{"as_of":"2026-08-18T03:49:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8260eda936b74b3717228e235907a2e706f672d7d050f7d7f1678f2f3e3c7dfe","coverage":[{"denominator":93,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":93,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T17:35:42.293715Z","state":"measured"},{"denominator":93,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":93,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2411.12508/citation-record","integrity":"/paper/2411.12508/integrity","json":"/paper/2411.12508/citation-record.json","paper":"/paper/2411.12508"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-17T09:58:46.058102Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-12T17:35:41.894797Z","title":"Gpt-4 technical report,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.894797Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:4ec74a8eed3984db88c76033dcea041b39afc54470b059e3f1be926c4530dcc9","observation_id":"1b0b88a6-85d9-41a3-b17a-764121951107","resolution":{"observed_at":"2026-08-12T17:35:41.894797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2008.05966","last_updated":"2024-02-18T18:32:50Z","snapshot_observed_at":"2026-08-08T14:53:16.868082Z","submitted_at":"2020-08-13T15:22:49Z","title":"Deep-Lock: Secure Authorization for Deep Neural Networks","version":2},"cited_work":{"arxiv_id":"2008.05966","doi":null,"metadata_source":"pith","pith_arxiv_id":"2008.05966","snapshot_observed_at":"2026-08-12T17:35:42.583903Z","title":"Deep-Lock: Secure Authorization for Deep Neural Networks","venue":"cs.LG","work_id":"8779a74d-f7a9-424a-9017-422bb3ce2093","year":2020},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.900001Z"},"links":{"cited_paper":"/paper/2008.05966","citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:5a3ea214b50434fe74d7474d8caa8b72b7eca5f0dbc42fbe547f03f77c4b23d7","observation_id":"ef826498-a395-4c16-bf6b-3b4f1ca5e41a","resolution":{"observed_at":"2026-08-12T17:35:42.590128Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2203.17274","last_updated":"2022-06-03T17:52:04Z","snapshot_observed_at":"2026-08-16T17:10:09.647539Z","submitted_at":"2022-03-31T17:59:30Z","title":"Exploring Visual Prompts for Adapting Large-Scale Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.17274","snapshot_observed_at":"2026-08-12T17:35:41.905313Z","title":"Exploring visual prompts for adapting large-scale models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.905313Z"},"links":{"cited_paper":"/paper/2203.17274","citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:7a3dfc499676d23a94ecf5ecee6becde3d6c2ebdbf08176094bd5205bfaf28fc","observation_id":"8a0df5ab-e561-4cd1-9d06-35d6dc928d38","resolution":{"observed_at":"2026-08-12T17:35:41.905313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:41.909730Z","title":"Probing classifiers: Promises, shortcomings, and advances,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.909730Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:5b8eaf13e4ee40aded768c7e076fc7f226e6891ba64cbe5ecc9deb450d719765","observation_id":"30fe1fb3-7f44-4812-9e31-db7736f82ea6","resolution":{"observed_at":"2026-08-12T17:35:41.909730Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:41.913523Z","title":"Representation learning: A review and new perspec- tives,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.913523Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:54cf459db17aacd5cce0fac437b1e9c57296ee05c720d38f1bca507e197eeaa5","observation_id":"3723ab20-1f61-4f41-bfaa-678e6fbd2664","resolution":{"observed_at":"2026-08-12T17:35:41.913523Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:41.917558Z","title":"Military vehicles dataset,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.917558Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:b76f7de49ba51751c71580c2fca4142c33be21983285287cf1b67272c23fcac4","observation_id":"6cfe25cf-5f30-49c8-99ec-33c0190848cc","resolution":{"observed_at":"2026-08-12T17:35:41.917558Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:41.922044Z","title":"Putting representations to use,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.922044Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:b01be8386d6812e4877d7a0219abd961eb61e33af4ce897e6205fad323c1793a","observation_id":"e779c107-bb0d-42c6-baed-e14f69ef7daa","resolution":{"observed_at":"2026-08-12T17:35:41.922044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:41.925923Z","title":"Emerging properties in self-supervised vision trans- formers,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.925923Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:18d2238d4d9d44c048faecb91a8f090b2a796377eb05f0194cee0e009015c564","observation_id":"037167b9-aa22-401b-9ebe-57d14c735aca","resolution":{"observed_at":"2026-08-12T17:35:41.925923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:41.929912Z","title":"Hardware-assisted intellectual property protection of deep learning models,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.929912Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:6d8ee021856d11ed8331d6b1d255a5924dedda00696f2c1815d64dc08e697b4e","observation_id":"67a7c7e6-3574-46d6-97a1-07738aed6082","resolution":{"observed_at":"2026-08-12T17:35:41.929912Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:41.933607Z","title":"Confronting the risks of artificial intelligence,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.933607Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:ae7a0957139ef8af39fe12cde7700de4597d5684d506bfc50f67fa3be3846402","observation_id":"b0ccf5de-642f-4e4b-9c9d-2d745888f5c9","resolution":{"observed_at":"2026-08-12T17:35:41.933607Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:41.937589Z","title":"A simple framework for contrastive learning of visual representations,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.937589Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:ff2cb2f99ef2d06bbf7e25bf53a4759e246b1b80fa5bc991d2463384302cff9f","observation_id":"40138d19-f415-441b-b7f7-f533b6c011f5","resolution":{"observed_at":"2026-08-12T17:35:41.937589Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:41.941532Z","title":"Catastrophic forgetting meets negative transfer: Batch spectral shrinkage for safe transfer learning,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.941532Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:37a6ffc3455ced3574c5c5a54bb57617e5300d05d0c5b80a16a642e79bd81056","observation_id":"de51bf7a-06a1-46f8-9483-9f321d584fe6","resolution":{"observed_at":"2026-08-12T17:35:41.941532Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1902.10547","last_updated":"2019-05-31T12:53:15Z","snapshot_observed_at":"2026-08-14T17:10:20.854747Z","submitted_at":"2019-02-27T14:17:12Z","title":"An Embarrassingly Simple Approach for Transfer Learning from Pretrained Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1902.10547","snapshot_observed_at":"2026-08-12T17:35:41.945289Z","title":"An embarrassingly simple approach for transfer learning from pretrained language models,","venue":null,"work_id":null,"year":1902},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.945289Z"},"links":{"cited_paper":"/paper/1902.10547","citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:ccb6e88f06ac514eac14e1b7b2833335e8f7b94dbc4d3e5ba2d7e786fc64dd2f","observation_id":"464fd281-e5a2-4aa7-a814-1bfc9fa87c13","resolution":{"observed_at":"2026-08-12T17:35:41.945289Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:41.949702Z","title":"general-image-embedding3,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.949702Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:b138573ac94e9029e1b39f282ce7d78e6f23f24c418e2407f248f43362c83c85","observation_id":"a9ace80d-aedc-47ae-818b-8ff58c87b23e","resolution":{"observed_at":"2026-08-12T17:35:41.949702Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:41.953872Z","title":"An analysis of single-layer networks in unsupervised feature learning,","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.953872Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:1df608a9ef655a7dab2ce4f614e6f26a39245099bd43d57503c01ccaef943c14","observation_id":"201c3e66-5988-407d-98fd-9278e3f12a38","resolution":{"observed_at":"2026-08-12T17:35:41.953872Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:41.958210Z","title":"Emnist: Extending mnist to handwritten letters,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.958210Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:d86355ae8ba66d40f7436cf50c2c9c5549a81eba7d100dae43866bebadf48230","observation_id":"fba5c511-a9ce-47dd-836d-08fe772cc2a7","resolution":{"observed_at":"2026-08-12T17:35:41.958210Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1911.03584","last_updated":"2020-01-10T09:06:09Z","snapshot_observed_at":"2026-08-15T05:21:16.745798Z","submitted_at":"2019-11-08T23:48:38Z","title":"On the Relationship between Self-Attention and Convolutional Layers","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1911.03584","snapshot_observed_at":"2026-08-12T17:35:41.962175Z","title":"On the relationship between self-attention and convolutional layers,","venue":null,"work_id":null,"year":1911},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.962175Z"},"links":{"cited_paper":"/paper/1911.03584","citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:5933e6593457f7ace7ee0f180ce342a7fae6e4c38141e4e91b768f2c8c47e725","observation_id":"fab1d02a-02c6-431d-9552-5e2028a0b9d9","resolution":{"observed_at":"2026-08-12T17:35:41.962175Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:41.966965Z","title":"Supervised learning,","venue":null,"work_id":null,"year":2008},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.966965Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:80b0ef5cfb2c8d3d9fe00478d3d563c5ab810f19956c77659e157ca7b500e95f","observation_id":"ddbb787e-a291-49bd-b76b-313e245143ce","resolution":{"observed_at":"2026-08-12T17:35:41.966965Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.470551Z","title":"Imagenet: A large-scale hierarchical image database,","venue":null,"work_id":"e71e05aa-94cd-4c92-a428-f6ca22f4eddb","year":2009},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.971401Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:febbc7dbb154f6cf58e33af0b91db3598122f9a138070a9e2684815730d1c9e0","observation_id":"cf0d6b29-2189-4d67-96e4-ba599cf4360a","resolution":{"observed_at":"2026-08-12T17:35:43.475075Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.457644Z","title":"Non-transferable pruning,","venue":null,"work_id":"49fd9d40-aae2-466a-97c3-8cb2564c65d9","year":2025},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.975639Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:d82d94a840e09d6b2e6eabeb51d9df2f1a1f883d83b8d65d5d704a0ee84792d1","observation_id":"c8f3f405-f656-44f2-8959-28dfae50d105","resolution":{"observed_at":"2026-08-12T17:35:43.462375Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:41.979593Z","title":"Puma: Secure inference of llama-7b in five minutes,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.979593Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:55c6ef5f77b6908d11e66660998e569fd1bd19df8f9aed9dee0bd31a1e0eac83","observation_id":"bc391998-6678-4fcd-8092-64fc5d6917c9","resolution":{"observed_at":"2026-08-12T17:35:41.979593Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1803.03635","last_updated":"2019-03-04T15:51:11Z","snapshot_observed_at":"2026-08-14T19:37:43.556604Z","submitted_at":"2018-03-09T18:51:28Z","title":"The Lottery Ticket Hypothesis: Finding Sparse, Trainable Neural Networks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1803.03635","snapshot_observed_at":"2026-08-12T17:35:41.983988Z","title":"The lottery ticket hypothesis: Finding sparse, trainable neural networks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.983988Z"},"links":{"cited_paper":"/paper/1803.03635","citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:6bd1405322965e2cf41bdd0463e04b484b6b3f924e20277898d95d8661b05630","observation_id":"a64992aa-daa1-41c7-91a4-b37f3a1aaf7e","resolution":{"observed_at":"2026-08-12T17:35:41.983988Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.444794Z","title":"Decorate the newcomers: Visual domain prompt for continual test time adaptation,","venue":null,"work_id":"486fae7a-6d09-41f0-adbc-f67784037ad6","year":2023},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.988359Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:5cdfce67a75dcb6ffdb4d1131b32d27587e22a602a8ee24d66164785b7064363","observation_id":"84352060-755e-43eb-af4c-0733432fe52c","resolution":{"observed_at":"2026-08-12T17:35:43.449126Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.431403Z","title":"Unsupervised domain adaptation by backpropagation,","venue":null,"work_id":"3344c754-6bbc-4ad2-9df3-acedf981cf22","year":2015},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.992978Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:bca26cf15ea759c6e3e9da12810b3e4f2d428b0d894ce92d562aed2f06fe646f","observation_id":"c16fdab8-cc72-4a8f-af08-51032ee74ffb","resolution":{"observed_at":"2026-08-12T17:35:43.435548Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.419382Z","title":"Domain-adversarial training of neural networks,","venue":null,"work_id":"54aacfff-91c2-4015-85b6-a05bf52730fa","year":2016},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:41.996773Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:a6d7767c4f6940f8343b526421f74f0eb88e5358f8657da8b3c46b8f5bd37680","observation_id":"80cecf7c-435c-40bb-b1e8-642dbcb78283","resolution":{"observed_at":"2026-08-12T17:35:43.423471Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.405575Z","title":"Tuning pre-trained model via moment probing,","venue":null,"work_id":"5cbbee43-1c42-4538-9667-42366a91a4d2","year":2023},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.000703Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:9e4c423a3baffd8715dfe10cf608a2404cb8fe3e32fcee609c1ed4cccc5cbc52","observation_id":"bd6f7065-447b-4008-a4d0-62810be3fa7e","resolution":{"observed_at":"2026-08-12T17:35:43.410527Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.391367Z","title":"Generative adversarial networks,","venue":null,"work_id":"db24510e-a526-4f22-b946-9d63bfcad4e2","year":2020},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.005213Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:5f7a6fb509900b9bff3437f4a8233dc571b90f40bfa406ff3f4758c75c8525b1","observation_id":"3b517945-0b30-413a-9714-b6e054587cb1","resolution":{"observed_at":"2026-08-12T17:35:43.395872Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.378030Z","title":"Self-supervised relationship probing,","venue":null,"work_id":"e6962c60-3b57-44fb-9c5a-654a1a77169a","year":2020},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.009222Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:c6bfa8fd0ec253ad283ce6c730e145bde5c672f61f0a12c4475f6fa3838b99fb","observation_id":"6afc9006-0fc4-4356-b198-042c3bcb662c","resolution":{"observed_at":"2026-08-12T17:35:43.382535Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.365246Z","title":"Sigma: secure gpt inference with function secret sharing,","venue":null,"work_id":"9af965f9-dac1-4cae-b6d9-f738131e8583","year":2023},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.013035Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:bc11577da1982c6d76fb36f8c308cd583263a8c17e9c6d3449d72fa7fb8a11d5","observation_id":"8afff277-4d76-493e-83e3-d8469abd0fef","resolution":{"observed_at":"2026-08-12T17:35:43.369960Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.353232Z","title":"A survey on vision transformer,","venue":null,"work_id":"462188f2-7e9f-4c62-8015-bed12f70eb47","year":2022},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.017450Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:d7065e65bb913ec50b32c33cf4d9dab089593323ee94b42d2364f20c7ab2ab9d","observation_id":"845721a4-08c6-4d91-b3f3-4500f2bd5cab","resolution":{"observed_at":"2026-08-12T17:35:43.357519Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.341457Z","title":"Pre-trained models: Past, present and future,","venue":null,"work_id":"885dfa7c-32a0-4925-997d-df58edf76476","year":2021},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.022252Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:817af50a925534a8b8bcf52f6b68eb68401c789abd9ab3052b24fe58dc113c6a","observation_id":"92ca2f96-f4fd-4723-aee9-71a954fba958","resolution":{"observed_at":"2026-08-12T17:35:43.345476Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.329245Z","title":"Masked autoencoders are scalable vision learners,","venue":null,"work_id":"93056e2a-1c78-4188-8743-9c7410b893c5","year":2022},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.026377Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:a396b3b1a472a62b5cd53e23abb20abb69dec03c6597a4e6e1a67e183ddb3518","observation_id":"a513867b-7d6a-43ba-a9f6-5073fe77e25f","resolution":{"observed_at":"2026-08-12T17:35:43.333641Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.315201Z","title":"Momentum contrast for unsupervised visual representation learning,","venue":null,"work_id":"ce1b7fa4-0362-41f6-b0ba-330c6e8d594b","year":2020},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.030398Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:4c8faa3013319d2a285723ba50fa8ff110cf91a803d0262dd6ee33d155f51db4","observation_id":"6f11f7a4-9967-4d7d-8b1b-371f73954e7e","resolution":{"observed_at":"2026-08-12T17:35:43.319692Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.299977Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":"2950c6c2-98ed-477f-9665-9a80197cf0eb","year":2016},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.034163Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:7796dcb80b038688f0ff42839958f320b313f7f518e1c2f51bcf2902c5883bbd","observation_id":"bd335490-7d5b-442e-9310-0337a0590c4f","resolution":{"observed_at":"2026-08-12T17:35:43.306310Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.286323Z","title":"Using self-supervised learning can improve model robustness and uncertainty,","venue":null,"work_id":"e4afcf52-6ae0-49be-8229-153d0465c35e","year":2019},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.038502Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:fbd9cec40180db40bd79d4aaf1ad3b3067299bbd8a358f31dfdb9ed1003610b2","observation_id":"6c5312e8-37c9-4ef8-8581-83ddc983cfef","resolution":{"observed_at":"2026-08-12T17:35:43.291077Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.272844Z","title":"imagenette","venue":null,"work_id":"4b572f4b-e85a-4b9e-bf56-f8c2d2147169","year":null},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.042419Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:765577a1b453989e33dc295fcb9e3aa14175e9dc8766579283bee3d3e25ad98a","observation_id":"29793f2c-5c5c-4ff4-a3fa-42ca80ca4730","resolution":{"observed_at":"2026-08-12T17:35:43.276899Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.260498Z","title":"Fastai: A layered api for deep learning,","venue":null,"work_id":"47fd1614-e715-40c1-af73-5f4f1f97b874","year":2020},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.047134Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:85b083f1a866849f9567ae1995480e233dae14e719233e4839781ade5a29d027","observation_id":"e0680ce1-a53b-415a-b003-5e786f19db9d","resolution":{"observed_at":"2026-08-12T17:35:43.264754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.247267Z","title":"A database for handwritten text recognition research,","venue":null,"work_id":"1c4e0c47-f625-4d5a-9397-4c48ac9467d9","year":1994},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.051693Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:4eb5f69ae71cf7294dd0e662cc6f4d4707484a4f6a093ca1e50ece062bef43ec","observation_id":"6871c85f-52cd-408c-930f-7e8685945395","resolution":{"observed_at":"2026-08-12T17:35:43.252065Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.232596Z","title":"A review of deep transfer learning and recent advancements,","venue":null,"work_id":"e0b26737-b494-42dd-ab26-43fb5d4acbdc","year":2023},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.056154Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:fa7e12ff7e331c95a787b79c6022d7fbb7a1d7379d1ac9931a9b148bbc3eef02","observation_id":"d6baa4f4-dc59-4be1-92bf-aededc263840","resolution":{"observed_at":"2026-08-12T17:35:43.237548Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.214976Z","title":"Gender and ai: Addressing bias in artifi- cial intelligence,","venue":null,"work_id":"96acf1f0-f883-4f20-a432-1173f44118a3","year":2024},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.060135Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:7300843d7a499db63f1b559a3a4399214edc1cfdfc48e4e24dd93313ca622435","observation_id":"4ed1f7da-f0cd-4a11-b71e-e22c479aa2f0","resolution":{"observed_at":"2026-08-12T17:35:43.221042Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.063945Z","title":"A survey on contrastive self-supervised learning,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.063945Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:4e5d325f3f0f3e7c83643265d00ee61a9f04e389ff0ba0c3a9a881f48758f1e5","observation_id":"5db1c377-5b42-405b-b525-46940c7df153","resolution":{"observed_at":"2026-08-12T17:35:42.063945Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.190120Z","title":"Entangled watermarks as a defense against model extraction,","venue":null,"work_id":"1bcea635-267a-4e31-9ac9-350aacdf8ece","year":2021},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.068175Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:0b487fc27ef72ac04659e3a2f565046ac7c7e6ad5e5f3d3a13e1914ac1777771","observation_id":"349e0ee6-2ea2-4a14-a89a-f7213e9dbd20","resolution":{"observed_at":"2026-08-12T17:35:43.195092Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.176707Z","title":"Visual prompt tuning,","venue":null,"work_id":"931ffa5f-33ad-4d16-9131-261be3a0b6e2","year":2022},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.072674Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:9a068c8ee649a9d0247fb852fe7c004df578782c6c7b4949aaa7d0d6cc39eb5c","observation_id":"314dfed5-d34d-4820-af1b-d9843d0a71f5","resolution":{"observed_at":"2026-08-12T17:35:43.181521Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.076834Z","title":"Adam: A method for stochastic optimization,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.076834Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:c49277d93dda21e22f4363c917da446c29cbe45620ec748a6ec79b7e3802c184","observation_id":"9972938e-930f-4ae3-93b7-4c988843f905","resolution":{"observed_at":"2026-08-12T17:35:42.076834Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6114","last_updated":"2022-12-10T21:04:00Z","snapshot_observed_at":"2026-08-14T23:50:45.029465Z","submitted_at":"2013-12-20T20:58:10Z","title":"Auto-Encoding Variational Bayes","version":11},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6114","snapshot_observed_at":"2026-08-12T17:35:42.081506Z","title":"Auto-encoding variational bayes,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.081506Z"},"links":{"cited_paper":"/paper/1312.6114","citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:e8f2f225c33742ced323a74127691e1da5af5e7548ddd30e04756330cd3bf253","observation_id":"10ad5c56-b78a-4ce0-9ee6-e20322b3a0d5","resolution":{"observed_at":"2026-08-12T17:35:42.081506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.085783Z","title":"Learning multiple layers of features from tiny images,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.085783Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:4207851c40f520ea261080293cde238a44d43a80e16e9eba1e4d66352b04f86c","observation_id":"c9bffe2e-f954-4924-b166-db7c38a86a3d","resolution":{"observed_at":"2026-08-12T17:35:42.085783Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.146053Z","title":"Contrastive representation learning: A framework and review,","venue":null,"work_id":"9fa2148f-dcb0-438b-a53c-0961546d8cf8","year":2020},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.090076Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:2933ae1abd6d9ee5f12872c505be3c8a882aaa3a3c962127954407c3a77769e0","observation_id":"2070d0f8-94f5-45a3-919b-4907d071b64a","resolution":{"observed_at":"2026-08-12T17:35:43.150616Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.133795Z","title":"Gradient-based learning applied to document recognition,","venue":null,"work_id":"53ace42f-c1d6-4a9f-b5ab-7ee42cb73855","year":1998},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.094935Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:5ff38d6a0df49dcba2f7540168c4fc6e9f94f99228f1d928df1678871f73a77e","observation_id":"a34619d1-c79d-4a43-b408-bda7860ee779","resolution":{"observed_at":"2026-08-12T17:35:43.138100Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.120806Z","title":"Modeldiff: Testing-based dnn similarity comparison for model reuse detection,","venue":null,"work_id":"1cc236a5-9968-4d21-9b51-aedc8edf9d5e","year":2021},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.099187Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:7d39325bbb4f619f7e186cc0aaf39fc91ef5da320e91a1bff51ea935bb79372c","observation_id":"783228bf-9505-49de-804f-1c2b407748be","resolution":{"observed_at":"2026-08-12T17:35:43.125438Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.106084Z","title":"Transtailor: Pruning the pre-trained model for improved transfer learning,","venue":null,"work_id":"245c9288-f5e5-4ffd-9c88-11302a386e10","year":2021},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.103582Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:0d0eb49dba6b8470d870bbfcf5e25743a267fa423a30a1144481f66b2206cd0b","observation_id":"00852f53-833e-4353-9ea9-d4771ad29e67","resolution":{"observed_at":"2026-08-12T17:35:43.110907Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.093075Z","title":"Secdeep: Secure and performant on-device deep learning inference framework for mobile and iot devices,","venue":null,"work_id":"892d62f2-5a89-4eb1-9fc4-969715f666df","year":2021},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.110705Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:eb68684c527bc7e933ca208a3a13bcea1ad34e1a3043b9ef9fb0ee9af58792b4","observation_id":"2d504c4b-7b82-48d9-87fb-e21b0ca5d033","resolution":{"observed_at":"2026-08-12T17:35:43.097355Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.080702Z","title":"Fault injection attack on deep neural network,","venue":null,"work_id":"08792c2e-2fc0-4c4b-80d9-203cf858d9dc","year":2017},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.115148Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:ce7523fbf2c7f2beae973f8363a65ce87eb0d65804bed8862bb179a7831e1b5e","observation_id":"728fd2eb-aa2a-4a83-81c1-992b5bcfe74d","resolution":{"observed_at":"2026-08-12T17:35:43.085084Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1810.05270","last_updated":"2019-03-05T05:58:11Z","snapshot_observed_at":"2026-08-14T18:15:55.919265Z","submitted_at":"2018-10-11T22:15:28Z","title":"Rethinking the Value of Network Pruning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.05270","snapshot_observed_at":"2026-08-12T17:35:42.119434Z","title":"Rethinking the value of network pruning,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.119434Z"},"links":{"cited_paper":"/paper/1810.05270","citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:b851f57a6ab30fd3a410ee62b9bcdf6c2930ac34c3fb014d4771364d11a782ca","observation_id":"8b2229ce-1063-4b7d-a530-a94902444101","resolution":{"observed_at":"2026-08-12T17:35:42.119434Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.067686Z","title":"Transfer learning from pre-trained models,","venue":null,"work_id":"37d31e78-7381-46ae-af90-0cb28a9433d5","year":2018},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.123631Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:5868c7d397e15ee00b308b0d90c429758a4720e5a120e23fc9b4b7a1d8aa1f8b","observation_id":"38485150-b20c-46f1-8b1a-366540cbeada","resolution":{"observed_at":"2026-08-12T17:35:43.072081Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.053426Z","title":"Is artificial intelligence dangerous? 6 ai risks everyone should know about,","venue":null,"work_id":"fb940435-01f0-4437-bc6e-1280df3f12e4","year":2022},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.127603Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:0b260784e83c522f5fe7d60a1f3109ac6ea1dc1cfd460a8d37ceade40e7b6be1","observation_id":"b7ac661c-f44d-4aa5-8f2f-8ebb586b6d4a","resolution":{"observed_at":"2026-08-12T17:35:43.058045Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.039386Z","title":"Data augmentation for improving deep learning in image classification problem,","venue":null,"work_id":"4bfbc29a-21c8-447b-8ca6-d132ffe42781","year":2018},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.132287Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:b7ad5479404e158f90b3ef91d0bbd95e1db81b82e49bb786503c3e9d141d3bea","observation_id":"c8bf48aa-45cf-48f6-8071-da62586e4ad1","resolution":{"observed_at":"2026-08-12T17:35:43.044599Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.026710Z","title":"Reading digits in natural images with unsupervised feature learning,","venue":null,"work_id":"f8d2991e-40cf-491c-aa79-121fb835de47","year":2011},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.136450Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:b92dc7fab6db1ce84d654320d81bd857c9c41ac9ffb00254435d82ea5d58a8ee","observation_id":"0b403ba9-f57d-4d6f-a714-debc2ef325ae","resolution":{"observed_at":"2026-08-12T17:35:43.030993Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.013937Z","title":"Openai’s embeddings api,","venue":null,"work_id":"c5247110-6a02-4e17-9f32-ad8ba0c5fc0b","year":2020},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.140877Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:74fb368ff196ab2d8d70753fad17d62769c9e14a750b63419e922394f6135d4c","observation_id":"ebdfba45-3e5d-431b-af9c-659d46f8b127","resolution":{"observed_at":"2026-08-12T17:35:43.018381Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:43.000717Z","title":"The unsurprising effectiveness of pre-trained vision models for control,","venue":null,"work_id":"42d7e30e-fb0d-4149-aa9f-b0f4dff0aeaf","year":2022},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.145177Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:5932d3e5d8e3783df5c7454e247617379a7bbbfd2e07a7eaeb2d8be2521f3224","observation_id":"47ede02e-de8c-4078-a0d2-60bcf64d5892","resolution":{"observed_at":"2026-08-12T17:35:43.005398Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.986721Z","title":"Llm self defense: By self examination, llms know they are being tricked,","venue":null,"work_id":"52909145-94e3-4088-9799-0c6e55eb94b9","year":2023},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.149494Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:7f1a6ded8780bdd07a1597ab613f1f9803137c9a7f8190a2d31e3283b87b30e1","observation_id":"10033df4-e5b8-434d-b8b8-7a627f0c0acc","resolution":{"observed_at":"2026-08-12T17:35:42.991333Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.153451Z","title":"Early stopping-but when?","venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.153451Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:28dc92df33b2132bbb58ace748d838a0fd63295041eafa4c720e4ad07e5f706c","observation_id":"01c5419f-9222-477f-b4ef-ec1fe5b36eac","resolution":{"observed_at":"2026-08-12T17:35:42.153451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.964873Z","title":"Pre-trained models for natural language processing: A survey,","venue":null,"work_id":"61bbf3c9-a3fa-4f29-9af6-99821043e16a","year":2020},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.157295Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:0920fd7c81646c4d37c33276812893da859c53caf96467bc2654f5e45927ab97","observation_id":"9259669f-ef3d-43cc-a2eb-7638f3b5df88","resolution":{"observed_at":"2026-08-12T17:35:42.969178Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.951965Z","title":"Reaas: Enabling adversarially robust downstream classifiers via robust encoder as a service,","venue":null,"work_id":"17584508-7b78-4bbb-95f4-e1e311dd7af0","year":2023},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.161205Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:7d1559943de9f93c20f9c1d4db7372650471f34aae5613181f597070662065bc","observation_id":"ba9d2d7a-e874-4af6-a468-f14423c7f392","resolution":{"observed_at":"2026-08-12T17:35:42.956283Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.936642Z","title":"Learning transferable visual models from natural language supervision,","venue":null,"work_id":"9d7979ec-97d4-4795-8d41-7484b3eca9f4","year":2021},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.165565Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:14ef5d2741b1171643b42e17ea954eda59f27a9cc7f8de6129605ec96a3c1aed","observation_id":"a62aed8a-a424-4c02-a84f-3dc408f404cd","resolution":{"observed_at":"2026-08-12T17:35:42.943073Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.923605Z","title":"Bit-flip attack: Crushing neural network with progressive bit search,","venue":null,"work_id":"b86dc82d-748f-4e7e-96d7-4aa1c9b61556","year":2019},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.169362Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:053ed587eca3fcbbf56d6be92d3bc5185ef9402f99a06f1f339061c9bb3249b0","observation_id":"74e9e0a3-af7c-4663-818c-a67fe6cb1bc7","resolution":{"observed_at":"2026-08-12T17:35:42.927989Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2005.00719","last_updated":"2021-03-07T18:38:24Z","snapshot_observed_at":"2026-08-09T08:11:37.373377Z","submitted_at":"2020-05-02T06:19:20Z","title":"Probing the Probing Paradigm: Does Probing Accuracy Entail Task Relevance?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.00719","snapshot_observed_at":"2026-08-12T17:35:42.173423Z","title":"Probing the probing paradigm: Does probing accuracy entail task relevance?","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.173423Z"},"links":{"cited_paper":"/paper/2005.00719","citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:8c30f9052cded6be6e4816cec240b55cb2c95d33edbc84d324a38a69896d1929","observation_id":"68c17f12-b4b0-4b5b-878e-691188e64116","resolution":{"observed_at":"2026-08-12T17:35:42.173423Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.177649Z","title":"Gaussian mixture models","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.177649Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:383b6d150be93201b529ab65c3aba6b4e1be906455406c99fbf94456a870aed9","observation_id":"31ba5976-6c26-4a22-9ffa-a999d0851bbd","resolution":{"observed_at":"2026-08-12T17:35:42.177649Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.902133Z","title":"High-resolution image synthesis with latent diffusion models,","venue":null,"work_id":"4a56f9f3-bf97-4dba-9cf8-c1c1ce073543","year":2021},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.181961Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:83c3ef9d54f1089a5bbef0733dadabad6a6cc7c71ecee387b3e921380e51c2b0","observation_id":"58bb3853-fb3d-49d6-8195-f568ea954d1c","resolution":{"observed_at":"2026-08-12T17:35:42.906670Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.888853Z","title":"Grad-cam: Visual explanations from deep networks via gradient-based localization,","venue":null,"work_id":"82235ea4-c869-4960-b5f9-6abfae338eb9","year":2017},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.185863Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:9691247e00f4352400e1c50b74b4eef0a84cc95c3b03a31106be0b2ce19f153d","observation_id":"a1ba2eee-ab53-44a5-8468-6c06ac41da98","resolution":{"observed_at":"2026-08-12T17:35:42.893656Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.874795Z","title":"Financial feature embedding with knowledge representation learning for financial statement fraud detection,","venue":null,"work_id":"6f34cf96-cf35-4df6-9039-f57e70eabd7b","year":2021},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.189699Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:2efac68afdbac1bfa04b82c738240485a2c1680ed9efff98107e13dbe90c8a52","observation_id":"bad51658-7aa0-4815-9b7f-b9272e18a3a6","resolution":{"observed_at":"2026-08-12T17:35:42.879552Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.857450Z","title":"A survey on image data augmen- tation for deep learning,","venue":null,"work_id":"275e6883-e503-4d29-86bc-f64302620a00","year":2019},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.193824Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:10a8c17a416db0b7739de7346ae3ce33a5390bc900961818abe60d4dc4c54ace","observation_id":"77f48402-b101-4d45-b45c-61fe2bd93795","resolution":{"observed_at":"2026-08-12T17:35:42.863288Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.843002Z","title":"Very deep convolutional networks for large-scale image recognition,","venue":null,"work_id":"43626059-e983-40d3-8f20-4a025363d45c","year":2019},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.197673Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:11ac37d014c2d1dbbf6092b64bc52f556cb68d0e1053b4020283c29b57889e95","observation_id":"89ca4128-7e95-42e3-84f9-954c24d9f6cf","resolution":{"observed_at":"2026-08-12T17:35:42.847849Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.827623Z","title":"Convolutional neural networks for medical image analysis: Full training or fine tuning?","venue":null,"work_id":"30714bf8-0565-46be-a874-f9ed2987f259","year":2016},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.201773Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:de8ce470499deea240d5ebb367fe1acd7ae3ce25f8dc9a5517b497aa728f6abc","observation_id":"56fecc20-210f-4c98-8dbe-74adf6153134","resolution":{"observed_at":"2026-08-12T17:35:42.832972Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.812521Z","title":"Federated learning from pre-trained models: A contrastive learning approach,","venue":null,"work_id":"a3aef83b-b553-4435-be2e-464dfb553edf","year":2022},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.205627Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:7bd0ea550940abac8f4860cee40d6a0f30422ec6d9e3366138f93e7087bc077f","observation_id":"f8cbc695-b38f-4307-8808-606cceff6b03","resolution":{"observed_at":"2026-08-12T17:35:42.817226Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.796954Z","title":"Ai bill of rights: Algorithmic discrimination protections,","venue":null,"work_id":"95d9f73f-218a-4e58-863f-01e2016f0534","year":2024},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.210177Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:5501a25a123b575f131f3dc3f025af1eb2177b6e8e19b6aaa7d11c70ce0a844c","observation_id":"f73b324a-dea4-4a71-be84-5b86ef2274bf","resolution":{"observed_at":"2026-08-12T17:35:42.802846Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.214145Z","title":"Visualizing data using t-sne","venue":null,"work_id":null,"year":2008},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.214145Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:9c5db18ee386d20d32e7c643e5ae1d6aa7523e5d7dd7df4b3da97ebe106ae73c","observation_id":"e9266638-dc09-4a26-9ffe-1bf8aa813da8","resolution":{"observed_at":"2026-08-12T17:35:42.214145Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.769928Z","title":"Pre-trained language models and their applications,","venue":null,"work_id":"3f9f09dd-d90b-43ef-9095-531d258e4318","year":2022},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.218501Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:724640b936bacebcaf7c6b631a4fdeb1c63e1b8c16b0b73327a4fdf8b2114cdd","observation_id":"efbb7529-e495-4a2f-b51e-6e16c9337519","resolution":{"observed_at":"2026-08-12T17:35:42.774468Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.754047Z","title":"Model barrier: A compact un- transferable isolation domain for model intellectual property protection,","venue":null,"work_id":"2bff450c-2525-4c6a-896b-21929835e053","year":2023},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.222669Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:d5f2511dc9925908754800fb25c9c59c99c1b6fdb11a82ed23bd5c97d4751be7","observation_id":"a5701998-7dfc-4ec3-ad16-9f71783c5c2e","resolution":{"observed_at":"2026-08-12T17:35:42.761791Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.737634Z","title":"Non-transferable learning: A new approach for model ownership verification and applicability authorization,","venue":null,"work_id":"1d5153eb-b106-4aa1-b03d-8c1553427fac","year":2022},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.226882Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:ca398f9bc66bc2f1f5ffd25781fcfe6344b86b5bdf21c87fa8b7154d516636f9","observation_id":"cbf042a2-5ab1-4911-a767-d3ca2009bf3f","resolution":{"observed_at":"2026-08-12T17:35:42.742558Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.12390","last_updated":"2022-05-24T22:44:43Z","snapshot_observed_at":"2026-08-16T16:57:55.244950Z","submitted_at":"2022-05-24T22:44:43Z","title":"Toxicity Detection with Generative Prompt-based Inference","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.12390","snapshot_observed_at":"2026-08-12T17:35:42.231918Z","title":"Toxicity detection with generative prompt- based inference,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.231918Z"},"links":{"cited_paper":"/paper/2205.12390","citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:6fe58a22aee62eb9a47f4798c2b59ca38360be954fcc96f8272fcb470b51d4d6","observation_id":"75082e68-0408-4cc1-976d-4d818878c097","resolution":{"observed_at":"2026-08-12T17:35:42.231918Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2105.10185","last_updated":"2021-05-21T07:53:10Z","snapshot_observed_at":"2026-08-16T18:23:11.458557Z","submitted_at":"2021-05-21T07:53:10Z","title":"A Non-Linear Structural Probe","version":1},"cited_work":{"arxiv_id":"2105.10185","doi":null,"metadata_source":"pith","pith_arxiv_id":"2105.10185","snapshot_observed_at":"2026-08-12T17:35:42.386424Z","title":"A Non-Linear Structural Probe","venue":"cs.CL","work_id":"8d91c671-f61c-464c-b627-43ab87519880","year":2021},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.236469Z"},"links":{"cited_paper":"/paper/2105.10185","citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:0e6e0819209f2d623e1ba3ff461f7b4445d40a3892f414c7b984dd9b27aee5cc","observation_id":"7e684358-cc80-4f54-8e98-9937630194b1","resolution":{"observed_at":"2026-08-12T17:35:42.394622Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.724013Z","title":"Structured model probing: Empowering efficient transfer learning by structured regularization,","venue":null,"work_id":"52277032-35e4-437e-bf61-2e54753cc1b6","year":2024},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.241043Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:ad27e9328f5d38d66699835599cb71c36ce5416937623c7d7bd8774a95bb622d","observation_id":"d0c8a56a-4039-4ebe-87b3-3764b215bc33","resolution":{"observed_at":"2026-08-12T17:35:42.728666Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.710356Z","title":"Fine-grained visual prompting,","venue":null,"work_id":"9353ef86-6c85-4631-8634-7d270269eb79","year":2024},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.245986Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:f6cd0424f0decef5842829ae129e64418ee1eb119806c9246cdf3e170334c36d","observation_id":"777ad74d-77d9-463a-8578-e27ddda0a62b","resolution":{"observed_at":"2026-08-12T17:35:42.715031Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.695195Z","title":"Robust watermarking for deep neural networks via bi-level optimization,","venue":null,"work_id":"a8f1f339-36df-4383-9a13-eedbabf2f6a4","year":2021},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.251564Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:3ee74ddab15e5a9e7cb4058cd605851b0fc28faeae1e98930fb0609de1180a90","observation_id":"65138e8d-ac78-4726-94d7-cc9daec66cf2","resolution":{"observed_at":"2026-08-12T17:35:42.700579Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.679233Z","title":"Graph representation learning in bioinformatics: trends, methods and applications,","venue":null,"work_id":"8fd92ab5-0306-4a50-90a5-250897fe8235","year":2022},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.256461Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:5fed1be8e2693f9f502ce02fc22f4c3531e61c8b1945b0752cefe6e7f43bdd2b","observation_id":"0a18c4ce-bfd7-46c2-ba57-1551b4f1622b","resolution":{"observed_at":"2026-08-12T17:35:42.685012Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2111.11432","last_updated":"2021-11-22T18:59:55Z","snapshot_observed_at":"2026-07-06T12:11:02.119174Z","submitted_at":"2021-11-22T18:59:55Z","title":"Florence: A New Foundation Model for Computer Vision","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.11432","snapshot_observed_at":"2026-08-12T17:35:42.261300Z","title":"Florence: A new foundation model for computer vision,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.261300Z"},"links":{"cited_paper":"/paper/2111.11432","citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:89a23f6a150b69ac7e1e88a9c420374369ac5cb3c66602b4a051483c49963c16","observation_id":"42f8e3cf-6958-4138-9c3e-83495b3269b7","resolution":{"observed_at":"2026-08-12T17:35:42.261300Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1212.5701","last_updated":"2012-12-22T15:46:49Z","snapshot_observed_at":"2026-08-15T00:34:41.793608Z","submitted_at":"2012-12-22T15:46:49Z","title":"ADADELTA: An Adaptive Learning Rate Method","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1212.5701","snapshot_observed_at":"2026-08-12T17:35:42.265839Z","title":"Adadelta: an adaptive learning rate method,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.265839Z"},"links":{"cited_paper":"/paper/1212.5701","citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:457c6923cca56f71d7abcc6045eea5461582f9c1ed988386621bfb308f46c051","observation_id":"9f507451-4884-43ea-8244-fc2c8069a887","resolution":{"observed_at":"2026-08-12T17:35:42.265839Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.665781Z","title":"Protecting intellectual property of deep neural networks with watermarking,","venue":null,"work_id":"e1a0fd82-eaa4-4afd-b29a-2aa5525871be","year":2018},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.269970Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:18c4481baa25629f0aa7fad3e9282f11932c86e82ed09e9ee351086b5f5c1948","observation_id":"cd27c0e0-43b5-4477-8ef2-7eb286860de4","resolution":{"observed_at":"2026-08-12T17:35:42.670093Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.652870Z","title":"Fault sneaking attack: A stealthy framework for misleading deep neural networks,","venue":null,"work_id":"46ffaea3-5680-4b58-aba9-a56cfe194b49","year":2019},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.274289Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:6c7027a8f31079eabed1036c7c7db15abbca828182f70fe52b2c0f778235418e","observation_id":"cb8df323-3538-4f4b-ac31-54f024d476a5","resolution":{"observed_at":"2026-08-12T17:35:42.657476Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.638534Z","title":"An overview on data representation learning: From traditional feature learning to recent deep learning,","venue":null,"work_id":"92f95860-6821-4972-8f43-664d3ede8e8d","year":2016},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.278381Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:a9844bf5929b427cff61c5471e54c688e66ed2cea98a0eb2794ad8226f055a79","observation_id":"9ff9d40f-2064-4b0f-a5fe-80877c823d4a","resolution":{"observed_at":"2026-08-12T17:35:42.643561Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.624627Z","title":"Archlock: Locking dnn transferability at the architecture level with a zero-cost binary predictor,","venue":null,"work_id":"d44904fb-f72c-4160-9269-6bf0784071f7","year":2024},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.283392Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:8cdde459041befd03273de23d49aea3b1e060dd1567ad18b7f570f95b74b52c0","observation_id":"9c5d78bb-5670-42ed-b95a-80bf78910565","resolution":{"observed_at":"2026-08-12T17:35:42.629441Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1710.01878","last_updated":"2017-11-13T18:40:16Z","snapshot_observed_at":"2026-08-15T03:14:52.303459Z","submitted_at":"2017-10-05T04:26:49Z","title":"To prune, or not to prune: exploring the efficacy of pruning for model compression","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.01878","snapshot_observed_at":"2026-08-12T17:35:42.288017Z","title":"To prune, or not to prune: exploring the efficacy of pruning for model compression,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.288017Z"},"links":{"cited_paper":"/paper/1710.01878","citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:78e5483d20dd8c5c01c3b68c8de264dbf922c061871846d46c2544400ba3829e","observation_id":"7188df1e-1f6f-4df4-b41d-49a7ab5445cd","resolution":{"observed_at":"2026-08-12T17:35:42.288017Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T17:35:42.611880Z","title":"train- from-scratch","venue":null,"work_id":"f876d23a-ae0b-4d2c-8966-fb3623d743aa","year":null},"citing_paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-12T17:35:42.293715Z"},"links":{"citing_paper":"/paper/2411.12508"},"observation_digest":"sha256:731ba3de2f36f207925199a1ebd7103316a3b575516c226e4fe159f3b4347e91","observation_id":"b4f6ebac-b55c-4f8c-bc60-61886f854cd1","resolution":{"observed_at":"2026-08-12T17:35:42.616138Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2411.12508","last_updated":"2024-11-19T13:50:08Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-15T06:45:33.592143Z","submitted_at":"2024-11-19T13:50:08Z","title":"Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing"},"reference_resolution":{"displayed":93,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":31,"verified_exact":2,"verified_fuzzy":59},"total_outbound_references":93},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 93 of 93 outbound references and 0 inbound Pith citation observations for arXiv:2411.12508."}