{"as_of":"2026-08-14T07:32:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9c96e13e3c1e5456710a1008d1c875464cff730abdd8023f3188d849ec129708","coverage":[{"denominator":72,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":72,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T12:54:02.255763Z","state":"measured"},{"denominator":73,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":73,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-20T18:17:06.017591Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-20T18:18:52.490518Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"cited_work":{"arxiv_id":"2507.21412","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.21412","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"7459eda2-f6a8-4e46-959d-3f4ffc6dded4","year":2025},"citing_paper":{"arxiv_id":"2605.15648","last_updated":"2026-05-15T06:04:00Z","snapshot_observed_at":"2026-07-06T23:26:56.013191Z","submitted_at":"2026-05-15T06:04:00Z","title":"Rethinking the Security of DP-SGD: A Corrected Analysis of Differentially Private Machine Learning","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-20T18:17:06.017591Z"},"links":{"cited_paper":"/paper/2507.21412","citing_paper":"/paper/2605.15648"},"observation_digest":"sha256:01d43d96121c63c0cda1fb8d16fbd40f85b888951d30e9ae7c354ae0455b4f5c","observation_id":"6b470e04-f5db-4611-990a-427fab0177c6","resolution":{"observed_at":"2026-05-20T18:18:52.491928Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2507.21412/citation-record","integrity":"/paper/2507.21412/integrity","json":"/paper/2507.21412/citation-record.json","paper":"/paper/2507.21412"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:13.649460Z","title":"Membership inference attacks against machine learning models,","venue":null,"work_id":"92fbda7b-7d01-4852-9583-9eb4ce109989","year":2017},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:52.971631Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:d88dc925e31a521f7193e434d33f21a4383f8997915ea1660ca432815196c5f8","observation_id":"cdb3af70-41bf-450a-80c2-da3a0996cb31","resolution":{"observed_at":"2026-08-06T12:54:13.749836Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:13.405320Z","title":"Differential Privacy,","venue":null,"work_id":"e0b4413a-f9c1-4e96-974f-dfbb6e18d28d","year":2006},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:53.042820Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:13459577b41e97be515ffaf98118aab68628e8a0129549fbc35f8587e181342c","observation_id":"2308cbde-9055-4328-8fcb-e5223f9369dc","resolution":{"observed_at":"2026-08-06T12:54:13.497021Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.09339","last_updated":"2020-07-18T06:21:35Z","snapshot_observed_at":"2026-08-09T16:12:30.056905Z","submitted_at":"2020-07-18T06:21:35Z","title":"ML Privacy Meter: Aiding Regulatory Compliance by Quantifying the Privacy Risks of Machine Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.09339","snapshot_observed_at":"2026-08-06T12:53:53.182997Z","title":"ML privacy meter: Aiding regulatory compliance by quantifying the privacy risks of machine learning,","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:53.182997Z"},"links":{"cited_paper":"/paper/2007.09339","citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:338bece2b673921524ced66c7bcf1eaedb6a0f38260024340f884e0191b1b60d","observation_id":"7f3ab1f9-d208-4338-a9f1-0c052db54381","resolution":{"observed_at":"2026-08-06T12:53:53.182997Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:13.222659Z","title":"Introducing a New Privacy Testing Library in TensorFlow,","venue":null,"work_id":"81693571-6037-426e-b22b-54bc87f90d13","year":2022},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:53.367229Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:3b152d2274778fc315c85e82f50c33340c4fd57dd94d5dc6b457d89d5b050feb","observation_id":"20941b1e-4b03-467e-9c57-334ee23fb4ac","resolution":{"observed_at":"2026-08-06T12:54:13.285555Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:53:53.480971Z","title":"Extracting training data from large language models,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:53.480971Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:9ff2a5fdb1985a0a9734c4cf906f71b75b5b551e78e69b83b6cefc77fcba24f5","observation_id":"23d0dc06-40fa-4daf-a353-d9b345534b44","resolution":{"observed_at":"2026-08-06T12:53:53.480971Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:12.981409Z","title":"Extracting training data from diffusion models,","venue":null,"work_id":"91ad06af-823f-47b7-ab07-85042b27de33","year":2023},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:53.644093Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:f560bcf3a98c387c4816f4c34d6743242cae99b6b1177d1a90a210b47e4edc6b","observation_id":"29a6ac3a-ad49-4e9a-aca7-eb03d1ae6fe8","resolution":{"observed_at":"2026-08-06T12:54:13.101583Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:12.738072Z","title":"Canary in a Coalmine: Better Membership Inference with Ensembled Adversarial Queries,","venue":null,"work_id":"037d7f44-55da-4a89-bcf0-e990314f8e4c","year":2023},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:53.763737Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:708c966c470e8e430c60dd6ad147f56a766eaa05970af2bfdc6355a8cfe820c4","observation_id":"9c31a90a-011c-45b0-93a0-5e8cdf29090d","resolution":{"observed_at":"2026-08-06T12:54:12.827745Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:12.470634Z","title":"Is Difficulty Calibration All We Need? Towards More Practical Member- ship Inference Attacks,","venue":null,"work_id":"1c465633-44b3-4bea-9209-58001b73fc04","year":2024},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:53.932492Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:1eee7a4c503e27906bafa2990b30795f36f153ab6e4e0a617a668ea57d13168b","observation_id":"ca5c7431-af96-4ff7-94fc-52170bfcd0f7","resolution":{"observed_at":"2026-08-06T12:54:12.578847Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:53:54.063499Z","title":"Membership inference attacks from first principles,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:54.063499Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:cbd48971671a739ba54aca0cd29b8a75060f279ea72acfeac9dd5e47d213ef3c","observation_id":"440c62b9-a6a3-49ac-a768-23fe946bc22a","resolution":{"observed_at":"2026-08-06T12:53:54.063499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:12.247644Z","title":"Comprehensive privacy analysis of deep learning: Passive and active white-box inference attacks against centralized and federated learning,","venue":null,"work_id":"5fd8a20f-b7c5-4d74-9f88-6d441fd3c1ab","year":2019},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:54.207156Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:cf8061f9b6191d597f0c77ae0de4fc6d2214a711c9a6624b804845be60b8aaf1","observation_id":"3dafe175-9fac-4a66-8f9d-12a6765a41a4","resolution":{"observed_at":"2026-08-06T12:54:12.304732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:12.055479Z","title":"Membership Inference Attacks and Defenses in Classification Models,","venue":null,"work_id":"06137758-252e-414c-9253-b4f1e9a56cc3","year":2021},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:54.345227Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:9d1cee8eb971f9204c72aa7a5d9edb36cd82027e976fc1f0e4177623d72abf9c","observation_id":"2916f968-8b00-478b-a540-e23fe243ae1d","resolution":{"observed_at":"2026-08-06T12:54:12.135236Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:11.812309Z","title":"Scalable membership inference attacks via quantile regression,","venue":null,"work_id":"f4481c79-fef3-4d58-b2fe-874f3138ef11","year":2023},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:54.503513Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:95d03b644a43e384791d2716a53640e04512f5a0df094e079dd80c1550d847e9","observation_id":"70eb60e8-db69-4d19-9736-c33190dfcf38","resolution":{"observed_at":"2026-08-06T12:54:11.919028Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:11.547418Z","title":"SeqMIA: Sequential-metric based membership inference attack,","venue":null,"work_id":"9fe2c9cc-46de-465a-bd52-42338ca6b413","year":2024},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:54.643912Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:5acdd4ef3fcf9516e2f957e94b97a7811e3fc34f8c94c017c68422a480560f4f","observation_id":"0baef9a4-8710-4755-b978-1b8eecbda9c0","resolution":{"observed_at":"2026-08-06T12:54:11.658061Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:11.377862Z","title":"Low-Cost High-Power Mem- bership Inference Attacks,","venue":null,"work_id":"ea1ca4b7-3493-4e26-b665-62ffcfbffc65","year":2024},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:54.752556Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:d142953396db18792ce69efdea2d851c0fc0ff00accf93ff47a3d7d12d4c5ac8","observation_id":"19e29dc5-ffa1-4104-9fd8-e22408427603","resolution":{"observed_at":"2026-08-06T12:54:11.536515Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:11.163953Z","title":"Privacy risk in machine learning: Analyzing the connection to overfitting,","venue":null,"work_id":"90f6727f-33d2-4d85-81c1-e0bff5f4fbdd","year":2018},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:54.934287Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:f77821014adeebfe7521c5f22f6a9cfa93203c91fa450247dd34c43a85873fde","observation_id":"b667ea72-488e-4303-a276-91b74d7396c2","resolution":{"observed_at":"2026-08-06T12:54:11.262853Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2005.10881","last_updated":"2021-01-13T20:44:44Z","snapshot_observed_at":"2026-08-14T05:37:28.964953Z","submitted_at":"2020-05-21T20:17:42Z","title":"Revisiting Membership Inference Under Realistic Assumptions","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.10881","snapshot_observed_at":"2026-08-06T12:53:55.068305Z","title":"Revis- iting membership inference under realistic assumptions,","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:55.068305Z"},"links":{"cited_paper":"/paper/2005.10881","citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:edfef27b0ef166c49453ce6a78e2128be15a28055dbd7a6f1832535ded2b08d7","observation_id":"fedfe7be-72de-4154-96c1-f3a5da938600","resolution":{"observed_at":"2026-08-06T12:53:55.068305Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:10.936625Z","title":"Online algorithms: a survey,","venue":null,"work_id":"e2bc84aa-731d-4e4b-8ef3-52f0bde07bf0","year":2003},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:55.202850Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:614b44ed7068cc6e23fc3acac893415a6b2a9a61c7f1cc1ce45aaab5e220942c","observation_id":"ed06e29a-5c56-423e-b408-f219baaf44ee","resolution":{"observed_at":"2026-08-06T12:54:11.050213Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:10.715529Z","title":"Luby,Pseudorandomness and cryptographic applications","venue":null,"work_id":"45d3edd0-ffd8-4eb5-b76a-71a2273fff9d","year":1996},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:55.383202Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:b80fad886eaefcadd85390a6935d1c0fe6561cfd0e978807368d17bc04ac5f30","observation_id":"4bc86d51-7386-4c96-a2dd-8a3e5414b93c","resolution":{"observed_at":"2026-08-06T12:54:10.823227Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:10.465368Z","title":"Chosen ciphertext attacks against protocols based on the RSA encryption standard PKCS# 1,","venue":null,"work_id":"6de2292b-cc9b-4603-b335-b05fc51bf419","year":1998},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:55.465716Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:9a9c3c0d3edede6aac69313fcacf03f28897d20aa0b9af60eadd4c4f5c59408e","observation_id":"b648ff21-d96c-4560-b2e7-3112bd50dff4","resolution":{"observed_at":"2026-08-06T12:54:10.576539Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:10.168441Z","title":"Sampling-based approaches to calculat- ing marginal densities,","venue":null,"work_id":"e666dc4e-f9d7-42f2-be04-2c244f3953c2","year":1990},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:55.608260Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:851ce26625eafef135590297ae3753ffe10c5644490a6ffd68aee39180fed19e","observation_id":"76c4dd18-4f72-4967-a307-c207da88644f","resolution":{"observed_at":"2026-08-06T12:54:10.286361Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:09.979838Z","title":"Surprising convergence properties of some simple Gibbs samplers under various scans,","venue":null,"work_id":"b3d60328-b0aa-4cba-aed8-0cf03d698cc3","year":2015},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:55.763361Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:108bc4d65c47848e8ad6de4273d4e26caba15ba46589e5b36b4b2ac45d555e18","observation_id":"6dc06cd6-8844-4997-baa5-7fefc5c3cd9e","resolution":{"observed_at":"2026-08-06T12:54:10.056928Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:09.622235Z","title":"Scan order in Gibbs sampling: Models in which it matters and bounds on how much,","venue":null,"work_id":"54ecd73e-3de8-4e5f-9197-beabe13d72a7","year":2016},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:55.854288Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:28ff22fcae9125890573ba9bc158bcc4322266f0c24ecde9603a6c3acb400d26","observation_id":"2733c831-7213-45b1-9d26-b0f3f78a2e2f","resolution":{"observed_at":"2026-08-06T12:54:09.792026Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:09.336926Z","title":"Adaptive Gibbs samplers and related MCMC methods,","venue":null,"work_id":"3e0aab6a-df2d-4787-bc75-1d8f0f010a40","year":2013},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:55.983418Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:ac1ba99ea95301d24db110ecd866338bd73577c059c69af56f2eb3a9ffa71cbf","observation_id":"b4db7aa2-be5c-46ce-b7a0-42f886217f46","resolution":{"observed_at":"2026-08-06T12:54:09.425740Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:09.152856Z","title":"White-box vs black-box: Bayes optimal strategies for membership inference,","venue":null,"work_id":"83996bb8-985b-4d57-bee5-96d3225c83de","year":2019},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:56.132465Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:45306cdeeec8c38630248d47b8a7058bbeccb2c8413459e05d742411a6f607ff","observation_id":"916bc748-41b4-41a8-8fb8-f9bbec60295a","resolution":{"observed_at":"2026-08-06T12:54:09.264630Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:53:56.316183Z","title":"Learning transferable visual models from natural language supervision,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:56.316183Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:f2a3335750646bd6fd0871b90f79b159688997620030b840777026ac05f5bcc5","observation_id":"d0a62b18-6411-49c7-91a6-23d1f84a5057","resolution":{"observed_at":"2026-08-06T12:53:56.316183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.08281","last_updated":"2025-10-23T09:36:08Z","snapshot_observed_at":"2026-07-31T05:45:37.385210Z","submitted_at":"2024-01-16T11:12:36Z","title":"The Faiss library","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.08281","snapshot_observed_at":"2026-08-06T12:53:56.480605Z","title":"The Faiss library,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:56.480605Z"},"links":{"cited_paper":"/paper/2401.08281","citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:c9e5b487ad7c54ab064dc309fc1281621cbab3111d90f0016602de7a1b177fc3","observation_id":"d1805453-6c9f-41ac-b9ea-d2456a2a32a9","resolution":{"observed_at":"2026-08-06T12:53:56.480605Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:08.843712Z","title":"The MNIST database of handwritten digits,","venue":null,"work_id":"68ac1eff-0ae7-4767-994f-407deef7ed44","year":1998},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:56.679978Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:89b34c97586c0b16b2d53db6438d99fd534305f0f04075f0cadc67c0dbeb2481","observation_id":"d41c9d18-0174-46af-a9b2-c94109e084f9","resolution":{"observed_at":"2026-08-06T12:54:08.926889Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.07747","last_updated":"2017-09-15T21:29:49Z","snapshot_observed_at":"2026-08-13T15:13:33.081929Z","submitted_at":"2017-08-25T14:01:29Z","title":"Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.07747","snapshot_observed_at":"2026-08-06T12:53:56.784606Z","title":"Fashion-mnist: a novel image dataset for benchmarking machine learning algorithms,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:56.784606Z"},"links":{"cited_paper":"/paper/1708.07747","citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:fff4d8a342cbada4c4ef1aaea5dbc52cf4720fe8088a5aca57f7d06888bc6311","observation_id":"a7362a64-da47-48fe-9bc2-8fb80369199f","resolution":{"observed_at":"2026-08-06T12:53:56.784606Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:53:56.947732Z","title":"Learning multiple layers of features from tiny images,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:56.947732Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:1f80e68141696c910485d41a08613a7fe35796c4f3201a7cbeac10a30cc82f91","observation_id":"dbf8b215-2eba-48c5-b8e2-13e65fa58116","resolution":{"observed_at":"2026-08-06T12:53:56.947732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:53:57.084525Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:57.084525Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:b2640202620cc43b36c4dced820ee76ff16f789e1fb37521c196aaa238c9980a","observation_id":"76790aff-6be7-4348-9b49-f3dbb7f1aebf","resolution":{"observed_at":"2026-08-06T12:53:57.084525Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-08-14T04:13:35.056640Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-06T12:53:57.266055Z","title":"Very deep convolutional networks for large-scale image recognition,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:57.266055Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:d01e15a047e11587ae15737ae58098094834f0e352f72daaf88faece9571c870","observation_id":"f98b1186-e4d2-43b8-92dc-ab65cc5c291d","resolution":{"observed_at":"2026-08-06T12:53:57.266055Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:53:57.355093Z","title":"Densely connected convolutional networks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:57.355093Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:f8157f8309b63d29b429015401aaf9497a31c041884f0db618400825a23bd0ad","observation_id":"1a9087d6-560d-415f-bfe9-fe043b4348fa","resolution":{"observed_at":"2026-08-06T12:53:57.355093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:53:57.537368Z","title":"Mobilenetv2: Inverted residuals and linear bottlenecks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:57.537368Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:0d627943696c0ba292dc7bb519d499676b89db46abbf850dd9ce0ef3cba4f4f9","observation_id":"2c1ea9ce-587a-4327-bb3e-d8bfc6ba7dbc","resolution":{"observed_at":"2026-08-06T12:53:57.537368Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:08.568357Z","title":"A simple weight decay can improve gener- alization,","venue":null,"work_id":"13517986-181f-48df-9aaa-866e890999ff","year":1991},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:57.705538Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:a755349de7e0baf386ae679ae59770a2dbc9535d3540bfe1e004bf1bca9098a2","observation_id":"da86fb55-1ac3-44f0-b05a-a459828b12a0","resolution":{"observed_at":"2026-08-06T12:54:08.695769Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1608.03983","last_updated":"2017-05-03T16:28:09Z","snapshot_observed_at":"2026-07-06T05:06:55.589962Z","submitted_at":"2016-08-13T13:46:05Z","title":"SGDR: Stochastic Gradient Descent with Warm Restarts","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.03983","snapshot_observed_at":"2026-08-06T12:53:57.839855Z","title":"SGDR: Stochastic gradient descent with warm restarts,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:57.839855Z"},"links":{"cited_paper":"/paper/1608.03983","citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:890f7d4ca4084a61ad3929b3fd79895cf1f57563e9de526276a10475434d579b","observation_id":"6d00f85f-f32c-4665-b2e2-ddf93c42adcf","resolution":{"observed_at":"2026-08-06T12:53:57.839855Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:08.351537Z","title":"Random erasing data augmentation,","venue":null,"work_id":"b27d9dd0-999b-4695-b559-8e4e097feefb","year":2020},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:57.914731Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:b83bfe319aa8cedab853c7655880736bebdfaf06938fe88b91ef93c3af4c3fe8","observation_id":"fd10a6c7-6bf5-442d-af3c-7ff7fb127326","resolution":{"observed_at":"2026-08-06T12:54:08.434240Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:08.199591Z","title":"On the Impor- tance of Difficulty Calibration in Membership Inference Attacks,","venue":null,"work_id":"179bc06c-1c88-48a7-ab0c-200ab6461765","year":2022},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:58.033208Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:2930a3484af732985df5ba6418cc23b54d480db53368be5513d12fd993fad583","observation_id":"3ed6e5e9-705e-4d9b-ba5e-40855763868b","resolution":{"observed_at":"2026-08-06T12:54:08.266118Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:53:58.108735Z","title":"En- hanced membership inference attacks against machine learning models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:58.108735Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:0cb56489fdb1032384c06eb5fb20cfd03264df86c5757980678a3fe8b87c6f86","observation_id":"1e070620-5ae7-4c77-8e37-e9e7d2702259","resolution":{"observed_at":"2026-08-06T12:53:58.108735Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:08.008007Z","title":"Systematic evaluation of privacy risks of ma- chine learning models,","venue":null,"work_id":"a0f72ba1-6515-4944-9ef4-1cb3c9d052e7","year":2021},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:58.311452Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:145976894609db70535613c41f26edac2331881f94030227d1f682d38caaa55b","observation_id":"ea177dd0-9408-4a6b-803c-3eed6d4dac82","resolution":{"observed_at":"2026-08-06T12:54:08.072698Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:07.748518Z","title":"Ge- nomic privacy and limits of individual detection in a pool,","venue":null,"work_id":"6b33a40d-77c3-46cb-b3b5-65c80ab93bc3","year":2009},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:58.484743Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:1df16662ff4e544d3fbe4a6f5aaeb83d51f0b797e2a8ddcb1919f8e0dc2610d5","observation_id":"36e73c11-4bb9-455e-aff6-349eb3f814a9","resolution":{"observed_at":"2026-08-06T12:54:07.899401Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:53:58.611708Z","title":"Imagenet: A large-scale hierarchical image database,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:58.611708Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:e47bf661f9cb709ce9aac53397d7f62c0dfdd0467d53dbc8513330163bb3ff83","observation_id":"0879d326-a733-4f23-b970-535546977840","resolution":{"observed_at":"2026-08-06T12:53:58.611708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1810.03505","last_updated":"2018-10-02T21:20:09Z","snapshot_observed_at":"2026-08-07T01:38:08.346703Z","submitted_at":"2018-10-02T21:20:09Z","title":"CINIC-10 is not ImageNet or CIFAR-10","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.03505","snapshot_observed_at":"2026-08-06T12:53:58.731828Z","title":"Cinic-10 is not imagenet or cifar-10,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:58.731828Z"},"links":{"cited_paper":"/paper/1810.03505","citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:1fd869b3e56827d618ca9c96b956592f25ea9f77aa7b2168f37430dcae545011","observation_id":"167eeb5a-b5fa-4984-a8b4-047735728f90","resolution":{"observed_at":"2026-08-06T12:53:58.731828Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:53:58.838345Z","title":"Deep learning with differential privacy,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:58.838345Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:7be071cedf276e1874cfdc8c02d3a60e62dd57f2949064fbe7f9d30f40fee260","observation_id":"d90372dd-e846-4d13-a4f3-555ccc76e218","resolution":{"observed_at":"2026-08-06T12:53:58.838345Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:53:58.991554Z","title":"Model inversion attacks that exploit confidence information and basic countermeasures,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:58.991554Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:c587b8a0e7a41ccfe1c4a5e0bf8899bd49526c58abdd770a7892243ce7f21d78","observation_id":"ab64553b-96d5-4efc-be99-ce349520443b","resolution":{"observed_at":"2026-08-06T12:53:58.991554Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:07.498072Z","title":"Property inference attacks on fully connected neural networks using permutation invariant representations,","venue":null,"work_id":"225c0f48-21e1-4a7f-9716-bf929b19a169","year":2018},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:59.079820Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:20c858d0c1d80aa2d5f2d145d4ba0ea99c4d7c9c0cdf278b1f15890527849c65","observation_id":"1bed8cbb-1daf-4f0f-830e-98284cd42fe0","resolution":{"observed_at":"2026-08-06T12:54:07.608762Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:07.337918Z","title":"Membership privacy: A unifying framework for privacy definitions,","venue":null,"work_id":"ee015013-9ad5-4f14-a1fb-c915c3a379ee","year":2013},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:59.167384Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:ee13b2020bf660efe9fb603421db759c8fd1a9b7e68355cba1f99dafb1d70e2e","observation_id":"24086362-6ed8-4c90-90e4-584c44b1b321","resolution":{"observed_at":"2026-08-06T12:54:07.398850Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:07.017390Z","title":"Adversary instantiation: Lower bounds for differentially private machine learning,","venue":null,"work_id":"a6b9fd4e-e4cb-4a00-aac5-b0c8bcc2f6e9","year":2021},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:59.235829Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:d1f53e0346dcdf9dc36af0d18d6dbb30f1cafded0a858ba2730983e21f203ecb","observation_id":"abb11bd7-ed16-40d6-aefd-a1bf6547fa51","resolution":{"observed_at":"2026-08-06T12:54:07.145294Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:06.759196Z","title":"Auditing differentially private machine learning: How private is private sgd?","venue":null,"work_id":"1c9679ab-49fd-4a62-b74a-a2e35abbedd9","year":2020},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:59.331185Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:02298cb4322754ef48d77fceca3e6938e9f7a4c2073025f82c0303ec27a9346f","observation_id":"ad165f85-e91d-4a08-aa6e-91d1d04bb1e6","resolution":{"observed_at":"2026-08-06T12:54:06.900812Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:06.369312Z","title":"Stolen memories: Leveraging model memorization for calibrated White-Box membership inference,","venue":null,"work_id":"5b721c46-6419-40b4-b20d-5f61d7ced905","year":2020},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:59.461719Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:9734052894cf24e142192c37d32986bac5838a8b5cb588384bfe6af86b86f6be","observation_id":"58efd8fc-03e2-424b-9889-3984999117b9","resolution":{"observed_at":"2026-08-06T12:54:06.583465Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1802.04889","last_updated":"2018-02-13T23:05:05Z","snapshot_observed_at":"2026-08-10T04:50:03.712208Z","submitted_at":"2018-02-13T23:05:05Z","title":"Understanding Membership Inferences on Well-Generalized Learning Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.04889","snapshot_observed_at":"2026-08-06T12:53:59.578742Z","title":"Understanding membership inferences on well- generalized learning models,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:59.578742Z"},"links":{"cited_paper":"/paper/1802.04889","citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:9834913240fb86e5edfeffd05ae1ccbe772bb748a530ae6d5ac2044051721a33","observation_id":"c4370dc6-f5ff-48d6-8b92-c80d5fc171b5","resolution":{"observed_at":"2026-08-06T12:53:59.578742Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:06.162288Z","title":"ML-Doctor: Holistic risk assessment of inference attacks against machine learning models,","venue":null,"work_id":"d3faa985-d5d2-4e05-b253-33b9a06ad8ce","year":2022},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:59.718888Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:764f9cbe0499bf94334a12e687305ed5522c60c4b2ba8e907235170191a4c691","observation_id":"76078221-f536-4912-a727-9e2a273d8022","resolution":{"observed_at":"2026-08-06T12:54:06.278383Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:05.930775Z","title":"ML-Leaks: Model and Data Independent Membership Inference At- tacks and Defenses on Machine Learning Models,","venue":null,"work_id":"c3e6b2aa-56c9-4fb0-826f-e66d5c7c36cd","year":2019},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:59.828646Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:94dc4a83232b41a97e53706a852bd63998edc6ec65a6035638f37f2b52d26df5","observation_id":"59120c6a-ce0b-4f16-a110-5038eb440c65","resolution":{"observed_at":"2026-08-06T12:54:06.019437Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:05.688703Z","title":"Membership leakage in label-only exposures,","venue":null,"work_id":"7fb930ea-c291-47c3-958a-6546fcc7f77d","year":2021},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T12:53:59.965532Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:26a42ba151dd565959153ad0edd6791707f27557de9755212622bfbc9640c477","observation_id":"9c23fc8f-494f-4d6c-a360-4a2ab9ad229c","resolution":{"observed_at":"2026-08-06T12:54:05.800655Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:05.465028Z","title":"Label- only membership inference attacks,","venue":null,"work_id":"d9cfd59b-7e7c-4de7-b565-918d7b116431","year":2021},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:00.079253Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:6faf48ee19720b2979495f5b8d6af60f92a2be75b22ba53074817c8885a2925d","observation_id":"e4aa10c9-320a-4871-af81-b010f111438a","resolution":{"observed_at":"2026-08-06T12:54:05.573355Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:05.249095Z","title":"Students parrot their teachers: Membership inference on model distillation,","venue":null,"work_id":"722c42de-c5b0-4c9f-8f07-889b6240a22b","year":2023},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:00.187224Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:5dd5155959d92f2b94df4c770e7411856b761b261f0facbd75db0377182d5e9f","observation_id":"133aa1e4-99ce-4be2-a0ce-a814cdba64b6","resolution":{"observed_at":"2026-08-06T12:54:05.342302Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:05.014746Z","title":"Membership Inference Attacks by Exploiting Loss Trajectory,","venue":null,"work_id":"d9cb8c9f-1368-4e15-abcb-c283b4fbe721","year":2022},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:00.278772Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:7aacf87d268f582e80587620595df0c8931e35e1aa8fbc64f0e58f73c2af8c8f","observation_id":"693bcbb2-bd54-464f-a864-cc52c0d91be4","resolution":{"observed_at":"2026-08-06T12:54:05.117709Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:04.890404Z","title":"A pragmatic approach to membership inferences on machine learning models,","venue":null,"work_id":"0abf361f-a846-4ba5-b269-3f23be6499f8","year":2020},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:00.327613Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:5578b450331d5e1b7556f9941ca3083fbc67d12c66f81b8920f4590e9534bd1d","observation_id":"2613d397-d297-4720-bd7f-36527c413078","resolution":{"observed_at":"2026-08-06T12:54:04.940747Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:04.727769Z","title":"The privacy onion effect: Memorization is relative,","venue":null,"work_id":"4b7d23a1-41a2-4a0f-9df7-7c5f2d2f7194","year":2022},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:00.418933Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:65585ed1c1b425e9d9a13c12c204a41543677065aef75b3a6902e89a05484cf1","observation_id":"8741a7ff-6b48-40a4-b3c7-9f4564f828c9","resolution":{"observed_at":"2026-08-06T12:54:04.799951Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:04.588013Z","title":"User-Level Membership Inference Attack against Metric Embedding Learning,","venue":null,"work_id":"59f5ea51-8fa2-496f-9da8-0c29eb9b4478","year":2022},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:00.536777Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:d497b2f6e91c8a076606e6e37b39139d546350db59ac270f93037ef26dcfaa99","observation_id":"44e65f9c-6adb-4cda-8c8a-a0523124afaf","resolution":{"observed_at":"2026-08-06T12:54:04.656337Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:04.439089Z","title":"Did the neurons read your book? document-level membership inference for large language models,","venue":null,"work_id":"e7c6cbab-0434-44ca-93c3-cb0b34be911c","year":2024},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:00.622497Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:2eee3e413e900e3f2a73d983fd3951a26b58895574021c2b4753b997d82193d5","observation_id":"230cc0cc-05a4-4ff6-b5c6-23dc93ecd0ae","resolution":{"observed_at":"2026-08-06T12:54:04.504446Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1705.07663","last_updated":"2018-08-21T13:24:17Z","snapshot_observed_at":"2026-08-12T05:59:45.539993Z","submitted_at":"2017-05-22T11:05:06Z","title":"LOGAN: Membership Inference Attacks Against Generative Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.07663","snapshot_observed_at":"2026-08-06T12:54:00.778223Z","title":"Logan: Mem- bership inference attacks against generative models,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:00.778223Z"},"links":{"cited_paper":"/paper/1705.07663","citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:00dc21685f9325c1631d186381f9317ae314dc0112338141f3368d49af58b763","observation_id":"daa5017e-ee3f-443e-88ac-7d77a82969b6","resolution":{"observed_at":"2026-08-06T12:54:00.778223Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:04.261573Z","title":"Are diffusion models vulnerable to membership inference attacks?","venue":null,"work_id":"97b0c1b1-f35d-49b5-97c0-ff516ee62eb4","year":2023},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:00.936431Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:c5cd65e7dcc691690e72e08d41d5211d1838c9f742a9ff4b04018b4dacfa1eb4","observation_id":"967ccff5-dd7e-4d9e-a0e0-06b68c2b608d","resolution":{"observed_at":"2026-08-06T12:54:04.375363Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07841","last_updated":"2024-09-16T13:18:23Z","snapshot_observed_at":"2026-08-13T04:20:24.398988Z","submitted_at":"2024-02-12T17:52:05Z","title":"Do Membership Inference Attacks Work on Large Language Models?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07841","snapshot_observed_at":"2026-08-06T12:54:01.045235Z","title":"Do membership inference attacks work on large language models?","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:01.045235Z"},"links":{"cited_paper":"/paper/2402.07841","citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:4951c1e0bf09679389f0e1eacd59a1db0b74ee587b33cc92716c6dc721082dd4","observation_id":"b9396d14-49be-46fd-8907-e0029956fb9d","resolution":{"observed_at":"2026-08-06T12:54:01.045235Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:04.042165Z","title":"Williams,Probability with martingales","venue":null,"work_id":"7138b693-f810-45f3-9959-d930024b6c99","year":1991},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:01.202501Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:7af98133259fad0adeafa44204bf4c4f3eb97d0abac8f3293c115e78f9f515ad","observation_id":"c325778a-7c55-4d29-98ef-516d7dfa15ef","resolution":{"observed_at":"2026-08-06T12:54:04.106357Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:03.872719Z","title":"Markov chains for exploring posterior distributions,","venue":null,"work_id":"d01020c1-034c-4869-881e-cae38672dc67","year":1994},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:01.339071Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:9dbb0c21b7f99e5a7330a80b149f0d88889c5b3aac1b5d302a9b1ca2d14144d7","observation_id":"f54b7516-90be-47f9-94b1-76b6b5627c3e","resolution":{"observed_at":"2026-08-06T12:54:03.948958Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:03.720534Z","title":"Peskun’s theorem and a modified discrete-state Gibbs sampler","venue":null,"work_id":"7cd28f63-cdda-491a-8648-81e51841d3dd","year":1996},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:01.466653Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:8806587f3c1eba7cda05a18100550cd529d5253250dac15d9e581057bb1c34f5","observation_id":"c3c683b3-d71e-4512-b276-af3d20576f11","resolution":{"observed_at":"2026-08-06T12:54:03.765497Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:03.583733Z","title":"General state space Markov chains and MCMC algorithms,","venue":null,"work_id":"15756297-68b4-4e73-b86d-3e3e9c80906f","year":2004},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:01.543602Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:1b9711dabf728e60cd23f1e509ba1156bec9efb8e5abc74f1c5c9eb848a0b595","observation_id":"0c4aaeb2-b5b5-45d5-8a3f-c1323a264d38","resolution":{"observed_at":"2026-08-06T12:54:03.646283Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:01.681894Z","title":null,"venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:01.681894Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:a329ba535c8d3ee6a180db468371bf239880ecfb287c6087e93b87eba823e5be","observation_id":"abc0d613-9238-4b6b-bc97-add1ceba077a","resolution":{"observed_at":"2026-08-06T12:54:01.681894Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:03.331717Z","title":null,"venue":null,"work_id":"bc5b60cb-06fb-4045-94f8-5a0d8be3c8a3","year":2018},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:01.857794Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:c511abd0e379fa8b76764b4068497e3a6fe46c17a313f5dfb3a255ffae416cf7","observation_id":"c8dee595-558e-45a0-92d2-b85e35a8e034","resolution":{"observed_at":"2026-08-06T12:54:03.482630Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:03.139506Z","title":"Meyn and R","venue":null,"work_id":"b0c82168-8dbc-40fe-835d-38b268eb59ac","year":2009},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:01.981083Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:33397087aa63ae0f5a40882c8313b0068280c5958cf428802c284597bf2cb144","observation_id":"1e357f43-e1ff-4e0b-8a4c-fb3bde2a7e0b","resolution":{"observed_at":"2026-08-06T12:54:03.195578Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:02.861490Z","title":null,"venue":null,"work_id":"bff5455c-84ff-4b1a-a0ca-59dab0769b31","year":null},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:02.105947Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:8d63fcdf4f01c4cd34e3025ca5bbc50d02bebfa3922b7a8d1db12042b08af3b6","observation_id":"7bd5b3dc-7d6c-4568-b266-258789323d00","resolution":{"observed_at":"2026-08-06T12:54:02.988779Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:54:02.580596Z","title":"Proof.We prove the above theorem by establishing that the Gibbs sampling procedure forms a Markov chain that satisfies the conditions for the Martingale Convergence Theorem [64]","venue":null,"work_id":"477da1fd-354c-4269-9ec9-5409d5122eb7","year":null},"citing_paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks","version":3},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-06T12:54:02.255763Z"},"links":{"citing_paper":"/paper/2507.21412"},"observation_digest":"sha256:2be8fbccdd00eeae2ee446fe99338f0e03f3ea72394da866d154e8ff3528ef85","observation_id":"5a4dce57-948d-416d-86ec-09051ccfc67a","resolution":{"observed_at":"2026-08-06T12:54:02.705608Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.21412","last_updated":"2025-09-07T16:50:02Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T20:12:12.710993Z","submitted_at":"2025-07-29T00:46:09Z","title":"Cascading and Proxy Membership Inference Attacks"},"reference_resolution":{"displayed":72,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":24,"verified_exact":0,"verified_fuzzy":47},"total_outbound_references":72},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 72 of 72 outbound references and 1 inbound Pith citation observation for arXiv:2507.21412."}