{"as_of":"2026-08-10T01:46:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:93f1619e09cf99d1875139d631e2e7838a0fd8d1c3268009898ecf135b6eb1dd","coverage":[{"denominator":58,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":58,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T21:23:41.069355Z","state":"measured"},{"denominator":58,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":58,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.00423/citation-record","integrity":"/paper/2507.00423/integrity","json":"/paper/2507.00423/citation-record.json","paper":"/paper/2507.00423"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:54.546459Z","title":null,"venue":null,"work_id":"ba61a9dc-14c8-4ab7-a5ba-9e197c86e1ea","year":null},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:33.864961Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:8a348a718ecbbc98a50e0bb374715d225e4a4d296523e0229ae02e45829ef2c6","observation_id":"b1cb6a79-3aae-4fcc-a4b1-cfd50a5ecdec","resolution":{"observed_at":"2026-08-06T21:23:54.597815Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1704.05021","last_updated":"2017-07-24T21:47:51Z","snapshot_observed_at":"2026-08-04T09:45:17.283224Z","submitted_at":"2017-04-17T16:32:02Z","title":"Sparse Communication for Distributed Gradient Descent","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1704.05021","snapshot_observed_at":"2026-08-06T21:23:33.946149Z","title":"Sparse commu- nication for distributed gradient descent","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:33.946149Z"},"links":{"cited_paper":"/paper/1704.05021","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:65ccc04c2082d956ab8cb9885a18f6c597e6e5fcdfc3894f7dcd30af93e03369","observation_id":"96ba4f03-96c2-4535-b186-87f63874cd2e","resolution":{"observed_at":"2026-08-06T21:23:33.946149Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:54.370317Z","title":"How to backdoor federated learning","venue":null,"work_id":"b03de1d9-58dc-409e-b9b4-f3a00dd3c538","year":2020},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:34.031967Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:2d30dfe4002a003270e3124e1dfc44b70ed25fcfccfcf7ff52d89d349622f370","observation_id":"19a16598-578f-4af3-9bd0-5ff5cefd0612","resolution":{"observed_at":"2026-08-06T21:23:54.468563Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:54.245560Z","title":"A little is enough: Circumventing defenses for distributed learning","venue":null,"work_id":"6c702cc2-1d7f-4ca0-9b1a-473ada492919","year":2019},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:34.151179Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:1098ab7b0b3c035484156c9ca390f30e2a2c2533bbf1a2756b93349231a9a180","observation_id":"b319cac7-4bb0-4d78-acf1-6c0fcb26e26f","resolution":{"observed_at":"2026-08-06T21:23:54.297247Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:54.043684Z","title":"Analyzing federated learning through an adversarial lens","venue":null,"work_id":"de40fef8-d449-4a51-a0bf-6cd98fbaad64","year":2019},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:34.276757Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:922a26a0e31b3a05d30cae9e729ca0bf3c5d400f7d6b9d31929693c54ae62aef","observation_id":"7c4cbb3d-1fec-45e2-a085-00155eab1909","resolution":{"observed_at":"2026-08-06T21:23:54.114776Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:53.877479Z","title":"Poisoning attacks against support vector machines","venue":null,"work_id":"8641284e-16a8-429b-b5d5-55375ff5ce6f","year":2012},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:34.418937Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:87d66f01dcc258f2323361480ea7de0eb39b146eaf196a74f7f3550c4f018f4b","observation_id":"64ea39b6-a431-441f-98bd-ec84f7d5d36d","resolution":{"observed_at":"2026-08-06T21:23:53.945610Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:53.719770Z","title":"Machine learning with adversaries: Byzantine tolerant gradient descent","venue":null,"work_id":"6405c114-28af-49ce-bca4-03934ca3033f","year":2017},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:34.594001Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:9d0166f60bbb188825f5e0803200204ae198bde1d03c542cf190c1ece8a80ecd","observation_id":"1c84e5d6-8156-425e-bddd-8022fe2d64f3","resolution":{"observed_at":"2026-08-06T21:23:53.775243Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:53.543210Z","title":"Fltrust: Byzantine-robust federated learning via trust bootstrapping","venue":null,"work_id":"003fbbbc-1f9e-4811-83e7-fb665a9f4665","year":2021},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:34.729208Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:8264544926c450aa6fbb4cdf73eb3352ce7cc93f2f2a35d13dce651b5ade78d2","observation_id":"087293d8-50f8-4615-852e-f3cf8742270b","resolution":{"observed_at":"2026-08-06T21:23:53.633187Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:53.396535Z","title":"Membership inference attacks from first principles","venue":null,"work_id":"8855f955-2b35-48b5-a241-5f6238e73af1","year":2022},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:34.865718Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:fe9a7b7abae57902be37e935bf2128bd3382d1c7b6326770ad59536fd2c2268a","observation_id":"cfe68e1d-c210-4156-b4b0-cefa9f679323","resolution":{"observed_at":"2026-08-06T21:23:53.453970Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:53.076584Z","title":"Gan- leaks: A taxonomy of membership inference attacks against generative models","venue":null,"work_id":"07b25032-d592-4466-ad97-1dbc3858c62a","year":2020},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:35.026583Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:ef806fa16fc388b14d352350a9ad9cd10878dac5d213f223c3fc7054146820ed","observation_id":"deca3a9f-6a53-4bc3-bf61-deddd60f842e","resolution":{"observed_at":"2026-08-06T21:23:53.277263Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:52.675853Z","title":"Label-only membership in- ference attacks","venue":null,"work_id":"20526aaf-e66b-447b-a2ba-3618473d953e","year":2021},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:35.121773Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:72108794915916501bf8d8c563cb8de0bcf7f95bf172b5f30b21d3f0281a953c","observation_id":"8b7e60c2-0712-462b-9388-cd4fc921b09d","resolution":{"observed_at":"2026-08-06T21:23:52.855761Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:52.323908Z","title":"An analysis of single-layer networks in unsupervised feature learning","venue":null,"work_id":"45740eb0-fc3e-4f7e-a4b3-59b86019de59","year":2011},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:35.263336Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:c8e07c8cff09deff9ae9c440314d9d1a02732dcc88942b82614e72fb3f1d8af2","observation_id":"e761cd8d-7d44-4916-b8d6-1bbd007babdf","resolution":{"observed_at":"2026-08-06T21:23:52.462338Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:52.021734Z","title":"Differential privacy: A survey of results","venue":null,"work_id":"62f3ea5b-a435-4bc8-bf51-047e6d39d336","year":2008},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:35.413917Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:dd6d4384fcb7631dfa2afd4acaee19dde442ac731fd864ae1d5448da7d279067","observation_id":"88c1a28b-2de6-4482-8dd2-30d26bd8cc8f","resolution":{"observed_at":"2026-08-06T21:23:52.153401Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:51.627925Z","title":"Local model poisoning attacks to byzantine-robust federated learning","venue":null,"work_id":"c563fa7c-ec4c-4289-b430-6e279b99777a","year":2020},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:35.539251Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:355185dec96095370ff609f66a2652ff31906a7fc1905fa74a2f037ec088f033","observation_id":"b0082503-c812-4a49-a74b-8ad3c94922f9","resolution":{"observed_at":"2026-08-06T21:23:51.809632Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:51.357694Z","title":"Aflguard: Byzantine-robust asynchronous federated learning","venue":null,"work_id":"c7a1fa16-da21-43b0-a679-bee0d1b1a4ba","year":2022},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:35.639735Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:9a7d34789ec0416dbac2e5f1036104ddd6b7704ab57a6cf7248d8a1a0ae73114","observation_id":"41f82b5a-4034-4d89-b68c-084cea7488a4","resolution":{"observed_at":"2026-08-06T21:23:51.468061Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:50.974188Z","title":"Byzantine- robust decentralized federated learning","venue":null,"work_id":"c2a40b05-4fa2-46c1-a815-90eca30ea3ed","year":2024},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:35.759607Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:913c143c99f283f409dcaf7a2df2576fee5ef939ffe4e979d7b42683b322f3a7","observation_id":"f9f11340-3d07-43d0-a0da-52fce78c41c5","resolution":{"observed_at":"2026-08-06T21:23:51.175801Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:50.608579Z","title":"Byzantine-robust federated learning over ring-all-reduce dis- tributed computing","venue":null,"work_id":"648b38aa-94aa-49ec-9368-474f35558451","year":2025},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:35.889628Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:ebcffa9c053d6088535f81057cf8454d561985073e5cd8e6b2c488d5efe4eff4","observation_id":"7c95d37f-4606-4338-9e00-eb980b2f2714","resolution":{"observed_at":"2026-08-06T21:23:50.800344Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:50.278511Z","title":"Do we really need to design new byzantine-robust aggregation rules? In NDSS, 2025","venue":null,"work_id":"71241fd8-afb1-4a6d-b77d-fbeeec31039a","year":2025},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:35.998959Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:6d1978a661b2bf04b278c76c4cd2874860d4d700e1a243da2035c1f0def4f012","observation_id":"d769cc9c-9649-4d2b-854a-191aac23f172","resolution":{"observed_at":"2026-08-06T21:23:50.414227Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:49.924543Z","title":"Provably robust federated reinforcement learning","venue":null,"work_id":"d9b2c069-d91a-47a9-9382-573f2ac05761","year":2025},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:36.096649Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:cb6275626465ecf3c4e9ac00bfcae2f0a73e45fd588944d2557f4c6f8780b634","observation_id":"4d700dd1-b15c-421e-b0c5-6fa353d74635","resolution":{"observed_at":"2026-08-06T21:23:50.101754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:49.707393Z","title":"Active inference against federated learning: Attacks and solutions","venue":null,"work_id":"d092d0e9-7982-416c-a404-e45791d5488b","year":2024},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:36.275569Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:89f59ee62b0057ebcbfdd17fefdc899b6e88286655680b30577930453d8696a0","observation_id":"2802a161-ae71-4818-8a88-11dc123c372d","resolution":{"observed_at":"2026-08-06T21:23:49.820290Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:49.523992Z","title":"Chal- lenges in representation learning: A report on three machine learning contests","venue":null,"work_id":"2eeb88be-8063-4c4c-9e50-bd16919ba78b","year":2013},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:36.426711Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:c11b00bf31ed54c766962119116dbbdbbf3be169ef5e54ee4ba0ee93a3f98cd8","observation_id":"9d017d88-8d32-468b-899e-335fa9064416","resolution":{"observed_at":"2026-08-06T21:23:49.615070Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:49.352570Z","title":"Membership inference at- tacks on machine learning: A survey","venue":null,"work_id":"e5b610e9-1311-4a52-b493-e0d68f2a8c09","year":2022},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:36.500984Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:a171252d926e8b7288d6b45fbb1417b853182290bede3932003b75404aced352","observation_id":"f879ed53-9346-432d-acf6-ab289d7f0de9","resolution":{"observed_at":"2026-08-06T21:23:49.435931Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:48.900099Z","title":"Advances and open problems in federated learn- ing","venue":null,"work_id":"e62ca21f-c224-4f36-ab28-56b3a36ee437","year":2021},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:36.671422Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:d8a6530aa269fe3b80b80479fbf35f18fbdb8a64e44a3c7f1a7ef2304deef6bc","observation_id":"1ab2bb9a-0b7d-458d-8245-623b65464386","resolution":{"observed_at":"2026-08-06T21:23:49.113185Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:48.548823Z","title":"Maximizing the spread of influence through a social network","venue":null,"work_id":"98055c2f-fc13-4cc1-a0b2-88654d10309f","year":null},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:36.845160Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:a9d3cb369d3e279b2e5e4a428a10cbb79f4c0e02afc27428d8417af842947c2a","observation_id":"85839bfa-ccb3-40c9-87d2-1788c97dc126","resolution":{"observed_at":"2026-08-06T21:23:48.701503Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6980","last_updated":"2017-01-30T01:27:54Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2014-12-22T13:54:29Z","title":"Adam: A Method for Stochastic Optimization","version":9},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6980","snapshot_observed_at":"2026-08-06T21:23:36.968073Z","title":"Adam: A method for stochastic opti- mization","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:36.968073Z"},"links":{"cited_paper":"/paper/1412.6980","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:1408cec5f30f97a12a9b5a19ce1588380ad3aefbcedb4d9ed5f3b297acf9521c","observation_id":"faabbf84-1f44-445a-8e2b-2675ab3df4d2","resolution":{"observed_at":"2026-08-06T21:23:36.968073Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1610.05492","last_updated":"2017-10-30T20:52:14Z","snapshot_observed_at":"2026-07-06T05:15:00.158639Z","submitted_at":"2016-10-18T09:11:51Z","title":"Federated Learning: Strategies for Improving Communication Efficiency","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1610.05492","snapshot_observed_at":"2026-08-06T21:23:37.105303Z","title":"Federated learning: Strategies for improving communication efficiency","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:37.105303Z"},"links":{"cited_paper":"/paper/1610.05492","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:d75fb93686cc6ed60eb4b7dbd330e47913346e169307035860eee2a1c5992b33","observation_id":"382ffa56-80e7-42f8-9dbe-82f6e60b5125","resolution":{"observed_at":"2026-08-06T21:23:37.105303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1610.02527","last_updated":"2016-10-08T13:25:15Z","snapshot_observed_at":"2026-07-06T05:13:51.685562Z","submitted_at":"2016-10-08T13:25:15Z","title":"Federated Optimization: Distributed Machine Learning for On-Device Intelligence","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1610.02527","snapshot_observed_at":"2026-08-06T21:23:37.230172Z","title":"Federated optimization: Distributed ma- chine learning for on-device intelligence","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:37.230172Z"},"links":{"cited_paper":"/paper/1610.02527","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:8a8ae29a33354e94c7f753865267c6a929657fe3cf386ae0bd30655029220a10","observation_id":"f4c6c4bf-114a-4969-b480-7ee0929e1f39","resolution":{"observed_at":"2026-08-06T21:23:37.230172Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:48.289714Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":"45540609-c090-4490-9381-83970fcd0eab","year":2009},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:37.352514Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:5f103e544788800df98317b6b9be3a025f6642787dc8334fe5b789e48b7635b2","observation_id":"d9977661-4565-40a8-99be-c5a050d954cb","resolution":{"observed_at":"2026-08-06T21:23:48.445630Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:47.983978Z","title":"Stolen memories: Leverag- ing model memorization for calibrated white-box member- ship inference","venue":null,"work_id":"6ea351ae-5907-4768-9499-27adbcbe10c4","year":2020},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:37.460845Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:c04426f28d19526f7b0dca74b90ed35416d068546ac9c0d30923f0de60d52540","observation_id":"653baaac-5997-4290-9256-a7b3c1a63b2d","resolution":{"observed_at":"2026-08-06T21:23:48.111821Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:47.760113Z","title":"Learning to at- tack federated learning: A model-based reinforcement learn- ing attack framework","venue":null,"work_id":"09e407c4-2f1d-43dc-8c87-d16a30ee383f","year":2022},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:37.592969Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:dfce0b5a00ba36eaa1e3b54e8ba54fbce0c7ea357029c75a954b4a5057006a90","observation_id":"2a7c0316-7bf5-4da9-8528-19e58a5c8bb5","resolution":{"observed_at":"2026-08-06T21:23:47.880657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.06784","last_updated":"2024-05-10T19:22:24Z","snapshot_observed_at":"2026-08-07T17:34:57.953223Z","submitted_at":"2024-05-10T19:22:24Z","title":"Open Challenges and Opportunities in Federated Foundation Models Towards Biomedical Healthcare","version":1},"cited_work":{"arxiv_id":"2405.06784","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.06784","snapshot_observed_at":"2026-08-06T21:23:41.340161Z","title":"Open Challenges and Opportunities in Federated Foundation Models Towards Biomedical Healthcare","venue":"cs.LG","work_id":"2a348efd-07af-403d-9d3d-d0a919dc796c","year":2024},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:37.727732Z"},"links":{"cited_paper":"/paper/2405.06784","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:fe1bfec4d7dd4a5a3bf8c9548db467ae2f59868939e14c6e64be50cc1e6c8e8a","observation_id":"b0aeb968-db5f-4f8a-ac57-84948f658634","resolution":{"observed_at":"2026-08-06T21:23:41.392157Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:47.483484Z","title":"Loden: Making every client in federated learning a defender against the poisoning membership infer- ence attacks","venue":null,"work_id":"1794ae72-9134-4c90-9b7f-f0c54beebf9c","year":2023},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:37.784502Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:1acdcae423b7414309dbc28f79ca7c60a94e3dddba7f48ce8ecbd711ddd8d69a","observation_id":"7bcc8632-c21b-47a2-af6b-2e06958e5476","resolution":{"observed_at":"2026-08-06T21:23:47.633489Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:47.214329Z","title":"Prop- erty inference from poisoning","venue":null,"work_id":"9187af6e-4b26-4e8a-91d0-7e92226f9d1e","year":2022},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:37.865903Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:532efea09fbdc719dd6c7795ec2cf47979e5dd7b3dae8a7fc2c03636d9cb4fb7","observation_id":"beffa024-e20a-4dc3-88b8-391cd06553fd","resolution":{"observed_at":"2026-08-06T21:23:47.365077Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:46.904990Z","title":"Brendan McMahan, Eider Moore, Daniel Ramage, Seth Hampson, and Blaise Ag ¨uera y Arcas","venue":null,"work_id":"fdbbc772-3d41-484f-a53e-fd5e2b9cb5a2","year":2017},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:38.057589Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:d556dbc9eee934913aeff473ee0b619897d85cb4686699ec42905e7aaa806719","observation_id":"f38006aa-2fe3-4451-a91f-06996ffc6097","resolution":{"observed_at":"2026-08-06T21:23:47.068589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:46.571796Z","title":"Towards poisoning of deep learning algorithms with back-gradient optimization","venue":null,"work_id":"87848f97-958a-4f68-9846-830d18c25126","year":2017},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:38.193278Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:c4f6cc424d0e47fd96c6df14009fdd35df761378ffa0716c709dc4fba7c953c3","observation_id":"adcadde4-6556-424c-a37b-f4a90aba74fd","resolution":{"observed_at":"2026-08-06T21:23:46.729207Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:46.230649Z","title":"Compre- hensive privacy analysis of deep learning: Passive and active white-box inference attacks against centralized and federated learning","venue":null,"work_id":"ed6b8795-48cd-4a7e-b32f-85cc67a51471","year":2019},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:38.277220Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:de1cb667d2df55f9b3b41a13d04fedc5d2abbed0a11efc3e2e79fed6532b4828","observation_id":"adce41fd-9a1f-42e1-aa49-4f4d911f0376","resolution":{"observed_at":"2026-08-06T21:23:46.415972Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:45.905426Z","title":"On the difficulty of member- ship inference attacks","venue":null,"work_id":"b0c6bd41-153d-4805-8488-b61999566ebd","year":2021},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:38.425847Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:6b0de3092c16304c4f0814180ead36562e54528c67b3800a3d1aa0816a3b4583","observation_id":"5d4502bd-7e35-4ad4-916d-0fabc8bb9aef","resolution":{"observed_at":"2026-08-06T21:23:46.071049Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:45.624519Z","title":"Deepsight: Mitigating backdoor at- tacks in federated learning through deep model inspection","venue":null,"work_id":"f48d2b94-a17c-4ec5-b0bd-5d53da045d63","year":2022},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:38.560580Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:d8718fb594fbbb82b6d870d7db4b704c45bebb9d7c6a7c7abff12c36ed559bed","observation_id":"4a60c254-b382-4e3e-a41a-b79f8804db18","resolution":{"observed_at":"2026-08-06T21:23:45.752884Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:45.305762Z","title":"Manipulating the byzantine: Optimizing model poisoning attacks and defenses for federated learning","venue":null,"work_id":"b99db4a5-e73f-40e2-9093-2c1fee5624a7","year":2021},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:38.696833Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:fda7de05f30f1c574a489c14db29c4639d96a9ba7ed5f073758bc70d55935352","observation_id":"5972613d-c5a6-4744-a7d5-e87faa376ffd","resolution":{"observed_at":"2026-08-06T21:23:45.437896Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:44.971084Z","title":"Membership inference attacks against machine learning models","venue":null,"work_id":"91af39c9-acfd-4b19-bb92-032cacb9401f","year":2017},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:38.829362Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:c4ad230766adc9206706948427ffb8540bdd97a7b75710e4e61980acbaed5b86","observation_id":"96b062d9-26f4-4276-b636-eeccea2c3e79","resolution":{"observed_at":"2026-08-06T21:23:45.156399Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:44.733352Z","title":"Membership inference attacks against adversarially robust deep learning models","venue":null,"work_id":"0df86e5b-eae3-4a5e-a41d-47d6b074e2bd","year":2019},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:38.921382Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:89d6e2e4aef3d92c73361ffffbc715539a6fb7cc888d32f71636a91f2de71d12","observation_id":"d876fd69-03ba-4028-a9e2-1b96360dbd39","resolution":{"observed_at":"2026-08-06T21:23:44.831240Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:44.441544Z","title":"Privacy risks of securing machine learning models against adversarial ex- amples","venue":null,"work_id":"51e5f347-a4df-40fe-84fe-fde63b61b96e","year":2019},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:39.079949Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:35d332fecbb0c033820f05d7c33b590e1c245cf79bdd00672d14f0facf7fb1b2","observation_id":"7c0c72cb-e70a-42c2-b5b8-dfa4ba0876f9","resolution":{"observed_at":"2026-08-06T21:23:44.545989Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1911.07963","last_updated":"2019-12-02T19:00:11Z","snapshot_observed_at":"2026-08-09T08:16:29.597021Z","submitted_at":"2019-11-18T21:25:03Z","title":"Can You Really Backdoor Federated Learning?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1911.07963","snapshot_observed_at":"2026-08-06T21:23:39.209655Z","title":"Can you really backdoor federated learning? arXiv preprint arXiv:1911.07963, 2019","venue":null,"work_id":null,"year":1911},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:39.209655Z"},"links":{"cited_paper":"/paper/1911.07963","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:a3dc09e01728cad6b391ed0192c41f5a43db8ab43475af59827d482b92784a83","observation_id":"d6d228fa-fd37-4cde-b04d-f25e670916c2","resolution":{"observed_at":"2026-08-06T21:23:39.209655Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:44.253989Z","title":"Data poisoning attacks against federated learning systems","venue":null,"work_id":"fa45c650-942f-4205-9cb7-8e6ddbd37a88","year":2020},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:39.349124Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:c132ba9c2fe0643338894d9783b46222407b6948013d2bf3b31e116282bee30d","observation_id":"1a09e3b1-bc0f-445c-a091-eb935dcc4895","resolution":{"observed_at":"2026-08-06T21:23:44.350521Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1807.09173","last_updated":"2019-02-01T18:05:24Z","snapshot_observed_at":"2026-07-06T06:52:00.431763Z","submitted_at":"2018-06-28T16:50:18Z","title":"Towards Demystifying Membership Inference Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1807.09173","snapshot_observed_at":"2026-08-06T21:23:39.475330Z","title":"Towards demystifying membership inference attacks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:39.475330Z"},"links":{"cited_paper":"/paper/1807.09173","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:cf77481db5402ca86d36e9aae77180fd7827b1095765f7a741a2f7d38c46c38a","observation_id":"cffc2079-44e5-47ad-97ed-a3e271677ca4","resolution":{"observed_at":"2026-08-06T21:23:39.475330Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:43.994399Z","title":"Poisoning attacks and defenses to federated unlearning","venue":null,"work_id":"2a8ec97b-85fc-4c21-98e8-fda8ae31e271","year":null},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:39.598389Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:598c0e23cae30c149fdadd70fe2272a0a2512a81411e8c8e4528625c7c34a0e1","observation_id":"01c5c67b-23af-4912-b9d1-46b674bc5e1f","resolution":{"observed_at":"2026-08-06T21:23:44.108715Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01231","last_updated":"2024-04-01T16:50:54Z","snapshot_observed_at":"2026-08-09T22:32:11.520389Z","submitted_at":"2024-04-01T16:50:54Z","title":"Privacy Backdoors: Enhancing Membership Inference through Poisoning Pre-trained Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01231","snapshot_observed_at":"2026-08-06T21:23:39.710949Z","title":"Privacy back- doors: Enhancing membership inference through poisoning pre-trained models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:39.710949Z"},"links":{"cited_paper":"/paper/2404.01231","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:648b5a3bd0af6e5c97ae6fbd839151894eb81fe348fb34194b27ffda7c12e9c9","observation_id":"a28e3ae1-e3bf-4518-9e47-725b547b0177","resolution":{"observed_at":"2026-08-06T21:23:39.710949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1802.10116","last_updated":"2018-03-23T20:08:04Z","snapshot_observed_at":"2026-08-04T15:04:14.642006Z","submitted_at":"2018-02-27T19:06:15Z","title":"Generalized Byzantine-tolerant SGD","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.10116","snapshot_observed_at":"2026-08-06T21:23:39.890974Z","title":"Generalized byzantine-tolerant sgd","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:39.890974Z"},"links":{"cited_paper":"/paper/1802.10116","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:8a64ae3cc5b62041a194ca8a75527cc62b20f9d7cebb6cbe3e8240922b30dce6","observation_id":"fd4dffde-bc5e-473e-b3b4-03728c9160dc","resolution":{"observed_at":"2026-08-06T21:23:39.890974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1805.09682","last_updated":"2018-05-23T09:25:48Z","snapshot_observed_at":"2026-07-06T06:41:00.651574Z","submitted_at":"2018-05-23T09:25:48Z","title":"Phocas: dimensional Byzantine-resilient stochastic gradient descent","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1805.09682","snapshot_observed_at":"2026-08-06T21:23:39.992673Z","title":"Phocas: dimensional byzantine-resilient stochastic gradient descent","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:39.992673Z"},"links":{"cited_paper":"/paper/1805.09682","citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:800bdabbafe41bc7150151ab16148639c518c94d8084aa68a481fa363271d17f","observation_id":"35635d96-f408-4c54-aa95-772f5d245a55","resolution":{"observed_at":"2026-08-06T21:23:39.992673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:43.669743Z","title":"Fe- dredefense: Defending against model poisoning attacks for federated learning using model update reconstruction error","venue":null,"work_id":"4d189606-7203-4536-af97-e1b96136aab6","year":2024},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:40.136780Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:1842aadeb0fc50b669692388c64ccdd88e9a64d36921b8fbf8725e74f01c0151","observation_id":"3d38569a-6c0a-4cc9-b41c-f7d0e6b99f53","resolution":{"observed_at":"2026-08-06T21:23:43.797975Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:43.407347Z","title":"Robust federated learning mitigates client-side train- ing data distribution inference attacks","venue":null,"work_id":"87ea1e83-2b71-46d0-9abc-aaffdab9391a","year":2024},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:40.265089Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:ba2f4d761772fade93bee841bfe92c4ae234d6b7bceef2397aef49819994fd6a","observation_id":"01bc5592-c106-4422-9cd8-fd270fdb3208","resolution":{"observed_at":"2026-08-06T21:23:43.525781Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:43.108351Z","title":"Federated machine learning: Concept and applications","venue":null,"work_id":"94fd2f3a-1213-4580-8c85-b7331291548c","year":null},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:40.393252Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:da63dd6dded1842b2c0dc977c367315edfe38e94d9d68981cd5f053de72171d4","observation_id":"05a32bb4-23da-4fbb-a321-af38ef244d51","resolution":{"observed_at":"2026-08-06T21:23:43.216575Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:42.787903Z","title":"Enhanced membership in- ference attacks against machine learning models","venue":null,"work_id":"312d3b3a-ff09-44e9-ab99-a12105ee4aac","year":null},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:40.495500Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:b1ea7a62481161801e92b74de42d81758da46cdd62357f24b0994745fbb84db8","observation_id":"86e6bcfd-61a0-42a8-9440-68afcad57c4e","resolution":{"observed_at":"2026-08-06T21:23:42.967113Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:42.548677Z","title":"Privacy risk in machine learning: Analyzing the connection to overfitting","venue":null,"work_id":"98e484c9-d641-4bce-b355-178da789dd59","year":2018},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:40.557083Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:ef0a248e23fee69beec64148197f2aad4d8deebab1baba9f63d0fe7f76019496","observation_id":"d197e004-de7a-4757-8e44-75f23fbda67b","resolution":{"observed_at":"2026-08-06T21:23:42.701810Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:42.289131Z","title":"Byzantine-robust distributed learning: Towards op- timal statistical rates","venue":null,"work_id":"ac4c6848-35a9-4f52-9bd9-5c798d001813","year":2018},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:40.654407Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:bd9f80eab66bca6d174eddc10cf4c73748f7882a1476d70bf0f6e219bb3ee4f5","observation_id":"46139d39-32b7-41b0-8ec3-2d34cc18ba44","resolution":{"observed_at":"2026-08-06T21:23:42.413805Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:41.999286Z","title":"Poisoning federated recommender systems with fake users","venue":null,"work_id":"981f34ab-c45c-4346-bb17-ea586a2d4f9a","year":2024},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:40.806811Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:4fc80e118a38a69f0497f7b160c84d11a4ab8524c085694ee9f94ede898e5925","observation_id":"8f89a9b6-b60e-45ae-8984-52b88a5ea233","resolution":{"observed_at":"2026-08-06T21:23:42.137262Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:41.764964Z","title":"Agrevader: Poisoning membership inference against byzantine-robust federated learning","venue":null,"work_id":"5f6ba248-8e92-457e-b2f7-a9deff4398e9","year":2023},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:40.931123Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:0c073597b6e8b9263ea7815fa64143a15d9be8292db7a30459f6d36fda1e88a0","observation_id":"69fa18d1-d3d7-4b7d-8336-de4dc57c8739","resolution":{"observed_at":"2026-08-06T21:23:41.877820Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:23:41.559234Z","title":"Pn−b i=b+1(θi − ω) n − 2b #2 ≤ max   ","venue":null,"work_id":"3fa22d6d-0114-4515-9aa0-a0fb511a3490","year":2024},"citing_paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T21:23:41.069355Z"},"links":{"citing_paper":"/paper/2507.00423"},"observation_digest":"sha256:22e1b4dd83b9afcbdda69f630f2a6a86788dee5a62d7bfc2cf7d87e7a4cbbcff","observation_id":"c85cf7ea-a83f-42c6-80b3-a0c90d37d49f","resolution":{"observed_at":"2026-08-06T21:23:41.626723Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.00423","last_updated":"2025-07-01T04:46:23Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T19:56:39.809065Z","submitted_at":"2025-07-01T04:46:23Z","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning"},"reference_resolution":{"displayed":58,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":10,"verified_exact":1,"verified_fuzzy":47},"total_outbound_references":58},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 58 of 58 outbound references and 0 inbound Pith citation observations for arXiv:2507.00423."}