Pith. sign in

Paper Citation Record · LEDGER

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors

As of 21 August 2026, this Paper Citation Record lists 30 of 30 outbound references and 0 inbound Pith citation observations for arXiv:2411.13047.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2411.13047 v2

Coverage vector

measured 30 of 30 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-12T16:58:39.252380Z

measured 30 of 30 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-21T06:32:19.484+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

30 of 30 outbound references displayed

  • verified exact0
  • verified fuzzy20
  • unresolved10
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation df6dfbb0-87bd-4a00-a8b3-630dee58cde9 · outbound

This paper cites an unresolved cited work.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Unresolved cited work

Reference 1

Resolution
unresolved
raw_fallback, observed 2026-08-12T16:58:39.987590Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:38.904306Z digest=sha256:5147c0e9532cdba3a9b1a37c0b4e16dfb9d20ec05e3696cf2d6c7df41c32f4ce

Observation f8eb0cee-1811-4835-87a5-687979e98555 · outbound

This paper cites an unresolved cited work.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Unresolved cited work

Reference 2

Resolution
unresolved
raw_fallback, observed 2026-08-12T16:58:39.975416Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:38.908944Z digest=sha256:596187b93e7bb71c4cbfca1752fee9455d9cb16c16bd18e516a2a7b274f0f37c

Observation d5ca920e-89a8-4d07-aeb6-79fbf8ddf949 · outbound

This paper cites Turning your weakness into a strength: Watermarking deep neural networks by backdooring.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Turning your weakness into a strength: Watermarking deep neural networks by backdooring

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.963564Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:38.912395Z digest=sha256:cf7ef8b84f93df064b8adf42c2673266b7b959816ff4336dcd05ea7eb4b35ca5

Observation 9c7cca01-3863-4a79-a7a4-50c1b78d42d2 · outbound

This paper cites Self-driving cars dataset.https : //universe.roboflow.com/selfdriving-car- qtywx/self- driving- cars- lfjou, 2023.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Self-driving cars dataset.https : //universe.roboflow.com/selfdriving-car- qtywx/self- driving- cars- lfjou, 2023

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.951136Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:38.916893Z digest=sha256:f28f2992b188aff2ab9671c48ace48a88bfc6a69d0e00325d6c8ebf03c3315e3

Observation 45e1c645-b4ce-4aca-bcf3-0a433f9e895d · outbound

This paper cites Baddet: Backdoor attacks on object detection.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Baddet: Backdoor attacks on object detection

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.938540Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:38.921221Z digest=sha256:1fd51488415a3a548ec4955423464d2ce211e0be95d330adda7695e935300170

Observation 254ea304-7b95-47ba-8b4d-414b94d67a95 · outbound

This paper cites Clean-image backdoor: Attacking multi- label models with poisoned labels only.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Clean-image backdoor: Attacking multi- label models with poisoned labels only

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.925194Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:38.925167Z digest=sha256:dec2cf9cbfae4350dd92ff9a050b40e157f61b99a094539ade5a88f6f42c456e

Observation 39b21916-a15d-4d83-b0dc-1fca344fdded · outbound

This paper cites Attacking by Aligning: Clean-Label Backdoor Attacks on Object Detection.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Attacking by Aligning: Clean-Label Backdoor Attacks on Object Detection

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-12T16:58:38.929329Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:58:38.929329Z digest=sha256:7913ca62658289087bf424cef28ebd0afb4280fdc7f046d1d32fd7ccbb002fd6

Observation 5d122b21-12e4-4b42-8c6f-95e685e34706 · outbound

This paper cites The cityscapes dataset for semantic urban scene understanding.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors The cityscapes dataset for semantic urban scene understanding

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-12T16:58:38.934170Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:58:38.934170Z digest=sha256:01ef5a74f7510c5dd6e432b5f176906e1e3737b197a2dcc3998833d0e910f5fe

Observation c783530c-7c06-429d-b0a9-8b51a1eebc41 · outbound

This paper cites A density-based algorithm for discovering clusters in large spatial databases with noise.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors A density-based algorithm for discovering clusters in large spatial databases with noise

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.904278Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:38.938331Z digest=sha256:630d586d130910ffaae088afaa4a825f5c2abdbf8be4bc9a009d178921e1a7dc

Observation 9c5e0a8d-af8f-4c73-a815-20de7b6b3448 · outbound

This paper cites Everingham, L.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Everingham, L

Reference 10

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.827292Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:38.941891Z digest=sha256:6289e39b95ca539092bf149f9ccb2d3987254999bd8c80288f18c8ee36f44b3b

Observation 76c0e88c-01c6-4717-9571-a385aa4756f4 · outbound

This paper cites Planting undetectable backdoors in machine learning models.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Planting undetectable backdoors in machine learning models

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.785775Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:38.945996Z digest=sha256:4e41ac0f5c920260d0f4428f9beb5f37500ae6a8604cb65a9db73209efcdbbb4

Observation ca0972d5-7eb8-4329-a1cc-eae2f1068de2 · outbound

This paper cites Choquette-Choo, Varun Chan- drasekaran, and Nicolas Papernot.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Choquette-Choo, Varun Chan- drasekaran, and Nicolas Papernot

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.773374Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:38.949833Z digest=sha256:40e4fe251194a0b0c34287c11c2a0bfe65dc8126686be82509eeca9d20cdae5f

Observation 4d80e1aa-79f6-4b93-85bf-822f1e4cdbff · outbound

This paper cites Defending against model stealing via verifying embedded external features.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Defending against model stealing via verifying embedded external features

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.760169Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:38.953891Z digest=sha256:d15306eb5b184cc39de4181f25a35ac523a10dfa7c8d930c969a5995617fe4dd

Observation 0f7d2f2f-d436-4570-ba2a-015ba35444a4 · outbound

This paper cites Fine- pruning: Defending against backdooring attacks on deep neural networks.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Fine- pruning: Defending against backdooring attacks on deep neural networks

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.746591Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:38.957475Z digest=sha256:d28a51d4e432c15a006e57f392ef8f1bcd5778572eeffdc82bf7dab0715b03ae

Observation e9a06249-8032-4cd3-894d-59050f7b4b7a · outbound

This paper cites Untargeted backdoor attack against object detection.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Untargeted backdoor attack against object detection

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.732929Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:38.961357Z digest=sha256:765c9882b42fb9574b527e874be29597e8982f318a04280d58c9749c2c0d5644

Observation b0fb0df4-f65c-456c-af59-5e799f1f4c7f · outbound

This paper cites Dangerous Cloaking: Natural Trigger based Backdoor Attacks on Object Detectors in the Physical World.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Dangerous Cloaking: Natural Trigger based Backdoor Attacks on Object Detectors in the Physical World

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-12T16:58:38.965502Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:58:38.965502Z digest=sha256:9fb4a8d536887565ca367277ba6c36501034abffbeeb4676989b4f39d064eb6a

Observation b5fb4708-68ed-416c-8fbb-2455b7af2d5d · outbound

This paper cites Al-Sarawi, Surya Nepal, and Derek Abbott.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Al-Sarawi, Surya Nepal, and Derek Abbott

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.719687Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:38.969547Z digest=sha256:9502627829ca8a333f055690a8d25e6068fba3e48e8364cdd683a582b15534f2

Observation 7badc905-23d0-4547-bcaf-3cb700ec9ffd · outbound

This paper cites Prediction Poisoning: Towards Defenses Against DNN Model Stealing Attacks.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Prediction Poisoning: Towards Defenses Against DNN Model Stealing Attacks

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-12T16:58:38.974307Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:58:38.974307Z digest=sha256:59a26d145d155cd3edbdf739a2a897c70d9405fb40ed6945c15fcb10525fbedc

Observation dc660949-6b6e-40e2-9ec0-86ada525094c · outbound

This paper cites Faster r-cnn: Towards real-time object detection with region proposal networks.Advances in neural information process- ing systems, 28, 2015.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Faster r-cnn: Towards real-time object detection with region proposal networks.Advances in neural information process- ing systems, 28, 2015

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.706607Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:38.978853Z digest=sha256:d2212b52137cb5cdb3457198a2009b49cc373022dd3e5995f52710733b77c2c2

Observation 59bed89a-ca1b-43cb-85d2-6fe17df07797 · outbound

This paper cites Fine-Tuning Is All You Need to Mitigate Backdoor Attacks.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Fine-Tuning Is All You Need to Mitigate Backdoor Attacks

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-12T16:58:38.983225Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:58:38.983225Z digest=sha256:f5939eb7324a5787e7eec4458a6f1877f475b74fa5108728f59be6cc1a07c0d1

Observation 6447d236-d569-4416-a723-5f4026dc2fc7 · outbound

This paper cites Dimon, Keith Manville, and Michael Krumdick.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Dimon, Keith Manville, and Michael Krumdick

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.692582Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:38.987808Z digest=sha256:48c6dede168eed8d536606085c8965cc223cdef8a9459ce275b61d8d63ac816e

Observation cfc6c1b9-8f30-4ab6-a5ce-3ab1dc03f27d · outbound

This paper cites an unresolved cited work.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Unresolved cited work

Reference 22

Resolution
unresolved
raw_fallback, observed 2026-08-12T16:58:39.649081Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:38.991249Z digest=sha256:fbfcad482b8115cf8db14b13d74ba73906e94dfe673c8d5d6d1eb799b3cdc266

Observation 3f5a4fc7-fe69-46a2-9a81-9230c83ef110 · outbound

This paper cites Efficientnet: Rethinking model scaling for convolutional neural networks.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Efficientnet: Rethinking model scaling for convolutional neural networks

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-12T16:58:38.995212Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:58:38.995212Z digest=sha256:cb88ec7133a808fe1ba9e12c7ff8bbc7e036325a9245ec9351a5e6d7436d0629

Observation 8ec63fc3-ba07-4a16-bb78-9a200804456b · outbound

This paper cites Reiter, and Thomas Ristenpart.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Reiter, and Thomas Ristenpart

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.528063Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:39.000075Z digest=sha256:1334c98fab316aec71a463e05dfae07e44b12edf91ec31bd2e2935fd503f3bfc

Observation 6e6ff4a3-50b6-429d-b5d0-7b604f32dac3 · outbound

This paper cites Walls, and Nicolas Papernot.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Walls, and Nicolas Papernot

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.511510Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:39.015499Z digest=sha256:5f95d6651f769dcaee500840dc87ad6bc5e780522d029ebca0167d34ef8eb96a

Observation 9059e8a3-8166-4b2f-b0b9-3a424f9a8940 · outbound

This paper cites Embedding watermarks into deep neural networks.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Embedding watermarks into deep neural networks

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.496108Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:39.053491Z digest=sha256:b495cac99025115be4ec17b087252cca80d3a5619e1fdc54148e1c442be6136b

Observation 07c6a19f-32f5-4d89-a11d-05586d472698 · outbound

This paper cites an unresolved cited work.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Unresolved cited work

Reference 27

Resolution
unresolved
raw_fallback, observed 2026-08-12T16:58:39.477867Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:39.106466Z digest=sha256:8bba21840714d1b94e5a3f6cd3cac4e3de75773294e33f6f583fbf570caa54ec

Observation 48cd1a3d-ee7a-450e-bd60-aa6ae3c4d0d8 · outbound

This paper cites Seeing is not believing: Camouflage attacks on image scaling algorithms.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Seeing is not believing: Camouflage attacks on image scaling algorithms

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.457472Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:39.162814Z digest=sha256:e942902ef7f25b1585c242a03ec0e06103a309ae6f6e6aaf3705c937e1efbffe

Observation fa83a083-7297-49f3-bbc6-4d99a9c68264 · outbound

This paper cites Stoecklin, Heqing Huang, and Ian Molloy.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors Stoecklin, Heqing Huang, and Ian Molloy

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.439516Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:39.189575Z digest=sha256:6690ee85b9012dab6f2dbf1a320c607c389870aabc761f59fe962b2bfb004a1d

Observation d6f01eb2-fc38-4638-9769-9ab9a464597c · outbound

This paper cites odd BB detector.

Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors odd BB detector

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:58:39.418626Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-12T16:58:39.252380Z digest=sha256:fd67dfa7bfcb9b5ad9effce73e305ffdbcae1ab209e1d333b277e343a32ff298

Pith citing papers

No inbound Pith citation observations are available.