{"as_of":"2026-08-11T15:04:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4da484a5fa6091ea8a7aafce52ea55e5864384ef127ac769b592074e275152dd","coverage":[{"denominator":39,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":39,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T05:31:36.546103Z","state":"measured"},{"denominator":40,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":40,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-15T03:04:27.417831Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-19T03:22:34.304444Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"cited_work":{"arxiv_id":"2412.17531","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.17531","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Double Landmines: Invisible Textual Backdoor Attacks based on Dual-Trigger","venue":null,"work_id":"4e010ce1-969f-4c23-b2ec-ce30ed71c655","year":2024},"citing_paper":{"arxiv_id":"2605.15172","last_updated":"2026-05-14T17:56:22Z","snapshot_observed_at":"2026-08-06T20:13:00.393114Z","submitted_at":"2026-05-14T17:56:22Z","title":"MetaBackdoor: Exploiting Positional Encoding as a Backdoor Attack Surface in LLMs","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-15T03:04:27.417831Z"},"links":{"cited_paper":"/paper/2412.17531","citing_paper":"/paper/2605.15172"},"observation_digest":"sha256:5407d8da0c8a0692d7fdfc8576fbe033be0eb2d2773546f1c255cb05b845185e","observation_id":"6475a054-e81f-489f-bf97-baa065ebf4ed","resolution":{"observed_at":"2026-05-15T03:09:44.592986Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2412.17531/citation-record","integrity":"/paper/2412.17531/integrity","json":"/paper/2412.17531/citation-record.json","paper":"/paper/2412.17531"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.837063Z","title":"Cybersecurity 8(1), 36 (2025)","venue":null,"work_id":"c836bbbd-e8af-4bc5-8737-64082812b56f","year":2025},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.435448Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:6e0fd35aac83861d934594958e86ed75faa90b1cb141f37483e70d28bfff7de8","observation_id":"c0ca1937-6ea6-45eb-aa83-3f27080ee206","resolution":{"observed_at":"2026-08-11T05:31:36.839824Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.829132Z","title":"Cybersecurity 8(1), 1–41 (2025)","venue":null,"work_id":"cd8df9fa-be48-4fe5-a52f-610a37a4a33e","year":2025},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.439121Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:ec2c6aeb9065ea7e3b70190a6dcad818f4a4455cefcc4828f12a7cc063261e4f","observation_id":"c962634a-0cf0-4932-b7d5-601955f2583a","resolution":{"observed_at":"2026-08-11T05:31:36.832121Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.822355Z","title":"Neurocomputing, 129645 (2025)","venue":null,"work_id":"3fc3e28b-fa6d-43f5-907e-e86ea06be00a","year":2025},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.443326Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:64f155ea6974c333a8f0292df7b5fba8324c02565dce214bbd6336c078a4e36a","observation_id":"8ea97fbf-bad9-47f5-b5fc-ec75201009d1","resolution":{"observed_at":"2026-08-11T05:31:36.824664Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.447344Z","title":"Learning and individual differences 103, 102274 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.447344Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:fa9df8c0bbf5ca4351b0a774d4f16870bed17fed3d1c2729ace034a6b6578170","observation_id":"d1b93d98-e15d-407f-9c84-3537ebd2f761","resolution":{"observed_at":"2026-08-11T05:31:36.447344Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.811381Z","title":"Opportunities and Challenges of Large Language Models for Industry 4 (2023)","venue":null,"work_id":"b7cef2a2-7e8a-439b-b5ae-f606d1ce3111","year":2023},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.450583Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:fbf0ccfcf85ac3d0986cde450df6d37ffbb991b4d9e5f3564da82af77d8a72a0","observation_id":"0b12e2c9-80a3-4052-b758-df1a81a0bf13","resolution":{"observed_at":"2026-08-11T05:31:36.814257Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.803351Z","title":"Nature medicine 29(8), 1930– 1940 (2023)","venue":null,"work_id":"5dcde118-e8d1-4bbc-a307-31cfc3545193","year":2023},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.453666Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:9751192e0611ba95cb2603fed12d96dd255fef377f1060539610f9557a350221","observation_id":"586ef1a9-5654-4a70-9ff3-4424a2cc99aa","resolution":{"observed_at":"2026-08-11T05:31:36.806370Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.795840Z","title":"IEEE Transactions on Knowledge and Data Engineering (2024)","venue":null,"work_id":"5656a5fa-b94a-4fcc-8949-abc46eb1adc3","year":2024},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.456980Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:37f37d974b53f290e6d8d2e250ea8bf67395848b9ceaaad5365645e238013665","observation_id":"6357b5c1-6d72-4ec3-9339-39d5f8878e8c","resolution":{"observed_at":"2026-08-11T05:31:36.798995Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.787699Z","title":"ACM Transactions on Software Engineering and Methodology 33(7), 1–30 (2024)","venue":null,"work_id":"3bd8e8ea-84ad-4eeb-83d1-b7b6d5ecb7f3","year":2024},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.459590Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:65bfc8c605234da4593bebb4f60692f9265d35ae779db3921cc9a267e1c13dfb","observation_id":"de48348c-37a5-428b-9235-4abab5573548","resolution":{"observed_at":"2026-08-11T05:31:36.791140Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-11T05:31:36.462208Z","title":"arXiv preprint arXiv:2303.08774 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.462208Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:4f8abece64f0c2dbeca6caf29b9fc149ede653f56327bfc3bf2309feccbcf6ea","observation_id":"1888d4ec-a505-4681-9a68-5ca5bce0262c","resolution":{"observed_at":"2026-08-11T05:31:36.462208Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-08-10T16:40:37.411115Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-11T05:31:36.465376Z","title":"arXiv preprint arXiv:2407.21783 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.465376Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:0bb3039f40095f8ea4f3c99a44eb2499c2b6e5dade13b6a003722d2ee02e162b","observation_id":"561406d8-8deb-4363-b971-9ea3308771df","resolution":{"observed_at":"2026-08-11T05:31:36.465376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-11T14:02:57.133144Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T05:31:36.468266Z","title":"arXiv preprint arXiv:1708.06733 (2017)","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.468266Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:9c1519d915dea423160de9eebb830dbd791c76bc5e1dfe91b00fb9ce081e0ab9","observation_id":"42fc61bd-6bcd-4450-9b92-d772ca16974d","resolution":{"observed_at":"2026-08-11T05:31:36.468266Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.780268Z","title":"In: Proceedings of the 37th Annual Computer Security Applications Conference, pp","venue":null,"work_id":"045b9bd8-bea9-4cef-bc8c-97f77da7a210","year":2021},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.471372Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:12b2b922a9a470701fc2adc30b519e884e6a5e1f307b060398f957854b856bd5","observation_id":"437a2241-d77e-4ebc-a0ed-6c4181bff32c","resolution":{"observed_at":"2026-08-11T05:31:36.783117Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.772455Z","title":"IEEE Access 7, 138872–138878 (2019)","venue":null,"work_id":"db1ee233-d345-49d6-9d17-f6db4429ebdd","year":2019},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.473867Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:9d48f96801d1956d8138aab96669d2ea2bfd986e4b8eaad71a57ab327969dd52","observation_id":"f10836e9-07c8-4863-8387-bc50ab2e6259","resolution":{"observed_at":"2026-08-11T05:31:36.775080Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2004.06660","last_updated":"2020-04-14T16:51:42Z","snapshot_observed_at":"2026-08-09T15:24:12.006566Z","submitted_at":"2020-04-14T16:51:42Z","title":"Weight Poisoning Attacks on Pre-trained Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.06660","snapshot_observed_at":"2026-08-11T05:31:36.476793Z","title":"arXiv preprint arXiv:2004.06660 (2020)","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.476793Z"},"links":{"cited_paper":"/paper/2004.06660","citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:1e7a5396cc3bc50a525dfc8341c0897ed6a1390909f630576c6ac1daf6dc6c8f","observation_id":"8090e4e0-1795-47ef-8d47-5349f5415383","resolution":{"observed_at":"2026-08-11T05:31:36.476793Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2105.12400","last_updated":"2021-06-03T08:27:11Z","snapshot_observed_at":"2026-08-11T14:17:43.473833Z","submitted_at":"2021-05-26T08:54:19Z","title":"Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2105.12400","snapshot_observed_at":"2026-08-11T05:31:36.479795Z","title":"arXiv preprint arXiv:2105.12400 (2021)","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.479795Z"},"links":{"cited_paper":"/paper/2105.12400","citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:83414ffb3cbf1ed1bd073039f28e86668484a43976ad59da3f1e43c4a3e75443","observation_id":"1f3fb871-90ac-42f6-a1f9-ac37b168ce1a","resolution":{"observed_at":"2026-08-11T05:31:36.479795Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.765159Z","title":"In: 2023 Ivannikov Ispras Open Conference (ISPRAS), pp","venue":null,"work_id":"d0de283c-7945-4ef1-944e-a5602c7af769","year":2023},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.482812Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:95b0980413b02758903eec9e2197708f14752b91208cfc3f581abc9aa42ca39e","observation_id":"b517caad-66ed-4ce9-976c-9119644c5220","resolution":{"observed_at":"2026-08-11T05:31:36.768060Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.757950Z","title":"In: ICASSP 2024-2024 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP), pp","venue":null,"work_id":"be298d40-5344-4d22-89de-84b9c5b583f3","year":2024},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.485274Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:6ad0c354add4d647918840d1edf4faeebb35a37653299c53104d7e26d7531490","observation_id":"433486c6-b017-47c1-b87c-b82eabb0388c","resolution":{"observed_at":"2026-08-11T05:31:36.760807Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.751512Z","title":"PhD thesis, Ph","venue":null,"work_id":"806e303a-1e32-4f2a-be99-da7aff7e1de0","year":2008},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.487376Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:7664e275e51ea6d5fd1305e2362acb1526b57b3c51a0c356ba2f750683e7e752","observation_id":"dfce20b5-e34d-4a5d-be1e-37c67baf5c80","resolution":{"observed_at":"2026-08-11T05:31:36.753733Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.744956Z","title":"In: Proceedings of naacL-HLT, vol","venue":null,"work_id":"9a6c631b-803d-4131-9589-de3669f8fde7","year":2019},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.489580Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:bc80694df238cbec27bc63e5d8be0e65d88a7a380e430cfd9b180e0f444136fa","observation_id":"8ba95d2a-d8ed-46ce-bf48-452036a140aa","resolution":{"observed_at":"2026-08-11T05:31:36.747251Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1906.08237","last_updated":"2020-01-02T12:48:08Z","snapshot_observed_at":"2026-07-31T22:49:43.034741Z","submitted_at":"2019-06-19T17:35:48Z","title":"XLNet: Generalized Autoregressive Pretraining for Language Understanding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.08237","snapshot_observed_at":"2026-08-11T05:31:36.492098Z","title":"arXiv preprint arXiv:1906.08237 (2019)","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.492098Z"},"links":{"cited_paper":"/paper/1906.08237","citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:d8a07ed1d930ba7afa00bb0a40e20b7fafbd4e630e567decff1a62a3f240a203","observation_id":"689d0fe8-a70c-4a32-aed6-b51e08cfe68d","resolution":{"observed_at":"2026-08-11T05:31:36.492098Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.737292Z","title":"In: 2021 IEEE European Symposium on Security and Privacy (EuroS&P), pp","venue":null,"work_id":"ce961b12-fd35-4d0b-a012-9d44a80a67a0","year":2021},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.495215Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:828808873a8ecd83fd1d68556ea2bbfed421bc4604d967e913cca9cdf73f13fe","observation_id":"b7858770-2885-489d-bbaa-d41e05ff0f88","resolution":{"observed_at":"2026-08-11T05:31:36.740233Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.729209Z","title":"In: Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, pp","venue":null,"work_id":"7f6610d7-6608-4630-897a-0352de5c9feb","year":2021},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.497914Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:939a3479e9d5badb47bb0f39c624708ee4b52950f49906308df7022a0ae98cfb","observation_id":"33280470-3896-4092-bd08-3f83e196453d","resolution":{"observed_at":"2026-08-11T05:31:36.732390Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.721148Z","title":"Supervised sequence labelling with recurrent neural networks, 37–45 (2012)","venue":null,"work_id":"6ae030a2-e92a-4595-a9e5-28dd62895dbc","year":2012},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.500568Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:95eb784dabc1e1b42517592864582af4ae1095e8fda3cb5a2d558e603ea6ad0d","observation_id":"868a89a2-bd76-499e-85e8-2dfd3a86f7d2","resolution":{"observed_at":"2026-08-11T05:31:36.724364Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.713327Z","title":"In: 2019 Artificial Intelligence for Transforming Business and Society (AITB), vol","venue":null,"work_id":"eed7c1ba-ecbb-4b06-8ae9-d0750c67da91","year":2019},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.503109Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:7273a43e129fc4bf32554eec41dafbcf2536c2dacbe4a492df469b5d7c35fd49","observation_id":"b9fe077e-8c0f-47d8-ba8c-d4b0fa676a77","resolution":{"observed_at":"2026-08-11T05:31:36.716371Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.10760","last_updated":"2020-08-02T08:38:25Z","snapshot_observed_at":"2026-08-09T12:13:44.628029Z","submitted_at":"2020-07-21T12:49:12Z","title":"Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.10760","snapshot_observed_at":"2026-08-11T05:31:36.506688Z","title":"arXiv preprint arXiv:2007.10760 (2020)","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.506688Z"},"links":{"cited_paper":"/paper/2007.10760","citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:ef9351c10a7b1ee63efefa9236afad44065d36faa7ccada09700a5799745bf32","observation_id":"11cab23f-b3ff-4303-acce-601b760e787d","resolution":{"observed_at":"2026-08-11T05:31:36.506688Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-08-11T05:31:36.509798Z","title":"arXiv preprint arXiv:2011.10369 (2020)","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.509798Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:76d92e669e69f7e9c24559696720f58536a20f083b5723801dd016b26d109306","observation_id":"5fabb1af-deeb-417c-b073-cae99fc6a983","resolution":{"observed_at":"2026-08-11T05:31:36.509798Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.704868Z","title":"Mathematics 12(23), 3751 (2024)","venue":null,"work_id":"fadc92aa-744a-4b45-bb17-960f1a8f9cf5","year":2024},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.512973Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:ab1b61342ab440a1d86365db18eb6623a14deae1fdbb719aa37b7e1d15d4eca2","observation_id":"3f996b4e-e31f-4892-8299-0bf589004628","resolution":{"observed_at":"2026-08-11T05:31:36.707980Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.696284Z","title":"In: Proceedings of 52nd Annual Meeting of the Association for Computational Linguistics: System Demonstrations, pp","venue":null,"work_id":"0a0335cc-c3be-4cd2-ab14-d7d31f52e446","year":2014},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.515615Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:1e1995286c7650f5914c0413991a87e0f6d6b40bb8345781df523ce92ad920cc","observation_id":"8b707160-03d1-4b5b-ac0c-27c7b24449fb","resolution":{"observed_at":"2026-08-11T05:31:36.699336Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1804.06059","last_updated":"2018-04-17T06:12:36Z","snapshot_observed_at":"2026-08-04T02:43:37.385970Z","submitted_at":"2018-04-17T06:12:36Z","title":"Adversarial Example Generation with Syntactically Controlled Paraphrase Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1804.06059","snapshot_observed_at":"2026-08-11T05:31:36.518403Z","title":"arXiv preprint arXiv:1804.06059 (2018)","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.518403Z"},"links":{"cited_paper":"/paper/1804.06059","citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:20eb98e0123a65dc06f9db07455679d756c7fb343577979ce56221812e19b681","observation_id":"00684289-1b51-4578-a945-5ae31864fecc","resolution":{"observed_at":"2026-08-11T05:31:36.518403Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.07139","last_updated":"2021-10-14T03:54:16Z","snapshot_observed_at":"2026-08-11T11:12:33.970334Z","submitted_at":"2021-10-14T03:54:16Z","title":"Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.07139","snapshot_observed_at":"2026-08-11T05:31:36.521223Z","title":"arXiv preprint arXiv:2110.07139 (2021)","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.521223Z"},"links":{"cited_paper":"/paper/2110.07139","citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:60c967c41914f7cde2b3e6a4ed0b7ee08d14f7d3bd3216f371d3b40a90b2e20f","observation_id":"3d784320-9f8a-40f0-8425-85af56d67ebb","resolution":{"observed_at":"2026-08-11T05:31:36.521223Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.687815Z","title":"In: 33rd USENIX 23 Security Symposium (USENIX Security 24), pp","venue":null,"work_id":"92a2685a-b98e-434d-ac8b-55d2edf58bda","year":2024},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.523964Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:2c8d8a7ea244a19e1da18158a84c1d37642eef2c14e04e39e42dc30ede5ccb85","observation_id":"a5d37fea-ba3a-4704-8791-d4cd655d13a3","resolution":{"observed_at":"2026-08-11T05:31:36.690355Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.680083Z","title":"In: Proceedings of the 2013 Conference on Empirical Methods in Natural Language Processing, pp","venue":null,"work_id":"64a86434-b8e0-4c4f-8379-8b0129da9a27","year":2013},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.526651Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:d9449e0745d10ba0d7974f30fa451c1fc01d06e29671cd6a03bc6d3f94fe99c7","observation_id":"6a2979ac-5b1d-4dc2-9cd3-c0de8189b55d","resolution":{"observed_at":"2026-08-11T05:31:36.682598Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1902.09666","last_updated":"2019-04-16T16:30:35Z","snapshot_observed_at":"2026-08-09T00:45:13.037089Z","submitted_at":"2019-02-25T23:54:40Z","title":"Predicting the Type and Target of Offensive Posts in Social Media","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1902.09666","snapshot_observed_at":"2026-08-11T05:31:36.529250Z","title":"arXiv preprint arXiv:1902.09666 (2019)","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.529250Z"},"links":{"cited_paper":"/paper/1902.09666","citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:19e9aa1545882320adbc5fcdd34543ed6aa28d3664ad3b695413c69f4e3db303","observation_id":"4f8c9ead-c683-4adc-bcc9-9539ef87c5d8","resolution":{"observed_at":"2026-08-11T05:31:36.529250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.669127Z","title":"Advances in neural information processing systems 28 (2015)","venue":null,"work_id":"a72bbe8b-7750-4e6b-ba18-1bb105699e5c","year":2015},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.532035Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:1e1170a2c70eb11c8a23b20eae817eb3fbc0dfab7d1da774c5162de6c35407fd","observation_id":"c6a977c4-34b8-42fd-b4a2-eafe072fdef9","resolution":{"observed_at":"2026-08-11T05:31:36.672813Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.10671","last_updated":"2024-09-10T13:25:53Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-07-15T12:35:42Z","title":"Qwen2 Technical Report","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.10671","snapshot_observed_at":"2026-08-11T05:31:36.534523Z","title":"arXiv preprint arXiv:2407.10671 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.534523Z"},"links":{"cited_paper":"/paper/2407.10671","citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:eafae3ee8e3521d7e00383d51cd9df2f8862a816ccd1837400f974919627d62d","observation_id":"9f8c3f58-2f2d-4aef-8358-e56b80ba9e19","resolution":{"observed_at":"2026-08-11T05:31:36.534523Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.05101","last_updated":"2019-01-04T21:01:49Z","snapshot_observed_at":"2026-08-09T20:34:52.923500Z","submitted_at":"2017-11-14T14:24:06Z","title":"Decoupled Weight Decay Regularization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.05101","snapshot_observed_at":"2026-08-11T05:31:36.537193Z","title":"arXiv preprint arXiv:1711.05101 (2017)","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.537193Z"},"links":{"cited_paper":"/paper/1711.05101","citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:ce008916217b7b39f49a5514f2defb035b6780fc646bf556029545a89d487170","observation_id":"39a499c9-62ba-4fe3-a580-c8262f13d02c","resolution":{"observed_at":"2026-08-11T05:31:36.537193Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.03983","last_updated":"2017-05-03T16:28:09Z","snapshot_observed_at":"2026-07-06T05:06:55.589962Z","submitted_at":"2016-08-13T13:46:05Z","title":"SGDR: Stochastic Gradient Descent with Warm Restarts","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.03983","snapshot_observed_at":"2026-08-11T05:31:36.540709Z","title":"arXiv preprint arXiv:1608.03983 (2016)","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.540709Z"},"links":{"cited_paper":"/paper/1608.03983","citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:bb35d51cb2158b46bde58d9fff866a5be0f59f6add673395833f11fe400f6e49","observation_id":"66e0a76b-d9f0-407c-b5f8-76a3f6733710","resolution":{"observed_at":"2026-08-11T05:31:36.540709Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-11T05:31:36.543440Z","title":"arXiv preprint arXiv:1712.05526 (2017)","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.543440Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:b05d4388c54b07c3454612305d98b232c6e596ef477e88ac2d37e6ccda7ea7e1","observation_id":"633a1aae-4ee9-4cd4-b20f-53b7a3d0dc4e","resolution":{"observed_at":"2026-08-11T05:31:36.543440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:36.659804Z","title":"OpenAI blog 1(8), 9 (2019) 24","venue":null,"work_id":"b4291c89-15e8-4b96-a2c4-38493fe71340","year":2019},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.546103Z"},"links":{"citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:a203aa429458d30b8ce75b8d85e28a1cbc495d02838431795b3d2980523084b3","observation_id":"686abba2-3e01-4262-ba3c-79dde8e44dca","resolution":{"observed_at":"2026-08-11T05:31:36.663879Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-11T05:24:31.736452Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger"},"reference_resolution":{"displayed":39,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":16,"verified_exact":0,"verified_fuzzy":23},"total_outbound_references":39},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 39 of 39 outbound references and 1 inbound Pith citation observation for arXiv:2412.17531."}