SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark | Paper Citation Record

Observation 3c79436b-bfe3-4b9f-b3f5-136e4fbe6fcd · outbound

This paper cites Deep Learning with Differential Privacy.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Deep Learning with Differential Privacy

Reference 4

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.810910Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 979e2b53-c79c-4d93-a315-fd6ead3a9482 · outbound

This paper cites Mancini, Angelo Spog- nardi, Antonio Villani, Domenico Vitali, and Giovanni Felici.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Mancini, Angelo Spog- nardi, Antonio Villani, Domenico Vitali, and Giovanni Felici

Reference 5

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.798868Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 1cc5f7d2-d856-40c5-95cb-0ce5f85dd2b1 · outbound

This paper cites Re- constructing Training Data with Informed Adversaries.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Re- constructing Training Data with Informed Adversaries

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.786542Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 4dc7bd38-7150-4d4b-ac41-5d335c0b1f2f · outbound

This paper cites Semi-supervised Learning with Constraints for Person Identification in Multimedia Data.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Semi-supervised Learning with Constraints for Person Identification in Multimedia Data

Reference 7

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.774277Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 3b1d8bcf-c05e-4c5d-863d-a2b15e3b1671 · outbound

This paper cites an unresolved cited work.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Unresolved cited work

Reference 8

Resolution: unresolved; raw_fallback, observed 2026-08-07T05:29:47.762153Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 3e6bad9b-8772-425e-9d84-4c9f1cb1b76d · outbound

This paper cites Membership Inference Attacks From First Principles.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Membership Inference Attacks From First Principles

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-07T05:29:43.445314Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7c73456d-aa9e-441e-af35-ac3d16a45460 · outbound

This paper cites The Privacy Onion Effect: Memorization is Relative.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark The Privacy Onion Effect: Memorization is Relative

Reference 10

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.727927Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation df33a80b-3e8f-400b-b470-ae210a0e866c · outbound

This paper cites Brown, Dawn Song, Úl- far Erlingsson, Alina Oprea, and Colin Raffel.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Brown, Dawn Song, Úl- far Erlingsson, Alina Oprea, and Colin Raffel

Reference 11

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.715793Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 62bf33e6-f478-4102-b102-3ea611748f02 · outbound

This paper cites Big Data Analysis for Financial Risk Management.Journal of Big Data,.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Big Data Analysis for Financial Risk Management.Journal of Big Data,

Reference 12

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.703323Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation fbff1e25-b06e-409e-8f28-705d0a3bed8b · outbound

This paper cites an unresolved cited work.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Unresolved cited work

Reference 13

Resolution: unresolved; raw_fallback, observed 2026-08-07T05:29:47.691269Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation e1aab644-f1b9-41d7-835c-2b2dde976575 · outbound

This paper cites Knowledge-Enriched Distributional Model Inversion Attacks.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Knowledge-Enriched Distributional Model Inversion Attacks

Reference 14

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.678773Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 8c8c5c48-f978-4b0f-9218-2ad8a532c273 · outbound

This paper cites Choquette Choo, Florian Tramèr, Nicholas Carlini, and Nicolas Papernot.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Choquette Choo, Florian Tramèr, Nicholas Carlini, and Nicolas Papernot

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-07T05:29:43.981950Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2afd35c2-ddba-49fa-859f-9bbbdc5f2bab · outbound

This paper cites Deep Learning for Classical Japanese Literature.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Deep Learning for Classical Japanese Literature

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-07T05:29:44.024512Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ba12333f-1af2-4d92-a058-6740f314123c · outbound

This paper cites On the Privacy Risk of In-context Learning.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark On the Privacy Risk of In-context Learning

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.657891Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation c309c963-3e4a-4496-b5ec-6664a12abbb9 · outbound

This paper cites Now Publishers Inc., 2014.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Now Publishers Inc., 2014

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.645855Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation a45e222c-d563-4b50-9f8a-abe6e20c5a3e · outbound

This paper cites Does Learning Require Memoriza- tion? A Short Tale about a Long Tail.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Does Learning Require Memoriza- tion? A Short Tale about a Long Tail

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.633205Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 7297b00b-5742-4082-b07e-1d8eaf9a7410 · outbound

This paper cites Model Inversion Attacks that Exploit Confidence Infor- mation and Basic Countermeasures.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Model Inversion Attacks that Exploit Confidence Infor- mation and Basic Countermeasures

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.620983Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation e5e6ccf1-4180-454e-bd9f-9584288aed24 · outbound

This paper cites Gunter, and Nikita Borisov.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Gunter, and Nikita Borisov

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.609383Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 5da7b13c-166f-4546-9068-c900a28c3cdc · outbound

This paper cites Generative Adversar- ial Nets.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Generative Adversar- ial Nets

Reference 22

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.597030Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 0a5b657c-6f76-41ec-9db4-e3629f525499 · outbound

This paper cites Reconstructing Training Data from Trained Neural Networks.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Reconstructing Training Data from Trained Neural Networks

Reference 23

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.584680Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 04b4ed3f-87f3-4e2f-9691-54f2582e33d6 · outbound

This paper cites Learning both Weights and Connections for Efficient Neural Networks.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Learning both Weights and Connections for Efficient Neural Networks

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-07T05:29:44.495660Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 66ed6ca7-6ca8-47c6-91cd-1a7691174d0b · outbound

This paper cites Girshick.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Girshick

Reference 25

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.572624Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 8098df40-4af7-4735-9f7a-2b9eb45c7839 · outbound

This paper cites Deep Residual Learning for Image Recognition.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Deep Residual Learning for Image Recognition

Reference 26

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.560679Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 86394da0-62b0-4764-a1eb-8f105416169a · outbound

This paper cites Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-07T05:29:44.731810Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cfc79789-f4bb-4b94-9f66-d40cd7bba558 · outbound

This paper cites Node-Level Membership Inference Attacks Against Graph Neural Networks.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Node-Level Membership Inference Attacks Against Graph Neural Networks

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-07T05:29:44.818943Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 70d0569b-b6bc-458e-b561-ce27845438ad · outbound

This paper cites an unresolved cited work.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Unresolved cited work

Reference 29

Resolution: unresolved; raw_fallback, observed 2026-08-07T05:29:47.548837Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation dc898baa-bf41-4eb0-95b9-8bb1849b379e · outbound

This paper cites A Style- Based Generator Architecture for Generative Adversar- ial Networks.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark A Style- Based Generator Architecture for Generative Adversar- ial Networks

Reference 30

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.536034Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation b0c87287-cfbd-4c45-b4d5-a84831dea12f · outbound

This paper cites Kingma and Prafulla Dhariwal.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Kingma and Prafulla Dhariwal

Reference 31

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.522087Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 61db44ef-2aa6-43de-8630-17f099337abf · outbound

This paper cites Application of Machine Learning in Disease Prediction.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Application of Machine Learning in Disease Prediction

Reference 32

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.509260Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 8f9892e0-316a-4d96-ba17-59c6662f5f7c · outbound

This paper cites SeqMIA: Sequential-Metric Based Membership Inference Attack.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark SeqMIA: Sequential-Metric Based Membership Inference Attack

Reference 33

Resolution: verified exact; local_arxiv, observed 2026-08-07T05:29:46.927187Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 3603e8f9-a366-4fe2-8a50-1838cec781a5 · outbound

This paper cites Membership Inference Attack Against Masked Image Modeling.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Membership Inference Attack Against Masked Image Modeling

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-07T05:29:45.214592Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 55645e1a-2149-4397-a608-075aff3141f5 · outbound

This paper cites Auditing Membership Leak- ages of Multi-Exit Networks.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Auditing Membership Leak- ages of Multi-Exit Networks

Reference 35

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.496464Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation d67a73e6-9135-4c25-baae-0771a6893e02 · outbound

This paper cites Membership Leakage in Label-Only Exposures.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Membership Leakage in Label-Only Exposures

Reference 36

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.483615Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 0d0472b8-3962-4aa4-9857-2dba432ec828 · outbound

This paper cites PreCurious: How Innocent Pre-Trained Language Models Turn into Privacy Traps.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark PreCurious: How Innocent Pre-Trained Language Models Turn into Privacy Traps

Reference 37

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.470727Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 53b706b4-24ab-4c93-85b8-1fa830ad8941 · outbound

This paper cites Membership Inference Attacks by Exploit- ing Loss Trajectory.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Membership Inference Attacks by Exploit- ing Loss Trajectory

Reference 38

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.457921Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 5e131a78-157b-4ac3-81c6-bcf6a48d5295 · outbound

This paper cites ML-Doctor: Holis- tic Risk Assessment of Inference Attacks Against Ma- chine Learning Models.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark ML-Doctor: Holis- tic Risk Assessment of Inference Attacks Against Ma- chine Learning Models

Reference 39

Resolution: unresolved; no resolver link, observed 2026-08-07T05:29:45.770032Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bf3ae38b-b45b-4e2a-9ce5-4403b7f9939d · outbound

This paper cites Swin Transformer: Hierarchical Vision Transformer using Shifted Windows.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Swin Transformer: Hierarchical Vision Transformer using Shifted Windows

Reference 40

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.436068Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 70daacd1-7b29-43bf-81ba-bfdc17a030a5 · outbound

This paper cites Deep Learning Face Attributes in the Wild.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Deep Learning Face Attributes in the Wild

Reference 41

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.423351Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation e770d152-aa32-4d7a-98f3-9ebb0afdd254 · outbound

This paper cites Maas, Raymond E.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Maas, Raymond E

Reference 42

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.412031Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation d6ce811a-30f4-425f-a9c9-7af4031225af · outbound

This paper cites Property Inference from Poisoning.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Property Inference from Poisoning

Reference 43

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.400482Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 23223836-6284-4cca-b6ee-6600cecb0d94 · outbound

This paper cites Exploiting Unintended Feature Leakage in Collaborative Learning.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Exploiting Unintended Feature Leakage in Collaborative Learning

Reference 44

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.388976Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 7afe6df3-a4c6-4852-834d-438951a44a48 · outbound

This paper cites Morris, V olodymyr Kuleshov, Vitaly Shmatikov, and Alexander M.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Morris, V olodymyr Kuleshov, Vitaly Shmatikov, and Alexander M

Reference 45

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.377218Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 921a4570-3186-4813-a22e-2740c45b43c5 · outbound

This paper cites Scalable Private Learning with PATE.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Scalable Private Learning with PATE

Reference 46

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.365298Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 41af8f64-63ab-4247-bfa2-8345d60b3a96 · outbound

This paper cites Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learn- ing.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learn- ing

Reference 47

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.353278Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation e232197a-22bd-49bb-851e-275644cdf797 · outbound

This paper cites SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning

Reference 48

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.341259Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation b3f8fc92-35c5-446b-bd8a-60b686533299 · outbound

This paper cites ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models

Reference 49

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.329714Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation a7aa1a3e-0ad3-42b7-9936-dd4ef72f0729 · outbound

This paper cites Howard, Menglong Zhu, Andrey Zhmoginov, and Liang-Chieh Chen.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Howard, Menglong Zhu, Andrey Zhmoginov, and Liang-Chieh Chen

Reference 50

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.318256Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 3ee1ca2a-ae2d-4d70-8bf4-17b1c4eec126 · outbound

This paper cites Towards Data-Free Model Stealing in a Hard Label Setting.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Towards Data-Free Model Stealing in a Hard Label Setting

Reference 51

Resolution: verified exact; local_arxiv, observed 2026-08-07T05:29:46.890451Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 01287b36-e695-4b16-b695-badbe07f7426 · outbound

This paper cites Membership Inference Attacks Against Machine Learning Models.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Membership Inference Attacks Against Machine Learning Models

Reference 52

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.306654Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation e331c2e8-57a7-45c5-80bc-55989561abe6 · outbound

This paper cites Very Deep Convolutional Networks for Large-Scale Image Recog- nition.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Very Deep Convolutional Networks for Large-Scale Image Recog- nition

Reference 53

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.295421Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation eecad57e-a8ea-4db4-98f4-d158ab5f4c62 · outbound

This paper cites Manning, Andrew Y.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Manning, Andrew Y

Reference 54

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.283967Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 04c74847-bb22-4422-b5a1-aca6a0e75962 · outbound

This paper cites Machine Learning Models that Remember Too Much.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Machine Learning Models that Remember Too Much

Reference 55

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.271863Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 8d74a6f5-ff48-424b-90a2-7ad01275eccd · outbound

This paper cites Overlearning Reveals Sensitive Attributes.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Overlearning Reveals Sensitive Attributes

Reference 56

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.259059Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 5dcee604-d53f-4e71-a232-8adedeb07123 · outbound

This paper cites Mint- Net: Building Invertible Neural Networks with Masked Convolutions.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Mint- Net: Building Invertible Neural Networks with Masked Convolutions

Reference 57

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.246658Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 200bc917-d6ff-41cc-a044-9db89972df41 · outbound

This paper cites Plug & Play Attacks: Towards Robust and Flexible Model Inversion Attacks.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Plug & Play Attacks: Towards Robust and Flexible Model Inversion Attacks

Reference 58

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.234267Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation b8618376-17eb-4222-b60c-303d2c84d7a2 · outbound

This paper cites Formalizing and Estimating Distribution Inference Risks.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Formalizing and Estimating Distribution Inference Risks

Reference 59

Resolution: unresolved; no resolver link, observed 2026-08-07T05:29:46.725458Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9d776156-fa83-4592-b844-d5e31beba898 · outbound

This paper cites Deep Learning and the Information Bottleneck Principle.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Deep Learning and the Information Bottleneck Principle

Reference 60

Resolution: unresolved; no resolver link, observed 2026-08-07T05:29:46.729143Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b26fc7a5-7e21-4e32-80bc-b705faa369db · outbound

This paper cites Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets

Reference 61

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.221695Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 86a6777e-858d-4b85-932b-3955b025b613 · outbound

This paper cites Re- iter, and Thomas Ristenpart.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Re- iter, and Thomas Ristenpart

Reference 62

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.208245Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 1812357a-5033-40e4-803f-5293c53c0aee · outbound

This paper cites Walls, and Nicolas Papernot.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Walls, and Nicolas Papernot

Reference 63

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.196289Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 2e3971f6-752e-4b89-ac16-d89a712ca552 · outbound

This paper cites Zemel, and Alireza Makhzani.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Zemel, and Alireza Makhzani

Reference 64

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.183681Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 84a905ee-3efd-4060-b5b0-accf80d0a30c · outbound

This paper cites Improv- ing Robustness to Model Inversion Attacks via Mu- tual Information Regularization.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Improv- ing Robustness to Model Inversion Attacks via Mu- tual Information Regularization

Reference 65

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.169990Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation cf42b706-c7d9-43b6-aa54-30989e38fdd3 · outbound

This paper cites Under- standing Data Importance in Machine Learning At- tacks: Does Valuable Data Pose Greater Harm? In Network and Distributed System Security Symposium (NDSS).

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Under- standing Data Importance in Machine Learning At- tacks: Does Valuable Data Pose Greater Harm? In Network and Distributed System Security Symposium (NDSS)

Reference 66

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.156303Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 1b8367a0-0724-479e-9857-b5d993c9afb9 · outbound

This paper cites Membership Inference Attacks Against In- Context Learning.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Membership Inference Attacks Against In- Context Learning

Reference 67

Resolution: unresolved; no resolver link, observed 2026-08-07T05:29:46.755279Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b2271098-c096-4742-9713-6fa884c4ee71 · outbound

This paper cites Last One Standing: A Comparative Analysis of Security and Privacy of Soft Prompt Tuning, LoRA, and In-Context Learning.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Last One Standing: A Comparative Analysis of Security and Privacy of Soft Prompt Tuning, LoRA, and In-Context Learning

Reference 68

Resolution: unresolved; no resolver link, observed 2026-08-07T05:29:46.758808Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3b897dbd-0891-42eb-a582-5e661c9f9223 · outbound

This paper cites Privacy Backdoors: Enhancing Membership Inference through Poisoning Pre-trained Models.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Privacy Backdoors: Enhancing Membership Inference through Poisoning Pre-trained Models

Reference 69

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.134420Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 76ebdf57-8c20-499f-8f0c-3fc6ca7a886d · outbound

This paper cites Quanti- fying Privacy Risks of Prompts in Visual Prompt Learn- ing.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Quanti- fying Privacy Risks of Prompts in Visual Prompt Learn- ing

Reference 70

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.122293Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 06da72cb-1473-4fdf-8dce-26573c49f758 · outbound

This paper cites Neural Network Inversion in Adversarial Set- ting via Background Knowledge Alignment.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Neural Network Inversion in Adversarial Set- ting via Background Knowledge Alignment

Reference 71

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.109996Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 0034e933-a0eb-4d7b-bfd5-07a5280319af · outbound

This paper cites an unresolved cited work.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Unresolved cited work

Reference 72

Resolution: unresolved; raw_fallback, observed 2026-08-07T05:29:47.097247Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation e7a822cf-fea4-4c83-b527-84be70096143 · outbound

This paper cites Alvarez, Zhizhong Li, Arun Mallya, Derek Hoiem, Niraj K.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Alvarez, Zhizhong Li, Arun Mallya, Derek Hoiem, Niraj K

Reference 73

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.083775Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation c0aa3b18-fb79-438d-9b91-4c4016cc8bcd · outbound

This paper cites Pseudo Label- Guided Model Inversion Attack via Conditional Gen- erative Adversarial Network.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Pseudo Label- Guided Model Inversion Attack via Conditional Gen- erative Adversarial Network

Reference 74

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.070350Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation bdb1ffe0-16c0-47c4-923a-2777cbd2aaa3 · outbound

This paper cites SecretGen: Privacy Recovery on Pre-trained Models via Distribution Discrimination.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark SecretGen: Privacy Recovery on Pre-trained Models via Distribution Discrimination

Reference 75

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.057613Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation e6987b72-9a73-4e1b-80e8-f7b54247851d · outbound

This paper cites Generated Distributions Are All You Need for Membership Inference Attacks Against Gen- erative Models.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Generated Distributions Are All You Need for Membership Inference Attacks Against Gen- erative Models

Reference 76

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.032702Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 8ea49ffa-0422-40a3-b058-2dac4879afcb · outbound

This paper cites Character-level Convolutional Networks for Text Clas- sification.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Character-level Convolutional Networks for Text Clas- sification

Reference 77

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.020560Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation ae7453a6-9c27-4528-9966-044b0a60d8cb · outbound

This paper cites The Secret Re- vealer: Generative Model-Inversion Attacks Against Deep Neural Networks.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark The Secret Re- vealer: Generative Model-Inversion Attacks Against Deep Neural Networks

Reference 78

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:29:47.008326Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation cb9e4ac7-2997-455a-b1f1-23ea1adb44eb · outbound

This paper cites poi- soned.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark poi- soned

Reference 79

Resolution: malformed identifier; raw_fallback, observed 2026-08-07T05:29:46.995957Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation fd56362b-8a85-46f0-859a-f0c915da2517 · outbound

This paper cites an unresolved cited work.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark Unresolved cited work

Reference 155

Resolution: parse uncertain; raw_fallback, observed 2026-08-07T05:29:47.044935Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 94c2f764-8d88-4858-955d-1b0d7565b534 · outbound

This paper cites 2, 3, 22.

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark 2, 3, 22

Reference 1914

Resolution: parse uncertain; raw_fallback, observed 2026-08-07T05:29:47.741139Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Coverage vector

Reference resolution

Outbound references

Pith citing papers