{"as_of":"2026-08-13T21:25:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c5dc7c4a20b2e817e58917c63c8f8c28814b6338bb1d99c111147004437828d0","coverage":[{"denominator":280,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T18:12:37.318253Z","state":"measured"},{"denominator":104,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":104,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":4,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":4,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T15:39:56.125373Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-30T21:55:05.385766Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.15031","snapshot_observed_at":"2026-08-05T15:39:56.125373Z","title":"A sys- tematic survey of model extraction attacks and defenses: State-of- the-art and perspectives,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-08T08:19:58.466694Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":181,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:56.125373Z"},"links":{"cited_paper":"/paper/2508.15031","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:5162cc569230f89d4602122475383000bc6ac738fadcd3e9ec50f586d3a46786","observation_id":"a908464a-ef73-414b-8f1c-7146162cc82b","resolution":{"observed_at":"2026-08-05T15:39:56.125373Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.15031","snapshot_observed_at":"2026-08-04T11:34:11.041770Z","title":"Z., Zhao, Y","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2510.04033","last_updated":"2026-06-22T22:02:33Z","snapshot_observed_at":"2026-08-13T12:47:04.185539Z","submitted_at":"2025-10-05T04:52:26Z","title":"A global log for medical AI","version":2},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-04T11:34:11.041770Z"},"links":{"cited_paper":"/paper/2508.15031","citing_paper":"/paper/2510.04033"},"observation_digest":"sha256:748af888ab91dba12cba03fc7fd1cdd46dc68c86815dae5514a0e2ecf25aa423","observation_id":"ddc7d7ee-16ea-40cb-a720-33d39e5d6ff6","resolution":{"observed_at":"2026-08-04T11:34:11.041770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"cited_work":{"arxiv_id":"2508.15031","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.15031","snapshot_observed_at":"2026-06-30T21:55:05.385766Z","title":"A systematic survey of model extraction attacks and defenses: State-of-the-art and perspectives","venue":null,"work_id":"83a18dab-7824-4090-b821-7ce6fbfef957","year":2025},"citing_paper":{"arxiv_id":"2605.12827","last_updated":"2026-05-25T19:09:13Z","snapshot_observed_at":"2026-08-10T21:03:33.375693Z","submitted_at":"2026-05-12T23:49:45Z","title":"GraphIP-Bench: How Hard Is It to Steal a Graph Neural Network, and Can We Stop It?","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-14T19:28:31.180563Z"},"links":{"cited_paper":"/paper/2508.15031","citing_paper":"/paper/2605.12827"},"observation_digest":"sha256:25e1909ac75745cf979f013f5610e693699b5d3cee0dcee146fac6f5b3a80b06","observation_id":"4ac309ed-9c09-4b06-9fd2-1c7a4391a226","resolution":{"observed_at":"2026-05-14T19:29:23.801138Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"cited_work":{"arxiv_id":"2508.15031","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.15031","snapshot_observed_at":"2026-06-30T21:55:05.385766Z","title":"A systematic survey of model extraction attacks and defenses: State-of-the-art and perspectives","venue":null,"work_id":"83a18dab-7824-4090-b821-7ce6fbfef957","year":2025},"citing_paper":{"arxiv_id":"2605.12827","last_updated":"2026-05-25T19:09:13Z","snapshot_observed_at":"2026-08-10T21:03:33.375693Z","submitted_at":"2026-05-12T23:49:45Z","title":"GraphIP-Bench: How Hard Is It to Steal a Graph Neural Network, and Can We Stop It?","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-06-30T21:53:59.325002Z"},"links":{"cited_paper":"/paper/2508.15031","citing_paper":"/paper/2605.12827"},"observation_digest":"sha256:e617af9f2b940f89915bd5371ce077f68c39e62257bf24662f52da7869b13bf0","observation_id":"1aa3cae7-9bca-4fc8-980c-0776539f40c7","resolution":{"observed_at":"2026-06-30T21:55:05.387396Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2508.15031/citation-record","integrity":"/paper/2508.15031/integrity","json":"/paper/2508.15031/citation-record.json","paper":"/paper/2508.15031"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:33.033783Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.033783Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:792b91f55b2e3400f2f58feea048122729db11968b94bbf14e4471a4a0e971cb","observation_id":"9cdab7a7-87b6-4485-b16d-5ec6b0aee6af","resolution":{"observed_at":"2026-08-05T18:12:33.033783Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:33.125025Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.125025Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:87babbe2c331cf369b001daef3a8189c55f98c20739681089f7bc6b37fdac003","observation_id":"64ac5a4b-731f-485f-81f3-a44b91c5b660","resolution":{"observed_at":"2026-08-05T18:12:33.125025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:33.245655Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.245655Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:6c9684bc6ee97e9b9ace950c2763101f1e41bb9a891fdc518a800112f33d49c8","observation_id":"a8fcd1e3-3e44-4045-9dd2-f8332f59bbfc","resolution":{"observed_at":"2026-08-05T18:12:33.245655Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:33.319089Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.319089Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:b8230e94e5b90d39ffa4f953c66aabe087a3ab46f5e631e21e072a3eda5fe92a","observation_id":"0a5a75c0-fa4d-4177-a0a2-a0a1a986fd69","resolution":{"observed_at":"2026-08-05T18:12:33.319089Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:33.450589Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.450589Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:91f10c1e8b32622b001050389586dbbc50a0cb5c4856f27648b9abd35ee7df7f","observation_id":"0dd35598-bea5-43fb-9037-85a67e50d27a","resolution":{"observed_at":"2026-08-05T18:12:33.450589Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:33.579002Z","title":"Vasilakos","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.579002Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:97aa8e2a4593dd78287ff2b4efc800c78cfa2db796a14a5dd22aea736b482388","observation_id":"2ccca584-2071-46d9-b000-bf061bc784d6","resolution":{"observed_at":"2026-08-05T18:12:33.579002Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2009.01884","last_updated":"2020-09-03T19:02:55Z","snapshot_observed_at":"2026-08-05T13:34:19.999796Z","submitted_at":"2020-09-03T19:02:55Z","title":"Model extraction from counterfactual explanations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2009.01884","snapshot_observed_at":"2026-08-05T18:12:33.679833Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.679833Z"},"links":{"cited_paper":"/paper/2009.01884","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:0dcee66d6bf9b8adef4f720203c5840087aa6562066facc136dae6127df03b68","observation_id":"f7ab15cd-c192-47a9-a554-1ad29e0fafb2","resolution":{"observed_at":"2026-08-05T18:12:33.679833Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:33.816678Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.816678Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:0b0ec09214412cd618b1faeca78fd06db76df0ef5e8d5f980276f2355a3c83d4","observation_id":"63e6b722-121d-4ef4-9e73-372000093cab","resolution":{"observed_at":"2026-08-05T18:12:33.816678Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:33.900856Z","title":null,"venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.900856Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:ab17593e0a8b8e56e3c0819636708612366799dbb739205763031fb166f483b0","observation_id":"8eea7fc8-a32b-440d-930a-c1a286fc950d","resolution":{"observed_at":"2026-08-05T18:12:33.900856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04931","last_updated":"2023-11-06T23:50:20Z","snapshot_observed_at":"2026-08-13T05:31:02.738320Z","submitted_at":"2023-11-06T23:50:20Z","title":"GPT4All: An Ecosystem of Open Source Compressed Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.04931","snapshot_observed_at":"2026-08-05T18:12:33.998376Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:33.998376Z"},"links":{"cited_paper":"/paper/2311.04931","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:872eaec2de50140f747e85356f08a410024ca408e6aa456a3b834da067be4eb2","observation_id":"421516b9-8e96-4811-a2e4-6b11e81b6ce5","resolution":{"observed_at":"2026-08-05T18:12:33.998376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:34.103321Z","title":null,"venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.103321Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:bb24f43282e7409707da679434bfe50154bdfdc4eead812159f4bad1c05d7b32","observation_id":"d204242e-8498-4cf4-b899-2c193c722dcb","resolution":{"observed_at":"2026-08-05T18:12:34.103321Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:34.197210Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.197210Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:096f7d7a569d164cfee571e97a9f8a85157f5c8a7e8343471c6f5b1650bcf5b5","observation_id":"c3b5060b-2b52-4178-90a8-f06403fdc5c7","resolution":{"observed_at":"2026-08-05T18:12:34.197210Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:34.297286Z","title":null,"venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.297286Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:80be36096b32be92a5387a50e64005c0206806ef44954966031d0deb80324a14","observation_id":"ab151a41-ed34-45a2-8628-2e26aa4f503b","resolution":{"observed_at":"2026-08-05T18:12:34.297286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.04805","last_updated":"2025-01-12T06:38:05Z","snapshot_observed_at":"2026-08-13T02:52:33.271870Z","submitted_at":"2024-06-07T10:12:01Z","title":"GENIE: Watermarking Graph Neural Networks for Link Prediction","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.04805","snapshot_observed_at":"2026-08-05T18:12:34.387107Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.387107Z"},"links":{"cited_paper":"/paper/2406.04805","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:67cb34075403c70d5d8748c1b437611df24404a3b9913f269c6db69861dcf867","observation_id":"cbe87a27-c46b-402b-9bf4-3a589e598fe0","resolution":{"observed_at":"2026-08-05T18:12:34.387107Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05990","last_updated":"2024-05-20T14:40:03Z","snapshot_observed_at":"2026-08-13T00:11:54.410419Z","submitted_at":"2024-05-09T02:35:32Z","title":"Special Characters Attack: Toward Scalable Training Data Extraction From Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05990","snapshot_observed_at":"2026-08-05T18:12:34.457509Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.457509Z"},"links":{"cited_paper":"/paper/2405.05990","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:779e03e17c73005f8ef234d4619184410b449ae09b6097e07aae32dca5a6df9b","observation_id":"3c4d7eaf-5e20-4f2c-be7f-f923610e7f2c","resolution":{"observed_at":"2026-08-05T18:12:34.457509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:34.545907Z","title":null,"venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.545907Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:8183eab8ec809944018971a3e93bd9edc422b6969510824d9e263a9b3d024d56","observation_id":"18917f3e-127b-4934-9d78-68a249e4e0f2","resolution":{"observed_at":"2026-08-05T18:12:34.545907Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:34.646269Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.646269Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:eeca5ef9ad2686e52676dcab20393ee021f0806f205f88c3e29379bf38c2acae","observation_id":"43a92d97-8daf-4f5c-80d5-5334133030da","resolution":{"observed_at":"2026-08-05T18:12:34.646269Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:34.736414Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.736414Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:15df95a95ff33143fe5eebb9566d1b41eba9e63404e0f7163e145b1ea958fa9b","observation_id":"0f42cfe8-4b53-497b-8060-5abfe890a6c0","resolution":{"observed_at":"2026-08-05T18:12:34.736414Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:34.832862Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.832862Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:2c6c24a194205823de615bcfa8f29669cd59475684f8413cb097e3bd064f4991","observation_id":"8b7ad942-e0d5-4c18-b31c-16ae262a944e","resolution":{"observed_at":"2026-08-05T18:12:34.832862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:34.941213Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:34.941213Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:34f4548088667043a68806415a3b6656bc3da5a1d838c5b33eedd23f04d3cc68","observation_id":"2034a8e5-f5c1-41f8-a6fb-8fce3c904006","resolution":{"observed_at":"2026-08-05T18:12:34.941213Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:35.153670Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:35.153670Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:7497af932aae22432c19620b9c8ff51f80df501afcdf333052631ea98d061c3b","observation_id":"d761cdb6-67b7-4df4-98c2-e66f61e3089d","resolution":{"observed_at":"2026-08-05T18:12:35.153670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:35.172135Z","title":null,"venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:35.172135Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:3739fc391acc1bd43f53965d0c6732bb8498757dba9076258fff4bfae992a0d1","observation_id":"079c1f57-0d44-4c83-8a51-720ec20c66d6","resolution":{"observed_at":"2026-08-05T18:12:35.172135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:35.307177Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:35.307177Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:93b13990ff8f736919bae76b2a90efca75157a244149e47ded42d71160eb0e1f","observation_id":"c7ad0299-171e-4c25-9700-86a2f84dc14a","resolution":{"observed_at":"2026-08-05T18:12:35.307177Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1109/tr.2021","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:38.605133Z","title":null,"venue":null,"work_id":"94f9ca52-39cb-4cb8-89f4-8b4621e9ad0b","year":2022},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:35.424528Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:75c64eab1adacc2d7745958ba63d2d8e84c548d16616861fccb315f9462ad226","observation_id":"a3c9311d-ca85-433b-8add-89516b80f17a","resolution":{"observed_at":"2026-08-05T18:12:38.609655Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:35.568851Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:35.568851Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:1b5d034d9a6c67ff9b936b9018e4915bba47bdd0fa776e2b5258e01deda30e72","observation_id":"7f12fcea-80cc-492e-bdb1-91cf8b54379a","resolution":{"observed_at":"2026-08-05T18:12:35.568851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:35.748039Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:35.748039Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:1dd4096a62d9be6bb7d9a7523977fc6652a8d2789fba0652bcaef31bc55cec15","observation_id":"23780280-956e-4636-bea6-e5fa6c66fca9","resolution":{"observed_at":"2026-08-05T18:12:35.748039Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:35.991117Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:35.991117Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:ce4871150a73cd2d42a1efb52c8fee16d13951780ef69cea14bd7377e695a88e","observation_id":"c48ce376-1fa0-4c47-822a-55e4e25407f1","resolution":{"observed_at":"2026-08-05T18:12:35.991117Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:36.075710Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.075710Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:f436284c352758b2985e01024c1dfe69db35a8cf4a813a9c90a703fd13b85189","observation_id":"4180abc3-5b61-4c5c-8941-fb5703ff7aab","resolution":{"observed_at":"2026-08-05T18:12:36.075710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-08-13T00:57:43.847856Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-08-05T18:12:36.156283Z","title":"Feder Cooper, Katherine Lee, Matthew Jagielski, Milad Nasr, Arthur Conmy, Itay Yona, Eric Wallace, David Rolnick, and Florian Tram‘er","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.156283Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:8e30c001fe77790b647f4574e35bc5d4e78a609eb38a34b15ece45ca7ac6bad4","observation_id":"fb9fe567-86a7-4880-ac39-825b1a7a7b1f","resolution":{"observed_at":"2026-08-05T18:12:36.156283Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:36.261018Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.261018Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:2e6bf77cbe55b3392ee0b6a2de94680819b6327dfada1af131db148bd4df8a96","observation_id":"f12751f0-454c-4b99-aaa3-5c71bf4556c3","resolution":{"observed_at":"2026-08-05T18:12:36.261018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2005.12782","last_updated":"2020-07-31T09:41:41Z","snapshot_observed_at":"2026-08-09T15:51:52.187272Z","submitted_at":"2020-05-26T15:04:29Z","title":"A Protection against the Extraction of Neural Network Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.12782","snapshot_observed_at":"2026-08-05T18:12:36.406217Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.406217Z"},"links":{"cited_paper":"/paper/2005.12782","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:6ec0b1755abb114d1c79ede258d038133c0210f7fdd61337b455c46c1178c813","observation_id":"738ee7de-e832-4738-96f5-2d2e369a1397","resolution":{"observed_at":"2026-08-05T18:12:36.406217Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2207.13321","last_updated":"2022-07-27T06:49:39Z","snapshot_observed_at":"2026-08-13T14:55:52.413437Z","submitted_at":"2022-07-27T06:49:39Z","title":"DynaMarks: Defending Against Deep Learning Model Extraction Using Dynamic Watermarking","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2207.13321","snapshot_observed_at":"2026-08-05T18:12:36.532173Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.532173Z"},"links":{"cited_paper":"/paper/2207.13321","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:af13f8cee288f4e27cf7f878d7b75ea1cb190d7930b1322c5f240e6fc06bf413","observation_id":"40670c1c-329b-4802-9b1f-d11379400cad","resolution":{"observed_at":"2026-08-05T18:12:36.532173Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:36.652953Z","title":"Jha, and Songbai Yan","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.652953Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:1c978896586d0caf0e170ba89defc0e25d05152f962842a3c666c62bdf3015df","observation_id":"e59dc092-dc02-4ab3-9e66-bc88f17cad8b","resolution":{"observed_at":"2026-08-05T18:12:36.652953Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:36.793260Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.793260Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:b54f96243fe04c98ead6b8c2b7dc0c5081433a64364794de8cd3b60421a1a4b9","observation_id":"4c9dcc17-ba19-41f3-bc69-63ebe30039d4","resolution":{"observed_at":"2026-08-05T18:12:36.793260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.01251","last_updated":"2024-07-01T13:01:41Z","snapshot_observed_at":"2026-08-12T23:31:18.879464Z","submitted_at":"2024-07-01T13:01:41Z","title":"QUEEN: Query Unlearning against Model Extraction","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.01251","snapshot_observed_at":"2026-08-05T18:12:36.875251Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.875251Z"},"links":{"cited_paper":"/paper/2407.01251","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:c929b0923de330761e61387c161c6a9760ee57b89fd7c2cfe1ea0545bdcd62c1","observation_id":"2c9a2bf4-9da6-40b0-8588-90821f374005","resolution":{"observed_at":"2026-08-05T18:12:36.875251Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:36.997527Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:36.997527Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:d24bb34f501e382a42b2a9e0d3b73de3c7a5b358deae539662247c2f08385b62","observation_id":"3153007f-3236-44f5-8849-fcddcf77a726","resolution":{"observed_at":"2026-08-05T18:12:36.997527Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.004866Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.004866Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:421991f436d167466754114000a3760da597792f0b64d5c01f051f847340daca","observation_id":"3392a03f-e259-4894-8ad6-a231c8bb9e82","resolution":{"observed_at":"2026-08-05T18:12:37.004866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.010635Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.010635Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:c0d0947d036dbf9e6fcfca630c4f6dfb45472a23bad976c847ff4dc5dd1c685c","observation_id":"5698757e-cf7f-4f88-9fea-fed15bbbefb5","resolution":{"observed_at":"2026-08-05T18:12:37.010635Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.017774Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.017774Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:984c57be864f0c5b0d4260e2ad9a66b666d45be6cc396e27807d36940ee5d9ed","observation_id":"5dab1db3-fd21-40d6-94fb-76ef0ce9efca","resolution":{"observed_at":"2026-08-05T18:12:37.017774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-05T18:12:37.022736Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.022736Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:c5c2ae14b39c7914847fb561697e0585cf62cf984f01a64201afce2718e7e0e7","observation_id":"1be1b61a-5707-4456-ab4e-d6fae919928d","resolution":{"observed_at":"2026-08-05T18:12:37.022736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.027478Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.027478Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:e4c69c831d6b0df95735a2de4ff393c044ec8585c35cb09495b2ff4631edf4b4","observation_id":"a88a023f-19c6-4cf3-9239-9417580ca7b9","resolution":{"observed_at":"2026-08-05T18:12:37.027478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-13T05:58:16.125055Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.02362","snapshot_observed_at":"2026-08-05T18:12:37.034350Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.034350Z"},"links":{"cited_paper":"/paper/2506.02362","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:906f8754e9bf912bf3ffbb428a74d3d8308a3324f0c35d3d79345b3a7e679866","observation_id":"ca490b50-3be2-4d14-98ef-3e15920dd554","resolution":{"observed_at":"2026-08-05T18:12:37.034350Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.039908Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.039908Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:305eae5d974c54379ccb02f856421d69c4e098b1c7e37635280b8b5f0c783a57","observation_id":"ae0c6e3b-7392-427b-b706-1883f9f030fc","resolution":{"observed_at":"2026-08-05T18:12:37.039908Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.045141Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.045141Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:72e81692731da6922848a297149d4834c92ce635abb28ca9db6b3594c33b550b","observation_id":"c8d588e9-cd88-46ef-8a36-b4566851dc8d","resolution":{"observed_at":"2026-08-05T18:12:37.045141Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.049550Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.049550Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:0b7763080ec16e087ded2c84817d2396eb2c921f81b4058d848a6bfdd09eff03","observation_id":"b1778bb4-7659-4abd-b883-09d9dacf4e64","resolution":{"observed_at":"2026-08-05T18:12:37.049550Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04435","last_updated":"2025-05-31T15:35:11Z","snapshot_observed_at":"2026-08-13T04:24:45.702163Z","submitted_at":"2024-02-06T22:13:49Z","title":"PreGIP: Watermarking the Pretraining of Graph Neural Networks for Deep Intellectual Property Protection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04435","snapshot_observed_at":"2026-08-05T18:12:37.058184Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.058184Z"},"links":{"cited_paper":"/paper/2402.04435","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:dbadd809abd0cfa33a7577333eb820524c75a3f5b2c165de42484cc414f3ca7b","observation_id":"dc50a114-c6c7-466b-90a0-673c215eb9e4","resolution":{"observed_at":"2026-08-05T18:12:37.058184Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.08570","last_updated":"2023-09-27T02:10:11Z","snapshot_observed_at":"2026-08-13T15:59:58.100577Z","submitted_at":"2022-04-18T21:41:07Z","title":"A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy, Robustness, Fairness, and Explainability","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.08570","snapshot_observed_at":"2026-08-05T18:12:37.062427Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.062427Z"},"links":{"cited_paper":"/paper/2204.08570","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:2dd10c8b4efa008827b0da8ff3d12e83f199b60b955864d596796c4f4045fcba","observation_id":"e58bed36-4fec-47df-baed-8ba26fce2ac1","resolution":{"observed_at":"2026-08-05T18:12:37.062427Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.066944Z","title":"Dai, Hui Li, Tian Tian, Xin Huang, L","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.066944Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:c5b512eb1365272ac19fda8437dde9ac4b5c88c2c5e3eb6df818c6e18d78c377","observation_id":"7abacebf-12a5-4cd7-97bb-5d8acc89ebaf","resolution":{"observed_at":"2026-08-05T18:12:37.066944Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.070970Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.070970Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:57ee181df6b8740de6be1733ca7a9b5c9ee88ef62db6ecee2724ec7406fae712","observation_id":"0388b137-5754-440c-8ab2-b9808ef48001","resolution":{"observed_at":"2026-08-05T18:12:37.070970Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1912.07721","last_updated":"2019-12-16T21:54:21Z","snapshot_observed_at":"2026-08-10T01:50:47.832479Z","submitted_at":"2019-12-16T21:54:21Z","title":"Adversarial Model Extraction on Graph Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.07721","snapshot_observed_at":"2026-08-05T18:12:37.075878Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.075878Z"},"links":{"cited_paper":"/paper/1912.07721","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:c1d31e4f407a3b62cf90f67da8a7593bf33777aa4feda1546eb43a19c6686cef","observation_id":"068b43ff-4ddf-45d6-99cd-233a0c9a496e","resolution":{"observed_at":"2026-08-05T18:12:37.075878Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.081824Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.081824Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:9fc9d323f7f11379593738454dd8fcb7b6cb6a75dec07fd0e82daebea49ac732","observation_id":"f759932f-9532-4a68-b5a6-dcc05861a74e","resolution":{"observed_at":"2026-08-05T18:12:37.081824Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.086591Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.086591Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:b704fca15ddd6e0b09d8ae1d1100acff03b72f3e8f1fb7f65020ff325a3ea717","observation_id":"582a528a-ad7e-47b5-a3bb-1548e3e5d104","resolution":{"observed_at":"2026-08-05T18:12:37.086591Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.091260Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.091260Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:2543719d8502aa5f576518cbb56f2dc130b20d83946233fd8ce6a0cc850b9cce","observation_id":"bdc3a9de-1b57-42f5-a31c-c1caf7cda151","resolution":{"observed_at":"2026-08-05T18:12:37.091260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.095966Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.095966Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:4909879db68459bd0137c78b360630c7bb90bb7dedea0e3db8823fb4603cc566","observation_id":"15bd2eb7-9f5f-41e8-a081-f5b1ca8cab9d","resolution":{"observed_at":"2026-08-05T18:12:37.095966Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1812.11720","last_updated":"2019-07-08T07:31:01Z","snapshot_observed_at":"2026-08-09T01:24:01.635034Z","submitted_at":"2018-12-31T08:19:26Z","title":"Stealing Neural Networks via Timing Side Channels","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1812.11720","snapshot_observed_at":"2026-08-05T18:12:37.104791Z","title":"Vijay Rao, and Valentina E","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.104791Z"},"links":{"cited_paper":"/paper/1812.11720","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:20ebf4f373b963760e6113ed6bedf92d7dbc77972e38d618d73dfd0d226ba4dd","observation_id":"1222f260-f42b-45df-87bc-fa9e33c3504e","resolution":{"observed_at":"2026-08-05T18:12:37.104791Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2201.09243","last_updated":"2022-12-12T16:11:45Z","snapshot_observed_at":"2026-08-13T11:53:41.028210Z","submitted_at":"2022-01-23T12:21:28Z","title":"Increasing the Cost of Model Extraction with Calibrated Proof of Work","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2201.09243","snapshot_observed_at":"2026-08-05T18:12:37.110302Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.110302Z"},"links":{"cited_paper":"/paper/2201.09243","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:4d22da18f29e5fc870804446e452460b70c0e91a53b7ef29d809d98d9e45ec46","observation_id":"ec2b396f-6e16-4801-b393-4c6f41826039","resolution":{"observed_at":"2026-08-05T18:12:37.110302Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.115521Z","title":null,"venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.115521Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:506644c6a0ac5d9a76b1807123b4c1ff6a74b1eed35e1b7a53ecd24fef9b8da5","observation_id":"20766c53-2b61-4b4f-841a-5af3c7833ae8","resolution":{"observed_at":"2026-08-05T18:12:37.115521Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.120124Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.120124Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:cecbf641c7553c52541d339de60cd16de08831f474f00fbfcb9c1d9cd9d33ac2","observation_id":"61893ec1-4347-465d-93b5-fe3c39d0a4c7","resolution":{"observed_at":"2026-08-05T18:12:37.120124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.125019Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.125019Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:e737097c278d9fc4d06596a34e7a1c61c37feedb0e2480ce9c0980bccf4c0e21","observation_id":"8b6e0565-7242-4480-8c37-e16f7f1bb9b0","resolution":{"observed_at":"2026-08-05T18:12:37.125019Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.129332Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.129332Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:4aad43dda4adb8eb33ac3016e67ab62e82c776f61a8d6769db1837ff157f64d9","observation_id":"9fb67af5-c0f3-4445-b3bc-62f7bc576538","resolution":{"observed_at":"2026-08-05T18:12:37.129332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.135015Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.135015Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:d23de9d012bc6441665174a60b7774c2496e5561884ea9f86f879acc9f16737f","observation_id":"707df676-9b29-4b13-93c6-b77dbe246312","resolution":{"observed_at":"2026-08-05T18:12:37.135015Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.140358Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.140358Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:1b83d2ff3e6a3c687e39163da71f6baa51808065ead2902b6cc4b51ee5122fcf","observation_id":"04a798e1-0ddc-419f-ad80-abebda2c39ef","resolution":{"observed_at":"2026-08-05T18:12:37.140358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.07557","last_updated":"2018-03-01T10:12:27Z","snapshot_observed_at":"2026-07-06T06:15:22.497001Z","submitted_at":"2017-12-20T16:28:37Z","title":"Differentially Private Federated Learning: A Client Level Perspective","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.07557","snapshot_observed_at":"2026-08-05T18:12:37.144700Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.144700Z"},"links":{"cited_paper":"/paper/1712.07557","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:fe82641f973709aadd1f80a36d211afdbd3437d568daf94785dc7c210dad79b6","observation_id":"07fe34b7-7032-4c4c-97a5-b938e81857e1","resolution":{"observed_at":"2026-08-05T18:12:37.144700Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.149448Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.149448Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:e5f9c2b4a1e733a3333255f486ae172cfeeb6dc65c3e23e35f480a55d733a2dc","observation_id":"ac011dd5-f90d-4d90-bc2e-99f006faae36","resolution":{"observed_at":"2026-08-05T18:12:37.149448Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.153611Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.153611Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:afb95e66b6a682b8b2a704138b1fb96973dd1e3c0e2117638dc982b5cfbdb198","observation_id":"c2382c4a-186e-4c5b-a4ee-6778946e5acc","resolution":{"observed_at":"2026-08-05T18:12:37.153611Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.158033Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.158033Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:61858d3a881b1ce566dddff06dbd6b5c10949bc091f7982a9cc87d29acb4a863","observation_id":"cf1811aa-1136-4780-a28d-43a1184f3351","resolution":{"observed_at":"2026-08-05T18:12:37.158033Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.162210Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.162210Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:5dbb80a25130568a9933854f61933357d4ee86b603aaca2ce941bc0039ac7ca1","observation_id":"266b1095-855e-4588-bf68-b7cbba8e8604","resolution":{"observed_at":"2026-08-05T18:12:37.162210Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16963","last_updated":"2024-06-22T02:47:24Z","snapshot_observed_at":"2026-08-12T23:37:08.332577Z","submitted_at":"2024-06-22T02:47:24Z","title":"Large Language Models for Link Stealing Attacks Against Graph Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.16963","snapshot_observed_at":"2026-08-05T18:12:37.167020Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.167020Z"},"links":{"cited_paper":"/paper/2406.16963","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:5bf6a75413058307922602ef2cea98d4d05244e9bd9411c691a84b2264f1952e","observation_id":"63af2ae5-f5c9-4ed0-a053-15f278d383f2","resolution":{"observed_at":"2026-08-05T18:12:37.167020Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.171708Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.171708Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:e4d94fffd7fdda00046b4eb5accdb60107320e7af68a6415a27e8ac118015ce0","observation_id":"44b422f0-4700-47c7-8e23-0e58435aceab","resolution":{"observed_at":"2026-08-05T18:12:37.171708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.176696Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.176696Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:5dcc92ee346e0f9b149121d8dc24c367b75008008d42742084b58686da228f53","observation_id":"2336e0ab-81da-409e-96bb-192da81b698a","resolution":{"observed_at":"2026-08-05T18:12:37.176696Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.181181Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.181181Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:e18f66a8831bbd1b2f17627840bee0a2e25d4e377e537781f9940480c5ecd772","observation_id":"0542f469-e0ca-4fac-af39-35a30923fc52","resolution":{"observed_at":"2026-08-05T18:12:37.181181Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.185523Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.185523Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:872bd87c5e71069431c515621e1ea2df6f123dde66cca6459ac1a4b826445b25","observation_id":"00638771-96db-40b2-ba9e-c9f19ce0bfe1","resolution":{"observed_at":"2026-08-05T18:12:37.185523Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08679","last_updated":"2024-06-07T00:13:08Z","snapshot_observed_at":"2026-08-13T04:19:36.304840Z","submitted_at":"2024-02-13T18:58:48Z","title":"COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08679","snapshot_observed_at":"2026-08-05T18:12:37.189913Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.189913Z"},"links":{"cited_paper":"/paper/2402.08679","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:6a0c0a4eb49b26cc5618cf1fcbcda464822f0f80e317d34bd99e7b994d787d33","observation_id":"7b74580c-e5aa-4de2-af2b-41a82de52755","resolution":{"observed_at":"2026-08-05T18:12:37.189913Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.18580","last_updated":"2024-03-27T13:59:21Z","snapshot_observed_at":"2026-08-13T00:43:50.227974Z","submitted_at":"2024-03-27T13:59:21Z","title":"MisGUIDE : Defense Against Data-Free Deep Learning Model Extraction","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.18580","snapshot_observed_at":"2026-08-05T18:12:37.195222Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.195222Z"},"links":{"cited_paper":"/paper/2403.18580","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:4b31fa32988d303c2ac4320817d717081386dce8750514282698a7d4581e1ad1","observation_id":"6452564b-c7ae-4ad2-a37a-f1689e9f694d","resolution":{"observed_at":"2026-08-05T18:12:37.195222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2005.02131","last_updated":"2020-10-05T20:38:16Z","snapshot_observed_at":"2026-08-11T02:22:03.911690Z","submitted_at":"2020-05-05T13:22:35Z","title":"Stealing Links from Graph Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.02131","snapshot_observed_at":"2026-08-05T18:12:37.199740Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.199740Z"},"links":{"cited_paper":"/paper/2005.02131","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:a18877c878dbf396cde3c54ee4bb782f30cd78edd72ffbffdcdb8d721eaffb8b","observation_id":"d17577bc-c5ee-44d3-bf25-8763ee1fc247","resolution":{"observed_at":"2026-08-05T18:12:37.199740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2103.10013","last_updated":"2021-03-18T04:23:21Z","snapshot_observed_at":"2026-08-13T19:55:57.915621Z","submitted_at":"2021-03-18T04:23:21Z","title":"Model Extraction and Adversarial Transferability, Your BERT is Vulnerable!","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.10013","snapshot_observed_at":"2026-08-05T18:12:37.204611Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.204611Z"},"links":{"cited_paper":"/paper/2103.10013","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:c8a6940318e9fae5dd0ba962c731281a71c4d409ca2181dd1a7c6aff984b086c","observation_id":"b970befe-0938-4878-859a-40a246ebf522","resolution":{"observed_at":"2026-08-05T18:12:37.204611Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.210704Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.210704Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:06eb086a59545d63a75f771b4c587201121204df7704e881ec70e9a09a3ca7ce","observation_id":"ac4c5893-dc7a-4d16-b28e-e69ff3e886de","resolution":{"observed_at":"2026-08-05T18:12:37.210704Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.214904Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.214904Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:eaaf46c1c2e1c99eddc6cc2ba9e3f1a70f807169d15d1e2eb704cab87812874e","observation_id":"0ff959b0-e489-4643-b7e1-4c4edfb8c00c","resolution":{"observed_at":"2026-08-05T18:12:37.214904Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.219305Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.219305Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:741f6c7251a159615f781490fea844d6ac3e405e3e070879261f504ed7e5be24","observation_id":"e006d5fc-3a96-451f-8a3d-053286af8d2e","resolution":{"observed_at":"2026-08-05T18:12:37.219305Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1810.03487","last_updated":"2020-01-31T17:12:52Z","snapshot_observed_at":"2026-08-13T07:56:36.428348Z","submitted_at":"2018-10-08T14:21:46Z","title":"Security Analysis of Deep Neural Networks Operating in the Presence of Cache Side-Channel Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.03487","snapshot_observed_at":"2026-08-05T18:12:37.223579Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.223579Z"},"links":{"cited_paper":"/paper/1810.03487","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:f35d7eb7b5b6a28c4190d19b6c8ae30eaadb2f2b501123f79bf5d7ced9945d6e","observation_id":"93fd23d1-ce0b-480a-bae5-7ca1736046fd","resolution":{"observed_at":"2026-08-05T18:12:37.223579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.228570Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.228570Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:3d0305d8b8358c385ac119cafadf939f73c2b015d127e19a25f5240f9d4c15d4","observation_id":"6080181f-602b-48a6-b3a4-2955786926e9","resolution":{"observed_at":"2026-08-05T18:12:37.228570Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.233309Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.233309Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:04fa66c296ecd3c40b0abdcf2f971d9e81e3d90d62c3e442764ac56dd0b430c6","observation_id":"593c5cb5-286a-4cd1-b2ca-90f0311668a1","resolution":{"observed_at":"2026-08-05T18:12:37.233309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1903.03916","last_updated":"2019-03-10T03:58:18Z","snapshot_observed_at":"2026-07-06T07:38:12.821583Z","submitted_at":"2019-03-10T03:58:18Z","title":"Neural Network Model Extraction Attacks in Edge Devices by Hearing Architectural Hints","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1903.03916","snapshot_observed_at":"2026-08-05T18:12:37.238083Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.238083Z"},"links":{"cited_paper":"/paper/1903.03916","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:09aef21b6e44c641be90ac18b528fa6d5e88b058058ace9aff4631c32f8c8fd8","observation_id":"d1335607-e543-42a5-b9c5-d9b8b2479e14","resolution":{"observed_at":"2026-08-05T18:12:37.238083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.242584Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.242584Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:eff4d809e6cf35ee5b63104993d094eb15e37e15282bd2a09c4c8333b3827e35","observation_id":"4bb8d722-dead-4baf-ba81-51657a485c3e","resolution":{"observed_at":"2026-08-05T18:12:37.242584Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.248770Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.248770Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:df8f019888898948735ddc3148b9cf39919a9ea1fae0595658ed863deab18c89","observation_id":"3c3530eb-0c9d-451b-9a5c-98dbfc2fbe7d","resolution":{"observed_at":"2026-08-05T18:12:37.248770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.12628","last_updated":"2022-10-20T05:30:43Z","snapshot_observed_at":"2026-08-13T15:37:25.265059Z","submitted_at":"2022-05-25T10:08:45Z","title":"Are Large Pre-Trained Language Models Leaking Your Personal Information?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.12628","snapshot_observed_at":"2026-08-05T18:12:37.254278Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.254278Z"},"links":{"cited_paper":"/paper/2205.12628","citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:53a4be2273e478aaf0f2c2b3e6803545db960bc5fdb830180b66ba3e688fbbf9","observation_id":"41f08405-c62b-45f0-bb97-b514d2d45a72","resolution":{"observed_at":"2026-08-05T18:12:37.254278Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.258746Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.258746Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:7322ed6d038c71106552cc64a75a558c9885d2bf9083f736b9b7cc4c51cee5e5","observation_id":"5784aa9c-022e-424e-9dc3-1194acf56e5c","resolution":{"observed_at":"2026-08-05T18:12:37.258746Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.263142Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.263142Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:04c4622529a1dea0f69a3b5641f792b0a683b74f2647cf204cd1bf4bc42b78f4","observation_id":"6a989445-44cc-49a0-b628-54f23167286b","resolution":{"observed_at":"2026-08-05T18:12:37.263142Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.267316Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.267316Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:da27bedbda86267bcdd9cf5a1d24d45b8f3910d2f459250789407899690cde2c","observation_id":"7701e3a2-011c-48b1-8544-1f0aba4916c0","resolution":{"observed_at":"2026-08-05T18:12:37.267316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.272100Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.272100Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:6af5500590c53535e8359e55c8faf67211f886b054a7f1660e564029b54d86a0","observation_id":"f02db8a9-8edf-4882-94b0-4de917d0bde9","resolution":{"observed_at":"2026-08-05T18:12:37.272100Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.276313Z","title":"Choquette-Choo, Varun Chandrasekaran, and Nicolas Papernot","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.276313Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:415123d20a88c8678bd4be49d093a6004e8f0914934fa1c68dadb3621d03816b","observation_id":"236e0fd5-d7ab-4fc3-b0ec-2176da0aae3a","resolution":{"observed_at":"2026-08-05T18:12:37.276313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.280732Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.280732Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:3e2825f160b52397c4b9d3510e10355b20e2dd89520cea21cc72b20f6ecaf6fc","observation_id":"cadfdba2-9423-4459-8ddd-1d74530e8751","resolution":{"observed_at":"2026-08-05T18:12:37.280732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.285114Z","title":null,"venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.285114Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:9a42ea20ca2fb5e72dadd2c6a2f01ae4d608f4260700f0ef4602dc0e2fc60441","observation_id":"b9d08420-4d57-4f2e-ba9b-18aa533763d6","resolution":{"observed_at":"2026-08-05T18:12:37.285114Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.289866Z","title":"Yu, and Ming Zhang","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.289866Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:9675cf5d6b83932d198c4858669e67ceb2ddf8de0621a8b713d1048b789eafe7","observation_id":"0f24af56-af07-4d3f-b004-91006a60eb81","resolution":{"observed_at":"2026-08-05T18:12:37.289866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.294534Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.294534Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:b70e0f840b5b9f2df6759c22559fc79b8842509b62510d56d30fd5d5ad8572f7","observation_id":"198c6111-4ac7-4c45-8d56-04f40cae7fa3","resolution":{"observed_at":"2026-08-05T18:12:37.294534Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.299511Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.299511Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:523f3cb7dbf35037c941d94d1a1167730be4c30983b2ea5bbd57774e05b6baa4","observation_id":"b9ac43d8-623f-4e3e-b9a7-56440b950e6a","resolution":{"observed_at":"2026-08-05T18:12:37.299511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.303708Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.303708Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:b3bc358e27df9109b8b547adb3ee46b899082988ef0ba822b6d1a033768e79ce","observation_id":"f3d23fe2-9e13-4236-a9e1-bb89d86160d2","resolution":{"observed_at":"2026-08-05T18:12:37.303708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.308208Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.308208Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:0240371be54dc5967f30ecec3ca2f3379faaf89d3ff75cdb5e7e8c3e0f20b571","observation_id":"6b569508-57f2-435f-8117-1ebd0dfa8d0b","resolution":{"observed_at":"2026-08-05T18:12:37.308208Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.314049Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.314049Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:386339640bee909c70057e0ad17e5ebdea1bd6f33ac80607f920da0e05ac6bc8","observation_id":"8d9918fa-0294-4290-a228-ff369f983530","resolution":{"observed_at":"2026-08-05T18:12:37.314049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T18:12:37.318253Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives","version":2},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-05T18:12:37.318253Z"},"links":{"citing_paper":"/paper/2508.15031"},"observation_digest":"sha256:005a4ea4feaf20287811a6b3b004486b93303d5da98fd855374f68ca5f28fc86","observation_id":"734b4ab8-7198-43a1-912d-707fbea25069","resolution":{"observed_at":"2026-08-05T18:12:37.318253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2508.15031","last_updated":"2025-08-27T05:10:26Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T21:46:22.191563Z","submitted_at":"2025-08-20T19:49:59Z","title":"A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":2,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":97,"verified_exact":1,"verified_fuzzy":0},"total_outbound_references":280},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 100 of 280 outbound references and 4 inbound Pith citation observations for arXiv:2508.15031."}