"a8c4606c-5d29-4175-bb32-4681329b3327","resolution":{"observed_at":"2026-08-06T22:23:18.765104Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:12.540549Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:12.540549Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:1e6e21e7e691a11174e7371e34e3fb2632393cf8543973f224636d5eae42f9c9","observation_id":"bbf6e9cf-83a4-4162-bc5f-a61aa0ba2ad3","resolution":{"observed_at":"2026-08-06T22:23:12.540549Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:18.506049Z","title":null,"venue":null,"work_id":"ecc3e59f-ce12-4b09-8554-d78ac1369c03","year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:13.251466Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:8702bea3f7898fb5cf19d691a0999ae8e83c04b46a9f8d66419ab8d946904610","observation_id":"4913b927-0fef-41b0-9afc-5aea364be67f","resolution":{"observed_at":"2026-08-06T22:23:18.575640Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.17145","last_updated":"2025-05-22T07:30:37Z","snapshot_observed_at":"2026-08-09T05:04:54.664879Z","submitted_at":"2025-05-22T07:30:37Z","title":"LLM Access Shield: Domain-Specific LLM Framework for Privacy Policy Compliance","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.17145","snapshot_observed_at":"2026-08-06T22:23:13.332629Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:13.332629Z"},"links":{"cited_paper":"/paper/2505.17145","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:ffc0eff11039c73e947c2ef1461b5300070f4422b13997d616c20dd64865a4a7","observation_id":"50ce3b78-68cc-423b-a636-1b5a79d7f66f","resolution":{"observed_at":"2026-08-06T22:23:13.332629Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.11107","last_updated":"2025-02-11T05:08:56Z","snapshot_observed_at":"2026-08-08T04:59:58.955297Z","submitted_at":"2024-06-17T00:17:11Z","title":"Exploring Safety-Utility Trade-Offs in Personalized Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.11107","snapshot_observed_at":"2026-08-06T22:23:12.849270Z","title":"arXiv preprint arXiv:2406.11107 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:12.849270Z"},"links":{"cited_paper":"/paper/2406.11107","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:c34aa020efefda04b26743211d6cb8e2cbe27849af790c765968e9578262cf0d","observation_id":"83eede65-e0ce-482c-868c-6ef84a9b6a07","resolution":{"observed_at":"2026-08-06T22:23:12.849270Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.15851","last_updated":"2024-03-22T10:02:11Z","snapshot_observed_at":"2026-08-09T00:35:34.621589Z","submitted_at":"2023-10-24T14:08:26Z","title":"Self-Guard: Empower the LLM to Safeguard Itself","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.15851","snapshot_observed_at":"2026-08-06T22:23:13.547730Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:13.547730Z"},"links":{"cited_paper":"/paper/2310.15851","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:f8a185a43431b2f987ee0197611d3d266c1142f9c27a0116f1a3c0c4477a5d87","observation_id":"714e8aaf-4dbc-4487-a8a7-24d05e0ffff2","resolution":{"observed_at":"2026-08-06T22:23:13.547730Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:13.644329Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:13.644329Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:346dba638c04e4c7c64a90621a9eae7a4d1b96e4af21d4418dd81168d9fc81f5","observation_id":"97a3e768-11c2-4875-ba25-2391f2a5a4f3","resolution":{"observed_at":"2026-08-06T22:23:13.644329Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:13.174757Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:13.174757Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:ff9117517938b814eb5125d6864df3503ba5b4185185cfa18d46dc8a1ed28132","observation_id":"33f1294a-2061-4c77-8d9e-241a9488d937","resolution":{"observed_at":"2026-08-06T22:23:13.174757Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.12255","last_updated":"2024-04-03T06:23:34Z","snapshot_observed_at":"2026-08-10T04:17:45.472447Z","submitted_at":"2024-01-21T09:51:45Z","title":"Instructional Fingerprinting of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.12255","snapshot_observed_at":"2026-08-06T22:23:13.891780Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:13.891780Z"},"links":{"cited_paper":"/paper/2401.12255","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:809d1d3ab629334adbbc4e5861aa7295d5ce6f67938c267482e299a86a2e19e4","observation_id":"6d71d491-0fd2-47e7-8851-a7c988f11eb6","resolution":{"observed_at":"2026-08-06T22:23:13.891780Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:18.197701Z","title":null,"venue":null,"work_id":"ae28edee-6a7a-4b91-9dd3-57eed1fef8bc","year":null},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:13.975280Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:2e5df5e0758c6af8f53f2a9648d1a42f0b0db7ceaca23f84b64dcb05c7f8045d","observation_id":"48ee890e-7c42-429c-889b-409e0712e05d","resolution":{"observed_at":"2026-08-06T22:23:18.257138Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.17709","last_updated":"2025-06-21T13:11:42Z","snapshot_observed_at":"2026-08-06T23:27:27.154145Z","submitted_at":"2025-06-21T13:11:42Z","title":"CEGA: A Cost-Effective Approach for Graph-Based Model Extraction and Acquisition","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.17709","snapshot_observed_at":"2026-08-06T22:23:13.439026Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:13.439026Z"},"links":{"cited_paper":"/paper/2506.17709","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:0bb99fb64b4c066886dbc447f4ea263bcfd6771499073cff2a5ee7cf6ac6892f","observation_id":"5a5009c7-f14d-4d84-9613-fc717f72f050","resolution":{"observed_at":"2026-08-06T22:23:13.439026Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.05156","last_updated":"2024-03-14T14:17:57Z","snapshot_observed_at":"2026-07-30T18:58:06.958154Z","submitted_at":"2024-03-08T08:47:48Z","title":"On Protecting the Data Privacy of Large Language Models (LLMs): A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.05156","snapshot_observed_at":"2026-08-06T22:23:14.258712Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:14.258712Z"},"links":{"cited_paper":"/paper/2403.05156","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:47d54bc6137f47a27cb6be3a58dfb631b2f3c2f3abe4d8c1f02293dc7abccc82","observation_id":"6ef0bd52-3ed9-4569-8b46-a4db255cc0f6","resolution":{"observed_at":"2026-08-06T22:23:14.258712Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:18.072769Z","title":null,"venue":null,"work_id":"9953637a-0cf1-41c7-beb2-b7066f1a7aa6","year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:14.398981Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:acd02d9aa41f61d24cb98f51cbd88de920e3fd12f289f49a2f301c5f0587b9a5","observation_id":"0d1b299f-30af-4166-a7da-a6ee2e51a682","resolution":{"observed_at":"2026-08-06T22:23:18.145568Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:18.324498Z","title":null,"venue":null,"work_id":"d8018d38-3639-42a0-92da-b8408e51e44c","year":null},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:13.744078Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:451ca6342334ed0c49215c9d0760722c84a49b20aee2bba3bb71ca7e37916776","observation_id":"8de8956d-67ad-4f0d-ad42-9390d94212fa","resolution":{"observed_at":"2026-08-06T22:23:18.400001Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-08-10T03:18:14.587354Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-08-06T22:23:13.812550Z","title":"arXiv preprint arXiv:2402.18649 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:13.812550Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:80cb5eb9f888f00b3da750a2457b5de2b53e7d6051ede3a6fee34a338749d8b9","observation_id":"c7c31459-26ba-4ccc-b81b-38289a286e9f","resolution":{"observed_at":"2026-08-06T22:23:13.812550Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:17.703413Z","title":null,"venue":null,"work_id":"3e734835-ea09-4ea4-af6a-29ab19e2e19d","year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:14.660980Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:bf305066e4368c688ba3bc0af7a7feda7f13ba5c35b1fd3410fcb9ecb184ab16","observation_id":"684ab5db-7f94-4741-884c-7fed5635497d","resolution":{"observed_at":"2026-08-06T22:23:17.796278Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:14.739373Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:14.739373Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:ca52392bf181b5ebdad3314133db6038c538dae04c31a70650573cba418d213a","observation_id":"b1b6b602-885d-4f1e-8f1a-7aeb96539e19","resolution":{"observed_at":"2026-08-06T22:23:14.739373Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:17.508976Z","title":null,"venue":null,"work_id":"919f6101-e32c-4a6a-8f82-fd0834821e38","year":2017},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:14.820685Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:bc8c0d625814c13bb9d3593869796529ddc381375ffeccb01660968fc5e1a4f5","observation_id":"de9510f7-5796-4106-915b-36e40244eb41","resolution":{"observed_at":"2026-08-06T22:23:17.599962Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12567","last_updated":"2025-05-18T22:55:16Z","snapshot_observed_at":"2026-08-07T15:43:35.656611Z","submitted_at":"2025-05-18T22:55:16Z","title":"A Survey of Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.12567","snapshot_observed_at":"2026-08-06T22:23:14.155540Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:14.155540Z"},"links":{"cited_paper":"/paper/2505.12567","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:118ae52a1b1b7f088a932bf829585d0dc693491627819f4b7e76dfb899912c1b","observation_id":"0ce7fa8f-8630-4980-9495-8b48523e056b","resolution":{"observed_at":"2026-08-06T22:23:14.155540Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.15012","last_updated":"2024-10-08T16:30:11Z","snapshot_observed_at":"2026-08-07T21:58:59.012579Z","submitted_at":"2024-05-23T19:35:03Z","title":"Extracting Prompts by Inverting LLM Outputs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.15012","snapshot_observed_at":"2026-08-06T22:23:14.977637Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:14.977637Z"},"links":{"cited_paper":"/paper/2405.15012","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:7222d799800545a99cef57137a18368d572072b91a799606fa7e420bc63f3168","observation_id":"8874d12e-e76b-4ddc-906a-4775b6e0e6bf","resolution":{"observed_at":"2026-08-06T22:23:14.977637Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.10505","last_updated":"2022-09-21T17:05:12Z","snapshot_observed_at":"2026-07-06T13:54:49.290065Z","submitted_at":"2022-09-21T17:05:12Z","title":"Text Revealer: Private Text Reconstruction via Model Inversion Attacks against Transformers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.10505","snapshot_observed_at":"2026-08-06T22:23:15.086759Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:15.086759Z"},"links":{"cited_paper":"/paper/2209.10505","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:cf3e50f176c599ca153170fab9448c6315458bc65a7a34d45dd07eee15e766f7","observation_id":"c959318c-2c94-485b-b91c-e0b754d77164","resolution":{"observed_at":"2026-08-06T22:23:15.086759Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:17.915930Z","title":null,"venue":null,"work_id":"4167f0bb-5c38-4d21-a31c-717d5bacc045","year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:14.480271Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:e97bc791de452615846f8f88b9183e8a6e4d0b3953f24f03e2591951a6a5bdda","observation_id":"34ec3a25-49fe-407c-86ee-caa82727497e","resolution":{"observed_at":"2026-08-06T22:23:17.990943Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.19200","last_updated":"2025-06-12T13:56:26Z","snapshot_observed_at":"2026-08-05T03:23:44.922485Z","submitted_at":"2024-02-29T14:30:28Z","title":"PRSA: Prompt Stealing Attacks against Real-World Prompt Services","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.19200","snapshot_observed_at":"2026-08-06T22:23:14.572740Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:14.572740Z"},"links":{"cited_paper":"/paper/2402.19200","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:cc8da53ab4368b490210b0b4eae9f5f79f7433f90f1ade3011f8ff5a12fd2101","observation_id":"807e4040-7156-476e-9b88-83bb1288595f","resolution":{"observed_at":"2026-08-06T22:23:14.572740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.04401","last_updated":"2023-07-10T08:03:41Z","snapshot_observed_at":"2026-07-06T15:52:01.837079Z","submitted_at":"2023-07-10T08:03:41Z","title":"Ethicist: Targeted Training Data Extraction Through Loss Smoothed Soft Prompting and Calibrated Confidence Estimation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.04401","snapshot_observed_at":"2026-08-06T22:23:15.392554Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:15.392554Z"},"links":{"cited_paper":"/paper/2307.04401","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:82825459fa78ba2cfb3b123aec55c33d78c3176161be632cd4fc8ed835b28652","observation_id":"227c6367-f520-45d9-be7c-385f467585e9","resolution":{"observed_at":"2026-08-06T22:23:15.392554Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.16065","last_updated":"2025-02-22T03:46:50Z","snapshot_observed_at":"2026-08-08T14:12:49.413158Z","submitted_at":"2025-02-22T03:46:50Z","title":"A Survey of Model Extraction Attacks and Defenses in Distributed Computing Environments","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.16065","snapshot_observed_at":"2026-08-06T22:23:15.516612Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:15.516612Z"},"links":{"cited_paper":"/paper/2502.16065","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:a3bde3e395e8df476415c922cb817b05d131459f9e3f48c5c429e073877f93dc","observation_id":"85bd9cc7-b88c-4a73-98d0-58efb115df1e","resolution":{"observed_at":"2026-08-06T22:23:15.516612Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:17.047342Z","title":null,"venue":null,"work_id":"37772e6e-9b05-475e-bd43-7a0d6ff1ed00","year":null},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:15.592129Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:449af3730ef95638efc88a99677be08df44ad9180ee3d86da5b5aa4ef049273b","observation_id":"745aa0d3-29fe-4acd-b2df-43ec687349b1","resolution":{"observed_at":"2026-08-06T22:23:17.103630Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:17.318016Z","title":null,"venue":null,"work_id":"47c600f8-4e18-425d-844e-d4753b987056","year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:14.899715Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:e3b5958be5ed64e36a6a555ec50254fdf12ac63e52f0de96624209cabd3cd401","observation_id":"14d07726-652b-49e5-aaea-35118d2f9309","resolution":{"observed_at":"2026-08-06T22:23:17.415075Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:17.166988Z","title":"2024.{REMARK-LLM}: A robust and efficient watermarking framework for generative large language models","venue":null,"work_id":"ca45d429-453b-4eac-a1fd-c702584b90ea","year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:15.174079Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:5002ca1fa5cb29b1349b1e5ee21f8cb14e37534d46ec99ce8a9680b6010d2c4b","observation_id":"6263a334-77df-4317-9fdc-93ac596cbade","resolution":{"observed_at":"2026-08-06T22:23:17.237467Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.09739","last_updated":"2024-12-17T16:52:12Z","snapshot_observed_at":"2026-08-08T23:02:57.472467Z","submitted_at":"2024-09-15T14:10:01Z","title":"PersonaMark: Personalized LLM watermarking for model protection and user attribution","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.09739","snapshot_observed_at":"2026-08-06T22:23:15.269056Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:15.269056Z"},"links":{"cited_paper":"/paper/2409.09739","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:fb5e21f08b3aeb72695db0783d81c3c2cb1bf80b24def614de7d612a0c961e2e","observation_id":"c5a768ec-1d06-4edb-92ef-b95b61d051ac","resolution":{"observed_at":"2026-08-06T22:23:15.269056Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:23:19.063492Z","title":"In 25th USENIX security symposium (USENIX Security 16)","venue":null,"work_id":"14122eae-6daa-4f53-894f-9fd8544b3bf5","year":null},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":2016,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:12.632049Z"},"links":{"citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:fdbc90cf94a0fd476b409672fb64f72f5142479132451f084fee23f2dea3c48f","observation_id":"6bd404c4-2909-44b4-9fd7-b62fab932c8c","resolution":{"observed_at":"2026-08-06T22:23:19.143125Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2108.13873","last_updated":"2022-09-04T12:42:05Z","snapshot_observed_at":"2026-08-04T19:30:34.212920Z","submitted_at":"2021-08-29T10:52:04Z","title":"Student Surpasses Teacher: Imitation Attack for Black-Box NLP APIs","version":2},"cited_work":{"arxiv_id":"2108.13873","doi":null,"metadata_source":"pith","pith_arxiv_id":"2108.13873","snapshot_observed_at":"2026-08-06T22:23:15.752352Z","title":"Student Surpasses Teacher: Imitation Attack for Black-Box NLP APIs","venue":"cs.CR","work_id":"7c0e8cbf-0190-489d-b09a-a28cadc55d7c","year":2021},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:14.080827Z"},"links":{"cited_paper":"/paper/2108.13873","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:e2b7d6b4628fc4339119cdff5224cb8c8b415e639fd73a766890a1c0ea22e9e6","observation_id":"cc3e6327-d802-4afe-9a57-48e462c2f2dd","resolution":{"observed_at":"2026-08-06T22:23:15.793737Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10544","last_updated":"2023-09-19T11:45:29Z","snapshot_observed_at":"2026-08-09T01:33:37.759144Z","submitted_at":"2023-09-19T11:45:29Z","title":"Model Leeching: An Extraction Attack Targeting LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.10544","snapshot_observed_at":"2026-08-06T22:23:07.300309Z","title":"arXiv preprint arXiv:2309.10544 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:07.300309Z"},"links":{"cited_paper":"/paper/2309.10544","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:1f6a32e002aa781a636e6738b98e5093b3e0c79f575b021d50c6abd507944abc","observation_id":"73b10eb1-71ed-441d-88f6-30ce08ce716d","resolution":{"observed_at":"2026-08-06T22:23:07.300309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.03274","last_updated":"2024-12-02T08:53:40Z","snapshot_observed_at":"2026-08-02T08:56:14.285582Z","submitted_at":"2024-09-05T06:31:37Z","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.03274","snapshot_observed_at":"2026-08-06T22:23:07.928217Z","title":"arXiv preprint arXiv:2409.03274 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:07.928217Z"},"links":{"cited_paper":"/paper/2409.03274","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:39ac12d89d39ffa14fd7aa9b7b5a974a04f54b5811d38bc10e39c82b1de9605d","observation_id":"ecb55eae-00d6-4685-a7c3-72ae95c819d6","resolution":{"observed_at":"2026-08-06T22:23:07.928217Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":91,"verified_exact":5,"verified_fuzzy":3},"total_outbound_references":101},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 100 of 101 outbound references and 7 inbound Pith citation observations for arXiv:2506.22521."}