{"as_of":"2026-08-14T19:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fca8b25a3860c0d82712184a531e0b8e0008f60ef49c14d63ba922cbc7abb3f9","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":41,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":41,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":41,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":41,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T19:06:41.237951Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-10T11:37:03.439699Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-12T19:06:41.237951Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.11006","last_updated":"2025-03-06T07:50:21Z","snapshot_observed_at":"2026-08-14T15:29:51.321016Z","submitted_at":"2024-11-17T09:01:55Z","title":"BackdoorMBTI: A Backdoor Learning Multimodal Benchmark Tool Kit for Backdoor Defense Evaluation","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-12T19:06:41.237951Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2411.11006"},"observation_digest":"sha256:4c7ae8655864736944854606f1798193c67af796012dfacb5bc27b211583d49e","observation_id":"219889ab-1be7-4dc7-a037-d17bbeee0a1d","resolution":{"observed_at":"2026-08-12T19:06:41.237951Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-12T18:52:55.019285Z","title":"Wanet–imperceptible warping-based backdoor attack,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.11200","last_updated":"2025-01-07T00:23:43Z","snapshot_observed_at":"2026-08-14T16:58:55.694814Z","submitted_at":"2024-11-17T23:30:01Z","title":"Countering Backdoor Attacks in Image Recognition: A Survey and Evaluation of Mitigation Strategies","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T18:52:55.019285Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2411.11200"},"observation_digest":"sha256:5713c034fc93238471e30552af8b716903e2126dca723618edb7b2e4de4598a4","observation_id":"f9780147-733a-4891-a7d7-ba8e6fe389dc","resolution":{"observed_at":"2026-08-12T18:52:55.019285Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-12T15:26:45.656550Z","title":"Wanet–imperceptible warping- based backdoor attack","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.14243","last_updated":"2025-03-14T04:12:52Z","snapshot_observed_at":"2026-08-14T10:11:49.547043Z","submitted_at":"2024-11-21T15:50:59Z","title":"AnywhereDoor: Multi-Target Backdoor Attacks on Object Detection","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T15:26:45.656550Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2411.14243"},"observation_digest":"sha256:a1bfd628d0bdde2d1be50458314e77a5eca729cfde5c7c9473d51262eabf36ae","observation_id":"b4557e2d-7ca2-4c2d-99f8-55a4dfc96374","resolution":{"observed_at":"2026-08-12T15:26:45.656550Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-12T12:21:32.150745Z","title":"Wanet–imperceptible warping-based backdoor attack","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.17283","last_updated":"2024-11-26T10:13:09Z","snapshot_observed_at":"2026-08-12T12:14:57.783786Z","submitted_at":"2024-11-26T10:13:09Z","title":"BadScan: An Architectural Backdoor Attack on Visual State Space Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T12:21:32.150745Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2411.17283"},"observation_digest":"sha256:45868bd9d66c7fccbe585fc07d6ced1a4c40a9d57fa698dc8d975753137d90a7","observation_id":"04c9d3d3-d944-4c6a-87fc-83880ec6af9e","resolution":{"observed_at":"2026-08-12T12:21:32.150745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-12T04:29:20.081305Z","title":"Wanet–imperceptible warping- based backdoor attack","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.01369","last_updated":"2024-12-02T10:54:02Z","snapshot_observed_at":"2026-08-14T02:55:31.637759Z","submitted_at":"2024-12-02T10:54:02Z","title":"Behavior Backdoor for Deep Learning Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-12T04:29:20.081305Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2412.01369"},"observation_digest":"sha256:b4babf53dc1db0386696e012d35fb541852579de9a6b8f9646e78e9d82fffe41","observation_id":"44d31f79-a481-4ddd-8ea6-2a5058a6e737","resolution":{"observed_at":"2026-08-12T04:29:20.081305Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-11T21:07:43.298571Z","title":"Wanet–imperceptible warping-based backdoor attack","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.05010","last_updated":"2024-12-06T13:03:22Z","snapshot_observed_at":"2026-08-12T22:32:10.851871Z","submitted_at":"2024-12-06T13:03:22Z","title":"Backdooring Outlier Detection Methods: A Novel Attack Approach","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-11T21:07:43.298571Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2412.05010"},"observation_digest":"sha256:38b01c26a032cb6c3418a43a5c52c3176749495503510ba0472ad988b0fe11b4","observation_id":"fe37421d-e679-4c7f-b98c-c9f1a55ad730","resolution":{"observed_at":"2026-08-11T21:07:43.298571Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-11T20:03:56.782562Z","title":"Wanet–imperceptible warping-based backdoor attack","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.06149","last_updated":"2024-12-09T02:03:27Z","snapshot_observed_at":"2026-08-13T02:29:11.220229Z","submitted_at":"2024-12-09T02:03:27Z","title":"An Effective and Resilient Backdoor Attack Framework against Deep Neural Networks and Vision Transformers","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-11T20:03:56.782562Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2412.06149"},"observation_digest":"sha256:88c5619d7d957003c1e69e8be67404bc004084fa3fbaa1b69de3f48675e3221f","observation_id":"3ec75a3b-7a50-4daf-b783-02fd98752e2d","resolution":{"observed_at":"2026-08-11T20:03:56.782562Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-11T20:00:28.716498Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-13T01:40:09.317598Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.716498Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:3e8f1765f89eab2d5177d9b693241b4c7bbb06d002be944df3a08f9e0deb70f9","observation_id":"4d1026c0-b1ed-4246-bff7-794685e6452f","resolution":{"observed_at":"2026-08-11T20:00:28.716498Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-11T13:19:06.595339Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.13324","last_updated":"2024-12-17T20:52:56Z","snapshot_observed_at":"2026-08-11T13:12:24.637855Z","submitted_at":"2024-12-17T20:52:56Z","title":"BadSAD: Clean-Label Backdoor Attacks against Deep Semi-Supervised Anomaly Detection","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-11T13:19:06.595339Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2412.13324"},"observation_digest":"sha256:31b81dccf10075cdad107b93bb12bf621b0887f32263782563be96d9e9d73a50","observation_id":"86c378c2-7837-40bc-b752-ee8864d65c8f","resolution":{"observed_at":"2026-08-11T13:19:06.595339Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-09T16:26:44.275644Z","title":"Wanet–imperceptible warping-based backdoor attack,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.01152","last_updated":"2025-02-03T08:42:46Z","snapshot_observed_at":"2026-08-14T07:19:18.459193Z","submitted_at":"2025-02-03T08:42:46Z","title":"Gradient Norm-based Fine-Tuning for Backdoor Defense in Automatic Speech Recognition","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-09T16:26:44.275644Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2502.01152"},"observation_digest":"sha256:1cdee1b70707b52ffbd99062e22fe3a0b6d5b50c0cae0db21afa8a8d1096a523","observation_id":"90c62155-0a4a-4b71-80f1-8deedc3d2151","resolution":{"observed_at":"2026-08-09T16:26:44.275644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-07T19:18:21.952290Z","title":"Wanet–imperceptible warping-based backdoor attack,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-14T17:06:00.631347Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.952290Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:4418a5f8975025a4098100cab3de1a1bdeeabcc4849d3870ee00e003c043683b","observation_id":"c553e06f-76c0-42c9-87a2-eab7192e23e8","resolution":{"observed_at":"2026-08-07T19:18:21.952290Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2504.05902","last_updated":"2026-04-13T15:36:03Z","snapshot_observed_at":"2026-07-06T21:06:03.653624Z","submitted_at":"2025-04-08T11:01:07Z","title":"Defending against Backdoor Attacks via Module Switching","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-22T20:28:24.169272Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2504.05902"},"observation_digest":"sha256:f4550bc8e9aedf05a6ee989b38b52b2d88fbd0c1dbdbe21f430779acd6d14ca0","observation_id":"911be492-257c-4412-b3c2-f25bc3ad7416","resolution":{"observed_at":"2026-05-22T20:32:04.766277Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-07T15:25:21.783100Z","title":"Wanet–imperceptible warping-based backdoor attack,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.15308","last_updated":"2025-05-21T09:36:35Z","snapshot_observed_at":"2026-08-14T10:10:54.301700Z","submitted_at":"2025-05-21T09:36:35Z","title":"BadSR: Stealthy Label Backdoor Attacks on Image Super-Resolution","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T15:25:21.783100Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2505.15308"},"observation_digest":"sha256:07d3da42384f0fe124175014bb4ba32e24c0642cae8309a259358c40cc33e93c","observation_id":"cfc99dbc-1372-45e8-a735-c28e9f5dbe06","resolution":{"observed_at":"2026-08-07T15:25:21.783100Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-07T15:09:35.884528Z","title":"Wanet–imperceptible warping-based backdoor attack","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.16154","last_updated":"2025-05-22T02:53:51Z","snapshot_observed_at":"2026-08-10T09:48:16.237505Z","submitted_at":"2025-05-22T02:53:51Z","title":"BadDepth: Backdoor Attacks Against Monocular Depth Estimation in the Physical World","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:35.884528Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2505.16154"},"observation_digest":"sha256:751e9716595024802c05b6aa09a973c601914be9341fb6b12862a25cd549165f","observation_id":"771de721-ad2f-4ca3-a00a-eea9d1c96a77","resolution":{"observed_at":"2026-08-07T15:09:35.884528Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-07T14:11:58.006307Z","title":"Wanet–imperceptible warping-based backdoor attack,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.19821","last_updated":"2025-05-26T10:59:44Z","snapshot_observed_at":"2026-08-09T20:06:08.546560Z","submitted_at":"2025-05-26T10:59:44Z","title":"Poison in the Well: Feature Embedding Disruption in Backdoor Attacks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T14:11:58.006307Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2505.19821"},"observation_digest":"sha256:abda78d4ce472a8caacad5dc9af3172a510c94a89fd1ba68f92a7c5f34f9bbe4","observation_id":"36132e57-dfe7-450a-abeb-55c7d7304222","resolution":{"observed_at":"2026-08-07T14:11:58.006307Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-07T00:58:07.999413Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.12411","last_updated":"2025-06-14T09:08:34Z","snapshot_observed_at":"2026-08-14T16:47:54.548772Z","submitted_at":"2025-06-14T09:08:34Z","title":"InverTune: Removing Backdoors from Multimodal Contrastive Learning Models via Trigger Inversion and Activation Tuning","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T00:58:07.999413Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2506.12411"},"observation_digest":"sha256:ed847d2218d04291780956de40ded26cfe00182966ed1d09d533c54de17fbe30","observation_id":"899abf93-9f16-4da4-8fb5-565f8ae250f9","resolution":{"observed_at":"2026-08-07T00:58:07.999413Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-07T00:41:18.032579Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-12T20:45:05.686165Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.032579Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:8bca05141b623848de6dcd98abc5524d792efaedd57232b1db38c31eb37f2be2","observation_id":"469bd970-a01a-49fe-9887-88f135acdc93","resolution":{"observed_at":"2026-08-07T00:41:18.032579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-06T22:06:40.498394Z","title":"Wanet–imperceptible warping-based backdoor attack,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:40.498394Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:cbaffdd7a54f4dd8ffa96dcaefd6153794dc017aad0169d3275a67bd1ed93b83","observation_id":"4561f514-ddbb-486f-9fa9-4282b8b0e3b7","resolution":{"observed_at":"2026-08-06T22:06:40.498394Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-05T23:24:03.567013Z","title":"Nguyen and A","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.05404","last_updated":"2025-08-07T13:56:54Z","snapshot_observed_at":"2026-08-10T20:21:57.579860Z","submitted_at":"2025-08-07T13:56:54Z","title":"NT-ML: Backdoor Defense via Non-target Label Training and Mutual Learning","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-05T23:24:03.567013Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2508.05404"},"observation_digest":"sha256:b01fa1fe6edb3a81f32e87f6b06883db13b28f3e84c3d31f9d1ab0cabb5b665c","observation_id":"24a6079f-2e71-4ad3-90e9-d978aa87763e","resolution":{"observed_at":"2026-08-05T23:24:03.567013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-05T23:24:48.956467Z","title":"Nguyen and A","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.05409","last_updated":"2025-08-07T14:02:34Z","snapshot_observed_at":"2026-08-14T08:57:17.663350Z","submitted_at":"2025-08-07T14:02:34Z","title":"From Detection to Correction: Backdoor-Resilient Face Recognition via Vision-Language Trigger Detection and Noise-Based Neutralization","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-05T23:24:48.956467Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2508.05409"},"observation_digest":"sha256:03b10dee441185e8928f31c17b7744b8b48d339e02bfe763639112f60c661a7c","observation_id":"45c0ffda-8fa1-45a8-8960-cd27a9cf049d","resolution":{"observed_at":"2026-08-05T23:24:48.956467Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-03T22:09:45.486790Z","title":"Wanet–imperceptible warping-based back- door attack,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2511.12046","last_updated":"2026-05-25T13:34:20Z","snapshot_observed_at":"2026-08-09T11:12:06.235686Z","submitted_at":"2025-11-15T05:53:15Z","title":"BackWeak: Backdooring Knowledge Distillation Simply with Weak Triggers and Fine-tuning","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-03T22:09:45.486790Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2511.12046"},"observation_digest":"sha256:53873754e5f6fac0e5fff5adbe6658cd561eadcfe5f8cb441054373d590a03b8","observation_id":"981386b9-dd7e-4f68-945b-dadd8f4409e5","resolution":{"observed_at":"2026-08-03T22:09:45.486790Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2601.15474","last_updated":"2026-04-08T16:01:56Z","snapshot_observed_at":"2026-07-06T22:42:36.961014Z","submitted_at":"2026-01-21T21:23:51Z","title":"BadImplant: Injection-based Multi-Targeted Graph Backdoor Attack","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-16T12:00:57.663884Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2601.15474"},"observation_digest":"sha256:0e6b9d8bc026a412374e1a2d993c2807529560350de5a91d711b32e586017fee","observation_id":"8ec4ba30-1a9b-4b75-9c3d-d416b33162f2","resolution":{"observed_at":"2026-05-16T12:02:51.293072Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2601.21692","last_updated":"2026-05-22T01:46:45Z","snapshot_observed_at":"2026-08-02T10:02:20.704165Z","submitted_at":"2026-01-29T13:26:29Z","title":"TCAP: Tri-Component Attention Profiling for Unsupervised Backdoor Detection in MLLM Fine-Tuning","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-25T07:33:15.865358Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2601.21692"},"observation_digest":"sha256:b8f0db81e91d8fd592edaf2b9bae755750e70161a21cc2df275e1438415bdc21","observation_id":"6a0e88db-603e-4ac5-a514-108eb9a4bae4","resolution":{"observed_at":"2026-05-25T07:35:28.732603Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2602.07200","last_updated":"2026-04-30T22:02:47Z","snapshot_observed_at":"2026-08-02T05:45:43.617157Z","submitted_at":"2026-02-06T21:20:41Z","title":"BadSNN: Backdoor Attacks on Spiking Neural Networks via Adversarial Spiking Neuron","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-16T06:31:04.036790Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2602.07200"},"observation_digest":"sha256:105c8b0ea82106a05199c9598ab19a1a625175d417bf45a4848277cb27e232ea","observation_id":"d95cc84e-eded-45c4-a51a-54a0a42990e5","resolution":{"observed_at":"2026-05-16T06:32:27.401913Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2604.04488","last_updated":"2026-04-06T07:27:04Z","snapshot_observed_at":"2026-08-05T13:21:08.142791Z","submitted_at":"2026-04-06T07:27:04Z","title":"A Patch-based Cross-view Regularized Framework for Backdoor Defense in Multimodal Large Language Models","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-10T20:14:02.553313Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2604.04488"},"observation_digest":"sha256:ed29ad0236407603c5db347501a586bc836f2479bfe38533948034f2c814b0c6","observation_id":"05f2fa40-bcde-439f-8a10-4920cd164397","resolution":{"observed_at":"2026-05-10T22:05:49.217777Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2604.05809","last_updated":"2026-08-13T00:06:16Z","snapshot_observed_at":"2026-08-14T18:27:07.017620Z","submitted_at":"2026-04-07T12:46:23Z","title":"Adjustable Text-Guided Backdoor Attacks with Natural-Word Triggers on Multimodal Pretrained Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-10T20:01:57.909924Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2604.05809"},"observation_digest":"sha256:270906a15725bfbcf57e8ef34a646dc5218a6d894ed83d25f35381cdf0263c37","observation_id":"ae009962-dd47-4019-a5a3-ee047888f491","resolution":{"observed_at":"2026-05-10T22:15:51.428971Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2604.08395","last_updated":"2026-04-09T15:55:33Z","snapshot_observed_at":"2026-07-06T22:57:31.046146Z","submitted_at":"2026-04-09T15:55:33Z","title":"Phantasia: Context-Adaptive Backdoors in Vision Language Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-10T17:46:01.742050Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2604.08395"},"observation_digest":"sha256:3fceec91549813e8d7c33707c88f92a4a31288f2bcc3d964d3c3e8c75dfa6d6e","observation_id":"4261fad8-b953-4ef7-896f-bc4185d37870","resolution":{"observed_at":"2026-05-11T06:11:01.158269Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2604.09101","last_updated":"2026-04-10T08:33:56Z","snapshot_observed_at":"2026-08-02T05:05:49.291065Z","submitted_at":"2026-04-10T08:33:56Z","title":"CLIP-Inspector: Model-Level Backdoor Detection for Prompt-Tuned CLIP via OOD Trigger Inversion","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-10T17:50:55.088475Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2604.09101"},"observation_digest":"sha256:ae561170f81dc8efd30d66462192d644b4e5113d4083efb71fc0942e06e96c17","observation_id":"66d47180-3024-4abc-86bc-c220c61b5eb5","resolution":{"observed_at":"2026-05-11T06:00:58.808306Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2604.24350","last_updated":"2026-04-27T11:44:42Z","snapshot_observed_at":"2026-08-12T18:43:12.974026Z","submitted_at":"2026-04-27T11:44:42Z","title":"Unveiling the Backdoor Mechanism Hidden Behind Catastrophic Overfitting in Fast Adversarial Training","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-05-08T04:29:11.570861Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2604.24350"},"observation_digest":"sha256:5af5a82919c1397b5dbbdc984f95385db8596722ac1ea1a9b20baa5c8e27972d","observation_id":"df007c37-3955-4cfa-ab89-bb5d5617b034","resolution":{"observed_at":"2026-05-11T21:46:33.687260Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2605.02202","last_updated":"2026-05-04T04:02:23Z","snapshot_observed_at":"2026-07-06T23:15:18.048504Z","submitted_at":"2026-05-04T04:02:23Z","title":"CBV: Clean-label Backdoor Attacks on Vision Language Models via Diffusion Models","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-05-08T19:27:56.444465Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2605.02202"},"observation_digest":"sha256:e4e0adeb5508344c5a6d9960f9eb2d9882d0b2c23e4d38ba9b1989eaa824b28a","observation_id":"f44aee49-a66b-46bf-8c9a-7d6a9857a5e1","resolution":{"observed_at":"2026-05-09T05:50:28.275816Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2605.04209","last_updated":"2026-07-03T13:26:00Z","snapshot_observed_at":"2026-07-12T17:35:51.837508Z","submitted_at":"2026-05-05T18:48:09Z","title":"Undetectable Backdoors in Model Parameters: Hiding Sparse Secrets in High Dimensions","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-08T17:50:49.951655Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2605.04209"},"observation_digest":"sha256:949d14ed2902ba7790ca5e7481565e9f3c8a3867b59aa291c677b32c553be89b","observation_id":"1559e44c-866a-4929-80ba-31cd9019bb9e","resolution":{"observed_at":"2026-05-11T17:11:12.435284Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-12T17:35:56.649298Z","title":"Wanet--imperceptible warping-based backdoor attack","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2605.04209","last_updated":"2026-07-03T13:26:00Z","snapshot_observed_at":"2026-07-12T17:35:51.837508Z","submitted_at":"2026-05-05T18:48:09Z","title":"Undetectable Backdoors in Model Parameters: Hiding Sparse Secrets in High Dimensions","version":2},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-07-12T17:35:56.649298Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2605.04209"},"observation_digest":"sha256:9550324be71110e7df6e027afa2e47c3bc7be1d8ae71bc15814482cfc2ce926a","observation_id":"ad219c17-6e1e-4747-bb15-7158384d2a62","resolution":{"observed_at":"2026-07-12T17:35:56.649298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2605.19478","last_updated":"2026-05-19T07:29:34Z","snapshot_observed_at":"2026-08-14T15:10:41.686575Z","submitted_at":"2026-05-19T07:29:34Z","title":"Exposing Functional Fusion: A New Class of Strategic Backdoor in Dynamic Prompt Architectures","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-20T04:45:53.016157Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2605.19478"},"observation_digest":"sha256:5451f7d206b02a18664078b2211dc1414407b59e0c41a0174b1c600be075186f","observation_id":"e0c4cba7-2a1f-4e65-82e2-ca53d6faab06","resolution":{"observed_at":"2026-05-20T04:53:05.150084Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2605.20641","last_updated":"2026-05-20T02:55:56Z","snapshot_observed_at":"2026-08-14T14:35:04.135894Z","submitted_at":"2026-05-20T02:55:56Z","title":"Trusted Weights, Treacherous Optimizations? Optimization-Triggered Backdoor Attacks on LLMs","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-21T04:45:35.079192Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2605.20641"},"observation_digest":"sha256:53e961de3fcdf7053996bfb61c24b1f787d1b78c983d8c5b9537781ee5a3bf3b","observation_id":"a80c6ee4-ca3a-4538-be85-f3dd1093ce02","resolution":{"observed_at":"2026-05-21T04:49:35.683827Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2605.22481","last_updated":"2026-05-21T13:39:06Z","snapshot_observed_at":"2026-08-03T19:57:30.474823Z","submitted_at":"2026-05-21T13:39:06Z","title":"When Stronger Triggers Backfire: A High-Dimensional Theory of Backdoor Attacks","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-22T06:44:49.744451Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2605.22481"},"observation_digest":"sha256:146f190d625999bdef1daf964bd7bb8ceff1af04d719cad30e37de4650d626e2","observation_id":"fbdd0112-0660-4f8b-bc12-e7d3f9712d3e","resolution":{"observed_at":"2026-05-22T06:46:10.973822Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2605.23411","last_updated":"2026-05-22T09:18:22Z","snapshot_observed_at":"2026-07-06T23:33:39.204744Z","submitted_at":"2026-05-22T09:18:22Z","title":"Sample-wise Targeted Adversarial Attacks on Test-time Adaptation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-25T05:00:04.150887Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2605.23411"},"observation_digest":"sha256:d3e8cddc0678f8de0dae4dc9e7fbcce90d6a16d10ad140f1e6c561709939aa46","observation_id":"4d73f5e9-1477-454e-94da-84124a9f16d2","resolution":{"observed_at":"2026-05-25T05:00:21.004691Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2605.27809","last_updated":"2026-05-28T17:28:34Z","snapshot_observed_at":"2026-08-03T05:40:01.499964Z","submitted_at":"2026-05-27T01:02:49Z","title":"Density-aware Sample-specific Attack","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-29T13:43:07.407298Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2605.27809"},"observation_digest":"sha256:df831bcf906eea3e00df5fd4046d04f74884817ceea04444534ed35415da0843","observation_id":"e8cf986b-4d0c-4ddd-99c8-e2cf4e44e9df","resolution":{"observed_at":"2026-06-29T13:43:28.411242Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2606.25858","last_updated":"2026-06-24T14:07:10Z","snapshot_observed_at":"2026-08-08T05:19:19.072573Z","submitted_at":"2026-06-24T14:07:10Z","title":"Color Matters: Trigger Color Affects Success in Federated Backdoor Attacks","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-06-25T20:12:50.848080Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2606.25858"},"observation_digest":"sha256:69d0f693f9d577fdcb97367fd908744d0a105c608a776f9663a0a67024814848","observation_id":"ae68caa4-b3f9-418a-b4ee-c43e44d2395a","resolution":{"observed_at":"2026-07-04T20:20:07.874367Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":"2102.10369","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-07-10T11:37:03.439699Z","title":"and Tran, A","venue":"cs.CR","work_id":"a7e7980f-186a-4085-8bde-79947be314e6","year":2021},"citing_paper":{"arxiv_id":"2607.08197","last_updated":"2026-07-09T07:54:42Z","snapshot_observed_at":"2026-08-08T22:52:06.334242Z","submitted_at":"2026-07-09T07:54:42Z","title":"MLQENABLER: Enabling Secure Machine Learning Queries over Encrypted Database in Cloud Computing","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-10T11:29:45.184868Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2607.08197"},"observation_digest":"sha256:9619723c4f5d318db293c11d4d25d2b6f74de0ca30703491695e35f58bdf3ed1","observation_id":"e17eae10-00d0-4358-ac99-ca15f55a5170","resolution":{"observed_at":"2026-07-10T11:37:03.441209Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-01T03:06:37.040332Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.25227","last_updated":"2026-07-28T02:59:32Z","snapshot_observed_at":"2026-08-08T03:03:31.701653Z","submitted_at":"2026-07-28T02:59:32Z","title":"Decision-Level Hijacking: Injecting Cognitive Bias into Large Language Models via Bit-Flip Attacks","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-01T03:06:37.040332Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2607.25227"},"observation_digest":"sha256:c9cb124bc861c771ce4fba90058c8216d839f7385c8c2be34cfaae688215eeaa","observation_id":"8fff5ee5-26fd-4215-928e-14db87586245","resolution":{"observed_at":"2026-08-01T03:06:37.040332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-05T00:29:23.744761Z","title":"WaNet–Imperceptible Warping-based Backdoor Attack","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.00732","last_updated":"2026-08-01T16:07:25Z","snapshot_observed_at":"2026-08-13T11:54:39.008241Z","submitted_at":"2026-08-01T16:07:25Z","title":"Mitigating Backdoors via Decoy Shortcuts and Knowledge Decoupling","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T00:29:23.744761Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2608.00732"},"observation_digest":"sha256:a6c91da4682eca18a749106737d5cce6ca9b0b847b91f2511d86a45ffd074eda","observation_id":"2afdb35c-ae7e-4d7a-b1ee-ced916026e7e","resolution":{"observed_at":"2026-08-05T00:29:23.744761Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2102.10369/citation-record","integrity":"/paper/2102.10369/integrity","json":"/paper/2102.10369/citation-record.json","paper":"/paper/2102.10369"},"outbound":[],"paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","latest_version":4,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-13T20:11:42.125880Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 41 inbound Pith citation observations for arXiv:2102.10369."}