{"as_of":"2026-08-13T14:11:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fc9ed76168207256401e1496be901b34edd0a01af07be6c1d94883078889aa7b","coverage":[{"denominator":85,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":85,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T10:39:22.734016Z","state":"measured"},{"denominator":85,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":85,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2411.19075/citation-record","integrity":"/paper/2411.19075/integrity","json":"/paper/2411.19075/citation-record.json","paper":"/paper/2411.19075"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:22.322503Z","title":"Sneaky spikes: Uncovering stealthy backdoor attacks in spiking neural networks with neuromorphic data,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.322503Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:4f29290472c5abe7f22c09d4d6c58beae8e0e508d6c7fffa1801d53df2bcc864","observation_id":"b9c48c1c-145c-4548-a6dc-008ab9f710cd","resolution":{"observed_at":"2026-08-12T10:39:22.322503Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:22.328062Z","title":"Discrete cosine transform,","venue":null,"work_id":null,"year":1974},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.328062Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:28b4528fd3bdd3390d42af423c7eb1e9c35a4c671504c14f8f8a5f513e68c024","observation_id":"d158f612-1e8e-4bbe-bf04-369c7cca63fa","resolution":{"observed_at":"2026-08-12T10:39:22.328062Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:22.333747Z","title":"Backpropagation and stochastic gradient descent method,","venue":null,"work_id":null,"year":1993},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.333747Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:995aa4f281937a2ed5aaa175c271e1338cb2d32646ce6aec785c236af50e9b01","observation_id":"56ef9456-9196-4bf5-8d07-c71d3a82f818","resolution":{"observed_at":"2026-08-12T10:39:22.333747Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:22.339235Z","title":"A new backdoor attack in cnns by training set corruption without label poisoning,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.339235Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:fed8c690b3e0052d8a0b1c1d176c9f62adecb3106d9c11d1700b2099b6838b53","observation_id":"ae66f31c-027d-4226-8696-9b9072dcba5d","resolution":{"observed_at":"2026-08-12T10:39:22.339235Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1604.07316","last_updated":"2016-04-25T16:03:56Z","snapshot_observed_at":"2026-07-06T04:53:59.754200Z","submitted_at":"2016-04-25T16:03:56Z","title":"End to End Learning for Self-Driving Cars","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1604.07316","snapshot_observed_at":"2026-08-12T10:39:22.344173Z","title":"End to end learning for self-driving cars,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.344173Z"},"links":{"cited_paper":"/paper/1604.07316","citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:412e74d14606f9b14d1f993876c464c2d64bae0b3ed94b6d8f57668de4d18555","observation_id":"5195d491-93f5-4a99-89bb-282abb119be8","resolution":{"observed_at":"2026-08-12T10:39:22.344173Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:22.348972Z","title":"Color and spatial structure in natural scenes,","venue":null,"work_id":null,"year":1987},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.348972Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:3de970705a6600a8e2981579bc12107c7f7f0681564ef4d5a3bcba6f5764a378","observation_id":"3f7b2314-93eb-4619-864f-8ca2be8739a5","resolution":{"observed_at":"2026-08-12T10:39:22.348972Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1811.03728","last_updated":"2018-11-09T01:08:00Z","snapshot_observed_at":"2026-07-06T07:13:39.005894Z","submitted_at":"2018-11-09T01:08:00Z","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.03728","snapshot_observed_at":"2026-08-12T10:39:22.353968Z","title":"Detecting backdoor attacks on deep neural networks by activation clustering,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.353968Z"},"links":{"cited_paper":"/paper/1811.03728","citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:722f8ba5971427ffd3a1331acfce60cf051cbfad8ec297c000ed969c06be75a6","observation_id":"4ede1510-bfb8-4c13-bef6-4f0d666db9bd","resolution":{"observed_at":"2026-08-12T10:39:22.353968Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:24.036007Z","title":"Deepin- spect: A black-box trojan detection and mitigation frame- work for deep neural networks,","venue":null,"work_id":"ed526b8c-0337-4e76-bfbf-edbc1bab06a7","year":2019},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.358503Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:c541f6d299d173ecfd18e69f36510f593656cb2a607031b8d2ab631392eaec5d","observation_id":"90b3ba8f-38fc-482d-9996-e4f0f773a86d","resolution":{"observed_at":"2026-08-12T10:39:24.040648Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-12T10:39:22.362768Z","title":"Targeted backdoor attacks on deep learning systems using data poisoning,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.362768Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:0c67d2bb967cae69ee6d5efb153500133d538b5ad1329793d04128c12d96eeb2","observation_id":"66f5e49a-5d61-4e6d-993f-5b36a706980d","resolution":{"observed_at":"2026-08-12T10:39:22.362768Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:24.019348Z","title":"Deep feature space trojan attack of neural networks by controlled detoxification,","venue":null,"work_id":"3dd8dbbb-dff1-4b92-a0c2-b30b8ef3880d","year":2021},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.368713Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:0b2993d5b3b14b3df617fc79acc56a59fa6831269699e4b586da96368fbe0b30","observation_id":"61971897-25fb-48f6-809a-edbad378c5b1","resolution":{"observed_at":"2026-08-12T10:39:24.024457Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:24.001886Z","title":"Secure spread spectrum watermarking for multimedia,","venue":null,"work_id":"98395dc5-c2fe-4a40-8bc5-52b3cd0e7fa7","year":1997},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.373357Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:e5df8a35c6c185572732cfaa54488895fca77c55eb489f7c32320efadd7955a2","observation_id":"c55d93f4-fbdc-46ba-b3c4-bfdb70f26d02","resolution":{"observed_at":"2026-08-12T10:39:24.007256Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.983971Z","title":"A fast and elitist multiobjective genetic algorithm: Nsga-ii,","venue":null,"work_id":"f88683aa-9185-44bb-b20b-67c2a52f7e8d","year":2002},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.378687Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:cc0256972e543239f30438f26f7d8fd7a6325827d1372fe28ce4e431b8f2ea76","observation_id":"209555cc-a8d2-4ef2-83cb-25844c839513","resolution":{"observed_at":"2026-08-12T10:39:23.989914Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.967632Z","title":"Simulated binary crossover for continuous search space,","venue":null,"work_id":"f54dd60e-24ed-4cc8-bbaf-a2228c491096","year":1995},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.383725Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:bfba8c2285962a52a1421d87819014448632b21f8eb4cb735d9a3e7bdac76fe3","observation_id":"21ef826e-1a72-48fd-ad23-6b34496b1d88","resolution":{"observed_at":"2026-08-12T10:39:23.972585Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.951348Z","title":"A combined genetic adaptive search (geneas) for engineering design,","venue":null,"work_id":"71b4f50c-30fb-41b6-84d6-0476190b79e8","year":1996},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.389502Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:06a900346604df52e79292d42b16185706420b21c34ebf3e771ed8b3343fcf6c","observation_id":"a3ea97dc-c855-4807-a627-707591ba17d2","resolution":{"observed_at":"2026-08-12T10:39:23.956469Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.934771Z","title":"Backdoor attack with imperceptible input and latent modification,","venue":null,"work_id":"7132cef5-8aff-40df-b903-c34af0fccb6c","year":2021},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.394477Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:6a3fdb6f10033a5f4f300d8b207fc1a6f5d6ff211d26482bde2be31ab4fde0f1","observation_id":"7c939360-f5f0-48cc-9705-611ac41e9d95","resolution":{"observed_at":"2026-08-12T10:39:23.939750Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.917967Z","title":"Lira: Learnable, imperceptible and robust backdoor attacks,","venue":null,"work_id":"25de21a9-f302-42ff-aede-f52e3d7bf0f1","year":2021},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.399700Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:719b8257078b1cda0bdf8fc73cce74cb8f6f408ea809ab08b7e085a4d7b27fb9","observation_id":"8bd3acaf-4a50-447e-bd2c-aa711d592871","resolution":{"observed_at":"2026-08-12T10:39:23.922894Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.901063Z","title":"Marksman backdoor: Backdoor attacks with arbitrary target class,","venue":null,"work_id":"04e55f8e-501d-4490-8444-7ef5dbb4b4e6","year":2022},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.404425Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:2014b3204a00f372f8e485cff4bf5303964a284d8b4e1629cb3ce1ed89a2fd98","observation_id":"bcb26def-1f12-4270-9a79-72260268bcde","resolution":{"observed_at":"2026-08-12T10:39:23.906173Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.884739Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":"b3717cf7-ca4a-4c09-af16-16beee781668","year":2021},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.409418Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:f643434aedf7e41a1ea7c4bfed06f2bf8a08bbe29e2b413a9195c5d22bb64910","observation_id":"77d26c29-489c-459d-af3f-cd9e88b5698c","resolution":{"observed_at":"2026-08-12T10:39:23.889882Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.867210Z","title":"Dermatologist-level classifi- cation of skin cancer with deep neural networks,","venue":null,"work_id":"873997a4-7ccb-4f1f-92d9-ebf958b42243","year":2017},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.414463Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:bf1912d69fe669ff0242a6272508bba68020bdce0d394ad67f6011f00c41d1a0","observation_id":"4f9df884-cd52-4196-9822-e51ac0b3bf48","resolution":{"observed_at":"2026-08-12T10:39:23.872480Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.850659Z","title":"Fiba: Frequency-injection based backdoor attack in med- ical image analysis,","venue":null,"work_id":"968de1f3-c854-4f32-a4e5-f76cfbc49545","year":2022},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.419517Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:645a2dbc49adae10959164b480b627cc5ad7d060f4250cc66c14e79275332634","observation_id":"e4cc9541-35b4-4fda-9df2-65a8e5b8a48b","resolution":{"observed_at":"2026-08-12T10:39:23.855989Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.834691Z","title":"Backdoor defense via adaptively splitting poisoned dataset,","venue":null,"work_id":"6e08bd89-7eb5-42e8-87e1-a1fbe4d6cbd1","year":2023},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.425315Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:f6fa799cbc23044825dc670261ed8753b02a0e228974fda647b9aa6d99a68c70","observation_id":"a885f010-2f75-411e-9c13-f4e3bc80b0bf","resolution":{"observed_at":"2026-08-12T10:39:23.839716Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:22.430126Z","title":"Strip: A defence against trojan attacks on deep neural networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.430126Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:8311fca2a1487d955d1473430848cd2e9697f1a8bf926d385460a93feb31484e","observation_id":"f339cd8e-a6e5-4460-844e-8cae8900543c","resolution":{"observed_at":"2026-08-12T10:39:22.430126Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.806908Z","title":"A dual stealthy backdoor: From both spatial and frequency perspectives,","venue":null,"work_id":"8a303937-3f2f-49de-95cb-30b2f3adb990","year":2024},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.434949Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:0faa20604c4124cee81b444a015623228eb9d2da205a39565b0278a2b4408630","observation_id":"ed591b3e-a1a1-462e-a8a4-0e1ed710826b","resolution":{"observed_at":"2026-08-12T10:39:23.812710Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-12T10:39:22.439689Z","title":"Badnets: Identify- ing vulnerabilities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.439689Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:5bd5cb3444175a0c1edfce48d9af994c71280e793e32af5802cd4ecab83d7d62","observation_id":"8b7a5d5f-1803-455e-8544-effc77bf064f","resolution":{"observed_at":"2026-08-12T10:39:22.439689Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.791464Z","title":"Low frequency adversarial perturbation,","venue":null,"work_id":"fc48ee15-cb98-49a0-bacb-32afc1f8cf88","year":2020},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.444739Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:bb7bb089b46ea76002351c95265abaa2fb855ba6dfe903a2fa229613d762e556","observation_id":"352244b1-1ea4-4985-9c78-e5fa35ac94fb","resolution":{"observed_at":"2026-08-12T10:39:23.796234Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2109.05507","last_updated":"2023-01-09T08:26:25Z","snapshot_observed_at":"2026-08-07T13:49:34.190327Z","submitted_at":"2021-09-12T12:44:52Z","title":"Check Your Other Door! Creating Backdoor Attacks in the Frequency Domain","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2109.05507","snapshot_observed_at":"2026-08-12T10:39:22.449073Z","title":"Check your other door! creating backdoor attacks in the frequency domain,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.449073Z"},"links":{"cited_paper":"/paper/2109.05507","citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:a16bbb2ddcde86ec28a94b5cb33cc09c5771731c1da13553404f00b4023a1ff2","observation_id":"f50e3bd8-c316-4832-b1f6-0145faf44589","resolution":{"observed_at":"2026-08-12T10:39:22.449073Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:22.453843Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.453843Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:5d5ff85df0bbde701bd7978dbc7dd603f0d966203ee43d950bceb1265249b908","observation_id":"d30c3314-7cf5-45c0-8ab6-530f1a6a6dfd","resolution":{"observed_at":"2026-08-12T10:39:22.453843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.763673Z","title":"A stealthy and robust backdoor attack via frequency domain transform,","venue":null,"work_id":"11130ff4-8f22-461a-8f04-980b3896b3dd","year":2023},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.458413Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:eaddbbf8201e5ff86662cf15bd7fda5af6582a5b33289a15e70c55072e8d8fca","observation_id":"4e579c23-9a4a-49a2-b91e-9fa77e152c26","resolution":{"observed_at":"2026-08-12T10:39:23.768685Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.748016Z","title":"Detection of traffic signs in real-world images: The german traffic sign detection benchmark,","venue":null,"work_id":"e74330c0-5333-46d2-9689-7c15fc2be000","year":2013},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.462764Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:4b60098a394acb5dcc0c76e228b73bd84e39870c67576b037b232e6110b16d3b","observation_id":"399eead4-2c08-4962-80cf-19465a6940a1","resolution":{"observed_at":"2026-08-12T10:39:23.752911Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.730422Z","title":"Backdoor defense via decoupling the training process,","venue":null,"work_id":"84268738-1a54-4129-8114-58795c422f12","year":2022},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.467479Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:862d768f7584048d7b83a567cc96b023a54549fe6c623c4414716c3f61a7b110","observation_id":"0f0b3e24-8b83-4ce4-b390-d6e180c9927f","resolution":{"observed_at":"2026-08-12T10:39:23.736259Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.712314Z","title":"J ¨ahne, Digital Image Processing","venue":null,"work_id":"27a8afa5-bea0-4371-a55d-bf8b98f018bc","year":2005},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.472758Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:e635f5868b1eae2d23f3b3af8910529360385b99f8f81c9d641f8292fcfcdc79","observation_id":"63bca9ea-c245-4df8-911f-627fda841a6b","resolution":{"observed_at":"2026-08-12T10:39:23.717598Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.695608Z","title":"Color backdoor: A robust poisoning attack in color space,","venue":null,"work_id":"17925cee-a1d0-45e7-ad87-62ad8c6c6cd0","year":2023},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.477384Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:048e3c69f59760c436e63881f5e7258bd16fd91f3e2e7ca6e7e61d5003321ea2","observation_id":"324497c1-3179-4477-bd30-98fc8f9a446e","resolution":{"observed_at":"2026-08-12T10:39:23.701295Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.680226Z","title":"Fisher information guided purification against backdoor attacks,","venue":null,"work_id":"b0123616-8e7f-4069-80a8-e2877a6da20e","year":2024},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.482063Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:a5a07ecc81e0ebf784447e422fa7a93362da2d2870742a5909bd4cbd030fd1c8","observation_id":"99cccb6c-d4bf-4671-908e-42127583caa6","resolution":{"observed_at":"2026-08-12T10:39:23.684665Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.664391Z","title":"Dual-domain image de- noising,","venue":null,"work_id":"f102998b-af45-4fc6-bf52-81ef81658219","year":2013},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.486600Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:5e2cf34a0216f5e9fe72aec015d4d2b949a79113e99ce2d47cd0b98fae96cabb","observation_id":"ded3140a-b42a-44b7-b559-ba66169188a5","resolution":{"observed_at":"2026-08-12T10:39:23.669336Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.647454Z","title":"Universal litmus patterns: Revealing backdoor attacks in cnns,","venue":null,"work_id":"9f498f44-47f4-4ed0-85aa-48eba4223a0a","year":2020},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.491729Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:13b1bae1987349a93679b60b0d517fa0f9db55447503308b2b2513eac2d589d2","observation_id":"3ab1c5fa-e59f-4e35-ac7b-f6fbbf62be8d","resolution":{"observed_at":"2026-08-12T10:39:23.653048Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:22.496895Z","title":"Learning multiple layers of features from tiny images,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.496895Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:d033bc0301ab2193009d8f27c3e6fe33a63d86b7545951d75d8084fd443a9d7d","observation_id":"f2d2b9b0-b4ae-4cab-9eaa-56e4c607003e","resolution":{"observed_at":"2026-08-12T10:39:22.496895Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.619320Z","title":"Flow- mur: A stealthy and practical audio backdoor attack with limited knowledge,","venue":null,"work_id":"d62980cb-08ef-46b3-8297-41db286f7f25","year":2024},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.501770Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:b7d74303b8baa10ce74f00c97ce96ef4664e644d457e2bf2cbf990704d627555","observation_id":"de7da43c-13b9-4512-b25e-4f0428ab064e","resolution":{"observed_at":"2026-08-12T10:39:23.625532Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:22.506655Z","title":"Tiny imagenet visual recognition challenge,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.506655Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:f9763435b42fced7b208745fa72d4e2909dad4fd09d6140bdb02f61bf0bf1465","observation_id":"0d302eea-9310-49fc-afda-8b92fc8de63c","resolution":{"observed_at":"2026-08-12T10:39:22.506655Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.590624Z","title":"A theoretical analysis of backdoor poisoning attacks in convolutional neural networks,","venue":null,"work_id":"04356dc0-2aa5-45cd-89b7-e9ca17466092","year":2024},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.511974Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:2b6166354a17330f9a1767815b38fee0bb90aaa4e89285e5b7b72bd22ef514cd","observation_id":"fbc1a712-6fc3-47fc-bafc-8580bfd59d60","resolution":{"observed_at":"2026-08-12T10:39:23.596780Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.574494Z","title":"Invisible backdoor attacks on deep neural networks via steganography and regularization,","venue":null,"work_id":"3aa486b5-a65d-4ccc-ba53-3fee5a341867","year":2019},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.516630Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:ff5c433dec5715a49c30c2a46bc5e32e7d2f7f69c53700814ea3dcbd54d9bece","observation_id":"547fe407-0ecf-41d5-98a7-a8646c1843d8","resolution":{"observed_at":"2026-08-12T10:39:23.579976Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.558672Z","title":"Neural attention distillation: Erasing backdoor triggers from deep neural networks,","venue":null,"work_id":"926e5fee-d33a-4169-bbed-40c7eeeeac09","year":2021},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.521561Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:f1a89587bf6a1fd137cf664633b700e249f1dada2959d51086d07f5b217f17f8","observation_id":"00062c7e-7784-4fad-aac8-4cac60b21318","resolution":{"observed_at":"2026-08-12T10:39:23.563626Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2004.04692","last_updated":"2021-01-31T17:25:49Z","snapshot_observed_at":"2026-08-09T00:58:38.537061Z","submitted_at":"2020-04-09T17:19:37Z","title":"Rethinking the Trigger of Backdoor Attack","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.04692","snapshot_observed_at":"2026-08-12T10:39:22.526785Z","title":"Re- thinking the trigger of backdoor attack,","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.526785Z"},"links":{"cited_paper":"/paper/2004.04692","citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:a4f010c95a5820eb23016bc1bc24b9f4a7b3862217a9716e6ee4551d519e919b","observation_id":"96380ba2-2488-4f99-90a9-64c5b958c044","resolution":{"observed_at":"2026-08-12T10:39:22.526785Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.543029Z","title":"Invisible backdoor attack with sample-specific triggers,","venue":null,"work_id":"383e0d9d-3d3e-41f7-9a97-c712643e0a3a","year":2021},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.532096Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:236bd125029624dc94f9937253626ba7667524d0cb843d6857b0afe342fe2796","observation_id":"00e80af7-8e1c-4c02-8e6d-bb211350a056","resolution":{"observed_at":"2026-08-12T10:39:23.547493Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.527658Z","title":"Fine-pruning: Defending against backdooring attacks on deep neural networks,","venue":null,"work_id":"f48d67c2-c4df-41c4-a97e-1df93a9e3f7b","year":2018},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.536968Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:965b10e111e010ce9b01a8a10c2d840f07dbedfd5e51f51b132c8f5a6d20ae6c","observation_id":"65e1eceb-101c-4ee6-a5ae-4e4414ba206f","resolution":{"observed_at":"2026-08-12T10:39:23.532465Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.510870Z","title":"Reflection backdoor: A natural backdoor attack on deep neural networks,","venue":null,"work_id":"6b94e291-e18a-4ac1-8330-adc7bc9b5b1c","year":2020},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.541701Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:0543fa6fb0d90b7ad7618a83dbfa7894c28bdf3b4472f08f0ee844a558df4492","observation_id":"6009df7d-dedb-4bee-b147-4a05e66c9e07","resolution":{"observed_at":"2026-08-12T10:39:23.516668Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.494921Z","title":"Deep learn- ing face attributes in the wild,","venue":null,"work_id":"2da98786-7e70-4973-987b-2287086f9b44","year":2015},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.545793Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:881be281f46ffc4daa48c69167942104ad8f59a769a016dd32fd0dd671830dae","observation_id":"6bf725d6-feff-4817-bf26-2caaf74f46af","resolution":{"observed_at":"2026-08-12T10:39:23.499851Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.478963Z","title":"A data-free backdoor injection approach in neural networks,","venue":null,"work_id":"b53560de-cb26-4002-afb6-d7482af0d57d","year":2023},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.549967Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:1c171b3c18ee3479af6befc2ba1a4debf04fc004dd147d9ae234f0f37da5124a","observation_id":"23005fdb-ad56-473f-99d4-c2d2e58c44b8","resolution":{"observed_at":"2026-08-12T10:39:23.484154Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.462965Z","title":"Watch out! simple horizontal class backdoor can trivially evade defense,","venue":null,"work_id":"752a1e39-b80a-4311-a937-9649dde5bd21","year":2024},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.554252Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:d5f5a05372904028ca4cbb206322750e95c112f286bd051a33c785482195cc0a","observation_id":"d9feb452-a77a-4a3d-a599-67a08f318678","resolution":{"observed_at":"2026-08-12T10:39:23.467961Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.446829Z","title":"Reading digits in natural images with unsupervised feature learning,","venue":null,"work_id":"a45ac3b7-9ceb-4d0f-8565-870ed8ca5148","year":2011},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.559014Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:f5c6c08cf151347bde8e87534140f4931419f1a9bf83b3efeaf45c94a423a511","observation_id":"003e466b-151f-4ebb-91fc-326c7345ab0a","resolution":{"observed_at":"2026-08-12T10:39:23.451856Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.431297Z","title":"Input-aware dynamic back- door attack,","venue":null,"work_id":"f1b1f20c-ca22-40da-943f-8950423e093b","year":2020},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.563908Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:55e5fcdf30073818382f87e18515e2cb5d6a64b7ce3c82ae3e98eabcdf51549c","observation_id":"16d8c29d-fdaf-43a8-861d-a9d8eff141c8","resolution":{"observed_at":"2026-08-12T10:39:23.436337Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.417079Z","title":"Wanet - imperceptible warping-based backdoor attack,","venue":null,"work_id":"e13f2138-b5bc-4f6c-b58c-a1892550a062","year":2021},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.568542Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:f7b32c125a6ed67dc00ac397f349d284c0bccdf2a01104a44e454488b7fba1f3","observation_id":"5ededc13-b74c-4602-b072-5b53d9a38a62","resolution":{"observed_at":"2026-08-12T10:39:23.421421Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1511.08458","last_updated":"2015-12-02T18:06:03Z","snapshot_observed_at":"2026-07-06T04:37:52.737823Z","submitted_at":"2015-11-26T17:45:01Z","title":"An Introduction to Convolutional Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1511.08458","snapshot_observed_at":"2026-08-12T10:39:22.574325Z","title":"An introduction to convolutional neural networks,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.574325Z"},"links":{"cited_paper":"/paper/1511.08458","citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:8c74ed235524c626c20ea4c5d77c92bde33b6f5babeab9e4dbe259c48f67a033","observation_id":"50c6fa00-7d45-4eff-ba58-34a3069b0a06","resolution":{"observed_at":"2026-08-12T10:39:22.574325Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.401447Z","title":"Pytorch: An imperative style, high- performance deep learning library,","venue":null,"work_id":"a1bebe79-4c4f-4df3-a456-483e2b635d22","year":2019},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.580178Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:c5b15a9a5f9572cdb2aa07c3a3e53e6f305997c396021d2af07022b76817bfe5","observation_id":"b58857fb-ad29-467a-b558-0610daf9e8af","resolution":{"observed_at":"2026-08-12T10:39:23.406365Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.385845Z","title":"Defending neural back- doors via generative distribution modeling,","venue":null,"work_id":"a758d96b-7dbc-4980-b510-1f1b18f044a4","year":2019},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.584746Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:8a0eb2f497ba7471b036b993c922bcabaff0b4ff24218964767e2a2f5b275377","observation_id":"9bd13f37-8bb9-4e08-86ce-16be319b66d5","resolution":{"observed_at":"2026-08-12T10:39:23.390737Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.369944Z","title":"Deepsweep: An evaluation framework for mitigating dnn backdoor attacks using data augmenta- tion,","venue":null,"work_id":"f12506a2-2d1d-450f-b5c2-3337e88e9f04","year":2021},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.589486Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:4335b787e8f6d27893443bedecf40fab075f8cbcabdb23f13abc40d22bd8ca8f","observation_id":"9057ae96-3cc8-4379-b672-58fd8d89ce58","resolution":{"observed_at":"2026-08-12T10:39:23.375062Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.353131Z","title":"Belt: Old-school backdoor attacks can evade the state-of-the- art defense with backdoor exclusivity lifting,","venue":null,"work_id":"414bcf69-c5b6-448f-851f-b320b9d191dc","year":2024},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.594292Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:85766f4a43d492809fb7ad52ee83a25f13d1321ccebaaf896c0bf6af42473943","observation_id":"e3bcd350-3222-4f50-b92e-e0f5f379a30e","resolution":{"observed_at":"2026-08-12T10:39:23.359203Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.337741Z","title":"Hidden trigger backdoor attacks,","venue":null,"work_id":"2f8789b8-4903-4352-9795-dee652a33f22","year":2020},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.599715Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:14bae14ed48ce50e4b7d3812f2b148f897f65f2ab974488c42b052234bf9e67b","observation_id":"31dd24a0-3d19-41c7-9067-47ccf23a62eb","resolution":{"observed_at":"2026-08-12T10:39:23.342746Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.322075Z","title":"Dynamic backdoor attacks against machine learning models,","venue":null,"work_id":"8788948f-09b7-41eb-976e-abd2e858194b","year":2022},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.604455Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:53f0471038a009bc86093bd8252315fa23c28b7f3660664cbe9e11f9d215cc87","observation_id":"3d8eed3e-50fe-452d-ac03-a1a74741e9fa","resolution":{"observed_at":"2026-08-12T10:39:23.327173Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.306807Z","title":"Grad-cam: Visual explanations from deep networks via gradient-based localization,","venue":null,"work_id":"053712ff-2c3f-4daf-ada5-fb4938dc70aa","year":2017},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.609273Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:2832e7d209685119f89a06f4a1c66ca2d7f19c0fd0c8c66547fb24c28ac09a36","observation_id":"dcd4c87e-0d62-4b59-967a-d4c1355c9c2e","resolution":{"observed_at":"2026-08-12T10:39:23.311476Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.292545Z","title":"On the effectiveness of low frequency perturbations,","venue":null,"work_id":"fdcaf722-f287-4506-ab4a-37fb19b17a53","year":2019},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.614431Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:6d2561a0feeeb56520a1adfaf572ddfb7436eaa5155588dd262ea6dfddd64e65","observation_id":"ed569b6d-9f71-44f0-bd85-ba6472c1a7fd","resolution":{"observed_at":"2026-08-12T10:39:23.296849Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.277264Z","title":"Black-box backdoor defense via zero-shot image purifi- 15 cation,","venue":null,"work_id":"2c7534d1-6c46-4930-acaa-32fec0b15e41","year":2023},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.619242Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:f1b5f3d1e187c6063ee470c734bea41e654bec9623359f73e81257f00d912296","observation_id":"e3bb7813-0372-406d-b777-ff41f833d0a5","resolution":{"observed_at":"2026-08-12T10:39:23.282317Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.259785Z","title":"Very deep convolutional networks for large-scale image recognition,","venue":null,"work_id":"5fdd9eec-63de-4af2-b467-455c7812bae9","year":2015},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.623927Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:84c1b2c9529ceb6c2ec61ff6743e4e623ff3bd67f30f1e0a9240db84fb54d41f","observation_id":"0d885779-0a19-44e3-a277-9e931a5717d1","resolution":{"observed_at":"2026-08-12T10:39:23.265552Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.243147Z","title":"Going deeper with convolutions,","venue":null,"work_id":"b85c83b2-841f-4867-bf82-24e09b2236b1","year":2015},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.628032Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:8573e25800859f1a3bb3eb696cc491adb8c45ab54f8507bbbaa8be07581a5a7e","observation_id":"c0c062ba-09a8-49f9-8546-4091f961b7bf","resolution":{"observed_at":"2026-08-12T10:39:23.248999Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.226522Z","title":"Bypassing backdoor de- tection algorithms in deep learning,","venue":null,"work_id":"0ebef699-f145-4d5a-9c7c-effe095a64c4","year":2020},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.632034Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:83e8d856aeb49e98ad7ccc0d483823bffb3cfc3b2afc49e348769a227e1a5ea6","observation_id":"abdcc7d4-9324-4d87-9324-775a09174c79","resolution":{"observed_at":"2026-08-12T10:39:23.231946Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.210874Z","title":"Model orthogonalization: Class distance hardening in neural networks for better security,","venue":null,"work_id":"de9bd50d-d333-4553-8787-2cdcd4f8db7c","year":2022},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.636126Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:e2e41b9cda4482bcbca8755fb99ee553092320e97cc9f278f80cae4a66992b01","observation_id":"dec83c56-bf94-4c31-a6ea-8d3289dcb867","resolution":{"observed_at":"2026-08-12T10:39:23.216063Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.195818Z","title":"Amplitude spectra of natural images,","venue":null,"work_id":"69461f52-6936-4b74-b4ee-31cbf7af1c00","year":1992},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.640380Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:f1fc812ea70d85e4105b0f0bd8395b2462dbb5577583690c52effdcae0223b51","observation_id":"099b0192-6858-4465-a5a4-670f4aa6c701","resolution":{"observed_at":"2026-08-12T10:39:23.200236Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.180800Z","title":"Spectral signatures in backdoor attacks,","venue":null,"work_id":"a75b489d-9008-4928-8fdb-65b5ce1645f2","year":2018},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.645197Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:ef6ed9e1d4733a161bbfcbab1d0410d9694d165c6cb3d4ac997554d5e5dec648","observation_id":"33af07f7-6616-4332-8b0b-350ff5b9e948","resolution":{"observed_at":"2026-08-12T10:39:23.185320Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.163479Z","title":"Neural cleanse: Identifying and mit- igating backdoor attacks in neural networks,","venue":null,"work_id":"a0dd8a79-7209-4433-b8f3-4b717ea42bff","year":2019},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.650538Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:c5887a7a740d91a77caafae9600be38cec2d80bea55d001c306a382eaab38061","observation_id":"a30149db-2509-4839-a111-e31e88dc2b53","resolution":{"observed_at":"2026-08-12T10:39:23.169283Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.145868Z","title":"MM- BD: Post-Training Detection of Backdoor Attacks with Arbitrary Backdoor Pattern Types Using a Maximum Margin Statistic,","venue":null,"work_id":"630c8030-a821-4036-8812-71ef5576a5e4","year":2024},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.656192Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:437e5eaa32595be82b62517ced75960d4106bb46f43117a55fc33bf427a511fc","observation_id":"3e3e540e-a4d6-497b-985f-87836b211d7c","resolution":{"observed_at":"2026-08-12T10:39:23.151252Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.00816","last_updated":"2024-06-24T15:40:01Z","snapshot_observed_at":"2026-08-13T11:27:10.280255Z","submitted_at":"2023-06-01T15:42:06Z","title":"Versatile Backdoor Attack with Visible, Semantic, Sample-Specific, and Compatible Triggers","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.00816","snapshot_observed_at":"2026-08-12T10:39:22.661197Z","title":"Versatile backdoor attack with visible, semantic, sample-specific, and compatible triggers,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.661197Z"},"links":{"cited_paper":"/paper/2306.00816","citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:1f039e826b1fa40a089cc611c63fa6027c5a14ce77b1488323725bbe0350642d","observation_id":"f238d8e2-3661-4402-b6a2-1ad57b0e2bad","resolution":{"observed_at":"2026-08-12T10:39:22.661197Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.128988Z","title":"An invisible black-box backdoor attack through frequency domain,","venue":null,"work_id":"a8d00cbf-8274-49ba-9066-31f83e0dcaa8","year":2022},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.666086Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:1aa01564998a0a4df3d59a6d3dd940a97ff7bc1029aa54d89db22ca94f48cdca","observation_id":"8b73a7c0-5ccb-41b7-957e-bda918a1291a","resolution":{"observed_at":"2026-08-12T10:39:23.134174Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.112553Z","title":"D3: Deep dual-domain based fast restora- tion of jpeg-compressed images,","venue":null,"work_id":"ba968eb1-9c55-49d5-b565-eade05b25b54","year":2016},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.670921Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:3951eae5e4982c5d9b8658a73e020aead3132a8906fa4febc95c2f30e0a2b4a4","observation_id":"15bcba9f-c257-4cec-a1f9-57a3fdbb018a","resolution":{"observed_at":"2026-08-12T10:39:23.117691Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.096102Z","title":"Latent backdoor attacks on deep neural networks,","venue":null,"work_id":"c411c573-0d1e-4a71-8c0d-7f5e3129546f","year":2019},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.675843Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:80a478bfb6dbc5b9a228305a9aeaedcb3a3c114fd9cb926865259500edd99595","observation_id":"3981d7a3-22c4-4f39-8311-304477f1991e","resolution":{"observed_at":"2026-08-12T10:39:23.101338Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.079786Z","title":"Narcissus: A practical clean-label backdoor attack with limited information,","venue":null,"work_id":"e23bc6c4-7643-4594-a8e6-b5985636008d","year":2023},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.680652Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:6aae7c397c25694a4bdc6d06f25f7f53e9ca23e459bd096b83f8ab67f9cfbb5d","observation_id":"492fdd91-9f0d-4f56-a979-3ff5046bd901","resolution":{"observed_at":"2026-08-12T10:39:23.085023Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:22.685303Z","title":"Rethinking the backdoor attacks’ triggers: A frequency perspective,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.685303Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:5211a2532e6ff4192986ccca478165a87d45aacde9efd8890f3513fa03459c1b","observation_id":"cd167b17-8eca-430b-8283-3b1a2167ce86","resolution":{"observed_at":"2026-08-12T10:39:22.685303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.07362","last_updated":"2024-09-02T08:28:44Z","snapshot_observed_at":"2026-08-12T23:03:53.797341Z","submitted_at":"2024-08-14T08:19:23Z","title":"BadMerging: Backdoor Attacks Against Model Merging","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.07362","snapshot_observed_at":"2026-08-12T10:39:22.690265Z","title":"Badmerging: Backdoor attacks against model merging,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.690265Z"},"links":{"cited_paper":"/paper/2408.07362","citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:c956ffc1b605eec8a2c2c1b4da955578606aa9c47c633276f4fa992331b847b8","observation_id":"08826ee9-99cf-46c8-a77b-ff8c5375da18","resolution":{"observed_at":"2026-08-12T10:39:22.690265Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.050786Z","title":"The unreasonable effectiveness of deep fea- tures as a perceptual metric,","venue":null,"work_id":"9bf35e69-bde2-4a1b-a150-5c5eb17ab355","year":2018},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.695197Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:fcc1005b8c16fad582be6d600e7f2887a41b0d0fbee96cf2f7fed40b3c206c40","observation_id":"f62c7a7f-401b-4be3-9f2b-511120b56691","resolution":{"observed_at":"2026-08-12T10:39:23.056267Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.034727Z","title":"Shufflenet: An extremely efficient convolutional neural network for mobile devices,","venue":null,"work_id":"cabf0917-01bd-4cd7-bea5-d9fcc970b27e","year":2018},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.699898Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:97bfd232f52c65c145635c478c2063be7b0bb8b8a187a318f107abcf4dda1805","observation_id":"26cd11dc-2b8f-41e8-b231-35aa549c754e","resolution":{"observed_at":"2026-08-12T10:39:23.039628Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:23.018695Z","title":"Backdoor defense via deconfounded representation learning,","venue":null,"work_id":"a0b6ac19-8f10-4f1a-8a7b-cad157cbf06f","year":2023},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.704433Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:293cc1bae44bb0816bba8501fabd7c4dbacf9cb1dc2513f288030456136cbb9c","observation_id":"b09c203e-e5e8-483c-94bb-b7782b705a1b","resolution":{"observed_at":"2026-08-12T10:39:23.023610Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:22.709015Z","title":"Defeat: Deep hidden feature backdoor attacks by imperceptible perturbation and latent representation constraints,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.709015Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:16ff35cafdea6dfde61c88c229710b8861fc359a3fe34fcaf8ce0c38baa3eff9","observation_id":"297f7fcd-a59c-494f-b065-652ae58cc235","resolution":{"observed_at":"2026-08-12T10:39:22.709015Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:22.987778Z","title":"Imperceptible back- door attack: From input space to feature representation,","venue":null,"work_id":"213ad61a-03cb-4578-9c75-07590937c8db","year":2022},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.713900Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:5484571f656e9c54471ba17b0a482ddf38f9e8b7f86c55de528c9b9032cc860c","observation_id":"3507472b-9652-4477-8df1-7c770416f81c","resolution":{"observed_at":"2026-08-12T10:39:22.993974Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:22.970724Z","title":"Neural polarizer: A lightweight and effective backdoor defense via purifying poisoned features,","venue":null,"work_id":"63b98ab9-6954-4240-a0e2-1e2085ed5db1","year":2023},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.719353Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:9abf9190c74e52fe46f3c7fcb50c6329c21c43100e1093c910b975c4aad2530c","observation_id":"b24ba50e-c45a-4023-b93a-eb498b35d3a1","resolution":{"observed_at":"2026-08-12T10:39:22.976267Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:22.953466Z","title":"ASD adaptively splits clean from the poisoned dataset during training so as to defend backdoors","venue":null,"work_id":"8c17765b-af6d-4fcd-a669-9f2c6e92d054","year":null},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.723820Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:de3980785e509f8375ae48e9cc082f55f8ae07933bb4c2a037ce8172cd053fb2","observation_id":"505d9e6a-d8de-4b30-8244-df97051ba2a5","resolution":{"observed_at":"2026-08-12T10:39:22.958720Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:22.937278Z","title":null,"venue":null,"work_id":"374f0eaf-13fd-495a-ba5b-25ba2201308e","year":null},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.729034Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:b518a2be49899baeb18d81ffe8dade34c67d4c534a05618183235a203024b009","observation_id":"24aa86b0-8bca-46c8-b438-6f8b779168be","resolution":{"observed_at":"2026-08-12T10:39:22.942241Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:39:22.919820Z","title":"They cannot be trivially extended to produce dual-domain stealthy triggers","venue":null,"work_id":"3bbda4c0-e3ff-4ebf-a593-3983bd1005cd","year":null},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.734016Z"},"links":{"citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:ad4f0b144fce712e41bcc34c7b3cf30f28080757e8fd30f39c0d5b5b4a17e72c","observation_id":"8694ca4f-c451-447c-9646-ffc2dd175dcc","resolution":{"observed_at":"2026-08-12T10:39:22.925954Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-13T13:24:30.110308Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm"},"reference_resolution":{"displayed":85,"state_counts":{"malformed_identifier":2,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":21,"verified_exact":0,"verified_fuzzy":62},"total_outbound_references":85},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 85 of 85 outbound references and 0 inbound Pith citation observations for arXiv:2411.19075."}