{"as_of":"2026-08-16T23:08:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:eb5172e11b4bc655d9eb1caaa36f165e61e186f75e9ceb3ce26fb4171b7547a6","coverage":[{"denominator":72,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":72,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T20:00:29.101380Z","state":"measured"},{"denominator":72,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":72,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2412.06219/citation-record","integrity":"/paper/2412.06219/integrity","json":"/paper/2412.06219/citation-record.json","paper":"/paper/2412.06219"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.486859Z","title":"Model Zoo","venue":null,"work_id":"2a063931-2059-4d73-9a05-fd7e4d6a75e1","year":2023},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.609928Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:041a3d33c06e1557af739146b76481628658a8cb69867391c78bfc1318e998a0","observation_id":"776fad2f-5b6f-4e1b-ae21-99ab95a3aef1","resolution":{"observed_at":"2026-08-11T20:00:30.491520Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.470737Z","title":"TensorFlow Model Garden","venue":null,"work_id":"7db8cbb3-0813-4973-88e1-99ad51539405","year":2023},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.617899Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:727454f26cd6849c9d4ca7a8c678b21f4a125c48e0d4fbadb11b2e5a513d8e88","observation_id":"c0900220-e8c9-41e6-8781-4370597c3fbf","resolution":{"observed_at":"2026-08-11T20:00:30.476019Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.457784Z","title":"Hugging Face","venue":null,"work_id":"fc60c01f-6a7a-4672-90cd-cf353c5f3d0c","year":2023},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.625426Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:2bbfcc4d0576557516bf4df87870a396dbd6be61443bec873ad6c81325814ab3","observation_id":"33add1ca-2572-47e8-9f2a-49c732d21500","resolution":{"observed_at":"2026-08-11T20:00:30.461812Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T20:00:28.631573Z","title":"Dolan-Gavitt, S","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.631573Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:3e9db312d066637c002d813ce9cb0f1b84bf6b8d3b6edd40b7c8a8b89514d695","observation_id":"05bb18e0-32ef-4f8a-a0d5-5036b28485c8","resolution":{"observed_at":"2026-08-11T20:00:28.631573Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-11T20:00:28.638642Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.638642Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:f916d13850c01a470a7d793b52f06ae6c3726342f887c2fe5bbbfb482701fa7b","observation_id":"c69a2a60-ca26-475c-8dc0-45e6b1bfc191","resolution":{"observed_at":"2026-08-11T20:00:28.638642Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.442422Z","title":null,"venue":null,"work_id":"e8fa903c-bf84-447a-bc05-a2204c3eac3b","year":2018},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.645314Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:cc035df72822d2bfbf328b44055e36112d4446430ca638926d4be21cb803983e","observation_id":"af55c425-78dc-484f-8929-a0e635bb341f","resolution":{"observed_at":"2026-08-11T20:00:30.448655Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.417761Z","title":"Open source autonomous driving","venue":null,"work_id":"39fb2427-3330-48e5-960c-4a65a4b64b0a","year":2017},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.653779Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:7c6279a9cfc0f140b81cfdc814e5b7cd98336e566a02fc74cd661e32f38c430f","observation_id":"1e212ba3-6700-488c-b404-47fe0bbbc548","resolution":{"observed_at":"2026-08-11T20:00:30.424850Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2206.04881","last_updated":"2022-06-10T05:34:06Z","snapshot_observed_at":"2026-08-16T16:54:00.468354Z","submitted_at":"2022-06-10T05:34:06Z","title":"Enhancing Clean Label Backdoor Attack with Two-phase Specific Triggers","version":1},"cited_work":{"arxiv_id":"2206.04881","doi":null,"metadata_source":"pith","pith_arxiv_id":"2206.04881","snapshot_observed_at":"2026-08-11T20:00:29.413763Z","title":"Enhancing Clean Label Backdoor Attack with Two-phase Specific Triggers","venue":"cs.CR","work_id":"5f99b912-f081-432b-a717-e9abcbabea5f","year":2022},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.663170Z"},"links":{"cited_paper":"/paper/2206.04881","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:8611ccfc71279c5037616f3b33c6af7a48b9a54d5888576096187d7993919f67","observation_id":"500aa1eb-05f8-415e-b90b-6b8ae3392131","resolution":{"observed_at":"2026-08-11T20:00:29.420214Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.390428Z","title":"Subramanya, H","venue":null,"work_id":"940eb981-75c0-4249-a48a-54cba7ad3f6d","year":2020},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.669942Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:6b365474b2aa98683496764443a1af9686644b1d828b4551784baedf90c7a6d3","observation_id":"97ed7893-ac21-476e-9dac-bf04bc8f4eb8","resolution":{"observed_at":"2026-08-11T20:00:30.398420Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.373909Z","title":null,"venue":null,"work_id":"30506705-0c9f-4727-b3a5-8175316c920a","year":2019},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.688955Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:e1f0473a234203d565baa8fd6bdc154431ac6554cd7114d430be39dfd59ece2b","observation_id":"7d7e7aea-5628-4e13-bdf0-ba262a1d6a63","resolution":{"observed_at":"2026-08-11T20:00:30.378784Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.349986Z","title":null,"venue":null,"work_id":"edbb24ed-dbca-4ac2-a76f-9697c733b126","year":2020},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.695455Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:0f56e5dc7a987b425ae15297abcf55652e9e1b272f988e68b0ce195914d74c79","observation_id":"d9e2c123-8ca6-4ec3-9b63-5b5db57523b8","resolution":{"observed_at":"2026-08-11T20:00:30.356337Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.332615Z","title":null,"venue":null,"work_id":"c35cafed-af04-466b-a3be-2a167e848d85","year":2020},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.702612Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:bf5f9ffb443dcce8c54e487f28c6e70a1192975347f77cefb031a2c5f1f9de86","observation_id":"ea4bb6af-55d9-4645-a240-d7c8d0484fe7","resolution":{"observed_at":"2026-08-11T20:00:30.339106Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2004.04692","last_updated":"2021-01-31T17:25:49Z","snapshot_observed_at":"2026-08-13T23:03:12.177796Z","submitted_at":"2020-04-09T17:19:37Z","title":"Rethinking the Trigger of Backdoor Attack","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.04692","snapshot_observed_at":"2026-08-11T20:00:28.708959Z","title":null,"venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.708959Z"},"links":{"cited_paper":"/paper/2004.04692","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:0f00dcbaf4baf70bbe7743bbda0d285c48f2e8b892c6d80c452bed64f3986891","observation_id":"a7a3fa06-d516-419a-87a3-e35e8c22bcf8","resolution":{"observed_at":"2026-08-11T20:00:28.708959Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-16T18:44:13.954731Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-11T20:00:28.716498Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.716498Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:0b4de6ac0f85d67d3f6d04ba7e069dda6736eee45d97c152cfb136f5be147165","observation_id":"4d1026c0-b1ed-4246-bff7-794685e6452f","resolution":{"observed_at":"2026-08-11T20:00:28.716498Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.316111Z","title":null,"venue":null,"work_id":"f95e93e3-0005-4b4b-b731-f27a244579ee","year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.726683Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:e534ebc273c97ba373eb650d3fce54a427e5275adf823d68f2c3d8ee0411e65a","observation_id":"d9c165d2-cc3b-46fa-9619-5ac99c74f44d","resolution":{"observed_at":"2026-08-11T20:00:30.320819Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.297706Z","title":null,"venue":null,"work_id":"4f7b909c-a9b8-4bb6-96ce-7935fcaa6322","year":2020},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.739868Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:e9598ba2f894349c93d01b4bd1f6d30781168e32b34acbf61b9df0073f1e1cae","observation_id":"9632d597-f46c-4d94-84a0-062ef25f10a1","resolution":{"observed_at":"2026-08-11T20:00:30.302753Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.281056Z","title":null,"venue":null,"work_id":"1150f98b-bd8c-4d0a-9a25-0361a640d593","year":2020},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.749663Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:e89ed53fcf49c7d81544133570d84795154cfbd30e60c4ceee609a8fa42b03be","observation_id":"414b2a37-cb55-48c7-a962-2d5393e15e07","resolution":{"observed_at":"2026-08-11T20:00:30.287586Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.258765Z","title":"Shmatikov","venue":null,"work_id":"2c343307-5e24-4c69-ae37-b2b6f867eba5","year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.758434Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:e077b98bd90cb116f104a55a452c91a641a4e9a0df3e1e42281c82165a4de50a","observation_id":"3ddd5344-45e7-494d-bebc-3b24052ce397","resolution":{"observed_at":"2026-08-11T20:00:30.270106Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10496","last_updated":"2021-02-21T03:13:27Z","snapshot_observed_at":"2026-08-16T18:44:10.048586Z","submitted_at":"2021-02-21T03:13:27Z","title":"Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10496","snapshot_observed_at":"2026-08-11T20:00:28.764955Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.764955Z"},"links":{"cited_paper":"/paper/2102.10496","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:586dff616c300a699b5f630b9044fcca7a8e7bbb36682eefbbc5479d69b3be5e","observation_id":"aacab4a1-7142-4dce-8792-c39d4104458c","resolution":{"observed_at":"2026-08-11T20:00:28.764955Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.241463Z","title":null,"venue":null,"work_id":"1785ed46-8200-4c01-bb9e-819f591d6f16","year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.771294Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:48317425b9c237d8e37dd6ec988c0bb4ca1d141afa0b11c0619dbb2fa5d7fa53","observation_id":"2886778b-89b5-4bab-9148-7f658539247a","resolution":{"observed_at":"2026-08-11T20:00:30.247090Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.222852Z","title":null,"venue":null,"work_id":"06259c7d-51fa-47ff-b271-d0d054eb8205","year":2020},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.776301Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:1579ca1ec7e49a81ff62ca0d86b7c3bdf070c86c631420d0ca367f7afdbb328c","observation_id":"69345fdd-629d-4b84-9075-739d310735c8","resolution":{"observed_at":"2026-08-11T20:00:30.228187Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.206599Z","title":null,"venue":null,"work_id":"605e49a6-8b80-45e7-bd3b-f144075fc53b","year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.782292Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:c2d73570b8024afa691693725ac26f6445d386916506a5e1b55c2df16c8430c3","observation_id":"316c230d-112a-408a-a26b-9c9503287333","resolution":{"observed_at":"2026-08-11T20:00:30.212268Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.188541Z","title":"Passananti, A","venue":null,"work_id":"06acdc9f-4246-47d3-8b92-6c59ccb6287a","year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.786906Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:c3a726984a7b917f390748eb19038b4a0b389d6e94f484fe2106b3f7f37a1dbe","observation_id":"05ca1398-0eea-4668-9bf3-1081781e18f9","resolution":{"observed_at":"2026-08-11T20:00:30.195103Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.172422Z","title":null,"venue":null,"work_id":"58d10306-cfb2-4ca3-b218-ecddea080991","year":2022},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.793789Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:95e8a36827abab5f32254a917b07532bf53e466975ee8d4365fa816be3a7526d","observation_id":"0c3ed2d7-b89f-4162-ad32-6b0059bcca4a","resolution":{"observed_at":"2026-08-11T20:00:30.177800Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.09194","last_updated":"2022-10-17T15:46:57Z","snapshot_observed_at":"2026-08-16T16:23:29.724973Z","submitted_at":"2022-10-17T15:46:57Z","title":"Marksman Backdoor: Backdoor Attacks with Arbitrary Target Class","version":1},"cited_work":{"arxiv_id":"2210.09194","doi":null,"metadata_source":"pith","pith_arxiv_id":"2210.09194","snapshot_observed_at":"2026-08-11T20:00:29.335726Z","title":"Marksman Backdoor: Backdoor Attacks with Arbitrary Target Class","venue":"cs.CR","work_id":"7f967c2f-fd37-4427-90e4-29659c568dc7","year":2022},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.799627Z"},"links":{"cited_paper":"/paper/2210.09194","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:218631b4ab8912f525906ca5ce2c8ce27370c11df6f77402cb938fca53b1630f","observation_id":"b3721486-ea15-48ad-afa2-aa87c6dabbb0","resolution":{"observed_at":"2026-08-11T20:00:29.342262Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.158906Z","title":null,"venue":null,"work_id":"7d238f99-c49d-4b2e-8e48-3c6830d612f8","year":2023},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.807358Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:a86d1db9ba3ae0934144d543b15298276b8cb6ce6a124bf7f153acff4fa36ed1","observation_id":"1bf07649-4168-4822-961e-59bd75b1a37f","resolution":{"observed_at":"2026-08-11T20:00:30.163557Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.143191Z","title":"Carlini, A","venue":null,"work_id":"cb32d568-9fc8-4164-bca7-ff1bf321b6ed","year":2022},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.819423Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:f46b4e900094e3fca8ea1c87f0ef937eef6fb6f1bf44e8c0a7617fe350714b86","observation_id":"f686726e-97bc-48af-9252-0fd0c56f9e02","resolution":{"observed_at":"2026-08-11T20:00:30.149059Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.125822Z","title":"Shumailov, Y","venue":null,"work_id":"9278f86d-198d-4ad1-bd14-46db6303aded","year":2023},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.826225Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:d9471a35bed957d0bf7dbc5c10dd8afeba08b78c5d82c7a46d3e8b5095217db9","observation_id":"7578a2d1-2b2d-4e0a-883f-924ceedf56bb","resolution":{"observed_at":"2026-08-11T20:00:30.132484Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.109229Z","title":"Code of Neural Cleanse","venue":null,"work_id":"36fbe02a-c906-4e6d-9bfd-95d858673356","year":2023},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.832019Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:4e0076e5cc561f2f47eb04d3193737fdb825a94477efba4ddf8b8e9b39d1395b","observation_id":"50f7f07f-169f-4ae3-bd64-beddbcfe0c51","resolution":{"observed_at":"2026-08-11T20:00:30.113731Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.094524Z","title":null,"venue":null,"work_id":"4ff227b5-22bd-4776-ae7e-3fc2ad2490eb","year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.837591Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:2e76ccf074d619ae9f1e1c282c0b922d144cc80cc264315458912fae15f8cfad","observation_id":"e139159e-b078-45d0-9b8d-187b81089958","resolution":{"observed_at":"2026-08-11T20:00:30.099660Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.072041Z","title":null,"venue":null,"work_id":"67fa09f9-c4cb-47fd-8a7b-e89bfa7ab1ef","year":2019},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.842478Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:17665701ea73bec9a532a80326131dd090d1e66aa1f7bd1ac30f4d0b605e2480","observation_id":"76dd60d8-d8a1-4fd6-b0f2-f6936b58b92d","resolution":{"observed_at":"2026-08-11T20:00:30.076132Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2204.06974","last_updated":"2024-11-09T18:58:35Z","snapshot_observed_at":"2026-08-16T17:06:55.468164Z","submitted_at":"2022-04-14T13:55:21Z","title":"Planting Undetectable Backdoors in Machine Learning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.06974","snapshot_observed_at":"2026-08-11T20:00:28.848437Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.848437Z"},"links":{"cited_paper":"/paper/2204.06974","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:5e112458c2b67a43cd2cba4566e6acd053d7354cdb5294de67c5b7cb0eeeffe6","observation_id":"66843992-7b8f-4aac-b798-902764d22562","resolution":{"observed_at":"2026-08-11T20:00:28.848437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.057386Z","title":null,"venue":null,"work_id":"ce9540c8-2274-4a16-8c1f-de0a5eae3811","year":2019},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.856949Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:16d28423fe35a5cd15c016112b713ef954181d89298306fe369534292dc9c960","observation_id":"ff603fac-4451-4e71-b526-5d3171698243","resolution":{"observed_at":"2026-08-11T20:00:30.062186Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.040145Z","title":"Frigo, Y","venue":null,"work_id":"41e3ba57-dc9a-4af9-88b1-ed6f415338e8","year":2019},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.872743Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:517894f51c8295c30a86034c2d7b5163efaa8f1eb9974fb5f6469edf5d0eb620","observation_id":"260970da-98b8-44b3-ba00-43031575e3cb","resolution":{"observed_at":"2026-08-11T20:00:30.049048Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.025250Z","title":null,"venue":null,"work_id":"2fda6539-383e-4878-8ae2-14994fff23f4","year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.879201Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:f9284ae7093cc67f3bc0247b62e8de166c0732510147aef98592db516d73a419","observation_id":"df2baf7f-3868-4b63-b6d2-a148b849c504","resolution":{"observed_at":"2026-08-11T20:00:30.030111Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:30.011360Z","title":null,"venue":null,"work_id":"2ea9a5e7-c513-47b7-987a-9e58b58d235e","year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.883638Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:3bfaf77fdcc4db180ba820b4248f0415f7dd55506ca6ba14acd35054056a8a4e","observation_id":"d9437962-710e-4db2-815e-22747ed08ea3","resolution":{"observed_at":"2026-08-11T20:00:30.016385Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.990303Z","title":null,"venue":null,"work_id":"5a7c87a5-e2b5-4730-b098-8a46c4124c68","year":null},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.888738Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:3eeecae0dafa2f02ba4c4c8f3bcd2a70b0fd7a2279e833d279d42a9e345e7adb","observation_id":"4af851d9-5b51-4fc9-a43f-a48baf8c4bac","resolution":{"observed_at":"2026-08-11T20:00:29.997275Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.03299","last_updated":"2024-05-06T09:21:15Z","snapshot_observed_at":"2026-08-16T13:55:07.492307Z","submitted_at":"2024-05-06T09:21:15Z","title":"DarkFed: A Data-Free Backdoor Attack in Federated Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.03299","snapshot_observed_at":"2026-08-11T20:00:28.895118Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.895118Z"},"links":{"cited_paper":"/paper/2405.03299","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:413723d44f94c7cf437d4e5773c1ae4fbfe29d1ceb52a2995a1dc82b2ec7a422","observation_id":"830adb49-0d5e-47b9-b531-87c08c86fbf2","resolution":{"observed_at":"2026-08-11T20:00:28.895118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.975664Z","title":null,"venue":null,"work_id":"54fc1331-6b4b-474f-8919-a6da2fde7bc6","year":2017},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.900516Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:67ea404c0df2f061314cbee2c27ed6900864059422905460ccd4066437ea0449","observation_id":"99e9f2aa-292f-47d0-aff0-5aae657355c1","resolution":{"observed_at":"2026-08-11T20:00:29.981301Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.962998Z","title":null,"venue":null,"work_id":"be5bee77-2853-41c6-8544-bf8414c3895c","year":2018},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.906206Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:844ffd16dbdd5a58d1a4d834edad8b6f05eae617c6ba2d885ce6f20a851ae335","observation_id":"6663e514-f055-43ed-bb81-20bdf01daa40","resolution":{"observed_at":"2026-08-11T20:00:29.967095Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1911.07116","last_updated":"2019-11-16T23:32:20Z","snapshot_observed_at":"2026-07-06T08:37:31.693392Z","submitted_at":"2019-11-16T23:32:20Z","title":"Robust Anomaly Detection and Backdoor Attack Detection Via Differential Privacy","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1911.07116","snapshot_observed_at":"2026-08-11T20:00:28.912343Z","title":null,"venue":null,"work_id":null,"year":1911},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.912343Z"},"links":{"cited_paper":"/paper/1911.07116","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:28bebe7d0a3f10cd0db89278da17cc929d30af4798bb48ef36211b1db1ed74b3","observation_id":"a90322b8-6abf-463b-968f-8171fa61e066","resolution":{"observed_at":"2026-08-11T20:00:28.912343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2003.08904","last_updated":"2023-08-03T14:59:19Z","snapshot_observed_at":"2026-08-13T23:13:52.516529Z","submitted_at":"2020-03-19T17:05:51Z","title":"RAB: Provable Robustness Against Backdoor Attacks","version":8},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2003.08904","snapshot_observed_at":"2026-08-11T20:00:28.918452Z","title":null,"venue":null,"work_id":null,"year":2003},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.918452Z"},"links":{"cited_paper":"/paper/2003.08904","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:c2a6f5c02b5f1d4a5c499a904c5bce5489daf4be27dc5b5cef41b13891a75a5d","observation_id":"fd4ac2c7-9e1b-4f94-948f-6ede3ceb5bfe","resolution":{"observed_at":"2026-08-11T20:00:28.918452Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.949812Z","title":null,"venue":null,"work_id":"c6c2649c-3839-46d3-9977-dba8a9459287","year":2020},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.923809Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:82944a4e66fe442d72b7ff882b4915e4818a15dd0ae967e0e1c0ccb9b1d99ffb","observation_id":"383aea18-99cd-4e6f-8477-78eedac22bbf","resolution":{"observed_at":"2026-08-11T20:00:29.953995Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.935317Z","title":null,"venue":null,"work_id":"14208657-0ce4-4987-bc41-75d93f488f4f","year":2019},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.930980Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:dbf129ef646bff479d075f28ab565de5f06219470f12d0860e4c9efa56e28f89","observation_id":"e469de33-740f-42e7-b2e4-72dbe2323d01","resolution":{"observed_at":"2026-08-11T20:00:29.939682Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.907337Z","title":null,"venue":null,"work_id":"b98a6c19-d761-45b2-a300-9ac4ab023cd4","year":2019},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.938388Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:1fbb9b7a05d48e68bbe0f17272ade740caa8824bc16d340e76343d70bca2bbfe","observation_id":"3b5155ff-7b7b-4b1a-b628-f3a81e2676de","resolution":{"observed_at":"2026-08-11T20:00:29.911548Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.891873Z","title":"Tramer, G","venue":null,"work_id":"ce8dba03-5013-43e7-a586-786bb749d2d1","year":2020},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.946099Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:ca0f6322156aefb6fe1128f8d7f320edb31d18a2198d2a10a1c6a96bf0209655","observation_id":"f46e09a5-c3d7-480c-a709-e4a09e1ccf5d","resolution":{"observed_at":"2026-08-11T20:00:29.895829Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.11715","last_updated":"2022-12-19T04:02:37Z","snapshot_observed_at":"2026-08-16T16:30:18.531844Z","submitted_at":"2022-09-23T16:47:19Z","title":"The \"Beatrix'' Resurrections: Robust Backdoor Detection via Gram Matrices","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.11715","snapshot_observed_at":"2026-08-11T20:00:28.951464Z","title":"beatrix","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.951464Z"},"links":{"cited_paper":"/paper/2209.11715","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:90acd89b092806e8d9912369489a87c2f6b9ce701ac4bf8a10c39015aa43cdde","observation_id":"b47b8624-e875-46b4-bbef-81f2d9b67e78","resolution":{"observed_at":"2026-08-11T20:00:28.951464Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.874070Z","title":null,"venue":null,"work_id":"2a258632-df47-4e7f-ad92-416dacb92bff","year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.957359Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:7020ca5f4f1ce5ebc779866c8dd4ef620601d44f0e14a4a6c8b5ef557f07d13c","observation_id":"94778fd0-f302-4348-92fb-f4b31df59a8e","resolution":{"observed_at":"2026-08-11T20:00:29.878406Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.862352Z","title":"Mahloujifar, P","venue":null,"work_id":"7cbf1bd1-1880-4330-8584-36b560023d0b","year":2022},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.961976Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:10f629ecf5e82d7a3cf1261fa64d9b1328d267158ffc6a1e5a810067953ecbf3","observation_id":"58a4441f-a0f7-41a8-84e6-199c0e5989f7","resolution":{"observed_at":"2026-08-11T20:00:29.866425Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.15127","last_updated":"2022-10-27T02:25:18Z","snapshot_observed_at":"2026-08-16T16:20:47.627899Z","submitted_at":"2022-10-27T02:25:18Z","title":"Rethinking the Reverse-engineering of Trojan Triggers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.15127","snapshot_observed_at":"2026-08-11T20:00:28.966391Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.966391Z"},"links":{"cited_paper":"/paper/2210.15127","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:2cd66404ec37d363ab52dbf0a16c44fa9cb8bcb26665cac7f6b8435d3fb66b25","observation_id":"efd20db1-1b2b-430d-9341-bf61a590a2dd","resolution":{"observed_at":"2026-08-11T20:00:28.966391Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.847460Z","title":"Dolan-Gavitt, S","venue":null,"work_id":"8f89749e-4767-4348-a440-7d5bd07e0e5f","year":2018},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.971008Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:0a49707801cb2d358c6e6453411151e07a25a70161082e7b84c1a89134c02128","observation_id":"0dc4d517-ffd2-44c2-987d-9603d753a06c","resolution":{"observed_at":"2026-08-11T20:00:29.853053Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.833508Z","title":null,"venue":null,"work_id":"82b80183-67ed-432e-879a-6d652284eae7","year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.977081Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:5e0f860df4534794c6b33c225a12215992a2d6288c4de57c42bc04e109404211","observation_id":"048fcfbc-dd38-40c6-9eac-570824145448","resolution":{"observed_at":"2026-08-11T20:00:29.838036Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.817112Z","title":null,"venue":null,"work_id":"42373fba-a638-4615-8d27-c2a45776db8e","year":2022},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.981716Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:943cd6cd5a54c909aad4cc9ea5987e667b353e46f2c0a64031c70d1341f3a0c9","observation_id":"c126d03a-af21-447a-8be1-7caef170d58c","resolution":{"observed_at":"2026-08-11T20:00:29.822646Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.795040Z","title":null,"venue":null,"work_id":"9285eb44-6eef-4c86-a98b-ed8ea1c31273","year":2022},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.986970Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:d153168f147d1fcc3885dcc0ae62e313d87195a11e2f29a52411fa3426cc613b","observation_id":"0fbef016-375d-443c-8dc0-2558dbfb42b1","resolution":{"observed_at":"2026-08-11T20:00:29.804884Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.770706Z","title":null,"venue":null,"work_id":"b74adc35-275c-4f2a-a85d-4da8588a4040","year":2022},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.990931Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:fe70f987d05f4d020f8b8a52a770b633adab93a0f9382675077e6fbf01e415df","observation_id":"6129649f-d3ca-4435-b1d0-7246f51681b9","resolution":{"observed_at":"2026-08-11T20:00:29.776569Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.751509Z","title":"Zisserman","venue":null,"work_id":"970e481a-55ec-43e3-8b22-ba2cc4d4351f","year":2014},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.995249Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:0c458a2993f92f62f48bbfc5cc2455b0c9e7ce3667d9c98acd5cd3df199dd7c4","observation_id":"e78e3bc7-9b1c-4fce-bda9-8a0c8d0f94ea","resolution":{"observed_at":"2026-08-11T20:00:29.756769Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.728564Z","title":"Zhang, S","venue":null,"work_id":"2044290c-1ce0-4b55-a432-965fb102a955","year":2015},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.998805Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:5e839e8a5a06bee50f3cd3ba9bdf96e05f9257b08b5a792c9ac4e28250c1c183","observation_id":"a06945c8-deb8-418b-aa45-bffe58d07f23","resolution":{"observed_at":"2026-08-11T20:00:29.734527Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2106.09667","last_updated":"2022-03-28T17:24:23Z","snapshot_observed_at":"2026-08-16T18:16:19.680700Z","submitted_at":"2021-06-17T17:20:45Z","title":"Poisoning and Backdooring Contrastive Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.09667","snapshot_observed_at":"2026-08-11T20:00:29.006260Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:29.006260Z"},"links":{"cited_paper":"/paper/2106.09667","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:973e53e0dcc4457afac98f4e52818e006202fef49fbaade68fd680aa10e74570","observation_id":"ba346b80-3f98-4efd-8ce4-b5c84b405014","resolution":{"observed_at":"2026-08-11T20:00:29.006260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.705870Z","title":null,"venue":null,"work_id":"f1ddbcda-9988-4772-a5dd-797decbb3a1c","year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:29.013381Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:ef468c35472658367629aa641ac6540c39e24bceef609bae759e566b8261d340","observation_id":"3a504b64-7789-44e4-976f-783c6ad35905","resolution":{"observed_at":"2026-08-11T20:00:29.713469Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.682558Z","title":null,"venue":null,"work_id":"d2feccc8-6f69-4c75-a063-629f72b0b1a1","year":2022},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:29.018859Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:d177f75aca747fd217fec65d599fd97d288a157d0a7bee7d012add34523fa9cf","observation_id":"f25e163c-f1a1-41a7-aa85-6094d533272d","resolution":{"observed_at":"2026-08-11T20:00:29.690344Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.658489Z","title":"Tejankar, S","venue":null,"work_id":"b1b2f170-592d-4c32-9a10-8ba2359da7b0","year":2022},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:29.024625Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:bb60e97759ed4dbd91790e07c126ff0a2b06f5ef45fde7540554e7357d4c7996","observation_id":"30139e78-c313-4c36-b0e8-2caedcd97b95","resolution":{"observed_at":"2026-08-11T20:00:29.665742Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.637005Z","title":null,"venue":null,"work_id":"634201e6-9510-4830-b9ac-1959754a854d","year":2020},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:29.033017Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:313435af00501022c1679e2cbeda41927a0fb38cd8fe4693282163cdac9d6e19","observation_id":"0751862f-74ba-4b65-be76-0a353c40a208","resolution":{"observed_at":"2026-08-11T20:00:29.642235Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.620603Z","title":"Sreenivasan, S","venue":null,"work_id":"c42870e6-fc5b-49d5-b044-49bb96b663ca","year":2020},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:29.038217Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:36d688d06bb07fdc31df74e87ad129138c3b993a821a36ecc87db08b5471ec30","observation_id":"67c4be5c-c1fb-4702-aac3-0b024d6e1572","resolution":{"observed_at":"2026-08-11T20:00:29.624945Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.599761Z","title":"Huang, P.-Y","venue":null,"work_id":"b78de113-e5be-4212-8afe-c2bd89295576","year":2019},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:29.043522Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:b36cf5f4d009e489ddbda12252b35f394b37be8863d2a4387e2264b800f235a4","observation_id":"22b959d2-2f17-4a47-84e5-784ac1dffb48","resolution":{"observed_at":"2026-08-11T20:00:29.605430Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.566138Z","title":null,"venue":null,"work_id":"b3f2416c-88bc-4f7b-9bd8-c7b487715509","year":2019},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:29.051762Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:5e0ee756073ddefac7ce0896a3884cc5586b21f6bd0eaecb1eb54e93b638a66d","observation_id":"06d04d24-c11d-44a5-a163-fd78803a2da7","resolution":{"observed_at":"2026-08-11T20:00:29.574451Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.543998Z","title":"Salem, M","venue":null,"work_id":"34412582-b8d2-4225-9a56-1016e47bda47","year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:29.060332Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:a7cc19b294e9a0c28525265ea2daaee628910020c9eed3aadd905e45caf713ae","observation_id":"188b2d5e-7eac-45df-abe2-aef980b589c6","resolution":{"observed_at":"2026-08-11T20:00:29.551349Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.521627Z","title":null,"venue":null,"work_id":"67c22212-ed79-441e-b33c-c2379d322e17","year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:29.066182Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:7dc07fbf7a3730354173159fc98621d0462b7041fdd799499ff3ce38b7f1589c","observation_id":"52fd140c-402a-4740-9383-e013942c5bff","resolution":{"observed_at":"2026-08-11T20:00:29.529062Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.499347Z","title":null,"venue":null,"work_id":"fd5353c4-cee1-4bb1-8b03-1c312ac3ecc1","year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:29.073912Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:154ca2dc11633e036e1e243ff5cba810bb77cc14a3beec30b9bab5ee01ea9150","observation_id":"48820c9c-a9e7-4429-a25e-4a270b4043c6","resolution":{"observed_at":"2026-08-11T20:00:29.508704Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2105.00579","last_updated":"2021-12-12T23:22:37Z","snapshot_observed_at":"2026-08-16T18:27:32.179947Z","submitted_at":"2021-05-02T23:47:55Z","title":"BACKDOORL: Backdoor Attack against Competitive Reinforcement Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2105.00579","snapshot_observed_at":"2026-08-11T20:00:29.080427Z","title":"Javed, X","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:29.080427Z"},"links":{"cited_paper":"/paper/2105.00579","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:a6fa763e5b0f0547f447831e05d2c6ef79388efb7fb664a7c5a04dcd18e27a32","observation_id":"a7224824-ef57-43eb-9c33-84540e41e973","resolution":{"observed_at":"2026-08-11T20:00:29.080427Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1903.06638","last_updated":"2019-03-01T04:17:32Z","snapshot_observed_at":"2026-08-14T17:09:12.323074Z","submitted_at":"2019-03-01T04:17:32Z","title":"TrojDRL: Trojan Attacks on Deep Reinforcement Learning Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1903.06638","snapshot_observed_at":"2026-08-11T20:00:29.086264Z","title":"Wardega, S","venue":null,"work_id":null,"year":1903},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:29.086264Z"},"links":{"cited_paper":"/paper/1903.06638","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:06ac9529b18691b35ace4337a4c7871358c004e3295ae34cbf596e322d97ca5a","observation_id":"41114261-cf24-4afc-8d45-9cb617b1aa65","resolution":{"observed_at":"2026-08-11T20:00:29.086264Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T20:00:29.478225Z","title":"Fawzi, O","venue":null,"work_id":"9887ff10-6feb-418d-b181-cf1577fa2f08","year":2017},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:29.093965Z"},"links":{"citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:376be9850b4cfb809e632a2576782b61bb89e20c5016ae0c45f9750373fdf325","observation_id":"9525c742-e2b5-4a57-a6f5-0318cbd9b75e","resolution":{"observed_at":"2026-08-11T20:00:29.483242Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-11T20:00:29.101380Z","title":"Makelov, L","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:29.101380Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:ea4f1323db83dfcfe527729d31f4ebab253bbf2daddd45f691c6cf5b7219cb09","observation_id":"27e5dc98-2c2b-401c-ac54-11bf88c284c2","resolution":{"observed_at":"2026-08-11T20:00:29.101380Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T08:01:05.063486Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks"},"reference_resolution":{"displayed":72,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":49,"verified_exact":2,"verified_fuzzy":21},"total_outbound_references":72},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 72 of 72 outbound references and 0 inbound Pith citation observations for arXiv:2412.06219."}