{"as_of":"2026-08-14T09:23:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6a14b83c701a744f6215ad65102dc5bdd993c336caea26b987f5300e92707a47","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":10,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":10,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":10,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":10,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T19:06:41.181700Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T13:58:21.626266Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2104.02361","last_updated":"2021-04-24T16:40:13Z","snapshot_observed_at":"2026-08-12T14:30:59.708306Z","submitted_at":"2021-04-06T08:37:33Z","title":"Backdoor Attack in the Physical World","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.02361","snapshot_observed_at":"2026-08-12T19:06:41.181700Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.11006","last_updated":"2025-03-06T07:50:21Z","snapshot_observed_at":"2026-08-12T18:59:26.497693Z","submitted_at":"2024-11-17T09:01:55Z","title":"BackdoorMBTI: A Backdoor Learning Multimodal Benchmark Tool Kit for Backdoor Defense Evaluation","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-12T19:06:41.181700Z"},"links":{"cited_paper":"/paper/2104.02361","citing_paper":"/paper/2411.11006"},"observation_digest":"sha256:c566f55b3629dda199ec1ae33a6d29a60b866183366c4e8705b4c1c5a1574018","observation_id":"4cfb49bb-f0db-4eb9-98ee-b6b980764916","resolution":{"observed_at":"2026-08-12T19:06:41.181700Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.02361","last_updated":"2021-04-24T16:40:13Z","snapshot_observed_at":"2026-08-12T14:30:59.708306Z","submitted_at":"2021-04-06T08:37:33Z","title":"Backdoor Attack in the Physical World","version":2},"cited_work":{"arxiv_id":"2104.02361","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2104.02361","snapshot_observed_at":"2026-07-03T13:58:21.626266Z","title":"Backdoor Attack in the Physical World, April 2021","venue":null,"work_id":"98c7df4f-81ad-4ba8-8f55-9c5dec61a501","year":2021},"citing_paper":{"arxiv_id":"2411.12220","last_updated":"2026-05-07T15:22:56Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-11-19T04:12:14Z","title":"DeTrigger: A Gradient-Centric Approach to Backdoor Attack Mitigation in Federated Learning","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-23T17:57:17.355234Z"},"links":{"cited_paper":"/paper/2104.02361","citing_paper":"/paper/2411.12220"},"observation_digest":"sha256:e6ef285e24489488a0ee82f352db1ceb6cfd38d99e1f553f989ac86339c77ce0","observation_id":"e5e6aaf2-ea97-4d4b-994d-fd0f7df67630","resolution":{"observed_at":"2026-05-23T17:58:17.119171Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.02361","last_updated":"2021-04-24T16:40:13Z","snapshot_observed_at":"2026-08-12T14:30:59.708306Z","submitted_at":"2021-04-06T08:37:33Z","title":"Backdoor Attack in the Physical World","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.02361","snapshot_observed_at":"2026-08-11T21:56:13.888107Z","title":"CoRR abs/2104.02361 (2021)","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.03993","last_updated":"2024-12-05T09:14:50Z","snapshot_observed_at":"2026-08-12T21:02:51.256901Z","submitted_at":"2024-12-05T09:14:50Z","title":"LaserGuider: A Laser Based Physical Backdoor Attack against Deep Neural Networks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-11T21:56:13.888107Z"},"links":{"cited_paper":"/paper/2104.02361","citing_paper":"/paper/2412.03993"},"observation_digest":"sha256:42b1786686e23cb3b81a8927f5b736de95235b32e96e04893bdf55871abc8572","observation_id":"a8b6865a-95be-4757-893b-146751cb1b12","resolution":{"observed_at":"2026-08-11T21:56:13.888107Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.02361","last_updated":"2021-04-24T16:40:13Z","snapshot_observed_at":"2026-08-12T14:30:59.708306Z","submitted_at":"2021-04-06T08:37:33Z","title":"Backdoor Attack in the Physical World","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.02361","snapshot_observed_at":"2026-08-10T23:40:18.898803Z","title":", author Zhai, T","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-11T03:06:36.056379Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":75,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:18.898803Z"},"links":{"cited_paper":"/paper/2104.02361","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:1b5f74d558bf2fa7369f5d202a651c2800a5a3d1d7463dd0a59213e8bff4aa3f","observation_id":"67d21510-4af1-4e4d-b148-2da5ae8f0890","resolution":{"observed_at":"2026-08-10T23:40:18.898803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.02361","last_updated":"2021-04-24T16:40:13Z","snapshot_observed_at":"2026-08-12T14:30:59.708306Z","submitted_at":"2021-04-06T08:37:33Z","title":"Backdoor Attack in the Physical World","version":2},"cited_work":{"arxiv_id":"2104.02361","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2104.02361","snapshot_observed_at":"2026-07-03T13:58:21.626266Z","title":"Backdoor Attack in the Physical World, April 2021","venue":null,"work_id":"98c7df4f-81ad-4ba8-8f55-9c5dec61a501","year":2021},"citing_paper":{"arxiv_id":"2504.05902","last_updated":"2026-04-13T15:36:03Z","snapshot_observed_at":"2026-07-06T21:06:03.653624Z","submitted_at":"2025-04-08T11:01:07Z","title":"Defending against Backdoor Attacks via Module Switching","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-22T20:28:24.169272Z"},"links":{"cited_paper":"/paper/2104.02361","citing_paper":"/paper/2504.05902"},"observation_digest":"sha256:5439a8726cb40e93c38568ccfe4833ffe6ad6af8ecce99331432bf56d3c05e31","observation_id":"8affdedf-92fb-4942-b30e-9f44531c194c","resolution":{"observed_at":"2026-05-22T20:32:04.726566Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.02361","last_updated":"2021-04-24T16:40:13Z","snapshot_observed_at":"2026-08-12T14:30:59.708306Z","submitted_at":"2021-04-06T08:37:33Z","title":"Backdoor Attack in the Physical World","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.02361","snapshot_observed_at":"2026-08-07T15:09:35.446689Z","title":"Backdoor attack in the physical world","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.16154","last_updated":"2025-05-22T02:53:51Z","snapshot_observed_at":"2026-08-10T09:48:16.237505Z","submitted_at":"2025-05-22T02:53:51Z","title":"BadDepth: Backdoor Attacks Against Monocular Depth Estimation in the Physical World","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:35.446689Z"},"links":{"cited_paper":"/paper/2104.02361","citing_paper":"/paper/2505.16154"},"observation_digest":"sha256:e1d84ce3772066c6d78153465b0af460b2febc966a2c4b76b83837f3a36ab554","observation_id":"b6cfb63a-de6c-467a-ab46-5fe460d7c763","resolution":{"observed_at":"2026-08-07T15:09:35.446689Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.02361","last_updated":"2021-04-24T16:40:13Z","snapshot_observed_at":"2026-08-12T14:30:59.708306Z","submitted_at":"2021-04-06T08:37:33Z","title":"Backdoor Attack in the Physical World","version":2},"cited_work":{"arxiv_id":"2104.02361","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2104.02361","snapshot_observed_at":"2026-07-03T13:58:21.626266Z","title":"Backdoor Attack in the Physical World, April 2021","venue":null,"work_id":"98c7df4f-81ad-4ba8-8f55-9c5dec61a501","year":2021},"citing_paper":{"arxiv_id":"2605.22481","last_updated":"2026-05-21T13:39:06Z","snapshot_observed_at":"2026-08-03T19:57:30.474823Z","submitted_at":"2026-05-21T13:39:06Z","title":"When Stronger Triggers Backfire: A High-Dimensional Theory of Backdoor Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-22T06:44:49.744451Z"},"links":{"cited_paper":"/paper/2104.02361","citing_paper":"/paper/2605.22481"},"observation_digest":"sha256:663079dffd677ab53d83a3814e19fdc7ba31aed98b48b2605ab08dcb9539d8fe","observation_id":"4325a2b3-cf2e-4c87-bbed-fde592d09016","resolution":{"observed_at":"2026-05-22T06:46:10.891845Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.02361","last_updated":"2021-04-24T16:40:13Z","snapshot_observed_at":"2026-08-12T14:30:59.708306Z","submitted_at":"2021-04-06T08:37:33Z","title":"Backdoor Attack in the Physical World","version":2},"cited_work":{"arxiv_id":"2104.02361","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2104.02361","snapshot_observed_at":"2026-07-03T13:58:21.626266Z","title":"Backdoor Attack in the Physical World, April 2021","venue":null,"work_id":"98c7df4f-81ad-4ba8-8f55-9c5dec61a501","year":2021},"citing_paper":{"arxiv_id":"2606.12896","last_updated":"2026-06-20T06:38:45Z","snapshot_observed_at":"2026-08-08T06:59:30.111406Z","submitted_at":"2026-06-11T04:54:28Z","title":"PolicyGuard: Towards Test-time and Step-level Adversary (Backdoor) Defense for Reinforcement Learning Agent","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-06-27T07:24:38.668110Z"},"links":{"cited_paper":"/paper/2104.02361","citing_paper":"/paper/2606.12896"},"observation_digest":"sha256:13aa1c0aa6e49b8ebf8a3606bcf6243c4db092cd9be50b9084f147fc9fe2261b","observation_id":"f48f942b-289c-4c4f-a63b-536349959760","resolution":{"observed_at":"2026-07-03T13:58:21.627641Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.02361","last_updated":"2021-04-24T16:40:13Z","snapshot_observed_at":"2026-08-12T14:30:59.708306Z","submitted_at":"2021-04-06T08:37:33Z","title":"Backdoor Attack in the Physical World","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.02361","snapshot_observed_at":"2026-08-01T02:49:21.167008Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.26099","last_updated":"2026-07-28T06:23:48Z","snapshot_observed_at":"2026-08-13T05:15:42.512284Z","submitted_at":"2026-07-28T06:23:48Z","title":"Lilith: Backdoor Generalization under Training-Inference Trigger Shift","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-01T02:49:21.167008Z"},"links":{"cited_paper":"/paper/2104.02361","citing_paper":"/paper/2607.26099"},"observation_digest":"sha256:60398b9bae361562d964d7592b9bd3f2b4655a773fb0b2f658af02d59e623e57","observation_id":"86a52afc-f427-450d-9e89-9fe0ab384bee","resolution":{"observed_at":"2026-08-01T02:49:21.167008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.02361","last_updated":"2021-04-24T16:40:13Z","snapshot_observed_at":"2026-08-12T14:30:59.708306Z","submitted_at":"2021-04-06T08:37:33Z","title":"Backdoor Attack in the Physical World","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.02361","snapshot_observed_at":"2026-08-12T13:30:42.604091Z","title":"arXiv preprint arXiv:2104.02361 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.10959","last_updated":"2026-08-11T14:25:29Z","snapshot_observed_at":"2026-08-14T09:12:06.355533Z","submitted_at":"2026-08-11T14:25:29Z","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-12T13:30:42.604091Z"},"links":{"cited_paper":"/paper/2104.02361","citing_paper":"/paper/2608.10959"},"observation_digest":"sha256:b5adce62d2405f045cbcb7386f3a189529559d5793dc9bab703326f686e246af","observation_id":"58705ef3-142e-4935-b6b2-c7f85d873995","resolution":{"observed_at":"2026-08-12T13:30:42.604091Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2104.02361/citation-record","integrity":"/paper/2104.02361/integrity","json":"/paper/2104.02361/citation-record.json","paper":"/paper/2104.02361"},"outbound":[],"paper":{"arxiv_id":"2104.02361","last_updated":"2021-04-24T16:40:13Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-12T14:30:59.708306Z","submitted_at":"2021-04-06T08:37:33Z","title":"Backdoor Attack in the Physical World"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 10 inbound Pith citation observations for arXiv:2104.02361."}